last executing test programs: 9.399906981s ago: executing program 3 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00'/27, 0xfdef) 9.082602289s ago: executing program 3 (id=182): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff0000000705810340"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='raid5', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='4096', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1:0', 0x3) write(r4, &(0x7f00000004c0)='1:1', 0x3) write(r4, &(0x7f0000000540)='1:3', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='0', 0x1) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f0000000640)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f00000007c0)='active', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffffffffffffffd, 0x80, 0x1, 0x0, 0x7, 0x4, 0x5, 0xfffffffffffffffa, 0x8000009654, 0x225c17d03, 0x808, 0x0, 0x10, 0x20007, 0x7ffffffffffffb, 0xcc0, 0x1, 0x5, 0x94d6, 0x0, 0x1ff, 0x40000809, 0x0, 0xfffffffffffffffa, 0x5, 0x2000000000004}) syz_usb_control_io(r0, 0x0, 0x0) 6.521321831s ago: executing program 0 (id=191): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000491) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xd, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffef}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x100a}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000280)='./file0\x00'}, 0x14) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={0xffffffffffffffff, r3, 0x4, r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd25, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}}, 0x100) fsopen(&(0x7f0000000240)='ext4\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x9, 0x6, 0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, 0x0, &(0x7f0000000080)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) 5.875746887s ago: executing program 1 (id=194): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 5.873752807s ago: executing program 3 (id=195): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff0000000705810340"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='4', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='4096', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, &(0x7f00000004c0)='1:1', 0x3) write(r5, &(0x7f0000000540)='1:3', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0', 0x1) r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r7, &(0x7f0000000640)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f00000007c0)='active', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffffffffffffffd, 0x80, 0x1, 0x0, 0x7, 0x4, 0x5, 0xfffffffffffffffa, 0x8000009654, 0x225c17d03, 0x808, 0x0, 0x10, 0x20007, 0x7ffffffffffffb, 0xcc0, 0x1, 0x5, 0x94d6, 0x0, 0x1ff, 0x40000809, 0x0, 0xfffffffffffffffa, 0x5, 0x2000000000004}) syz_usb_control_io(r0, 0x0, 0x0) 4.996537598s ago: executing program 0 (id=196): socket$kcm(0x10, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x0, 0x202000000100, 0x40000004, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x11, 0x0}, 0xff31) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x19, &(0x7f0000000880)=ANY=[@ANYRES64=r1, @ANYBLOB, @ANYRES8, @ANYBLOB="0000000000000000b7050000080000"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl, r0, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r2, r1, 0x3, &(0x7f0000000140)=[r0, r1, r0, r1, r1], &(0x7f0000000780)=[{0x0, 0x5, 0x8, 0x3}, {0x4, 0x1, 0x4, 0x61a8a9cee2f380e9}, {0x3, 0x20005, 0x4, 0x9}], 0x10, 0xf}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000) close(0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) 4.51189776s ago: executing program 2 (id=197): socket(0x29, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x4, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d00058009000100"], 0xbc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) socket(0xa, 0x2, 0x0) r4 = inotify_init() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r6}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r6}, 0xc) close_range(r4, 0xffffffffffffffff, 0x0) 4.190659388s ago: executing program 2 (id=198): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.984263643s ago: executing program 2 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00'/27, 0xfdef) 3.955964984s ago: executing program 0 (id=200): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) 3.818851627s ago: executing program 1 (id=201): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x7c}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.719564729s ago: executing program 2 (id=202): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="04002abd7000fddbdf25010000000000000001410000001800170000400f00000fff7564705773797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write(r1, &(0x7f0000000500)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./config/nullb/nullb1/memory_backed\x00', 0x80000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001000)="53464f5ad309e7e5", 0x1000) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) 3.631103732s ago: executing program 1 (id=203): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x24002000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1a4, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x48, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_USERDATA={0xd6, 0x7, 0x1, 0x0, "302763400d025dcf501a71403112bf3ccd5edd2070afed3792891f371dfbf0bbbb7bc6f8fe096e2b74d2da2b14a9243defb10e748005f79d635d4bff2a5fe5b7ec4e36bc2a3a93d6d9344f016af884d83e6433234836ca1f3c94fcdc6dce706885ea1e71905747bc801e3675abaa5d0a9f60cc8218c6682cf3074aa69f217f5f05b7701784af46d09111e4688ca4b1979bd5c76a963065279f3aa0dcc8a8af3ca0f67ea6a77bbdca408118e087971713566c432b4f042feb7c138ad3dd4bd4cfb7a0f4723174bb0da99a7f440aee405527c3"}]}, 0x1a4}, 0x1, 0x0, 0x0, 0xc000}, 0x40d0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.666963425s ago: executing program 1 (id=204): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000491) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xd, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffef}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x100a}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000280)='./file0\x00'}, 0x14) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={0xffffffffffffffff, r3, 0x4, r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd25, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}}, 0x100) fsopen(&(0x7f0000000240)='ext4\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x9, 0x6, 0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, 0x0, &(0x7f0000000080)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) 2.561178157s ago: executing program 0 (id=205): syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffe9078"], 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20084884) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x0) read(r6, &(0x7f0000000380)=""/69, 0xfffffffffffffdaf) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e23, 0x0, @remote, 0x6}}}, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='ns\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x800, 0x0) 2.433348261s ago: executing program 3 (id=206): socket(0x29, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x4, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d00058009000100"], 0xbc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) socket(0xa, 0x2, 0x0) r4 = inotify_init() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r6}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r6}, 0xc) close_range(r4, 0xffffffffffffffff, 0x0) 2.127579668s ago: executing program 2 (id=207): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.04196113s ago: executing program 3 (id=208): socket$kcm(0x10, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x0, 0x202000000100, 0x40000004, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x11, 0x0}, 0xff31) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x19, &(0x7f0000000880)=ANY=[@ANYRES64=r1, @ANYBLOB, @ANYRES8, @ANYBLOB="0000000000000000b7050000080000"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl, r0, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r2, r1, 0x3, &(0x7f0000000140)=[r0, r1, r0, r1, r1], &(0x7f0000000780)=[{0x0, 0x5, 0x8, 0x3}, {0x4, 0x1, 0x4, 0x61a8a9cee2f380e9}, {0x3, 0x20005, 0x4, 0x9}], 0x10, 0xf}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000) close(0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) 1.883299234s ago: executing program 2 (id=209): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 1.126435593s ago: executing program 0 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00'/27, 0xfdef) 923.217847ms ago: executing program 1 (id=211): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x7c}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 872.670739ms ago: executing program 3 (id=212): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x24002000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1a4, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x48, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_USERDATA={0xd6, 0x7, 0x1, 0x0, "302763400d025dcf501a71403112bf3ccd5edd2070afed3792891f371dfbf0bbbb7bc6f8fe096e2b74d2da2b14a9243defb10e748005f79d635d4bff2a5fe5b7ec4e36bc2a3a93d6d9344f016af884d83e6433234836ca1f3c94fcdc6dce706885ea1e71905747bc801e3675abaa5d0a9f60cc8218c6682cf3074aa69f217f5f05b7701784af46d09111e4688ca4b1979bd5c76a963065279f3aa0dcc8a8af3ca0f67ea6a77bbdca408118e087971713566c432b4f042feb7c138ad3dd4bd4cfb7a0f4723174bb0da99a7f440aee405527c3"}]}, 0x1a4}, 0x1, 0x0, 0x0, 0xc000}, 0x40d0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 659.392234ms ago: executing program 1 (id=213): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0xa) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x1c8080, 0x81) lseek(r6, 0x104, 0x2) getdents64(r6, 0x0, 0x4f) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0800000000000000000000000000000200000505000100070000004704379bdd46fd34a2fdb4abff0251ca88572dae7e869eb616c80492380121791e4fd873a6f05802e2e3c218af8880c8fc3f511a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) setrlimit(0xa, &(0x7f0000000300)={0x80000000, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x25dfdbff, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x6a, 0x1, {0x6, 0x9}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x76, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x2, 0x1, 0xc}) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=214): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='4', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='4096', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, &(0x7f00000004c0)='1:1', 0x3) write(r5, &(0x7f0000000540)='1:3', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0', 0x1) r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r7, &(0x7f0000000640)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f00000007c0)='active', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffffffffffffffd, 0x80, 0x1, 0x0, 0x7, 0x4, 0x5, 0xfffffffffffffffa, 0x8000009654, 0x225c17d03, 0x808, 0x0, 0x10, 0x20007, 0x7ffffffffffffb, 0xcc0, 0x1, 0x5, 0x94d6, 0x0, 0x1ff, 0x40000809, 0x0, 0xfffffffffffffffa, 0x5, 0x2000000000004}) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. [ 83.528023][ T5764] cgroup: Unknown subsys name 'net' [ 83.660849][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.327091][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.120801][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.143329][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.155677][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.163260][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.173791][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.181863][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.189772][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.196903][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.205949][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.214103][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.223463][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.230644][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.240557][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.242320][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.253720][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.262884][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.267041][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.272670][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.281161][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.291907][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.301034][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.309164][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.316650][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.325500][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.044002][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 88.104967][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 88.135571][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 88.153874][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.268148][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.276303][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.284337][ T5780] bridge_slave_0: entered allmulticast mode [ 88.291592][ T5780] bridge_slave_0: entered promiscuous mode [ 88.321868][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.329360][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.336959][ T5780] bridge_slave_1: entered allmulticast mode [ 88.344597][ T5780] bridge_slave_1: entered promiscuous mode [ 88.450520][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.466070][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.487849][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.495351][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.503093][ T5779] bridge_slave_0: entered allmulticast mode [ 88.510595][ T5779] bridge_slave_0: entered promiscuous mode [ 88.555129][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.565828][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.573350][ T5778] bridge_slave_0: entered allmulticast mode [ 88.580658][ T5778] bridge_slave_0: entered promiscuous mode [ 88.589369][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.596776][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.604280][ T5779] bridge_slave_1: entered allmulticast mode [ 88.611781][ T5779] bridge_slave_1: entered promiscuous mode [ 88.618541][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.626097][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.633545][ T5775] bridge_slave_0: entered allmulticast mode [ 88.640697][ T5775] bridge_slave_0: entered promiscuous mode [ 88.651609][ T5780] team0: Port device team_slave_0 added [ 88.661239][ T5780] team0: Port device team_slave_1 added [ 88.668881][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.676316][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.685393][ T5778] bridge_slave_1: entered allmulticast mode [ 88.693383][ T5778] bridge_slave_1: entered promiscuous mode [ 88.710064][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.717458][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.727740][ T5775] bridge_slave_1: entered allmulticast mode [ 88.735051][ T5775] bridge_slave_1: entered promiscuous mode [ 88.788004][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.811099][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.842307][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.849349][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.876070][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.892012][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.915342][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.928985][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.939867][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.947375][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.974924][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.988837][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.064418][ T5779] team0: Port device team_slave_0 added [ 89.074391][ T5775] team0: Port device team_slave_0 added [ 89.094949][ T5778] team0: Port device team_slave_0 added [ 89.103199][ T5779] team0: Port device team_slave_1 added [ 89.111442][ T5775] team0: Port device team_slave_1 added [ 89.119708][ T5778] team0: Port device team_slave_1 added [ 89.206202][ T5780] hsr_slave_0: entered promiscuous mode [ 89.213835][ T5780] hsr_slave_1: entered promiscuous mode [ 89.235351][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.242502][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.269228][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.282323][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.283845][ T5787] Bluetooth: hci0: command tx timeout [ 89.289310][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.321465][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.345943][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.354277][ T5787] Bluetooth: hci1: command tx timeout [ 89.354300][ T5784] Bluetooth: hci3: command tx timeout [ 89.354748][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.392692][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.405172][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.412265][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.438651][ T5787] Bluetooth: hci2: command tx timeout [ 89.444673][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.456922][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.466777][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.496104][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.508645][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.516071][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.542182][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.655482][ T5775] hsr_slave_0: entered promiscuous mode [ 89.662579][ T5775] hsr_slave_1: entered promiscuous mode [ 89.669178][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.678629][ T5775] Cannot create hsr debugfs directory [ 89.721522][ T5779] hsr_slave_0: entered promiscuous mode [ 89.728323][ T5779] hsr_slave_1: entered promiscuous mode [ 89.735278][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.743099][ T5779] Cannot create hsr debugfs directory [ 89.806549][ T5778] hsr_slave_0: entered promiscuous mode [ 89.813702][ T5778] hsr_slave_1: entered promiscuous mode [ 89.820122][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.827860][ T5778] Cannot create hsr debugfs directory [ 90.248401][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.265179][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.284235][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.296645][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.385425][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.408327][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.436429][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.467324][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.515931][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.548757][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.586451][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.599343][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.643805][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.686064][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.707424][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.727955][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.740256][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.790527][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.809304][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.816767][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.849681][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.857054][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.932335][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.980413][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.032852][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.047621][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.080105][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.103200][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.110352][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.125219][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.132604][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.149619][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.156997][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.186256][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.193609][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.269410][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.351902][ T5787] Bluetooth: hci0: command tx timeout [ 91.389988][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.432041][ T5787] Bluetooth: hci1: command tx timeout [ 91.432243][ T5784] Bluetooth: hci3: command tx timeout [ 91.474429][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.481580][ T5076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.512184][ T5784] Bluetooth: hci2: command tx timeout [ 91.524296][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.531773][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.661140][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.865939][ T5780] veth0_vlan: entered promiscuous mode [ 91.906313][ T5780] veth1_vlan: entered promiscuous mode [ 92.035599][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.063203][ T5780] veth0_macvtap: entered promiscuous mode [ 92.077365][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.089834][ T5780] veth1_macvtap: entered promiscuous mode [ 92.136258][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.174657][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.200804][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.210710][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.220079][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.230018][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.356361][ T5775] veth0_vlan: entered promiscuous mode [ 92.369564][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.407017][ T5778] veth0_vlan: entered promiscuous mode [ 92.430729][ T5775] veth1_vlan: entered promiscuous mode [ 92.459894][ T5778] veth1_vlan: entered promiscuous mode [ 92.479851][ T3429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.505164][ T3429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.568667][ T5775] veth0_macvtap: entered promiscuous mode [ 92.599346][ T3429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.606487][ T5775] veth1_macvtap: entered promiscuous mode [ 92.622979][ T3429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.674097][ T5779] veth0_vlan: entered promiscuous mode [ 92.694001][ T5778] veth0_macvtap: entered promiscuous mode [ 92.710025][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.722058][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.749144][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.765011][ T5779] veth1_vlan: entered promiscuous mode [ 92.774448][ T5778] veth1_macvtap: entered promiscuous mode [ 92.796379][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.814359][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.827028][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.898289][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.913276][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.925604][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.937349][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.034469][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.049981][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.067691][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.078651][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.090458][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.135559][ T5779] veth0_macvtap: entered promiscuous mode [ 93.159464][ T5779] veth1_macvtap: entered promiscuous mode [ 93.169708][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.194024][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.206621][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.223405][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.238097][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.286003][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.306150][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.326729][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.338791][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.395548][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.407432][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.418696][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.429688][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.440441][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.451398][ T5784] Bluetooth: hci0: command tx timeout [ 93.468277][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.496660][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.512935][ T5784] Bluetooth: hci1: command tx timeout [ 93.518486][ T5784] Bluetooth: hci3: command tx timeout [ 93.537631][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.582294][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.591995][ T5784] Bluetooth: hci2: command tx timeout [ 93.626683][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.650049][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.662293][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.679467][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.690131][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.706626][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.720850][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.768563][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.778236][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.793629][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.806440][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.840983][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.868142][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.014642][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.031041][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.110888][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.138324][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.197340][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.210406][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.233469][ T5849] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.309578][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.321050][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.539705][ T5853] trusted_key: encrypted_key: master key parameter 'vr sted:syz' is invalid [ 94.551420][ T5853] trusted_key: encrypted_key: master key parameter 'vr sted:syz' is invalid [ 95.105563][ T5861] block device autoloading is deprecated and will be removed. [ 95.512042][ T5784] Bluetooth: hci0: command tx timeout [ 95.591898][ T5784] Bluetooth: hci1: command tx timeout [ 95.592349][ T5787] Bluetooth: hci3: command tx timeout [ 95.671753][ T5787] Bluetooth: hci2: command tx timeout [ 96.765498][ T5860] orangefs_mount: mount request failed with -4 [ 97.353970][ T23] cfg80211: failed to load regulatory.db [ 101.295158][ T5887] syz.1.10 (5887) used greatest stack depth: 16296 bytes left [ 101.622559][ T5896] random: crng reseeded on system resumption [ 101.686210][ T5897] jffs2: notice: (5897) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.165863][ T5912] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17'. [ 103.412315][ T5912] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.442840][ T5912] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 103.472188][ T5912] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20001 [ 104.389827][ T5919] orangefs_mount: mount request failed with -4 [ 104.787469][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'. [ 105.776737][ T5938] vlan0: entered promiscuous mode [ 106.943233][ T5786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.596699][ T5786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.869620][ T5786] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 108.879490][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.185531][ T5786] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 109.215143][ T5786] wwan wwan0: port wwan0qmi0 attached [ 109.469663][ T28] audit: type=1800 audit(1786772254.653:2): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.30" name="memory_backed" dev="configfs" ino=8361 res=0 errno=0 [ 110.316974][ T28] audit: type=1800 audit(1786772254.673:3): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.30" name="zone_nr_conv" dev="configfs" ino=8362 res=0 errno=0 [ 110.339230][ T28] audit: type=1800 audit(1786772254.673:4): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.30" name="power" dev="configfs" ino=8363 res=0 errno=0 [ 110.342268][ T5970] orangefs_mount: mount request failed with -4 [ 110.398545][ T5953] null_blk: disk nullb1 created [ 110.498745][ T28] audit: type=1800 audit(1786772254.683:5): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.30" name="zoned" dev="configfs" ino=7711 res=0 errno=0 [ 110.767090][ T5973] block device autoloading is deprecated and will be removed. [ 110.824590][ T5973] zonefs (nullb1) ERROR: Not a zoned block device [ 111.038181][ T5786] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 82:31:85:6e:f6:32 [ 111.246173][ T5786] usb 2-1: USB disconnect, device number 2 [ 111.305013][ T5786] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 111.445954][ T5996] jffs2: notice: (5996) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 111.562629][ T5786] wwan wwan0: port wwan0qmi0 disconnected [ 113.159931][ T6009] orangefs_mount: mount request failed with -4 [ 113.811870][ T5786] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.021771][ T5786] usb 2-1: device descriptor read/64, error -71 [ 114.321833][ T5786] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.392937][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.521836][ T5786] usb 2-1: device descriptor read/64, error -71 [ 114.562044][ T8] usb 1-1: device descriptor read/64, error -71 [ 114.652050][ T5786] usb usb2-port1: attempt power cycle [ 114.833752][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.013047][ T8] usb 1-1: device descriptor read/64, error -71 [ 115.131809][ T5786] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.132392][ T8] usb usb1-port1: attempt power cycle [ 115.193185][ T5786] usb 2-1: device descriptor read/8, error -71 [ 115.203162][ T6058] trusted_key: encrypted_key: master key parameter 'vr sted:syz' is invalid [ 115.215785][ T6058] trusted_key: encrypted_key: master key parameter 'vr sted:syz' is invalid [ 115.522089][ T5786] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.591577][ T5786] usb 2-1: device descriptor read/8, error -71 [ 115.600496][ T6062] ERROR: device name not specified. [ 115.638402][ T6064] syz.2.62[6064]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 115.672757][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.874821][ T6064] loop2: detected capacity change from 0 to 32768 [ 115.891805][ T5786] usb usb2-port1: unable to enumerate USB device [ 115.953471][ T8] usb 1-1: device descriptor read/8, error -71 [ 115.982931][ T6064] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.207719][ T6064] XFS (loop2): Ending clean mount [ 116.230906][ T6064] XFS (loop2): Quotacheck needed: Please wait. [ 116.262015][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.357461][ T6064] XFS (loop2): Quotacheck: Done. [ 116.375841][ T8] usb 1-1: device descriptor read/8, error -71 [ 116.682684][ T8] usb usb1-port1: unable to enumerate USB device [ 117.147467][ T5779] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.861923][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.021967][ T8] usb 4-1: device descriptor read/64, error -71 [ 119.337624][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.521059][ T8] usb 4-1: device descriptor read/64, error -71 [ 119.653426][ T8] usb usb4-port1: attempt power cycle [ 119.685899][ T6108] trusted_key: encrypted_key: master key parameter 'vr sted:syz' is invalid [ 119.696944][ T6108] trusted_key: encrypted_key: master key parameter 'vr sted:syz' is invalid [ 120.027000][ T6113] ERROR: device name not specified. [ 120.251875][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.302699][ T8] usb 4-1: device descriptor read/8, error -71 [ 120.652377][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.733635][ T8] usb 4-1: device descriptor read/8, error -71 [ 120.866106][ T8] usb usb4-port1: unable to enumerate USB device [ 123.537422][ T6153] trusted_key: encrypted_key: master key parameter 'vr sted:syz' is invalid [ 123.549283][ T6153] trusted_key: encrypted_key: master key parameter 'vr sted:syz' is invalid [ 123.939163][ T6162] ERROR: device name not specified. [ 124.176725][ T6170] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 124.183612][ T6170] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.204944][ T6170] vhci_hcd vhci_hcd.0: Device attached [ 124.234984][ T5786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.411922][ T5786] usb 3-1: device descriptor read/64, error -71 [ 124.481770][ T972] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 124.691885][ T5786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.872879][ T5786] usb 3-1: device descriptor read/64, error -71 [ 124.998225][ T5786] usb usb3-port1: attempt power cycle [ 125.014164][ T6171] vhci_hcd: connection reset by peer [ 125.028095][ T59] vhci_hcd: stop threads [ 125.034633][ T59] vhci_hcd: release socket [ 125.040170][ T59] vhci_hcd: disconnect device [ 125.451724][ T5786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.502645][ T5786] usb 3-1: device descriptor read/8, error -71 [ 125.784631][ T5786] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.854344][ T5786] usb 3-1: device descriptor read/8, error -71 [ 125.992537][ T5786] usb usb3-port1: unable to enumerate USB device [ 126.138763][ T6192] jffs2: notice: (6192) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.391893][ T5784] Bluetooth: hci0: command tx timeout [ 127.079449][ T6200] trusted_key: encrypted_key: master key parameter 'vr sted:syz' is invalid [ 127.089482][ T6200] trusted_key: encrypted_key: master key parameter 'vr sted:syz' is invalid [ 127.416441][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.611260][ T6208] syzkaller0: entered promiscuous mode [ 127.627143][ T6208] syzkaller0: entered allmulticast mode [ 127.693797][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.710554][ T23] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 127.720301][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.005146][ T23] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 128.036412][ T23] wwan wwan0: port wwan0qmi0 attached [ 129.642044][ T972] vhci_hcd: vhci_device speed not set [ 129.787945][ T6224] dummy_hcd dummy_hcd.0: remove, state 1 [ 129.849202][ T6224] usb usb1: USB disconnect, device number 1 [ 131.401895][ T173] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.551828][ T173] usb 3-1: device descriptor read/64, error -71 [ 131.852786][ T173] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.044040][ T173] usb 3-1: device descriptor read/64, error -71 [ 132.210959][ T173] usb usb3-port1: attempt power cycle [ 132.662990][ T173] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.774633][ T173] usb 3-1: device descriptor read/8, error -71 [ 133.161933][ T173] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 133.211130][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.226712][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.324961][ T173] usb 3-1: device descriptor read/8, error -71 [ 133.524973][ T173] usb usb3-port1: unable to enumerate USB device [ 134.399431][ T23] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 1a:ae:55:54:98:ab [ 134.417014][ T23] usb 1-1: USB disconnect, device number 6 [ 134.425902][ T23] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 134.546586][ T23] wwan wwan0: port wwan0qmi0 disconnected [ 134.620119][ T6224] dummy_hcd dummy_hcd.0: stopped [ 134.640600][ T6224] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 134.733864][ T6237] trusted_key: encrypted_key: master key parameter 'vr sted:syz' is invalid [ 134.745822][ T6237] trusted_key: encrypted_key: master key parameter 'vr sted:syz' is invalid [ 136.703092][ T6258] Bluetooth: MGMT ver 1.22 [ 137.362006][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.554099][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.567277][ T23] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 137.578297][ T23] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 137.599228][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.019929][ T6275] netlink: 32 bytes leftover after parsing attributes in process `syz.3.130'. [ 141.241835][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.322077][ T2132] usb 3-1: USB disconnect, device number 10 [ 141.434391][ T23] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.471719][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.501902][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.511211][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.528540][ T23] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.543327][ T23] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.552979][ T23] usb 2-1: Product: syz [ 141.557471][ T23] usb 2-1: Manufacturer: syz [ 141.563047][ T28] audit: type=1800 audit(1786772286.743:6): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.131" name="pnp_string" dev="configfs" ino=8773 res=0 errno=0 [ 141.610048][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 141.619627][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 141.642849][ T23] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 141.649310][ T23] cdc_wdm 2-1:1.0: Unknown control protocol [ 141.729960][ T6286] ufs: You didn't specify the type of your ufs filesystem [ 141.729960][ T6286] [ 141.729960][ T6286] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 141.729960][ T6286] [ 141.729960][ T6286] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 141.764500][ T6286] ufs: ufstype=old is supported read-only [ 141.771236][ T6286] syz.2.134: attempt to access beyond end of device [ 141.771236][ T6286] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 141.813086][ T173] usb 2-1: USB disconnect, device number 7 [ 142.381851][ T173] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 142.634109][ T173] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.643581][ T173] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.785435][ T173] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.795195][ T173] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.821190][ T173] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.831055][ T173] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.991709][ T173] usb 2-1: Product: syz [ 142.996301][ T173] usb 2-1: Manufacturer: syz [ 143.022000][ T173] cdc_wdm 2-1:1.0: skipping garbage [ 143.027468][ T173] cdc_wdm 2-1:1.0: skipping garbage [ 143.035172][ T173] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 143.071897][ T173] cdc_wdm 2-1:1.0: Unknown control protocol [ 143.440210][ T6297] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 145.461792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 145.759162][ T9] usb 2-1: USB disconnect, device number 8 [ 146.060875][ T6304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.139'. [ 146.663136][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 146.875347][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.899906][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 146.934864][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 146.959639][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.899515][ T6329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.148'. [ 149.514887][ T9] usb 2-1: USB disconnect, device number 9 [ 149.645744][ T6343] MTD: Couldn't look up './dev/mtdblock0': -2 [ 151.668673][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 152.433620][ T6357] netlink: 32 bytes leftover after parsing attributes in process `syz.3.158'. [ 152.454121][ T6356] vlan0: entered promiscuous mode [ 152.901971][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 153.133490][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.186578][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.222161][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 153.248678][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 153.261789][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.286191][ T9] spcp8x5 2-1:1.0: required endpoints missing [ 153.299042][ T6373] MTD: Couldn't look up './dev/mtdblock0': -2 [ 153.512186][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.678115][ T6364] md/raid:md0: not clean -- starting background reconstruction [ 153.697893][ T6364] md/raid:md0: device ram0 operational as raid disk 0 [ 153.747828][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.775532][ T8] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 153.790043][ T6364] md/raid:md0: not enough operational devices (3/4 failed) [ 153.799726][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 153.825062][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.920402][ T6364] md/raid:md0: failed to run raid set. [ 153.928127][ T6364] md: pers->run() failed ... [ 154.164959][ T6371] md: could not open device unknown-block(1,0). [ 154.205547][ T6371] md: could not open device unknown-block(1,1). [ 154.233491][ T6371] md: could not open device unknown-block(1,3). [ 154.305506][ T6371] md/raid:md0: not clean -- starting background reconstruction [ 154.321067][ T6371] md/raid:md0: device ram0 operational as raid disk 0 [ 154.483509][ T6371] md/raid:md0: not enough operational devices (3/4 failed) [ 154.660946][ T6371] md/raid:md0: failed to run raid set. [ 154.667615][ T6371] md: pers->run() failed ... [ 154.757094][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 154.804862][ T6390] vlan0: entered promiscuous mode [ 155.605186][ T6393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.168'. [ 155.695132][ T8] usb 2-1: USB disconnect, device number 10 [ 155.890007][ T6401] random: crng reseeded on system resumption [ 155.959335][ T6404] jffs2: notice: (6404) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.046324][ T6407] MTD: Couldn't look up './dev/mtdblock0': -2 [ 156.260042][ T8] usb 4-1: USB disconnect, device number 6 [ 156.656655][ T6414] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 159.442010][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 159.626334][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.637717][ T23] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 159.647423][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.895531][ T28] audit: type=1800 audit(1786772305.073:7): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.175" name="zoned" dev="configfs" ino=9001 res=0 errno=0 [ 159.922234][ T23] qmi_wwan: probe of 4-1:1.0 failed with error -71 [ 159.950633][ T28] audit: type=1800 audit(1786772305.083:8): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.175" name="memory_backed" dev="configfs" ino=9002 res=0 errno=0 [ 159.987973][ T23] usb 4-1: USB disconnect, device number 7 [ 160.024856][ T28] audit: type=1800 audit(1786772305.083:9): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.175" name="zone_nr_conv" dev="configfs" ino=9003 res=0 errno=0 [ 160.145501][ T28] audit: type=1800 audit(1786772305.083:10): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.175" name="power" dev="configfs" ino=9004 res=0 errno=0 [ 160.481146][ T6426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.179'. [ 160.511761][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 160.709584][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.741983][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.792954][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 160.881788][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 160.904454][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.932415][ T9] spcp8x5 3-1:1.0: required endpoints missing [ 160.960415][ T6432] MTD: Couldn't look up './dev/mtdblock0': -2 [ 161.201921][ T6424] md: could not open device unknown-block(1,0). [ 161.247132][ T6424] md: could not open device unknown-block(1,1). [ 161.263028][ T6424] md: could not open device unknown-block(1,3). [ 161.467965][ T6424] md/raid:md0: not clean -- starting background reconstruction [ 161.476846][ T6424] md/raid:md0: device ram0 operational as raid disk 0 [ 161.501906][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 161.656076][ T6424] md/raid:md0: not enough operational devices (3/4 failed) [ 161.718535][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.742713][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.775914][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 161.785774][ T6424] md/raid:md0: failed to run raid set. [ 161.804926][ T6424] md: pers->run() failed ... [ 161.808875][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 161.835671][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.866643][ T9] spcp8x5 4-1:1.0: required endpoints missing [ 162.088151][ T6437] md: could not open device unknown-block(1,0). [ 162.098923][ T6437] md: could not open device unknown-block(1,1). [ 162.107115][ T6437] md: could not open device unknown-block(1,3). [ 162.184088][ T6437] md/raid:md0: not clean -- starting background reconstruction [ 162.192954][ T6437] md/raid:md0: device ram0 operational as raid disk 0 [ 162.236611][ T6437] md/raid:md0: not enough operational devices (3/4 failed) [ 162.328022][ T6437] md/raid:md0: failed to run raid set. [ 162.346533][ T6437] md: pers->run() failed ... [ 162.539347][ T6454] random: crng reseeded on system resumption [ 163.237921][ T23] usb 3-1: USB disconnect, device number 11 [ 163.575960][ T28] audit: type=1800 audit(1786772308.763:11): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.189" name="zoned" dev="configfs" ino=9071 res=0 errno=0 [ 163.597730][ T6464] MTD: Couldn't look up './dev/mtdblock0': -2 [ 163.622933][ T28] audit: type=1800 audit(1786772308.793:12): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.189" name="memory_backed" dev="configfs" ino=9072 res=0 errno=0 [ 163.674886][ T28] audit: type=1800 audit(1786772308.803:13): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.189" name="zone_nr_conv" dev="configfs" ino=9073 res=0 errno=0 [ 163.728947][ T28] audit: type=1800 audit(1786772308.803:14): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.189" name="power" dev="configfs" ino=9074 res=0 errno=0 [ 164.273446][ T8] usb 4-1: USB disconnect, device number 8 [ 164.981793][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 165.208985][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.281797][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.311713][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 165.353992][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 165.380084][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.390704][ T6483] random: crng reseeded on system resumption [ 165.403843][ T8] spcp8x5 4-1:1.0: required endpoints missing [ 165.747634][ T6476] md: could not open device unknown-block(1,0). [ 165.774806][ T6486] netlink: 32 bytes leftover after parsing attributes in process `syz.2.197'. [ 165.776049][ T6476] md: could not open device unknown-block(1,1). [ 165.813885][ T6476] md: could not open device unknown-block(1,3). [ 165.918656][ T6476] md/raid:md0: not clean -- starting background reconstruction [ 165.929408][ T6476] md/raid:md0: device ram0 operational as raid disk 0 [ 165.988542][ T6476] md/raid:md0: not enough operational devices (3/4 failed) [ 166.084887][ T6476] md/raid:md0: failed to run raid set. [ 166.097393][ T6476] md: pers->run() failed ... [ 166.369588][ T6499] MTD: Couldn't look up './dev/mtdblock0': -2 [ 166.593881][ T28] audit: type=1800 audit(1786772311.773:15): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.202" name="zoned" dev="configfs" ino=9124 res=0 errno=0 [ 166.632379][ T28] audit: type=1800 audit(1786772311.823:16): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.202" name="memory_backed" dev="configfs" ino=9128 res=0 errno=0 [ 166.786098][ T28] audit: type=1800 audit(1786772311.843:17): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.202" name="zone_nr_conv" dev="configfs" ino=9129 res=0 errno=0 [ 167.014351][ T28] audit: type=1800 audit(1786772311.843:18): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.202" name="power" dev="configfs" ino=9659 res=0 errno=0 [ 167.731380][ T5786] usb 4-1: USB disconnect, device number 9 [ 167.859621][ T6513] netlink: 32 bytes leftover after parsing attributes in process `syz.3.206'. [ 168.333997][ T6520] random: crng reseeded on system resumption [ 169.438081][ T6535] MTD: Couldn't look up './dev/mtdblock0': -2 [ 170.361357][ T6541] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 170.373248][ T6541] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 170.381721][ T6541] CPU: 0 PID: 6541 Comm: syz.0.214 Not tainted syzkaller #0 [ 170.389063][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.399189][ T6541] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 170.404731][ T6541] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 78 4d cb fa eb 0c e8 71 4d cb fa eb 05 e8 6a 4d cb fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 84 d0 23 fb 4d 8b 36 4c 89 f7 e8 [ 170.424520][ T6541] RSP: 0018:ffffc90019def850 EFLAGS: 00010246 [ 170.430627][ T6541] RAX: 0000000000000000 RBX: ffff888055a1c050 RCX: 0000000000080000 [ 170.438635][ T6541] RDX: ffffc9000ca39000 RSI: 00000000000041c3 RDI: 00000000000041c4 [ 170.446637][ T6541] RBP: ffff888025a78000 R08: ffff8880237f5a00 R09: 0000000000000004 [ 170.454646][ T6541] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 170.462654][ T6541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 170.470668][ T6541] FS: 00007f24fee096c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 170.479651][ T6541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.486268][ T6541] CR2: 00007f24fdf87240 CR3: 000000002f587000 CR4: 00000000003506f0 [ 170.494286][ T6541] Call Trace: [ 170.497591][ T6541] [ 170.500549][ T6541] ? dummy_pullup+0x120/0x120 [ 170.505266][ T6541] gadget_bind_driver+0x390/0x770 [ 170.510348][ T6541] ? gadget_match_driver+0x130/0x130 [ 170.515768][ T6541] really_probe+0x247/0xae0 [ 170.520392][ T6541] ? pm_runtime_barrier+0x14b/0x1c0 [ 170.525619][ T6541] __driver_probe_device+0x1f5/0x390 [ 170.531297][ T6541] driver_probe_device+0x4f/0x420 [ 170.536354][ T6541] __driver_attach+0x444/0x6d0 [ 170.541154][ T6541] bus_for_each_dev+0x235/0x2b0 [ 170.546127][ T6541] ? driver_attach+0x50/0x50 [ 170.550756][ T6541] ? bus_remove_file+0x140/0x140 [ 170.555837][ T6541] ? do_raw_spin_unlock+0x121/0x230 [ 170.561261][ T6541] bus_add_driver+0x340/0x630 [ 170.566506][ T6541] driver_register+0x23a/0x310 [ 170.571910][ T6541] usb_gadget_register_driver_owner+0xf9/0x270 [ 170.578114][ T6541] raw_ioctl+0x1613/0x3d80 [ 170.582641][ T6541] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 170.588388][ T6541] ? tomoyo_path_number_perm+0x217/0x5e0 [ 170.594877][ T6541] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 170.600373][ T6541] ? make_qualifier+0x260/0x260 [ 170.605264][ T6541] ? __fget_files+0x28/0x460 [ 170.610152][ T6541] ? bpf_lsm_file_ioctl+0x9/0x10 [ 170.615148][ T6541] ? security_file_ioctl+0x80/0xa0 [ 170.620335][ T6541] ? make_qualifier+0x260/0x260 [ 170.625227][ T6541] __se_sys_ioctl+0xfd/0x170 [ 170.630069][ T6541] do_syscall_64+0x55/0xb0 [ 170.634744][ T6541] ? clear_bhb_loop+0x40/0x90 [ 170.639473][ T6541] ? clear_bhb_loop+0x40/0x90 [ 170.644184][ T6541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.650371][ T6541] RIP: 0033:0x7f24fdf9dd6b [ 170.654831][ T6541] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 170.674912][ T6541] RSP: 002b:00007f24fee06f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.683551][ T6541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f24fdf9dd6b [ 170.691570][ T6541] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 170.699583][ T6541] RBP: 00007f24fee07fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 170.707584][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.715655][ T6541] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.723672][ T6541] [ 170.726732][ T6541] Modules linked in: [ 170.741758][ T6541] ---[ end trace 0000000000000000 ]--- [ 170.747306][ T6541] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 170.767199][ T6541] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 78 4d cb fa eb 0c e8 71 4d cb fa eb 05 e8 6a 4d cb fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 84 d0 23 fb 4d 8b 36 4c 89 f7 e8 [ 170.845877][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 171.013842][ T6541] RSP: 0018:ffffc90019def850 EFLAGS: 00010246 [ 171.090119][ T6541] RAX: 0000000000000000 RBX: ffff888055a1c050 RCX: 0000000000080000 [ 171.149804][ T6541] RDX: ffffc9000ca39000 RSI: 00000000000041c3 RDI: 00000000000041c4 [ 171.215442][ T6541] RBP: ffff888025a78000 R08: ffff8880237f5a00 R09: 0000000000000004 [ 171.230968][ T6541] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 171.239352][ T6541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 171.248092][ T6541] FS: 00007f24fee096c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 171.258371][ T6541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.265139][ T6541] CR2: 0000200000003000 CR3: 000000002f587000 CR4: 00000000003506e0 [ 171.274655][ T6541] Kernel panic - not syncing: Fatal exception [ 171.281425][ T6541] Kernel Offset: disabled [ 171.285780][ T6541] Rebooting in 86400 seconds..