last executing test programs: 32m1.081602857s ago: executing program 3 (id=564): openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) syz_emit_ethernet(0x42, &(0x7f0000001a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa3f86dd20010700000c11ff20018000000000000000000000000001ff0200000000000000004dc900000001ffff0e22000c9078a17c549c"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x4, 0xdf, 0x0, 0xa6, 0x2, 0x8}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x3, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x0, 0x0, 0x0, 0x4}]}) r2 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) r4 = socket(0x9, 0x1, 0x80000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) sendto$inet(r2, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000064f1f440cf1065807991010203010902240001000000000904ff00022047380009050602000200000009058202"], 0x0) 31m51.269020642s ago: executing program 3 (id=582): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x53, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9004}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) io_uring_setup(0x6e2b, &(0x7f0000000380)={0x0, 0x4e7e, 0x20000, 0x0, 0x17a}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000240)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0) 31m50.590267708s ago: executing program 3 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1001, 0x7], [0x9, 0xfff], 0x108}}) r2 = socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) 31m48.408297708s ago: executing program 3 (id=588): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd}, 0x6}, 0x1, 0x0, 0x0, 0x40800}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000171000/0x4000)=nil, 0x4000, 0x3) bind$inet(r0, 0x0, 0x0) getpid() ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000006000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000172000018007000100727400"], 0xb4}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 31m45.644274938s ago: executing program 3 (id=594): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) getpid() r2 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000006000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000172000018007000100727400"], 0xb4}}, 0x0) 31m44.192833846s ago: executing program 3 (id=597): openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) syz_emit_ethernet(0x42, &(0x7f0000001a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa3f86dd20010700000c11ff20018000000000000000000000000001ff0200000000000000004dc900000001ffff0e22000c9078a17c549c"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x4, 0xdf, 0x0, 0xa6, 0x2, 0x8}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x3, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x0, 0x0, 0x0, 0x4}]}) r2 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket(0x9, 0x1, 0x80000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) sendto$inet(r2, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000064f1f440cf1065807991010203010902240001000000000904ff00022047380009050602000200000009058202"], 0x0) 31m29.073141175s ago: executing program 32 (id=597): openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) syz_emit_ethernet(0x42, &(0x7f0000001a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa3f86dd20010700000c11ff20018000000000000000000000000001ff0200000000000000004dc900000001ffff0e22000c9078a17c549c"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x4, 0xdf, 0x0, 0xa6, 0x2, 0x8}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x3, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x0, 0x0, 0x0, 0x4}]}) r2 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket(0x9, 0x1, 0x80000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) sendto$inet(r2, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000064f1f440cf1065807991010203010902240001000000000904ff00022047380009050602000200000009058202"], 0x0) 23m57.686914154s ago: executing program 1 (id=1762): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYRESDEC=r0, @ANYRES8=0x0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) utime(&(0x7f0000000200)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') 23m55.97250547s ago: executing program 1 (id=1768): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 23m54.969373822s ago: executing program 1 (id=1775): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r0, 0x1, 0x20, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x20000040) 23m54.886915183s ago: executing program 1 (id=1776): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f50c", 0x2}], 0x1}}], 0x1, 0x8011) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f0000000000)=""/9, 0x9}, {0x0}, {&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f00000004c0)=""/227, 0xe3}], 0x6}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/119, 0x77}, 0x80000001}, {{0x0, 0x0, &(0x7f0000001640)=[{0x0}, {&(0x7f0000001440)=""/229, 0xe5}, {&(0x7f0000001540)=""/203, 0xcb}], 0x3}, 0x80}], 0x3, 0x40000102, 0x0) 23m54.809256894s ago: executing program 1 (id=1780): io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 23m52.774244236s ago: executing program 1 (id=1783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 23m37.068540634s ago: executing program 33 (id=1783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 23m21.398283443s ago: executing program 0 (id=1898): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 23m20.246240178s ago: executing program 0 (id=1902): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3404c891) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x8002, 0x1, [0x0]}, 0xa) 23m20.060282505s ago: executing program 0 (id=1904): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 23m19.011243583s ago: executing program 0 (id=1906): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 23m18.730896443s ago: executing program 0 (id=1910): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) getpid() r2 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000006000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000172000018007000100727400"], 0xb4}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 23m18.070613412s ago: executing program 0 (id=1914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 23m2.913577902s ago: executing program 34 (id=1914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 17m4.830215695s ago: executing program 6 (id=3207): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) 17m4.424786138s ago: executing program 6 (id=3210): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0xffeffc03}, &(0x7f0000000340), &(0x7f0000000000)) 17m1.921197829s ago: executing program 6 (id=3218): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000002000099a200000800000000"], 0x10}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 17m0.315327367s ago: executing program 6 (id=3220): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r0, 0x10000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) gettid() getpid() 16m59.771087577s ago: executing program 6 (id=3222): socket(0x1e, 0x4, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000300)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefff, 0x1040}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r5, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 16m59.45997586s ago: executing program 6 (id=3225): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009549000000004000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000280)='veth0_vlan\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$alg(0x26, 0x5, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000180)=0x6e) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) lseek(r3, 0x7, 0x2) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 16m59.108272534s ago: executing program 35 (id=3225): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009549000000004000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000280)='veth0_vlan\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$alg(0x26, 0x5, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000180)=0x6e) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) lseek(r3, 0x7, 0x2) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000017010fff03000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de667701a7c93437583b5f0b285a188098c1ac4ebac40b315ff8db6f736992497879a42b95248fed4d4888970573d0e88ceead26d97e172588a3ad30fbd01b7bbeeaa668e835f7ae3113fe2d949bb47bc0b2c62541714cc0538601ae4bab19d69a5addee134dd447034da6dd89704603d31a3d25b9d5f46cfd43d9e29aac7422920d98e1463256bd4cc929373ad9000000000faf6a95a04ad3b9db9b230f8224a3d6db187a94e5dadfe181d20d3a4bd08e8b0e6eeb79fdee230dd852a36dfc9046d03b8f316b2d460ca5d08c515d914db8ce430ea0237911c440ee750fe787aaffa83b809651c529e4cf68c8219a827ea003c59e3e51b00cd7f9464f37be2eb3e1475819ad37edcc238b85ab205a2b394916815d9cf7bf3f8e3d19a4697756299e21f2afd3ae31e0f09b8153965635216de47156f4e5fc97cb04f9c5e13256be1d9e0a94f9c6387940de1bcd7b532d16ebba216601cf23be6a7c259550bd059a5a7aee85eb558de8201c1d9c7b29e27313f61cf0b07dd790071bdbceabdd32ce2bcc279b1575a1431b03e5dc37307d15a2782175c87dad1a3aadf48b382bea4ae0b423edee0e12ada4c1dacc40bf387630792ab5c7ed6e2ef7e8a77268b0ff8978ccddfa8da4521d24b3fddc70d181c20caa9a584df9b2e"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 13.657178482s ago: executing program 8 (id=7392): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000100)={{0x8000, 0x1}, 0x40}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000500)=[{{&(0x7f0000000180)=@generic, 0x80, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000a40)=""/209, 0xd1}, {&(0x7f0000000cc0)=""/253, 0xfd}, {0x0}, {0x0}, {&(0x7f0000000e40)=""/168, 0xa8}], 0x5}, 0xd0000}], 0x2, 0x0, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000400)=0x11) sync_file_range(r0, 0xffffffffffffa525, 0x7, 0x3) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) 13.215113597s ago: executing program 2 (id=7396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000c7000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x4}, 0x4c8c0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) readv(r2, &(0x7f0000000040), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getrlimit(0x1, &(0x7f0000000000)) unshare(0x2040400) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000100), &(0x7f00000010c0)=0x30) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x29) ioctl$FIONCLEX(r2, 0x5450) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 12.648596779s ago: executing program 2 (id=7397): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r4, 0x0, 0x4000001) 11.383817549s ago: executing program 7 (id=7403): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x10, 0x0) chroot(&(0x7f0000000180)='./file0\x00') r3 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) faccessat2(r3, 0x0, 0x0, 0x1100) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x7ff}, &(0x7f0000000200)=0x8) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x1df) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 10.999209372s ago: executing program 8 (id=7404): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xc, 0x2, 0x40004000b, 0xfffffffffffffc01, 0x4000002}, 0x0, &(0x7f0000000200)={0x3ff, 0x3, 0x7ff, 0x400a, 0xfffffffffffffffc, 0x9, 0x466}, 0x0, 0x0) 10.640054836s ago: executing program 7 (id=7405): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$uac1(0x2, 0xbc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_clone3(&(0x7f0000000300)={0x203008000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x1f}, &(0x7f00000001c0)=""/86, 0x56, &(0x7f0000000240)=""/124, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) waitid(0x3, r0, &(0x7f0000000380), 0x2, &(0x7f0000000400)) socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0) connect$qrtr(r2, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 10.44827742s ago: executing program 5 (id=7407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d000000008021100000108"], 0x4c}}, 0x0) 9.820237273s ago: executing program 8 (id=7408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000280)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = syz_io_uring_setup(0x117, &(0x7f00000005c0)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4) syz_io_uring_submit(r8, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r7, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 9.736124039s ago: executing program 5 (id=7409): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x100000001, 0xf, 0x80000006}, 0x0, 0x0) 7.11252633s ago: executing program 4 (id=7410): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) io_uring_enter(0xffffffffffffffff, 0x26c3, 0xdfffeffb, 0x4c, 0x0, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xfb6d, 0x100, 0x400, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 6.98243987s ago: executing program 5 (id=7411): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r2, &(0x7f0000000100)=""/67, 0x43) syz_usb_disconnect(r0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000440)={0x1, 0x10000, 0x40, 0x6dd, 0xffffffff, 0xffffff50, 0x2, 0x3, 0xffffff6f, 0x40000009, 0x4, 0x8, &(0x7f0000001140)=[0x6], 0x1, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000300)=@ethtool_coalesce={0xf, 0x7fffffff, 0xfffeffff, 0x6, 0x1, 0x1, 0x1000, 0x40, 0x800, 0x80000001, 0x80, 0x80000000, 0x0, 0x1, 0x1000, 0xa4, 0x3, 0x6, 0x2, 0x6, 0x9, 0x1, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 6.719393929s ago: executing program 2 (id=7412): clock_adjtime(0x4, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x400000000000000, 0x0, 0x9, 0x2, 0x0, 0x100, 0x800000000000000, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0xe3, 0x18, 0x1000, 0x79, 0x2, 0x3, 0x0, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.648103615s ago: executing program 4 (id=7413): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) read(0xffffffffffffffff, &(0x7f0000000740)=""/384, 0x200008c0) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) 6.171715914s ago: executing program 4 (id=7414): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="830018007bc3"], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = getgid() statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r2, 0x0, r3) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xa) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setuid(0xee00) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a1504000000000000797a310000000008000540000000040900020073790680159b47f0d10e207d62b27a310000000008000a40fffffffc3c0000000c0a010800000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000021400000011000100"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 6.043930826s ago: executing program 8 (id=7415): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000040)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000002840)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) 5.747893368s ago: executing program 7 (id=7416): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000500)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x140c0}, 0x40010) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRESHEX=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 5.001690903s ago: executing program 2 (id=7417): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000007000000002400000000000000290000003200000000000000000000000000ffff", @ANYRES16], 0x40}, 0x6048090) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 4.832376516s ago: executing program 7 (id=7418): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) 4.528663044s ago: executing program 7 (id=7419): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xc, 0x2, 0x40004000b, 0xfffffffffffffc01, 0x4000002}, 0x0, &(0x7f0000000200)={0x3ff, 0x3, 0x7ff, 0x400a, 0xfffffffffffffffc, 0x9, 0x466}, 0x0, 0x0) 4.274358932s ago: executing program 4 (id=7420): mkdirat(0xffffffffffffff9c, 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000003530404002fbd7000000000a0af000000e1350612cd9652846ced1ba856337ae6146cdaa85b7d95f3c4de1d5c45f913f6d07208e2165b9ac20bce769e55a88d01565ded8617fad58cb55b5d606c520cbadffe2b81f00de0a27afd5bb33486db1a47a1ca5b7761331024e11bd455658551436b3464519982c73470677fab591e8c47979bd440bb1718528a"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000080)="cfada49eed0300", 0x10) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) preadv(r7, &(0x7f0000000400)=[{&(0x7f0000000340)=""/154, 0x9a}], 0x1, 0xf4, 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r8, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r5, &(0x7f0000000000), 0x4000}]) 4.092495236s ago: executing program 5 (id=7421): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x100000001, 0xf, 0x80000006}, 0x0, 0x0) 3.588824999s ago: executing program 7 (id=7422): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 3.499988086s ago: executing program 5 (id=7423): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) io_uring_enter(0xffffffffffffffff, 0x26c3, 0xdfffeffb, 0x4c, 0x0, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xfb6d, 0x100, 0x400, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 3.195060704s ago: executing program 4 (id=7424): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x5577c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x3220040, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7778e02dedd3074fc93b", @ANYRESHEX, @ANYBLOB=',access=client,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',cache=loose,noextend,cache=mmap,version=9p2000.u,k']) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES16=r5], 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 3.046629284s ago: executing program 8 (id=7425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000280)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = syz_io_uring_setup(0x117, &(0x7f00000005c0)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4) syz_io_uring_submit(r8, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r7, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 2.515355749s ago: executing program 5 (id=7426): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$uac1(0x2, 0xbc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_clone3(&(0x7f0000000300)={0x203008000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x1f}, &(0x7f00000001c0)=""/86, 0x56, &(0x7f0000000240)=""/124, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) waitid(0x3, r0, &(0x7f0000000380), 0x2, &(0x7f0000000400)) socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0) connect$qrtr(r2, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.280018096s ago: executing program 4 (id=7427): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="05fd00000000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="0800050003"], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 285.186803ms ago: executing program 2 (id=7428): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000240), 0x3c000000000, 0x200000) mq_notify(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000004800010000000000ffdbdf2513bd184a", @ANYRES32=0x0, @ANYBLOB="000000000d000100fe8000000000000000000000000000aa14000100fc0100000000000000000000000000ff"], 0x44}, 0x1, 0x0, 0x0, 0x8008001}, 0x20048000) sigaltstack(&(0x7f0000000100)={0x0, 0x1aeba078ee517db6}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r3, 0x200, &(0x7f0000000500)={0x0}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000001c0)) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x43bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) sendmmsg(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000010) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000340)="00be7f5dc1961a5c", 0x8, 0x4040, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) 85.226384ms ago: executing program 2 (id=7429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)={0x3, 0x800000, 0x5, 0x2}) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r2]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x2, 0x5, 0x28}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x3c, r5, 0xb97534d5fe9704cf, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 0s ago: executing program 8 (id=7430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000230000001801000020bd26a350fbf779a18682786c2500000000002020207b1af8ff00000000bfa1000000000000070300fdf7ffffffb702000008000000b7030000fcaaffffff8500000073"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r2, &(0x7f0000000100)=""/67, 0x43) syz_usb_disconnect(r0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000440)={0x1, 0x10000, 0x40, 0x6dd, 0xffffffff, 0xffffff50, 0x2, 0x3, 0xffffff6f, 0x40000009, 0x4, 0x8, &(0x7f0000001140)=[0x6], 0x1, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000300)=@ethtool_coalesce={0xf, 0x7fffffff, 0xfffeffff, 0x6, 0x1, 0x1, 0x1000, 0x40, 0x800, 0x80000001, 0x80, 0x80000000, 0x0, 0x1, 0x1000, 0xa4, 0x3, 0x6, 0x2, 0x6, 0x9, 0x1, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) kernel console output (not intermixed with test programs): 42 using dummy_hcd [ 1714.170441][ T30] audit: type=1400 audit(1754575742.731:2151): avc: denied { mount } for pid=26524 comm="syz-executor" name="/" dev="gadgetfs" ino=6684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1714.193202][ T30] audit: type=1400 audit(1754575742.731:2152): avc: denied { mount } for pid=26524 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1714.215889][ T30] audit: type=1400 audit(1754575742.731:2153): avc: denied { mounton } for pid=26524 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1714.239842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1714.253092][T19977] usb 9-1: Using ep0 maxpacket: 16 [ 1714.262935][T19977] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1714.301724][T19977] usb 9-1: config 7 has an invalid interface number: 71 but max is 0 [ 1714.310270][T19977] usb 9-1: config 7 has no interface number 0 [ 1714.316498][T19977] usb 9-1: config 7 interface 71 altsetting 129 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 1714.338003][T19977] usb 9-1: config 7 interface 71 has no altsetting 0 [ 1714.399200][ T30] audit: type=1400 audit(1754575743.621:2154): avc: denied { watch } for pid=26985 comm="syz.2.5051" path="/436" dev="tmpfs" ino=2330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1714.421698][ C1] vkms_vblank_simulate: vblank timer overrun [ 1714.466653][T19977] usb 9-1: New USB device found, idVendor=07d1, idProduct=3a08, bcdDevice= 2.97 [ 1714.498476][T19977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.506954][T19977] usb 9-1: Product: syz [ 1714.528685][T19977] usb 9-1: Manufacturer: syz [ 1714.970182][T19977] usb 9-1: SerialNumber: syz [ 1715.261793][T19977] usb 9-1: Could not find all expected endpoints [ 1715.294739][T19977] usb 9-1: USB disconnect, device number 42 [ 1718.966026][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1718.966057][ T30] audit: type=1400 audit(1754575748.161:2159): avc: denied { mount } for pid=27065 comm="syz.8.5070" name="/" dev="autofs" ino=111880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1719.303161][ T30] audit: type=1400 audit(1754575748.511:2160): avc: denied { ioctl } for pid=27056 comm="syz.5.5067" path="socket:[111269]" dev="sockfs" ino=111269 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1719.898059][ T30] audit: type=1400 audit(1754575749.111:2161): avc: denied { map } for pid=27078 comm="syz.4.5073" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1720.023608][ T30] audit: type=1400 audit(1754575749.201:2162): avc: denied { unmount } for pid=19406 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1720.132154][T27084] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5074'. [ 1720.371431][ T30] audit: type=1400 audit(1754575749.571:2163): avc: denied { connect } for pid=27080 comm="syz.7.5072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1721.020948][T27095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1721.302851][T27108] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1721.836525][ T30] audit: type=1400 audit(1754575751.061:2164): avc: denied { connect } for pid=27111 comm="syz.4.5080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1723.043175][ T30] audit: type=1400 audit(1754575752.131:2165): avc: denied { ioctl } for pid=27139 comm="syz.7.5089" path="socket:[111974]" dev="sockfs" ino=111974 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1726.629259][ T30] audit: type=1400 audit(1754575755.551:2166): avc: denied { create } for pid=27217 comm="syz.7.5113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1727.522447][T27238] ALSA: mixer_oss: invalid OSS volume 'u' [ 1728.244894][T27233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1728.361111][T27248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5121'. [ 1730.044718][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.051622][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.346651][T27295] ALSA: mixer_oss: invalid OSS volume 'u' [ 1732.097955][ T30] audit: type=1400 audit(1754575761.321:2167): avc: denied { mount } for pid=27299 comm="syz.4.5140" name="/" dev="rpc_pipefs" ino=112964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1732.154896][ T30] audit: type=1400 audit(1754575761.351:2168): avc: denied { setopt } for pid=27299 comm="syz.4.5140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1732.196181][ T30] audit: type=1400 audit(1754575761.351:2169): avc: denied { unmount } for pid=27299 comm="syz.4.5140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1735.720370][T27348] ALSA: mixer_oss: invalid OSS volume 'u' [ 1735.955694][ T30] audit: type=1400 audit(1754575765.171:2170): avc: denied { connect } for pid=27352 comm="syz.7.5155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1737.749226][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1737.900224][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1738.666347][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1738.749582][ T10] usb 5-1: config 7 has an invalid interface number: 71 but max is 0 [ 1738.769245][ T10] usb 5-1: config 7 has no interface number 0 [ 1738.786624][ T10] usb 5-1: config 7 interface 71 has no altsetting 0 [ 1738.795637][ T10] usb 5-1: New USB device found, idVendor=07d1, idProduct=3a08, bcdDevice= 2.97 [ 1738.818043][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.833765][ T10] usb 5-1: Product: syz [ 1738.837985][ T10] usb 5-1: Manufacturer: syz [ 1738.843001][ T10] usb 5-1: SerialNumber: syz [ 1738.859358][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1739.068663][ T10] usb 5-1: Could not find all expected endpoints [ 1739.176546][T27409] ALSA: mixer_oss: invalid OSS volume 'u' [ 1739.192605][ T10] usb 5-1: USB disconnect, device number 80 [ 1739.706121][T27422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1740.969220][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1742.086551][ T30] audit: type=1400 audit(1754575771.311:2171): avc: denied { getopt } for pid=27451 comm="syz.5.5190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1742.143422][ T30] audit: type=1400 audit(1754575771.311:2172): avc: denied { mounton } for pid=27451 comm="syz.5.5190" path="/206/file0" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1745.194627][ T30] audit: type=1400 audit(1754575774.391:2173): avc: denied { read } for pid=27501 comm="syz.7.5209" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1746.345666][T27507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1746.398272][T27507] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1746.552042][T27507] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1747.356010][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1748.886964][T27573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1749.429123][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1751.548994][T17940] Bluetooth: hci1: command 0x0405 tx timeout [ 1752.047504][ T30] audit: type=1400 audit(1754575781.271:2174): avc: denied { create } for pid=27628 comm="syz.2.5247" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1752.318481][ T30] audit: type=1400 audit(1754575781.271:2175): avc: denied { write } for pid=27628 comm="syz.2.5247" name="file0" dev="tmpfs" ino=2578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1752.617290][ T30] audit: type=1400 audit(1754575781.271:2176): avc: denied { open } for pid=27628 comm="syz.2.5247" path="/481/file0" dev="tmpfs" ino=2578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1752.729221][ T30] audit: type=1400 audit(1754575781.271:2177): avc: denied { ioctl } for pid=27628 comm="syz.2.5247" path="/481/file0" dev="tmpfs" ino=2578 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1752.755307][ T30] audit: type=1400 audit(1754575781.811:2178): avc: denied { unlink } for pid=18262 comm="syz-executor" name="file0" dev="tmpfs" ino=2578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1752.767355][T13370] libceph: connect (1)[c::]:6789 error -101 [ 1752.861409][T13370] libceph: mon0 (1)[c::]:6789 connect error [ 1753.178557][T13370] libceph: connect (1)[c::]:6789 error -101 [ 1753.188307][T13370] libceph: mon0 (1)[c::]:6789 connect error [ 1753.580401][T17940] Bluetooth: hci1: command 0x0405 tx timeout [ 1753.622663][T27632] ceph: No mds server is up or the cluster is laggy [ 1755.661133][T17940] Bluetooth: hci1: command 0x0405 tx timeout [ 1755.702249][T27665] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5258'. [ 1756.138783][T27675] ceph: No mds server is up or the cluster is laggy [ 1758.429268][T19977] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1758.599167][T19977] usb 5-1: Using ep0 maxpacket: 32 [ 1758.632243][T19977] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1758.666398][T19977] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1758.686773][T19977] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1758.737814][T19977] usb 5-1: Product: syz [ 1758.761744][T19977] usb 5-1: Manufacturer: syz [ 1758.780609][T19977] usb 5-1: SerialNumber: syz [ 1758.826409][T19977] usb 5-1: config 0 descriptor?? [ 1758.853456][T27720] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1759.143941][T27729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1759.175420][T27729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1759.945453][T13370] usb 5-1: USB disconnect, device number 81 [ 1760.282374][ T30] audit: type=1400 audit(1754575789.511:2179): avc: denied { ioctl } for pid=27719 comm="syz.4.5278" path="socket:[114274]" dev="sockfs" ino=114274 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1762.146957][T27771] overlayfs: failed to resolve './file0': -2 [ 1763.949944][T27806] overlayfs: failed to resolve './file0': -2 [ 1765.621890][T19977] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1765.889465][T19977] usb 5-1: Using ep0 maxpacket: 16 [ 1766.224826][T19977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1766.398477][T19977] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1766.456448][T19977] usb 5-1: can't read configurations, error -71 [ 1768.886070][T27867] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1769.710281][T27915] ALSA: mixer_oss: invalid OSS volume 'u' [ 1770.159635][T17940] Bluetooth: hci1: command 0x0405 tx timeout [ 1771.537984][T27930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1772.631824][T27976] ALSA: mixer_oss: invalid OSS volume 'u' [ 1772.789209][T17940] Bluetooth: hci1: command 0x0405 tx timeout [ 1773.363549][T27987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1773.780303][T27990] ceph: No mds server is up or the cluster is laggy [ 1775.290225][ T5923] IPVS: starting estimator thread 0... [ 1775.339542][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1775.409151][T28027] IPVS: using max 42 ests per chain, 100800 per kthread [ 1775.610187][T28030] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5382'. [ 1775.758297][T28037] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5383'. [ 1776.715609][T28058] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5392'. [ 1777.005321][T28066] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5395'. [ 1777.439539][T28076] overlayfs: missing 'workdir' [ 1778.007232][T28081] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1778.818291][T28099] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5408'. [ 1779.268665][T28107] overlayfs: missing 'workdir' [ 1779.685285][T17940] Bluetooth: hci1: command 0x0405 tx timeout [ 1780.506714][T28123] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5417'. [ 1781.182792][T28145] ALSA: mixer_oss: invalid OSS volume 'u' [ 1783.169146][ T5932] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1783.339357][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 1783.518468][ T5932] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1783.609807][ T5932] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1783.654470][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1783.674458][ T5932] usb 6-1: Product: syz [ 1783.683244][ T5932] usb 6-1: Manufacturer: syz [ 1783.687923][ T5932] usb 6-1: SerialNumber: syz [ 1783.696595][ T5932] usb 6-1: config 0 descriptor?? [ 1783.704234][T28178] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1783.761808][T28196] ALSA: mixer_oss: invalid OSS volume 'u' [ 1784.448600][T28212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.457419][T28212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.662124][T13370] usb 6-1: USB disconnect, device number 37 [ 1785.049149][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1787.102508][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1787.187967][T28257] ALSA: mixer_oss: invalid OSS volume 'u' [ 1789.674905][T28298] overlayfs: missing 'lowerdir' [ 1791.183981][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.193721][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.045980][T28335] overlayfs: missing 'lowerdir' [ 1793.476909][T28374] pim6reg1: entered promiscuous mode [ 1793.484797][T28374] pim6reg1: entered allmulticast mode [ 1797.593454][ T30] audit: type=1400 audit(1754575826.821:2180): avc: denied { relabelfrom } for pid=28461 comm="syz.4.5534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1797.618395][ T30] audit: type=1400 audit(1754575826.821:2181): avc: denied { relabelto } for pid=28461 comm="syz.4.5534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1799.689020][T28505] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1800.371561][T28529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5558'. [ 1800.568893][T28535] pim6reg1: entered promiscuous mode [ 1800.574558][T28535] pim6reg1: entered allmulticast mode [ 1801.119720][T28552] overlayfs: missing 'lowerdir' [ 1801.202308][T28537] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1801.787184][T28570] ALSA: mixer_oss: invalid OSS volume 'u' [ 1803.099127][T17940] Bluetooth: hci1: command 0x0405 tx timeout [ 1807.579774][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1809.246473][T28703] syzkaller0: entered promiscuous mode [ 1809.267310][T28703] syzkaller0: entered allmulticast mode [ 1810.313204][T28721] ALSA: mixer_oss: invalid OSS volume 'u' [ 1810.607864][T28729] netlink: 'syz.2.5622': attribute type 72 has an invalid length. [ 1810.633317][T28729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5622'. [ 1810.746770][T28733] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5621'. [ 1811.635224][T28740] cgroup: Invalid name [ 1814.619710][T28800] kvm_intel: kvm [28799]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x2 [ 1814.915768][T28820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5651'. [ 1815.768674][ T30] audit: type=1400 audit(1754575844.991:2182): avc: denied { read } for pid=28841 comm="syz.2.5658" name="file0" dev="tmpfs" ino=3017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1816.351602][T28855] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5663'. [ 1819.043954][T28916] input: syz0 as /devices/virtual/input/input58 [ 1819.136230][T22113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.195873][T22113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.552618][T28924] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5688'. [ 1819.564009][T28924] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5688'. [ 1820.382387][T28939] ALSA: mixer_oss: invalid OSS volume 'u' [ 1821.744789][T28974] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5702'. [ 1822.006150][ T30] audit: type=1400 audit(1754575851.221:2183): avc: denied { map } for pid=28985 comm="syz.7.5708" path="socket:[118667]" dev="sockfs" ino=118667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1822.539213][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1824.757024][T29062] kvm_intel: kvm [29061]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x2 [ 1827.579236][ T5932] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1827.620393][T29113] kvm_intel: kvm [29112]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x2 [ 1827.743391][ T5932] usb 6-1: config 1 interface 0 altsetting 141 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 1827.772076][ T5932] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1827.801330][ T5932] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.40 [ 1827.815299][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.841361][ T5932] usb 6-1: Product: syz [ 1827.857395][ T5932] usb 6-1: Manufacturer: syz [ 1827.869774][T22111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1827.870309][ T5932] usb 6-1: SerialNumber: syz [ 1827.877578][T22111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1828.309392][ T5932] usbhid 6-1:1.0: can't add hid device: -71 [ 1828.315366][ T5932] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1828.352422][ T5932] usb 6-1: USB disconnect, device number 38 [ 1829.717039][T29157] netlink: 'syz.8.5766': attribute type 29 has an invalid length. [ 1829.737826][T29157] netlink: 'syz.8.5766': attribute type 29 has an invalid length. [ 1829.992836][T29161] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1831.376245][T29186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1831.383592][T29186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.441830][T29186] bond0: left promiscuous mode [ 1831.460830][T29186] bond_slave_0: left promiscuous mode [ 1831.480914][T29186] bond_slave_1: left promiscuous mode [ 1831.505764][T29186] batadv0: left promiscuous mode [ 1831.978426][T29218] ALSA: mixer_oss: invalid OSS volume 'u' [ 1832.065568][T29186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1832.082316][T29186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1832.682849][T29186] geneve2: left promiscuous mode [ 1832.709650][T29186] gtp0: left promiscuous mode [ 1832.779746][T29229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.787137][T29229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1832.841374][T29229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1832.852440][T29229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1833.110982][T29230] vlan2: entered promiscuous mode [ 1833.116225][T29230] vlan2: entered allmulticast mode [ 1833.554328][T29230] hsr_slave_1: entered allmulticast mode [ 1833.591386][T29169] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.636083][T29169] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.835374][T29169] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.848226][T29169] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.276560][T29169] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.287897][T29169] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.297415][T29169] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.329135][T29169] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.976848][ T30] audit: type=1400 audit(1754575864.201:2184): avc: denied { unmount } for pid=18262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1835.458183][T29271] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1835.520506][T29280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1835.547801][T29216] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1835.682496][T29216] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1835.772301][T29280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1835.828609][T22113] wlan1: authenticated [ 1835.844607][ T2976] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1835.909524][T29280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1835.929562][ T2976] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 1835.973580][ T2976] wlan1: associated [ 1836.126329][T29291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1836.191463][T29291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1836.243609][T29291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1836.247960][T29296] syz_tun: entered promiscuous mode [ 1836.262041][T29296] batadv_slave_0: entered promiscuous mode [ 1836.931757][ T30] audit: type=1400 audit(1754575866.161:2185): avc: denied { write } for pid=29325 comm="syz.4.5810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1837.114733][T29328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5810'. [ 1837.148369][T29328] netlink: 'syz.4.5810': attribute type 3 has an invalid length. [ 1837.190751][T29327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5810'. [ 1837.240551][T29327] netlink: 'syz.4.5810': attribute type 3 has an invalid length. [ 1837.721439][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1838.235450][ T2976] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 1838.658350][T29212] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1838.829105][T29212] usb 9-1: Using ep0 maxpacket: 32 [ 1838.840552][T29212] usb 9-1: config 150 has too many interfaces: 178, using maximum allowed: 32 [ 1838.849437][T29212] usb 9-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.860000][T29212] usb 9-1: config 150 has 0 interfaces, different from the descriptor's value: 178 [ 1838.874557][T29212] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1838.897297][T29212] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.906020][T29212] usb 9-1: Product: syz [ 1838.912809][T29212] usb 9-1: Manufacturer: syz [ 1838.917393][T29212] usb 9-1: SerialNumber: syz [ 1839.207499][ T30] audit: type=1400 audit(1754575868.431:2186): avc: denied { map } for pid=29375 comm="syz.2.5825" path="/dev/sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1839.269182][ T30] audit: type=1400 audit(1754575868.431:2187): avc: denied { execute } for pid=29375 comm="syz.2.5825" path="/dev/sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1839.919486][T29399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5829'. [ 1841.339472][T29216] usb 9-1: USB disconnect, device number 43 [ 1841.611998][T17940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1841.625185][T17940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1841.634341][T17940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1841.646254][T17940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1841.653779][T17940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1841.700070][T29431] ptrace attach of "./syz-executor exec"[23301] was attempted by "./syz-executor exec"[29431] [ 1842.659131][T29212] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1842.811926][T29212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.831259][T29212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.864142][T29429] chnl_net:caif_netlink_parms(): no params data found [ 1842.890374][T29212] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1842.915857][T29212] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1842.935192][T29212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.960848][T29212] usb 5-1: config 0 descriptor?? [ 1842.973864][T29349] Set syz1 is full, maxelem 65536 reached [ 1843.418357][T29459] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5844'. [ 1843.688688][T29212] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1843.801980][T29212] usb 5-1: USB disconnect, device number 84 [ 1843.962894][T29461] fido_id[29461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1843.980131][T29429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1843.987506][T29429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.124863][T29429] bridge_slave_0: entered allmulticast mode [ 1844.221220][T29429] bridge_slave_0: entered promiscuous mode [ 1844.239972][T29169] bridge_slave_1: left allmulticast mode [ 1844.260361][T29169] bridge_slave_1: left promiscuous mode [ 1844.312648][T29169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.379356][T26525] Bluetooth: hci4: command tx timeout [ 1844.392130][T29169] bridge_slave_0: left allmulticast mode [ 1844.403610][T29169] bridge_slave_0: left promiscuous mode [ 1844.428411][T29169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.074726][T29169] dvmrp0 (unregistering): left allmulticast mode [ 1845.299939][T29493] kvm_intel: kvm [29490]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x2 [ 1846.459141][T26525] Bluetooth: hci4: command tx timeout [ 1847.249444][T29169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1847.269940][T29169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1847.285467][T29169] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1847.295185][T29169] bond0 (unregistering): Released all slaves [ 1847.309618][T29429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1847.323525][T29429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.331072][T29429] bridge_slave_1: entered allmulticast mode [ 1847.341848][T29429] bridge_slave_1: entered promiscuous mode [ 1847.624213][T29429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1847.692516][T29429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1847.785012][T29429] team0: Port device team_slave_0 added [ 1847.837431][T29169] hsr_slave_0: left promiscuous mode [ 1847.848777][T29169] hsr_slave_1: left promiscuous mode [ 1847.859160][T29169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1847.897627][T29169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1848.118312][T29522] syz.7.5858 (29522): drop_caches: 2 [ 1848.125454][T29522] syz.7.5858 (29522): drop_caches: 2 [ 1848.542941][T17940] Bluetooth: hci4: command tx timeout [ 1848.601061][T29216] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1848.859383][T29216] usb 6-1: Using ep0 maxpacket: 32 [ 1848.868310][T29216] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1848.884353][T29216] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1848.899817][T29216] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1849.023073][T29216] usb 6-1: Product: syz [ 1849.027245][T29216] usb 6-1: Manufacturer: syz [ 1849.034318][T29216] usb 6-1: SerialNumber: syz [ 1850.619110][T17940] Bluetooth: hci4: command 0x0419 tx timeout [ 1851.159967][T29216] usb 6-1: config 0 descriptor?? [ 1851.183851][T29543] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1851.339506][T29212] usb 6-1: USB disconnect, device number 39 [ 1851.461790][T29563] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5868'. [ 1851.573504][T29169] team0 (unregistering): Port device team_slave_1 removed [ 1851.700316][T29169] team0 (unregistering): Port device team_slave_0 removed [ 1851.860725][T29571] ALSA: mixer_oss: invalid OSS volume 'u' [ 1852.625969][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.638165][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1852.699323][T17940] Bluetooth: hci4: command 0x0419 tx timeout [ 1853.237546][T29429] team0: Port device team_slave_1 added [ 1853.373977][T29429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1853.391376][T29429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1853.468005][T29429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1853.647167][T29429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1853.672488][T29429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1853.726672][T29429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1857.528129][T29623] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5884'. [ 1857.799665][T29627] bpq0: left allmulticast mode [ 1857.886524][T29429] hsr_slave_0: entered promiscuous mode [ 1857.989895][T29429] hsr_slave_1: entered promiscuous mode [ 1858.366258][T29641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1858.480294][T29641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1858.508464][T29641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1858.674842][T29649] kvm_intel: kvm [29647]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x2 [ 1860.521108][T29693] ptrace attach of "./syz-executor exec"[19406] was attempted by "./syz-executor exec"[29693] [ 1862.691782][T29429] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1862.739681][T29429] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1862.791670][T29429] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1862.827293][T29429] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1863.065209][T29429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1863.132564][T29429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1863.144299][T29713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5899'. [ 1863.183161][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.190288][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1863.276337][T22116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.283476][T22116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1863.775966][T29429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1863.954412][T29736] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5904'. [ 1864.072538][T29429] veth0_vlan: entered promiscuous mode [ 1864.073483][T29741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1864.106308][T29429] veth1_vlan: entered promiscuous mode [ 1864.147579][T29741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1864.150645][T29429] veth0_macvtap: entered promiscuous mode [ 1864.164990][T29741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1864.191233][T29429] veth1_macvtap: entered promiscuous mode [ 1864.220605][T29429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1864.237289][T29429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1864.255056][ T1091] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.282939][ T1091] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.317230][T22107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.357943][T22107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.493211][T22111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1864.699461][T22111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1864.862708][T29169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1864.910065][T29169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1866.793666][T29803] ptrace attach of "./syz-executor exec"[19406] was attempted by "./syz-executor exec"[29803] [ 1867.239100][T29795] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5921'. [ 1869.195803][T17940] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1872.849215][T18261] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1873.258229][T18261] usb 3-1: Using ep0 maxpacket: 32 [ 1873.275286][T18261] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1873.374868][T18261] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1873.390823][T18261] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1873.417236][T18261] usb 3-1: Product: syz [ 1873.425167][T18261] usb 3-1: Manufacturer: syz [ 1873.430623][T18261] usb 3-1: SerialNumber: syz [ 1873.438564][T18261] usb 3-1: config 0 descriptor?? [ 1873.468870][T29923] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1873.736944][T29948] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1873.744756][T29948] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1873.756442][T29948] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1873.767815][T29948] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1873.791381][T29923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.800555][T29923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.811994][T29226] usb 3-1: USB disconnect, device number 66 [ 1875.509182][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1875.819099][T26525] Bluetooth: hci4: command 0x0419 tx timeout [ 1876.100920][T30018] autofs: Bad value for 'fd' [ 1876.576432][T29216] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1876.843521][T29216] usb 9-1: Using ep0 maxpacket: 32 [ 1876.914575][T29216] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1876.927052][T29216] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1876.943500][T29216] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1876.954183][T29216] usb 9-1: Product: syz [ 1876.958434][T29216] usb 9-1: Manufacturer: syz [ 1876.964296][T29216] usb 9-1: SerialNumber: syz [ 1876.967884][T30047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1876.981418][T29216] usb 9-1: config 0 descriptor?? [ 1876.990811][T30026] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1877.063074][T30047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1877.074197][T30047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1877.243242][T30026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.252148][T30026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.265442][T18261] usb 9-1: USB disconnect, device number 44 [ 1877.899440][T26525] Bluetooth: hci4: command 0x0419 tx timeout [ 1878.423812][T30096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1878.497879][T30099] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6014'. [ 1878.513394][T30088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1878.524522][T30088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1878.539698][T30099] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6014'. [ 1878.671388][T30103] autofs: Bad value for 'fd' [ 1879.745108][T30135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6028'. [ 1879.755394][T30135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6028'. [ 1879.999068][T26525] Bluetooth: hci4: command 0x0419 tx timeout [ 1880.716662][T30173] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6042'. [ 1880.744967][T30173] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6042'. [ 1882.056990][T29226] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1883.213152][T29226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1883.228403][T29226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.260457][T29226] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1883.409568][T29226] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1883.445984][T29226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.531200][T29226] usb 6-1: config 0 descriptor?? [ 1883.626958][T17940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1883.636676][T17940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1883.644361][T17940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1883.654590][T17940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1883.662064][T17940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1883.931480][T22107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.003326][T29226] usbhid 6-1:0.0: can't add hid device: -71 [ 1884.025610][T29226] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1884.063112][T29226] usb 6-1: USB disconnect, device number 40 [ 1884.077316][T22107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.318800][T22107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.442255][T22107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.508175][T30231] chnl_net:caif_netlink_parms(): no params data found [ 1884.835074][T30248] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6068'. [ 1884.877962][T30248] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6068'. [ 1885.008448][T30231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1885.023781][T30231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1885.031921][T30231] bridge_slave_0: entered allmulticast mode [ 1885.064912][T30231] bridge_slave_0: entered promiscuous mode [ 1885.109768][T30251] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1885.113515][T30264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6073'. [ 1885.123480][T30251] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1885.126047][T30264] netlink: 'syz.5.6073': attribute type 3 has an invalid length. [ 1885.159866][T30251] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1885.167800][T30251] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1885.186378][T30251] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1885.189580][T30231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1885.221249][T30231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1885.228877][T30231] bridge_slave_1: entered allmulticast mode [ 1885.236694][T30231] bridge_slave_1: entered promiscuous mode [ 1885.423425][T30266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6074'. [ 1885.459919][T30231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1885.473311][T22107] bridge_slave_1: left allmulticast mode [ 1885.480951][T22107] bridge_slave_1: left promiscuous mode [ 1885.500398][T22107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1885.532431][T22107] bridge_slave_0: left allmulticast mode [ 1885.539452][T22107] bridge_slave_0: left promiscuous mode [ 1885.553348][T22107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.824841][T30306] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6082'. [ 1886.876298][T30309] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6082'. [ 1886.886905][T22107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1886.928117][T22107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1886.992128][T22107] bond0 (unregistering): Released all slaves [ 1887.042743][T22107] bond1 (unregistering): Released all slaves [ 1887.062823][T30231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1887.174345][T30231] team0: Port device team_slave_0 added [ 1887.179287][T17940] Bluetooth: hci2: command 0x041b tx timeout [ 1887.182542][T30231] team0: Port device team_slave_1 added [ 1887.186332][T17940] Bluetooth: hci4: command 0x0419 tx timeout [ 1887.191659][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1887.215860][T30315] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6085'. [ 1887.246471][T30315] netlink: 'syz.8.6085': attribute type 3 has an invalid length. [ 1887.442961][T30231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1887.467555][T30231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1887.549273][T30231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1887.642815][T30231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1887.669329][T30231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1887.697031][T30231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1887.853718][T30338] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6091'. [ 1887.888092][T22107] hsr_slave_0: left promiscuous mode [ 1887.914345][T22107] hsr_slave_1: left promiscuous mode [ 1887.934182][T22107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1887.961938][T22107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1887.974813][T22107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1887.991858][T22107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1888.023137][T22107] veth1_macvtap: left promiscuous mode [ 1888.039451][T22107] veth0_macvtap: left promiscuous mode [ 1888.065082][T22107] veth1_vlan: left promiscuous mode [ 1889.262116][T26525] Bluetooth: hci2: command 0x041b tx timeout [ 1890.193686][T22107] team0 (unregistering): Port device team_slave_1 removed [ 1890.225760][T22107] team0 (unregistering): Port device team_slave_0 removed [ 1890.277793][T30393] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6102'. [ 1890.288658][T30393] netlink: 'syz.8.6102': attribute type 3 has an invalid length. [ 1891.366659][T26525] Bluetooth: hci2: command 0x041b tx timeout [ 1892.395981][T30405] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6107'. [ 1892.469959][ T5932] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1892.603115][T30231] hsr_slave_0: entered promiscuous mode [ 1892.614808][T30231] hsr_slave_1: entered promiscuous mode [ 1892.622063][ T5932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1892.633386][ T5932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1892.643393][ T5932] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1892.656778][T30231] debugfs: 'hsr0' already exists in 'hsr' [ 1892.662558][T30231] Cannot create hsr debugfs directory [ 1892.668186][ T5932] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1892.738123][ T5932] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.823960][ T5932] usb 9-1: config 0 descriptor?? [ 1893.257899][ T5932] usbhid 9-1:0.0: can't add hid device: -71 [ 1893.269691][ T5932] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1893.419093][T26525] Bluetooth: hci2: command 0x041b tx timeout [ 1893.453796][ T5932] usb 9-1: USB disconnect, device number 45 [ 1894.247162][T30231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1894.393904][T30231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1894.880645][T30231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1894.924960][T30231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1895.355899][T30231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1895.410830][T30231] 8021q: adding VLAN 0 to HW filter on device team0 [ 1895.453160][T22107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1895.460236][T22107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1895.500136][T26525] Bluetooth: hci2: command 0x041b tx timeout [ 1896.269924][T22111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.277027][T22111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1897.199128][T29226] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1897.256888][T30231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1897.473591][T29226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1897.484631][T29226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1897.494956][T29226] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1897.510059][T29226] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1897.519984][T29226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.585609][T29226] usb 3-1: config 0 descriptor?? [ 1897.599130][T26525] Bluetooth: hci2: command 0x041b tx timeout [ 1898.088553][T29226] usbhid 3-1:0.0: can't add hid device: -71 [ 1898.105603][T29226] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1898.158695][T30231] veth0_vlan: entered promiscuous mode [ 1898.173498][T30231] veth1_vlan: entered promiscuous mode [ 1898.204923][T30231] veth0_macvtap: entered promiscuous mode [ 1898.219466][T29226] usb 3-1: USB disconnect, device number 67 [ 1898.240859][T30231] veth1_macvtap: entered promiscuous mode [ 1898.258228][T30231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1898.323499][T30231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1898.373011][T22107] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.395876][T22107] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.425840][T22107] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.445623][T22107] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.256065][T22113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1899.294796][T22113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.386475][T22113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1899.416340][T22113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1900.345396][T30581] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6135'. [ 1900.396074][T30567] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1900.490673][T30585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6138'. [ 1900.513929][T30567] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1900.521165][T30585] netlink: 'syz.4.6138': attribute type 3 has an invalid length. [ 1900.539710][T30567] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1901.401133][T30601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6142'. [ 1902.299156][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1902.539162][T12936] Bluetooth: hci4: command 0x0419 tx timeout [ 1902.619151][T12936] Bluetooth: hci2: command 0x041b tx timeout [ 1902.700815][T26525] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1902.720904][T26525] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1902.739681][T26525] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1902.783460][T26525] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1902.802208][T22113] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.822581][T26525] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1903.205345][T22113] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.313131][T29208] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1903.402088][T22113] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.509279][T29208] usb 3-1: Using ep0 maxpacket: 32 [ 1903.533912][T29208] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1903.592626][T29208] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1903.644441][T29208] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1903.685878][T29208] usb 3-1: Product: syz [ 1903.687578][T22113] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.690760][T29208] usb 3-1: Manufacturer: syz [ 1903.917681][T29208] usb 3-1: SerialNumber: syz [ 1903.927632][T29208] usb 3-1: config 0 descriptor?? [ 1903.939721][T30629] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1904.781040][T30615] chnl_net:caif_netlink_parms(): no params data found [ 1904.783196][T30664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.816214][T30664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1904.856261][T30670] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6154'. [ 1904.884668][T26525] Bluetooth: hci0: command tx timeout [ 1905.091991][T29216] usb 3-1: USB disconnect, device number 68 [ 1905.485275][T30692] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6158'. [ 1905.528018][T30615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1905.550834][T30615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.564344][T30615] bridge_slave_0: entered allmulticast mode [ 1905.577820][T30615] bridge_slave_0: entered promiscuous mode [ 1905.600330][T22113] bridge_slave_1: left allmulticast mode [ 1905.622760][T22113] bridge_slave_1: left promiscuous mode [ 1905.636055][T22113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.657928][T22113] bridge_slave_0: left allmulticast mode [ 1905.671245][T22113] bridge_slave_0: left promiscuous mode [ 1905.717505][T22113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.832046][T22113] ip6gretap1: left allmulticast mode [ 1905.844062][T22113] ip6gretap1: left promiscuous mode [ 1905.854769][T22113] bridge1: port 1(ip6gretap1) entered disabled state [ 1906.949942][T26525] Bluetooth: hci0: command tx timeout [ 1908.369174][T22113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1908.396790][T22113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1908.411447][T22113] bond0 (unregistering): Released all slaves [ 1908.437797][T22113] bond1 (unregistering): Released all slaves [ 1908.464581][T30615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.475214][T30615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1908.484403][T30615] bridge_slave_1: entered allmulticast mode [ 1908.506427][T30615] bridge_slave_1: entered promiscuous mode [ 1908.904805][T30615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1908.956635][T30615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1909.019118][T26525] Bluetooth: hci0: command tx timeout [ 1909.294958][T30615] team0: Port device team_slave_0 added [ 1911.049218][T22113] hsr_slave_0: left promiscuous mode [ 1911.069180][T22113] hsr_slave_1: left promiscuous mode [ 1911.076410][T22113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1911.100366][T26525] Bluetooth: hci0: command tx timeout [ 1911.114566][T22113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1911.183804][T22113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1911.238927][T22113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1911.330063][T22113] veth1_macvtap: left promiscuous mode [ 1911.339743][T22113] veth0_macvtap: left promiscuous mode [ 1911.345336][T22113] veth1_vlan: left promiscuous mode [ 1911.374490][T22113] veth0_vlan: left promiscuous mode [ 1911.414466][T30804] No control pipe specified [ 1911.991259][T30817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6186'. [ 1912.442752][T22113] team0 (unregistering): Port device team_slave_1 removed [ 1912.473337][T22113] team0 (unregistering): Port device team_slave_0 removed [ 1912.759815][T30615] team0: Port device team_slave_1 added [ 1912.806065][T30817] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1912.816357][T30817] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1912.826665][T30817] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1912.829056][ T30] audit: type=1400 audit(1754575942.061:2188): avc: denied { firmware_load } for pid=30812 comm="syz.7.6186" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1912.899677][T30615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1912.912062][T30615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1912.940435][T30615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1912.954705][T30615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1912.961658][T30615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1912.996107][T30615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1913.035449][T30825] netlink: 'syz.2.6187': attribute type 4 has an invalid length. [ 1913.398539][T30615] hsr_slave_0: entered promiscuous mode [ 1913.433405][T30615] hsr_slave_1: entered promiscuous mode [ 1913.444080][T30615] debugfs: 'hsr0' already exists in 'hsr' [ 1913.450554][T30615] Cannot create hsr debugfs directory [ 1913.648617][T30849] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6197'. [ 1913.714477][T30849] netlink: 'syz.7.6197': attribute type 3 has an invalid length. [ 1914.063580][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.073461][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.606268][T30912] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6210'. [ 1915.615690][T30910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6209'. [ 1915.629379][T30910] netlink: 'syz.7.6209': attribute type 3 has an invalid length. [ 1916.507634][T30615] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1916.524375][T30925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6213'. [ 1916.576817][T30615] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1916.601065][T30925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6213'. [ 1916.602312][T30615] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1916.658490][T30615] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1916.989325][T30615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1917.010187][T30615] 8021q: adding VLAN 0 to HW filter on device team0 [ 1917.046117][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.053243][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1917.134380][T13787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1917.141485][T13787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1917.243263][T30955] netlink: 'syz.2.6218': attribute type 4 has an invalid length. [ 1917.691862][T30970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6222'. [ 1917.705346][T30970] netlink: 'syz.2.6222': attribute type 3 has an invalid length. [ 1917.785016][T30615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1918.107783][T30993] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6223'. [ 1918.171631][T30615] veth0_vlan: entered promiscuous mode [ 1918.217198][T30615] veth1_vlan: entered promiscuous mode [ 1918.409222][T30615] veth0_macvtap: entered promiscuous mode [ 1918.472605][T30615] veth1_macvtap: entered promiscuous mode [ 1918.622276][T30615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1918.647418][T30615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1918.666513][ T1091] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1918.680591][ T1091] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1918.689730][ T1091] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1918.699329][ T1091] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1918.717316][T31004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6226'. [ 1918.728127][T31004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6226'. [ 1918.748046][T31004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6226'. [ 1918.832387][T22107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1918.879880][T22107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1918.974564][T22107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.001453][T22107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.860003][T31045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6238'. [ 1920.939124][T31045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6238'. [ 1920.978439][T31045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6238'. [ 1921.004210][T31047] syz.5.6237 (31047): drop_caches: 2 [ 1921.023180][T31047] syz.5.6237 (31047): drop_caches: 2 [ 1921.274896][T31049] autofs: Unknown parameter '0x0000000000000004' [ 1921.494067][T31058] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6239'. [ 1921.809152][T29212] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1921.989069][T29212] usb 9-1: device descriptor read/64, error -71 [ 1922.229084][T29212] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1922.631947][T29212] usb 9-1: device descriptor read/64, error -71 [ 1923.868759][T29212] usb usb9-port1: attempt power cycle [ 1924.968364][T31086] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6250'. [ 1925.009165][T31086] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6250'. [ 1925.071565][T31086] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6250'. [ 1925.110082][T29212] usb usb9-port1: Cannot enable. Maybe the USB cable is bad? [ 1925.269077][T29212] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1925.319590][T29212] usb 9-1: Using ep0 maxpacket: 32 [ 1925.355666][T29212] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1925.518214][T29212] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1925.527924][T31098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1925.537729][T31098] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1925.554307][T31098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1925.561765][T31098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1925.577811][T31098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1925.578923][T29212] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1925.607485][T31098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1925.663130][T29212] usb 9-1: Product: syz [ 1925.676021][T29212] usb 9-1: Manufacturer: syz [ 1925.696227][T29212] usb 9-1: SerialNumber: syz [ 1925.857172][T29212] usb 9-1: config 0 descriptor?? [ 1925.873800][T31088] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1926.019468][T31112] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6258'. [ 1926.162455][T31116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.174269][T31116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.531656][T29216] usb 9-1: USB disconnect, device number 49 [ 1927.775522][T26525] Bluetooth: hci1: command 0x0405 tx timeout [ 1927.782745][T26525] Bluetooth: hci0: command 0x0c1a tx timeout [ 1927.788764][T26525] Bluetooth: hci2: command 0x041b tx timeout [ 1927.794933][T26525] Bluetooth: hci4: command 0x0419 tx timeout [ 1928.963450][T31147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1928.974642][T31147] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1928.989544][T31147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1928.995569][T31147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1929.007876][T31153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1929.106789][T31153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1930.509159][T29211] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1930.897878][T12936] Bluetooth: hci1: command 0x0405 tx timeout [ 1931.029179][T26525] Bluetooth: hci2: command 0x041b tx timeout [ 1931.035318][T26525] Bluetooth: hci4: command 0x0419 tx timeout [ 1931.041500][T12936] Bluetooth: hci0: command 0x0c1a tx timeout [ 1931.069043][T29211] usb 3-1: Using ep0 maxpacket: 32 [ 1931.075715][T29211] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1931.087644][T29211] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1931.096893][T29211] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1931.108187][T29211] usb 3-1: Product: syz [ 1931.115154][T29211] usb 3-1: Manufacturer: syz [ 1931.152264][T29211] usb 3-1: SerialNumber: syz [ 1931.238199][T29211] usb 3-1: config 0 descriptor?? [ 1931.292133][T31174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1931.581075][T31197] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6284'. [ 1932.030615][T31202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1932.050122][T31202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.228347][T29226] usb 3-1: USB disconnect, device number 69 [ 1932.664215][T31220] ptrace attach of "./syz-executor exec"[30231] was attempted by "./syz-executor exec"[31220] [ 1933.130121][T31182] Bluetooth: hci0: command 0x0c1a tx timeout [ 1937.049073][T29226] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1937.339575][T29226] usb 9-1: Using ep0 maxpacket: 32 [ 1937.469269][T29226] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1937.488788][T29226] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1937.540420][T29226] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1937.566090][T29226] usb 9-1: Product: syz [ 1937.578170][T29226] usb 9-1: Manufacturer: syz [ 1937.584577][T29226] usb 9-1: SerialNumber: syz [ 1937.596989][T29226] usb 9-1: config 0 descriptor?? [ 1937.607781][T31267] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1938.363655][T31267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1938.375520][T31267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1938.512549][T29212] usb 9-1: USB disconnect, device number 50 [ 1939.778196][T31325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6318'. [ 1941.674687][T31363] autofs: Unknown parameter 'fd0x0000000000000004' [ 1942.310910][T31369] syz.4.6331 (31369): drop_caches: 2 [ 1942.336709][T31369] syz.4.6331 (31369): drop_caches: 2 [ 1942.523152][T31382] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6334'. [ 1942.909108][T29208] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1942.924954][T31395] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6339'. [ 1943.059068][T29208] usb 9-1: Using ep0 maxpacket: 8 [ 1943.122624][T31400] ALSA: mixer_oss: invalid OSS volume 'u' [ 1943.221284][T29208] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1943.229673][T29208] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1943.241432][T29208] usb 9-1: config 179 has no interface number 0 [ 1943.249311][T29208] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1943.287783][T29208] usb 9-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1943.333977][T29208] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1943.355997][T29208] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.628454][T31385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.637058][T31385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.651680][T29216] usb 9-1: USB disconnect, device number 51 [ 1943.982331][T31414] syz.5.6346 (31414): drop_caches: 2 [ 1943.991122][T31414] syz.5.6346 (31414): drop_caches: 2 [ 1945.410193][T31437] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6352'. [ 1952.215328][T31532] syz.4.6379 (31532): drop_caches: 2 [ 1952.250755][T31532] syz.4.6379 (31532): drop_caches: 2 [ 1953.419786][T31182] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1954.439072][T29216] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1954.699147][T29216] usb 6-1: Using ep0 maxpacket: 8 [ 1954.721277][T29216] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1954.738399][T29216] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1954.783252][T29216] usb 6-1: config 179 has no interface number 0 [ 1954.863770][T29216] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1954.885046][T29216] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1955.020153][T29216] usb 6-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1955.048890][T29216] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1955.080398][T29216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1955.227600][T31558] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1955.445456][T31558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1955.566776][T31558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1955.584850][T29226] usb 6-1: USB disconnect, device number 41 [ 1956.416183][T31606] syz.4.6400 (31606): drop_caches: 2 [ 1956.455516][T31606] syz.4.6400 (31606): drop_caches: 2 [ 1959.091677][T31667] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6414'. [ 1961.730996][T31704] No control pipe specified [ 1962.741610][T31726] syz.4.6430 (31726): drop_caches: 2 [ 1962.807449][T31726] syz.4.6430 (31726): drop_caches: 2 [ 1963.084019][T31182] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1965.702969][T31777] syz.8.6444 (31777): drop_caches: 2 [ 1965.709077][T31777] syz.8.6444 (31777): drop_caches: 2 [ 1965.873480][T31780] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6446'. [ 1967.785808][T31816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6454'. [ 1967.795302][T31816] netlink: 'syz.4.6454': attribute type 3 has an invalid length. [ 1968.716293][T31830] syz.5.6457 (31830): drop_caches: 2 [ 1968.722014][T31830] syz.5.6457 (31830): drop_caches: 2 [ 1969.429121][T29211] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1969.559411][T31849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6465'. [ 1969.569131][T31849] netlink: 'syz.5.6465': attribute type 3 has an invalid length. [ 1969.589451][T29211] usb 3-1: Using ep0 maxpacket: 8 [ 1969.595932][T29211] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1969.604570][T29211] usb 3-1: config 179 has no interface number 0 [ 1969.624442][T29211] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1969.640181][T31182] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1969.754185][T29211] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1969.769171][T29211] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1969.779504][T29211] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1969.801968][T29211] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1969.844031][T31855] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6466'. [ 1969.875904][T29211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.009773][T31837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1970.336099][T31837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1970.344716][T31837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1970.355324][T29208] usb 3-1: USB disconnect, device number 70 [ 1971.748063][T31894] syz.2.6476 (31894): drop_caches: 2 [ 1971.755012][T31894] syz.2.6476 (31894): drop_caches: 2 [ 1971.975719][T31182] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1973.084696][T31922] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6485'. [ 1974.015927][T29208] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1974.185146][T29208] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1974.207542][T29208] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1974.247359][T29208] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1974.272841][T29208] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.294508][T29208] usb 9-1: config 0 descriptor?? [ 1974.312160][T29208] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1975.559694][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.566040][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.704256][T29211] usb 9-1: USB disconnect, device number 52 [ 1976.928763][T31995] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6503'. [ 1978.818347][T29208] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1978.981017][T29208] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1978.995658][T29208] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1979.070826][T29208] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1979.080198][T29208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1979.108726][T29208] usb 3-1: config 0 descriptor?? [ 1979.131535][T29208] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1980.605573][T32060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6524'. [ 1981.502838][T29211] usb 3-1: USB disconnect, device number 71 [ 1984.541521][T32123] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6541'. [ 1984.550469][T29211] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1984.709121][T29212] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1984.717991][T29211] usb 9-1: Using ep0 maxpacket: 8 [ 1984.724532][T29211] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1984.734348][T29211] usb 9-1: config 179 has no interface number 0 [ 1984.742376][T29211] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1984.756957][T29211] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1984.773332][T29211] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1984.784727][T29211] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1984.797000][T29211] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1984.817819][T29211] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1984.833969][T29211] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.853529][T32119] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1984.863321][T29211] xpad 9-1:179.65: probe with driver xpad failed with error -5 [ 1984.878063][T29212] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1984.895266][T29212] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1984.925711][T29212] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1984.936022][T29212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.956425][T29212] usb 6-1: config 0 descriptor?? [ 1984.983252][T29212] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1985.155918][T32131] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1985.479118][T32119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1985.490159][T32119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1985.499623][T29211] usb 9-1: USB disconnect, device number 53 [ 1986.103925][T32147] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1987.674016][T29211] usb 6-1: USB disconnect, device number 42 [ 1988.458126][T32188] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6557'. [ 1989.147746][T29212] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1989.278041][T32204] random: crng reseeded on system resumption [ 1989.329055][T29212] usb 5-1: Using ep0 maxpacket: 8 [ 1989.383618][T29212] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1990.097405][T29212] usb 5-1: config 179 has no interface number 0 [ 1990.103737][T29212] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1990.115332][T29212] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1990.126579][T29212] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1990.142399][T29212] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1990.152476][T29212] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1990.180251][T29212] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1990.189355][T29212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.223074][T32198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1990.233281][T29212] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 1990.447305][T32198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.478399][T32198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1990.554208][T29226] usb 5-1: USB disconnect, device number 85 [ 1990.646966][T32215] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6564'. [ 1992.313457][T32245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6575'. [ 1993.322029][T32260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6579'. [ 1994.778081][T32277] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6583'. [ 1995.794163][T32303] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1997.958731][T32328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6596'. [ 1998.549343][T32337] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2000.000651][T32353] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6600'. [ 2000.239857][T32362] random: crng reseeded on system resumption [ 2000.395051][T29226] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2000.559194][T29226] usb 6-1: Using ep0 maxpacket: 32 [ 2000.569377][T29226] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2000.586199][T29226] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2000.884144][T29226] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2000.904012][T29226] usb 6-1: Product: syz [ 2000.917801][T29226] usb 6-1: Manufacturer: syz [ 2000.926639][T29226] usb 6-1: SerialNumber: syz [ 2000.949730][T29226] usb 6-1: config 0 descriptor?? [ 2001.017278][T32359] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2001.289983][T32382] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2001.299882][T29212] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2001.363695][T29211] usb 6-1: USB disconnect, device number 43 [ 2001.470873][T29212] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2001.484303][T29212] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2001.493396][T29212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.503338][T29212] usb 3-1: config 0 descriptor?? [ 2001.512396][T29212] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2002.159265][T29211] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 2002.680922][T29211] usb 9-1: Using ep0 maxpacket: 8 [ 2002.690640][T29211] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2002.699403][T29211] usb 9-1: config 179 has no interface number 0 [ 2002.705773][T29211] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2002.717848][T29211] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2002.746049][T32406] syz.5.6615 (32406): drop_caches: 2 [ 2002.752700][T29211] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2002.765055][T29211] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2002.783125][T32406] syz.5.6615 (32406): drop_caches: 2 [ 2002.792077][T29211] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2002.806584][T29211] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2002.817826][T29211] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.834748][T32387] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2003.056003][T32387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2003.068366][T32387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.328632][ T5932] usb 9-1: USB disconnect, device number 54 [ 2003.328736][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2003.343026][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2004.637111][ T5932] usb 3-1: USB disconnect, device number 72 [ 2004.890015][T32436] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2005.952552][T32451] random: crng reseeded on system resumption [ 2006.075224][T32454] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6628'. [ 2006.249265][T29212] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2006.409014][T29212] usb 5-1: Using ep0 maxpacket: 32 [ 2007.273912][T32450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.317340][T32450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.524315][T32475] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2007.740800][T29211] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2007.999028][T29211] usb 6-1: Using ep0 maxpacket: 8 [ 2008.025162][T29211] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2008.343001][T29211] usb 6-1: config 179 has no interface number 0 [ 2008.377341][T29211] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2008.424503][T29211] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2008.437247][T29211] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2008.501091][T29211] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2008.515815][T29211] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2008.530235][T29211] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2008.655657][T29211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.705517][T32474] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2008.962354][T29216] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2008.978659][T32474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2009.076162][T32474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2009.149103][T29216] usb 3-1: Using ep0 maxpacket: 32 [ 2009.204840][T29216] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2009.217647][T29216] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2009.226850][T29216] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2009.266409][T29216] usb 3-1: Product: syz [ 2009.271529][T29216] usb 3-1: Manufacturer: syz [ 2009.284436][T29216] usb 3-1: SerialNumber: syz [ 2009.300260][T29216] usb 3-1: config 0 descriptor?? [ 2009.310542][T32496] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2009.354572][T29216] usb 6-1: USB disconnect, device number 44 [ 2009.360485][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2009.360515][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2009.383676][T29212] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2009.413165][T29212] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2009.434446][T29212] usb 5-1: can't read configurations, error -71 [ 2009.475992][T31182] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2010.171758][T29216] usb 3-1: USB disconnect, device number 73 [ 2010.880200][T32526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2010.887427][T32526] IPv6: NLM_F_CREATE should be set when creating new route [ 2010.894723][T32526] IPv6: NLM_F_CREATE should be set when creating new route [ 2010.901999][T32526] IPv6: NLM_F_CREATE should be set when creating new route [ 2012.539296][T32565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2012.970412][T29226] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2013.129093][T29226] usb 3-1: Using ep0 maxpacket: 32 [ 2013.143893][T29226] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2013.157205][T29226] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2013.173064][T29226] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2013.182664][T29226] usb 3-1: Product: syz [ 2013.186963][T29226] usb 3-1: Manufacturer: syz [ 2013.191989][T29226] usb 3-1: SerialNumber: syz [ 2013.211510][T29226] usb 3-1: config 0 descriptor?? [ 2013.218530][T32567] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2013.938928][T29226] usb 3-1: USB disconnect, device number 74 [ 2014.335498][T32600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6671'. [ 2014.918258][T32609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2014.925520][T32609] IPv6: NLM_F_CREATE should be set when creating new route [ 2014.932841][T32609] IPv6: NLM_F_CREATE should be set when creating new route [ 2014.940126][T32609] IPv6: NLM_F_CREATE should be set when creating new route [ 2015.503704][T32617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6677'. [ 2015.637556][T32624] syz.5.6678 (32624): drop_caches: 2 [ 2015.645867][T32624] syz.5.6678 (32624): drop_caches: 2 [ 2018.038953][T32645] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2018.603409][T32657] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6691'. [ 2019.671459][T32678] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6696'. [ 2019.704212][T32678] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6696'. [ 2020.904902][T32699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2020.912187][T32699] IPv6: NLM_F_CREATE should be set when creating new route [ 2020.919640][T32699] IPv6: NLM_F_CREATE should be set when creating new route [ 2020.926916][T32699] IPv6: NLM_F_CREATE should be set when creating new route [ 2022.111457][T32714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6704'. [ 2022.497504][T32731] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6708'. [ 2022.507713][T32731] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6708'. [ 2022.614257][T32735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6710'. [ 2024.109712][T32763] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2024.721753][ T303] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6718'. [ 2024.949939][ T308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6719'. [ 2025.583040][ T324] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6723'. [ 2026.308209][ T344] fuse: Bad value for 'fd' [ 2027.333160][ T354] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2027.609222][ T358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2027.616472][ T358] IPv6: NLM_F_CREATE should be set when creating new route [ 2027.623737][ T358] IPv6: NLM_F_CREATE should be set when creating new route [ 2027.630937][ T358] IPv6: NLM_F_CREATE should be set when creating new route [ 2028.135160][ T363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2028.829099][ T370] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6734'. [ 2028.879849][ T367] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6734'. [ 2029.179124][ T390] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6738'. [ 2029.315508][ T397] random: crng reseeded on system resumption [ 2030.232169][ T410] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6744'. [ 2030.454552][ T415] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2030.792589][ T410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6744'. [ 2030.904863][ T416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2031.526996][ T424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2031.589654][ T424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2031.620466][ T424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2033.117299][ T452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6754'. [ 2033.719019][ T467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2034.190261][ T479] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2034.269869][ T481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6761'. [ 2034.336968][ T481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6761'. [ 2034.465148][ T485] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6763'. [ 2035.019486][T29226] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2035.299089][T29226] usb 3-1: Using ep0 maxpacket: 32 [ 2035.847427][T29226] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2035.896486][T29226] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2035.905684][T29226] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2035.915490][T29226] usb 3-1: Product: syz [ 2035.919913][T29226] usb 3-1: Manufacturer: syz [ 2035.927685][T29226] usb 3-1: SerialNumber: syz [ 2035.988783][T29226] usb 3-1: config 0 descriptor?? [ 2036.008578][ T487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2036.139213][T17940] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2036.896946][T29212] usb 3-1: USB disconnect, device number 75 [ 2036.952253][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2036.958603][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.168155][ T545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6776'. [ 2038.311655][ T549] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2039.566471][ T570] overlayfs: failed to resolve './file0': -2 [ 2040.187181][ T573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2041.079334][T29226] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 2041.239066][T29226] usb 9-1: Using ep0 maxpacket: 8 [ 2041.371917][T29226] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2041.380329][T29226] usb 9-1: config 179 has no interface number 0 [ 2041.393593][T29226] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2041.446644][T29226] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2041.468535][T29226] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2041.556049][T29226] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2041.593327][T29226] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2041.632422][T29226] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2041.661363][T29226] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.816637][ T584] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2043.149077][T29226] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input59 [ 2043.543182][ T584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2043.580558][ T584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2043.983453][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2043.983460][T29212] usb 9-1: USB disconnect, device number 55 [ 2043.999009][ C1] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 2045.463625][ T641] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2045.801005][ T648] overlayfs: failed to resolve './file0': -2 [ 2049.396271][ T701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2050.000166][ T710] overlayfs: failed to resolve './file0': -2 [ 2050.470593][ T713] overlayfs: workdir and upperdir must be separate subtrees [ 2050.535266][ T714] Bluetooth: MGMT ver 1.23 [ 2055.828843][ T775] random: crng reseeded on system resumption [ 2056.079113][ T785] overlayfs: failed to resolve './file0': -2 [ 2056.454576][ T783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2057.260234][ T783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2057.290593][ T783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2057.412795][ T797] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2061.119055][T29212] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2061.930886][T29212] usb 3-1: Using ep0 maxpacket: 8 [ 2061.942935][T29212] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2061.952063][T29212] usb 3-1: config 179 has no interface number 0 [ 2061.960332][T29212] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2061.973123][T29212] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2061.989485][T29212] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2062.001332][T29212] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2062.090544][T29212] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2062.144991][T29212] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2062.155797][T29212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.169587][ T839] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2062.379110][T29216] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2062.491284][T29212] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input60 [ 2062.593025][T29216] usb 5-1: device descriptor read/64, error -71 [ 2062.761152][ T839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2062.832227][ T839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.099063][T29216] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2063.124517][T29212] usb 3-1: USB disconnect, device number 76 [ 2063.130433][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2063.130457][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2063.619027][T29216] usb 5-1: device descriptor read/64, error -71 [ 2063.733039][T29216] usb usb5-port1: attempt power cycle [ 2064.681321][T29216] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2064.767431][T29216] usb 5-1: device descriptor read/8, error -71 [ 2065.049645][T29216] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2065.092259][T29216] usb 5-1: device descriptor read/8, error -71 [ 2065.221316][T29216] usb usb5-port1: unable to enumerate USB device [ 2067.186784][T29226] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2068.521774][T29226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2068.533002][T29226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2068.543144][T29226] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2068.566656][T29226] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2068.576196][T29226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.612497][T29226] usb 5-1: config 0 descriptor?? [ 2068.646791][ T949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6876'. [ 2070.175168][T29226] usbhid 5-1:0.0: can't add hid device: -71 [ 2070.181468][T29226] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2070.186161][ T965] netlink: 'syz.5.6881': attribute type 3 has an invalid length. [ 2070.197464][T29226] usb 5-1: USB disconnect, device number 92 [ 2070.204381][ T964] overlay: Unknown parameter 'fowner' [ 2070.438791][ T974] overlayfs: workdir and upperdir must be separate subtrees [ 2073.990471][ T7247] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2074.188277][ T1016] netlink: 'syz.4.6894': attribute type 3 has an invalid length. [ 2074.207105][ T7247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2074.253972][ T7247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2074.308256][ T7247] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2074.352378][ T1020] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 2074.372880][ T7247] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2074.394932][ T1022] overlay: Unknown parameter 'fowner' [ 2074.428386][ T7247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.448780][ T7247] usb 3-1: config 0 descriptor?? [ 2074.525747][ T1027] overlayfs: workdir and upperdir must be separate subtrees [ 2076.087298][ T7247] usbhid 3-1:0.0: can't add hid device: -71 [ 2076.097303][ T7247] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2076.108058][ T7247] usb 3-1: USB disconnect, device number 77 [ 2076.190294][T29216] libceph: connect (1)[c::]:6789 error -101 [ 2076.196277][T29216] libceph: mon0 (1)[c::]:6789 connect error [ 2076.210280][ T1053] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6902'. [ 2076.221929][ T1053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6902'. [ 2076.459589][T29216] libceph: connect (1)[c::]:6789 error -101 [ 2076.470767][T29216] libceph: mon0 (1)[c::]:6789 connect error [ 2076.806546][ T1062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6904'. [ 2077.011028][ T1048] ceph: No mds server is up or the cluster is laggy [ 2077.068778][T29216] libceph: connect (1)[c::]:6789 error -101 [ 2077.077941][T29216] libceph: mon0 (1)[c::]:6789 connect error [ 2077.186877][ T1073] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2077.297062][ T1076] netlink: 'syz.4.6908': attribute type 3 has an invalid length. [ 2077.495334][ T1082] overlay: Unknown parameter 'fowner' [ 2078.696083][ T1093] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2079.118143][ T1094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2079.679085][T29226] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2079.865741][T29226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2080.141378][T29226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2080.151898][T29226] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2080.169173][T29226] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2080.178458][T29226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.190509][T29226] usb 5-1: config 0 descriptor?? [ 2080.811050][T29226] usbhid 5-1:0.0: can't add hid device: -71 [ 2080.817075][T29226] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2080.834069][T29226] usb 5-1: USB disconnect, device number 93 [ 2084.409239][ T1158] random: crng reseeded on system resumption [ 2086.276465][ T1182] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2086.429122][ T5932] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 2086.754369][ T5932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2086.984634][ T5932] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2086.999883][ T5932] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2087.014735][ T5932] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2087.026069][ T5932] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.065299][ T5932] usb 9-1: config 0 descriptor?? [ 2088.791600][ T5932] usbhid 9-1:0.0: can't add hid device: -71 [ 2088.797583][ T5932] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2088.835476][ T5932] usb 9-1: USB disconnect, device number 56 [ 2089.487292][ T1218] random: crng reseeded on system resumption [ 2092.771676][ T1265] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2092.855672][ T1268] random: crng reseeded on system resumption [ 2094.515359][T31182] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2095.693572][ T1309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6962'. [ 2096.214332][ T1313] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2096.285235][ T1315] random: crng reseeded on system resumption [ 2098.781569][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.787949][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.677847][ T1366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6976'. [ 2102.484163][ T1392] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2103.271083][ T1408] overlayfs: failed to resolve './file0': -2 [ 2104.892594][ T1427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6991'. [ 2108.439189][T18261] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2108.771261][T18261] usb 6-1: Using ep0 maxpacket: 8 [ 2108.787764][T18261] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2109.251350][T18261] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 2109.262780][T18261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.270973][T18261] usb 6-1: Product: syz [ 2109.275197][T18261] usb 6-1: Manufacturer: syz [ 2109.280826][T18261] usb 6-1: SerialNumber: syz [ 2109.288333][T18261] usb 6-1: config 0 descriptor?? [ 2109.333822][T18261] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 2109.340397][T18261] usb 6-1: selecting invalid altsetting 1 [ 2110.115365][T18261] gspca_stk014: init reg: 0x00 [ 2110.129930][T18261] stk014 6-1:0.0: probe with driver stk014 failed with error -5 [ 2110.163112][ T7247] usb 6-1: USB disconnect, device number 45 [ 2110.317072][ T1496] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2111.802376][ T1521] random: crng reseeded on system resumption [ 2113.874745][ T1557] fuse: Bad value for 'fd' [ 2113.939118][T19427] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 2114.479031][T19427] usb 9-1: Using ep0 maxpacket: 8 [ 2114.627015][T19427] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2114.657693][T19427] usb 9-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 2114.670565][T19427] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.685878][T19427] usb 9-1: Product: syz [ 2114.692955][T19427] usb 9-1: Manufacturer: syz [ 2114.697550][T19427] usb 9-1: SerialNumber: syz [ 2114.764073][ T1569] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7038'. [ 2114.796336][T19427] usb 9-1: config 0 descriptor?? [ 2114.820614][T19427] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 2114.826730][T19427] usb 9-1: selecting invalid altsetting 1 [ 2115.019859][T19427] gspca_stk014: init reg: 0x00 [ 2115.034837][T19427] stk014 9-1:0.0: probe with driver stk014 failed with error -5 [ 2115.451854][T18261] usb 9-1: USB disconnect, device number 57 [ 2118.336301][ T1635] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7062'. [ 2119.681978][ T1642] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7063'. [ 2120.425397][ T1663] overlayfs: failed to resolve './file1': -2 [ 2122.519219][ T7247] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2122.652079][ T1693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7080'. [ 2122.809013][ T7247] usb 3-1: Using ep0 maxpacket: 32 [ 2122.816338][ T7247] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2122.829998][ T7247] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2122.839371][ T7247] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2122.847573][ T7247] usb 3-1: Product: syz [ 2122.853131][ T7247] usb 3-1: Manufacturer: syz [ 2123.334603][ T7247] usb 3-1: SerialNumber: syz [ 2123.359625][ T7247] usb 3-1: config 0 descriptor?? [ 2123.366303][ T1685] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2124.111949][ T1685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2124.148164][ T1685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2124.196443][T29211] usb 3-1: USB disconnect, device number 78 [ 2125.324315][ T1720] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2127.445003][T26504] syz_tun (unregistering): left promiscuous mode [ 2127.479484][T17940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2127.491553][T17940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2127.506207][T17940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2127.529521][T17940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2127.558795][T17940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2128.321088][ T1769] random: crng reseeded on system resumption [ 2129.116799][T29169] bridge_slave_1: left allmulticast mode [ 2129.123052][T29169] bridge_slave_1: left promiscuous mode [ 2129.131332][T29169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2129.187441][T29169] bridge_slave_0: left allmulticast mode [ 2129.195233][T29169] bridge_slave_0: left promiscuous mode [ 2129.579965][T29169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2129.659152][T17940] Bluetooth: hci3: command tx timeout [ 2129.859112][T18261] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 2130.128968][T18261] usb 9-1: Using ep0 maxpacket: 16 [ 2130.164945][T18261] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2130.192690][T18261] usb 9-1: config 7 has an invalid interface number: 71 but max is 0 [ 2130.218074][T18261] usb 9-1: config 7 has no interface number 0 [ 2130.233460][T18261] usb 9-1: config 7 interface 71 altsetting 129 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 2130.265768][T18261] usb 9-1: config 7 interface 71 has no altsetting 0 [ 2130.274338][T18261] usb 9-1: New USB device found, idVendor=07d1, idProduct=3a08, bcdDevice= 2.97 [ 2130.290006][T18261] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.300151][T18261] usb 9-1: Product: syz [ 2130.304305][T18261] usb 9-1: Manufacturer: syz [ 2130.309480][T18261] usb 9-1: SerialNumber: syz [ 2130.385916][ T1758] chnl_net:caif_netlink_parms(): no params data found [ 2130.538102][T18261] usb 9-1: Could not find all expected endpoints [ 2130.580558][T18261] usb 9-1: USB disconnect, device number 58 [ 2130.808863][ T1758] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.900872][ T1758] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.921872][ T1758] bridge_slave_0: entered allmulticast mode [ 2130.942631][ T1758] bridge_slave_0: entered promiscuous mode [ 2130.977000][ T1758] bridge0: port 2(bridge_slave_1) entered blocking state [ 2130.989287][ T1758] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.996520][ T1758] bridge_slave_1: entered allmulticast mode [ 2131.005184][ T1758] bridge_slave_1: entered promiscuous mode [ 2131.069773][T29169] batadv_slave_0: left promiscuous mode [ 2131.478838][T29169] hsr_slave_0: left promiscuous mode [ 2131.497915][T29169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2131.613046][T29169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2131.739092][T17940] Bluetooth: hci3: command tx timeout [ 2133.449104][T29169] team0 (unregistering): Port device team_slave_1 removed [ 2133.527441][T29169] team0 (unregistering): Port device team_slave_0 removed [ 2133.819082][T17940] Bluetooth: hci3: command tx timeout [ 2134.958345][ T1758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2135.079168][ T1758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2135.238416][ T1758] team0: Port device team_slave_0 added [ 2135.281059][ T1758] team0: Port device team_slave_1 added [ 2135.578516][ T1758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2135.615605][ T1758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2135.898996][ T1758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2135.900755][T17940] Bluetooth: hci3: command tx timeout [ 2136.385288][ T1758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2136.395640][T29169] IPVS: stop unused estimator thread 0... [ 2136.403468][ T1758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2136.557558][ T1758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2137.434781][ T1908] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2137.528680][ T1758] hsr_slave_0: entered promiscuous mode [ 2138.178542][ T1758] hsr_slave_1: entered promiscuous mode [ 2138.200710][ T1758] debugfs: 'hsr0' already exists in 'hsr' [ 2138.329337][ T1758] Cannot create hsr debugfs directory [ 2141.687814][ T1960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2141.820970][ T1960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2141.845911][ T1967] random: crng reseeded on system resumption [ 2142.186647][ T1758] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2142.256267][ T1758] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2142.278611][ T1758] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2142.306775][ T1758] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2142.415155][ T1758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2142.458047][ T1758] 8021q: adding VLAN 0 to HW filter on device team0 [ 2142.505235][T22102] bridge0: port 1(bridge_slave_0) entered blocking state [ 2142.512390][T22102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2142.538809][T16742] bridge0: port 2(bridge_slave_1) entered blocking state [ 2142.545945][T16742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2143.069215][ T1758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2144.058161][ T1758] veth0_vlan: entered promiscuous mode [ 2144.140661][T31182] Bluetooth: hci3: command 0x0405 tx timeout [ 2144.155084][ T1758] veth1_vlan: entered promiscuous mode [ 2144.227815][ T1758] veth0_macvtap: entered promiscuous mode [ 2144.277307][ T1758] veth1_macvtap: entered promiscuous mode [ 2144.383301][ T1758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2144.456856][ T1758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2144.529362][T22102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.541253][ T2043] random: crng reseeded on system resumption [ 2144.613495][T22102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.716530][T22102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.726838][ T2051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2144.750010][T22113] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.807152][ T2051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2144.844882][ T2051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2145.002969][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2145.451221][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2145.513537][T22102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2145.541942][T22102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2146.219103][T31182] Bluetooth: hci3: command 0x0405 tx timeout [ 2147.907707][ T2114] random: crng reseeded on system resumption [ 2149.614296][ T2127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2151.729100][T18261] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2151.859146][ T7247] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 2151.918981][T18261] usb 6-1: Using ep0 maxpacket: 32 [ 2152.678272][T18261] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2152.698055][ T2190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2152.839029][ T7247] usb 9-1: Using ep0 maxpacket: 32 [ 2152.874227][ T7247] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2152.946592][T18261] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2152.964457][T18261] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2152.972527][ T7247] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2152.987298][ T7247] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2152.998016][ T7247] usb 9-1: Product: syz [ 2153.002526][T18261] usb 6-1: Product: syz [ 2153.005661][ T7247] usb 9-1: Manufacturer: syz [ 2153.022506][ T7247] usb 9-1: SerialNumber: syz [ 2153.038998][T18261] usb 6-1: Manufacturer: syz [ 2153.045694][ T7247] usb 9-1: config 0 descriptor?? [ 2153.068072][T18261] usb 6-1: SerialNumber: syz [ 2153.110333][T18261] usb 6-1: config 0 descriptor?? [ 2153.131116][ T2169] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2153.522788][ T2197] ALSA: mixer_oss: invalid OSS volume 'u' [ 2153.566669][T18261] usb 9-1: USB disconnect, device number 59 [ 2153.635416][ T2206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2153.687499][ T2206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2154.086837][T19427] usb 6-1: USB disconnect, device number 46 [ 2156.143307][ T2235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2159.550614][T18261] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2159.656538][ T2270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2159.733705][ T2270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2159.759051][T18261] usb 6-1: Using ep0 maxpacket: 32 [ 2159.806846][ T2259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2159.817134][ T2259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2159.838155][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2159.844819][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2159.931746][ T2270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2160.142024][ T2278] random: crng reseeded on system resumption [ 2160.980145][T18261] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2161.051957][T18261] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2161.059918][T18261] usb 6-1: can't read configurations, error -71 [ 2161.405935][ T2299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2165.599278][T19427] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2165.599967][ T2341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2165.690075][ T2341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2165.705042][ T2341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2165.809060][T19427] usb 6-1: Using ep0 maxpacket: 32 [ 2165.823846][ T2333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2165.833082][ T2333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2167.861102][ T2355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2169.269406][ T2374] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7233'. [ 2169.378375][T19427] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2169.443102][T19427] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2169.459008][T19427] usb 6-1: can't read configurations, error -71 [ 2169.843983][ T2389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2169.913419][ T2394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2169.934340][ T2389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2169.991025][ T2396] random: crng reseeded on system resumption [ 2173.385933][ T2462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2173.522296][ T2462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2173.534233][ T2462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2177.147577][ T2532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2177.154856][ T2532] IPv6: NLM_F_CREATE should be set when creating new route [ 2177.162153][ T2532] IPv6: NLM_F_CREATE should be set when creating new route [ 2177.169435][ T2532] IPv6: NLM_F_CREATE should be set when creating new route [ 2177.449137][T18261] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2177.610254][ T2542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2177.630554][T18261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2177.737188][T18261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2177.762266][ T2542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2177.788074][T18261] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2177.877160][ T2542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2177.925038][T18261] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2177.947974][T18261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.971136][T18261] usb 3-1: config 0 descriptor?? [ 2178.759434][T18261] usbhid 3-1:0.0: can't add hid device: -71 [ 2178.768092][T18261] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2178.907300][T18261] usb 3-1: USB disconnect, device number 79 [ 2179.507608][ T2575] fuse: Bad value for 'fd' [ 2182.873172][ T2622] fuse: Bad value for 'fd' [ 2183.509104][ T7247] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2183.673632][ T7247] usb 9-1: Using ep0 maxpacket: 32 [ 2183.691703][ T7247] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2183.733426][ T7247] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2183.748987][T29216] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2183.764477][ T7247] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2183.804103][ T7247] usb 9-1: Product: syz [ 2183.808266][ T7247] usb 9-1: Manufacturer: syz [ 2183.837197][ T7247] usb 9-1: SerialNumber: syz [ 2183.931543][T29216] usb 5-1: Using ep0 maxpacket: 32 [ 2184.000845][ T2637] fuse: Bad value for 'fd' [ 2184.100741][T29216] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2184.109610][ T7247] usb 9-1: config 0 descriptor?? [ 2184.130247][ T2628] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2184.148370][T29216] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2184.572660][T29216] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2184.581179][T29216] usb 5-1: Product: syz [ 2184.585343][T29216] usb 5-1: Manufacturer: syz [ 2184.590268][T29216] usb 5-1: SerialNumber: syz [ 2184.599796][T29216] usb 5-1: config 0 descriptor?? [ 2184.609093][ T2630] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2184.640906][T29216] chaoskey 5-1:0.0: Unable to register with hwrng [ 2184.677915][ T2649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2184.831602][ T2649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2185.418847][ T2661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2185.462572][ T2661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2185.623877][T29208] usb 9-1: USB disconnect, device number 60 [ 2185.752723][ T7247] usb 5-1: USB disconnect, device number 94 [ 2186.527958][ T2681] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7302'. [ 2190.555409][ T2727] fuse: Bad value for 'fd' [ 2193.120038][ T2773] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2193.722496][ T2779] fuse: Bad value for 'fd' [ 2194.734635][ T2792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2195.584039][ T2806] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2196.579772][ T2824] fuse: Bad value for 'fd' [ 2200.439016][ T7247] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2200.639858][ T7247] usb 9-1: Using ep0 maxpacket: 32 [ 2200.732780][ T2892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2200.742943][ T2902] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7353'. [ 2200.774794][ T2892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.444655][ T2940] overlayfs: failed to resolve './file0': -2 [ 2203.852888][ T7247] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2203.891034][ T7247] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2203.898623][ T7247] usb 9-1: can't read configurations, error -71 [ 2204.315389][ T2955] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2209.109450][ T2994] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7378'. [ 2209.415640][ T3002] overlayfs: failed to resolve './file0': -2 [ 2209.515978][ T2996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2210.481533][ T2996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2210.909747][ T3019] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2214.120427][ T3058] can0: slcan on ttyS3. [ 2214.870655][ T3047] can0 (unregistered): slcan off ttyS3. [ 2217.267588][ T3115] overlayfs: failed to resolve './file0': -2 [ 2220.918715][T29213] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2220.984865][ T3150] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2221.265766][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.274428][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.366498][T29213] usb 6-1: Using ep0 maxpacket: 32 [ 2221.406379][T29213] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2221.435279][T29213] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2221.488252][T29213] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2221.507390][T29213] usb 6-1: Product: syz [ 2221.518275][T29213] usb 6-1: Manufacturer: syz [ 2221.548990][T29213] usb 6-1: SerialNumber: syz [ 2221.633534][T29213] usb 6-1: config 0 descriptor?? [ 2221.662968][ T3142] kvm_intel: kvm [3141]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x2 [ 2221.664589][ T3137] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2222.550577][T19427] usb 6-1: USB disconnect, device number 51 [ 2223.504104][ T3189] overlayfs: failed to resolve './file0': -2 [ 2225.096885][ T3205] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2225.142116][ T3205] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2225.219635][ T3205] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2225.227306][ T3205] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2225.236364][ T3205] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2225.571610][ T3205] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2227.173768][T31182] Bluetooth: hci1: command 0x0405 tx timeout [ 2227.189169][T31182] Bluetooth: hci4: command 0x0419 tx timeout [ 2227.244339][ T3205] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2227.260037][T17940] Bluetooth: hci0: command 0x0c1a tx timeout [ 2227.262576][T31182] Bluetooth: hci2: command 0x041b tx timeout [ 2227.266092][T17940] Bluetooth: hci3: command 0x0405 tx timeout [ 2227.538807][ T3226] ------------[ cut here ]------------ [ 2227.544468][ T3226] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 5 MHz (6) [ 2227.567469][ T3226] WARNING: CPU: 0 PID: 3226 at drivers/net/wireless/virtual/mac80211_hwsim.c:2651 mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 2227.580868][ T3226] Modules linked in: [ 2227.584877][ T3226] CPU: 0 UID: 0 PID: 3226 Comm: syz.2.7429 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 2227.596735][ T3226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2227.606783][ T3226] RIP: 0010:mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 2227.613471][ T3226] Code: 8b 44 24 20 89 da 48 c7 c7 e0 1c 6c 8c 44 8b 89 b8 01 00 00 41 54 48 8d b0 72 04 00 00 41 55 44 8b 44 24 14 e8 96 03 66 fa 90 <0f> 0b 90 90 58 5a e9 36 fc ff ff e8 e5 64 a7 fa e8 20 73 7e 04 31 [ 2227.633088][ T3226] RSP: 0018:ffffc9000c5b7188 EFLAGS: 00010286 [ 2227.639143][ T3226] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90016638000 [ 2227.647086][ T3226] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 2227.655044][ T3226] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2227.663128][ T3226] R10: 0000000000000001 R11: 00000000000436e8 R12: 0000000000000006 [ 2227.671108][ T3226] R13: 0000000000000005 R14: ffff888076cc1080 R15: ffff88805560b0a0 [ 2227.679147][ T3226] FS: 00007f920fcc36c0(0000) GS:ffff8881246c4000(0000) knlGS:0000000000000000 [ 2227.688297][ T3226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2227.695065][ T3226] CR2: 00007f1d24020f70 CR3: 0000000031ce5000 CR4: 00000000003526f0 [ 2227.703049][ T3226] Call Trace: [ 2227.706304][ T3226] [ 2227.709229][ T3226] mac80211_hwsim_sta_add+0xc9/0x2c0 [ 2227.714491][ T3226] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 2227.720380][ T3226] drv_sta_state+0xa08/0x1940 [ 2227.725040][ T3226] sta_info_insert_rcu+0xc8d/0x1b70 [ 2227.730290][ T3226] sta_info_insert+0x16/0xd0 [ 2227.734884][ T3226] ieee80211_add_station+0x46d/0x6c0 [ 2227.740224][ T3226] nl80211_new_station+0x14ff/0x1c90 [ 2227.745517][ T3226] ? __pfx_nl80211_new_station+0x10/0x10 [ 2227.751197][ T3226] ? nl80211_pre_doit+0x1b0/0xb10 [ 2227.756227][ T3226] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2227.761847][ T3226] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2227.767920][ T3226] ? bpf_lsm_capable+0x9/0x10 [ 2227.772608][ T3226] ? security_capable+0x7e/0x260 [ 2227.777520][ T3226] ? ns_capable+0xd7/0x110 [ 2227.782353][ T3226] genl_rcv_msg+0x55c/0x800 [ 2227.786834][ T3226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2227.792023][ T3226] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2227.797373][ T3226] ? __pfx_nl80211_new_station+0x10/0x10 [ 2227.802991][ T3226] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2227.808426][ T3226] netlink_rcv_skb+0x158/0x420 [ 2227.813180][ T3226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2227.818189][ T3226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2227.823476][ T3226] ? netlink_deliver_tap+0x1ae/0xd30 [ 2227.828744][ T3226] genl_rcv+0x28/0x40 [ 2227.832713][ T3226] netlink_unicast+0x5a7/0x870 [ 2227.837463][ T3226] ? __pfx_netlink_unicast+0x10/0x10 [ 2227.842739][ T3226] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2227.848709][ T3226] netlink_sendmsg+0x8d1/0xdd0 [ 2227.853470][ T3226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2227.858731][ T3226] ____sys_sendmsg+0xa98/0xc70 [ 2227.863486][ T3226] ? copy_msghdr_from_user+0x10a/0x160 [ 2227.868944][ T3226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2227.874204][ T3226] ? __pfx_futex_wake_mark+0x10/0x10 [ 2227.879492][ T3226] ___sys_sendmsg+0x134/0x1d0 [ 2227.884152][ T3226] ? __pfx____sys_sendmsg+0x10/0x10 [ 2227.889591][ T3226] __sys_sendmsg+0x16d/0x220 [ 2227.894162][ T3226] ? __pfx___sys_sendmsg+0x10/0x10 [ 2227.899499][ T3226] ? __x64_sys_futex+0x1e0/0x4c0 [ 2227.904433][ T3226] do_syscall_64+0xcd/0x4c0 [ 2227.908948][ T3226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2227.914820][ T3226] RIP: 0033:0x7f920ed8ebe9 [ 2227.919240][ T3226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2227.938845][ T3226] RSP: 002b:00007f920fcc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2227.947247][ T3226] RAX: ffffffffffffffda RBX: 00007f920efb5fa0 RCX: 00007f920ed8ebe9 [ 2227.955213][ T3226] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 2227.963192][ T3226] RBP: 00007f920ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2227.971157][ T3226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2227.979116][ T3226] R13: 00007f920efb6038 R14: 00007f920efb5fa0 R15: 00007ffc957d5fb8 [ 2227.987428][ T3226] [ 2227.990653][ T3226] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2227.997936][ T3226] CPU: 0 UID: 0 PID: 3226 Comm: syz.2.7429 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 2228.009546][ T3226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2228.019575][ T3226] Call Trace: [ 2228.022827][ T3226] [ 2228.025734][ T3226] dump_stack_lvl+0x3d/0x1f0 [ 2228.030308][ T3226] vpanic+0x6e8/0x7a0 [ 2228.034269][ T3226] ? __pfx_vpanic+0x10/0x10 [ 2228.038752][ T3226] ? mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 2228.044797][ T3226] panic+0xca/0xd0 [ 2228.048495][ T3226] ? __pfx_panic+0x10/0x10 [ 2228.052895][ T3226] check_panic_on_warn+0xab/0xb0 [ 2228.057806][ T3226] __warn+0xf6/0x3c0 [ 2228.061673][ T3226] ? mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 2228.067721][ T3226] report_bug+0x3c3/0x580 [ 2228.072046][ T3226] ? mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 2228.078095][ T3226] handle_bug+0x184/0x210 [ 2228.082397][ T3226] exc_invalid_op+0x17/0x50 [ 2228.086873][ T3226] asm_exc_invalid_op+0x1a/0x20 [ 2228.091696][ T3226] RIP: 0010:mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 2228.098359][ T3226] Code: 8b 44 24 20 89 da 48 c7 c7 e0 1c 6c 8c 44 8b 89 b8 01 00 00 41 54 48 8d b0 72 04 00 00 41 55 44 8b 44 24 14 e8 96 03 66 fa 90 <0f> 0b 90 90 58 5a e9 36 fc ff ff e8 e5 64 a7 fa e8 20 73 7e 04 31 [ 2228.117943][ T3226] RSP: 0018:ffffc9000c5b7188 EFLAGS: 00010286 [ 2228.123990][ T3226] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90016638000 [ 2228.131943][ T3226] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 2228.139884][ T3226] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2228.147830][ T3226] R10: 0000000000000001 R11: 00000000000436e8 R12: 0000000000000006 [ 2228.155790][ T3226] R13: 0000000000000005 R14: ffff888076cc1080 R15: ffff88805560b0a0 [ 2228.163745][ T3226] ? __warn_printk+0x1a5/0x350 [ 2228.168500][ T3226] ? mac80211_hwsim_sta_rc_update+0x60a/0x850 [ 2228.174545][ T3226] mac80211_hwsim_sta_add+0xc9/0x2c0 [ 2228.179804][ T3226] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 2228.185670][ T3226] drv_sta_state+0xa08/0x1940 [ 2228.190324][ T3226] sta_info_insert_rcu+0xc8d/0x1b70 [ 2228.195521][ T3226] sta_info_insert+0x16/0xd0 [ 2228.200094][ T3226] ieee80211_add_station+0x46d/0x6c0 [ 2228.205354][ T3226] nl80211_new_station+0x14ff/0x1c90 [ 2228.210620][ T3226] ? __pfx_nl80211_new_station+0x10/0x10 [ 2228.216236][ T3226] ? nl80211_pre_doit+0x1b0/0xb10 [ 2228.221237][ T3226] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2228.226760][ T3226] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2228.232804][ T3226] ? bpf_lsm_capable+0x9/0x10 [ 2228.237471][ T3226] ? security_capable+0x7e/0x260 [ 2228.242380][ T3226] ? ns_capable+0xd7/0x110 [ 2228.246772][ T3226] genl_rcv_msg+0x55c/0x800 [ 2228.251251][ T3226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2228.256256][ T3226] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2228.261616][ T3226] ? __pfx_nl80211_new_station+0x10/0x10 [ 2228.267217][ T3226] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2228.272652][ T3226] netlink_rcv_skb+0x158/0x420 [ 2228.277399][ T3226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2228.282399][ T3226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2228.287660][ T3226] ? netlink_deliver_tap+0x1ae/0xd30 [ 2228.292942][ T3226] genl_rcv+0x28/0x40 [ 2228.296897][ T3226] netlink_unicast+0x5a7/0x870 [ 2228.301671][ T3226] ? __pfx_netlink_unicast+0x10/0x10 [ 2228.306933][ T3226] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2228.312899][ T3226] netlink_sendmsg+0x8d1/0xdd0 [ 2228.317637][ T3226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2228.322911][ T3226] ____sys_sendmsg+0xa98/0xc70 [ 2228.327665][ T3226] ? copy_msghdr_from_user+0x10a/0x160 [ 2228.333103][ T3226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2228.338368][ T3226] ? __pfx_futex_wake_mark+0x10/0x10 [ 2228.343650][ T3226] ___sys_sendmsg+0x134/0x1d0 [ 2228.348309][ T3226] ? __pfx____sys_sendmsg+0x10/0x10 [ 2228.353529][ T3226] __sys_sendmsg+0x16d/0x220 [ 2228.358124][ T3226] ? __pfx___sys_sendmsg+0x10/0x10 [ 2228.363231][ T3226] ? __x64_sys_futex+0x1e0/0x4c0 [ 2228.368157][ T3226] do_syscall_64+0xcd/0x4c0 [ 2228.372635][ T3226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2228.378506][ T3226] RIP: 0033:0x7f920ed8ebe9 [ 2228.382910][ T3226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2228.402505][ T3226] RSP: 002b:00007f920fcc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2228.410894][ T3226] RAX: ffffffffffffffda RBX: 00007f920efb5fa0 RCX: 00007f920ed8ebe9 [ 2228.418837][ T3226] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 2228.426780][ T3226] RBP: 00007f920ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2228.434724][ T3226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2228.442679][ T3226] R13: 00007f920efb6038 R14: 00007f920efb5fa0 R15: 00007ffc957d5fb8 [ 2228.450628][ T3226] [ 2228.453812][ T3226] Kernel Offset: disabled [ 2228.458128][ T3226] Rebooting in 86400 seconds..