last executing test programs: 2m41.018095985s ago: executing program 2 (id=501): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f00000009c0)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r0, 0x48212b8952c3affd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) syz_clone(0xa40000, 0x0, 0x3e, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000140)=0x1ffffe, 0x4, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 2m40.583100983s ago: executing program 0 (id=503): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x10009, 0x3}, {0x8000006, 0x6}]}}) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xc, r6, &(0x7f0000000080)='E', 0x1, 0x8000}]) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002ad3ed5a3cd6cfd68e00000008000300", @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x8880) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd"], 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m38.508311923s ago: executing program 2 (id=506): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xd, r0, 0x1, 0x1, 0x6, @multicast}, 0x14) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, 0x2, 0x6, 0x101, 0x0, 0x0, {0x8, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x17}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x4b5110c3ea5cc35}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x81}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "e7aa77602905fb905b7a5f1426a64d83"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x30a80000}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6f624a7c66ec"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3c}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendto$netrom(r1, &(0x7f00000003c0)="19e1c4ad1a2e800b6cd4e2b6735f0274bad736dc4f94fd007db9ab6aac278f94839aa2186123969f4a07d1c5ed6f5117e476c41060fea3b6199a2691ac96bf20f972b71e3969f9ddcb271410512962bf29afb08077507fe0d31b36fc59326473328aea5306fb27978998bf6a5c8fde16165041082eb910cade7bc6b4eeb1ae8bb9ecea51a1d488b8a4688f02e40c4bf522", 0x91, 0xc0, &(0x7f0000000480)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async, rerun: 32) sendto$inet6(r1, &(0x7f0000000500)="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", 0xfa, 0x5, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @private2, 0x930a}, 0x1c) (async, rerun: 32) write$binfmt_misc(r1, &(0x7f0000000640)="19f26485ea16a420", 0x8) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000680)={0x10003, 0x0, 0xe6fe8000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x8, r1}) (async) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xcc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x74}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4800) (async, rerun: 32) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000900)) (async, rerun: 32) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000940)={0x7, 0x4, 0xfffffeff, 0x3, 0x5}) (async) write$cgroup_subtree(r1, &(0x7f0000000980)={[{0x2b, 'io'}, {0x2d, 'pids'}, {0x2d, 'devices'}, {0x2b, 'io'}, {0x2d, 'cpuacct'}]}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r1}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r1, {0x2a2c997e}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000c40)={0x0, {0x2, 0x4e21, @rand_addr=0x64010102}, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @local}, 0x267, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x9, 0x6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) (async) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000d00)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000e00)={'syztnl2\x00', &(0x7f0000000d80)={'syztnl2\x00', r0, 0x29, 0x80, 0x4, 0xa16, 0xa, @dev={0xfe, 0x80, '\x00', 0x39}, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8000, 0x80, 0x8, 0x401}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000e40)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000013c0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001380)={&(0x7f0000000f40)={0x420, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r6}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r0}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r7}, {0x1c0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc7}}, {0x8, 0x6, r0}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x3, 0xf, 0x3}, {0x2, 0x0, 0x8, 0x6}, {0x5, 0x7f, 0x1, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r9}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x420}, 0x1, 0x0, 0x0, 0x8000}, 0x81) (async) sendmsg$sock(r1, &(0x7f0000001880)={&(0x7f0000001400)=@isdn={0x22, 0x0, 0x4, 0x1, 0xf6}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001480)="8ffa14e39b4709987ba38457da8ca32e069d5fb84fe9c70c8ef09c3c774cd90f92b55725f3b8258b4d2ee87461fd113d19fd081e85858d46a53b75cb39ef6069eee72190d1352b20f9438cd47f5fb0e38e66bd69faf94b9c2b96945e3f863e83acaee8c1f15d97b9bb4981d3b1888536f8db9c13018cec", 0x77}, {&(0x7f0000001500)="3809d2b58e165a5b66031783e58e68c2d5cf5d9b39a845283a8b509f0e43c04d08803b", 0x23}, {&(0x7f0000001540)="05acf22bf9828951d30453b5667f5750c380376b388521fc17f01cfb2cd224dcec857b6851845e23ee66b2c318a462940a781d16b01c108126bf4b2b8826f8d86d1e71bb7921f2097d23ea638694f7481a20856c7a1c98f44b28dadc3a8b73092133a93ffdbf6fda3527d0e37de86ad1babe1e6c9d2d258f1deb364eeadac066112882af3a302c292a816015ac81aba56b067f879edb219db4", 0x99}, {&(0x7f0000001600)="f807874244d54b597500eedc8e4f3391189c87f6a7878204bd49926d0d9bdf1949afd4004aef6e11d28119dca459e797e4ef760be36a5732657babc8ddfe26ee3ba7cbf6501f8978cf8b768b0e37dc8a7949be9983683e820538c25b47e350f324970d831ecf41309d13cdb72293858bbdcb3155b694222423240a70cf27608413b11245301e7a", 0x87}, {&(0x7f00000016c0)="4db20e5d528be608cd1e7d320fbbfafd2ce68f9e15aba832f8127bcf492c5355e2b6338ee314b5dc280e1c340b5ff9003d6473b04c8fc5d8b641981543c9e73c57658b3f90ec8ee095a11c1ec31e2b74b6deb780a7be9210d35120c1dc9a493b38d3428a9ec50bf65ddc10334aa93afc6c34c16a014dcf817739df26d01305cf8116c89eed3a5e824be233a42cab34a53d00155c9c3bfae21416f0bb6b1e4cc6e20d1191f2b9a6ecdeda9da9a8bdfa9a8da7cc4096", 0xb5}], 0x5, &(0x7f0000001800)=[@mark={{0x14, 0x1, 0x24, 0xc15}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x60}, 0x81) write$P9_RFSYNC(r1, &(0x7f00000018c0)={0x7, 0x33, 0x1}, 0x7) r10 = socket$rxrpc(0x21, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r10, &(0x7f0000001900)={0x40000000}) (async) recvmmsg(r1, &(0x7f0000002e40)=[{{&(0x7f0000001940)=@nfc_llcp, 0x80, &(0x7f0000002d00)=[{&(0x7f00000019c0)}, {&(0x7f0000001a00)=""/61, 0x3d}, {&(0x7f0000001a40)=""/90, 0x5a}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4, 0x4}, {&(0x7f0000002b00)=""/31, 0x1f}, {&(0x7f0000002b40)=""/117, 0x75}, {&(0x7f0000002bc0)=""/15, 0xf}, {&(0x7f0000002c00)=""/225, 0xe1}], 0x9, &(0x7f0000002dc0)=""/104, 0x68}, 0x7}], 0x1, 0x2, &(0x7f0000002e80)) 2m38.172921773s ago: executing program 2 (id=509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="911075000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) (async) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) (async, rerun: 32) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @random="9881da07fc0b", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x38, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x10001, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "8029335287b7a081"}}}}}}}, 0x0) (rerun: 32) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{&(0x7f00000002c0)=@xdp, 0x80, 0x0}, 0x6}], 0x2, 0x2000, 0x0) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ad1000/0x1000)=nil, 0x1000}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000e80)=0x9, 0x9, 0x1) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x7fffffff, 0x6, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x22, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m37.708900233s ago: executing program 0 (id=511): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="80", 0x2}], 0x3, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee00}}) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = creat(0x0, 0xf) write$P9_RSTATu(r4, 0x0, 0x5a) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f00000003c0)={0xfffffffe, 0x5, 0x9d8}) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a5c0000c40609f1040000000000000000020000000900020073797a32000000000900010063797a300000006abd817ea544f1f9f42ed00030f903802c0001800a00010071756575650000001c00028006000140000000000600034000000000060002400004000014000000110001000000000000000000ff00000a"], 0x84}}, 0x0) 2m37.625259294s ago: executing program 2 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x180000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r3, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)="47e62923310439eb4f1cfa65c354d09a03d9ba558a699e066c48b3ec6b60f10f277b4e92fa3b09cc090b7e1582773aa26ef5009baae5effa70407e578139769cb0f4e5485575b2136665cede83b812fa8541bcb59eeb1c5a97f74868", 0x5c}, {&(0x7f0000000600)="3e207c4e850580a723e68fb7858e0073f604df49ddfe85850e226fb269131d1ffbd1634e3ae22db1fcdff108fd67db3c11bc178fb9ca10ac592693aa751aea9ab99e2fb1c5f2105a23ec71f01cf509826dcbdccb40b4d2dffa430876b6e475d28696a1d5a4bf6c8eeb51ce90ba3cb53a4ab24804b3fba61e012a1f8daa733a93a2c6e324d0f9acf7651dad5ed8770d94a9d8b546976f43367987e0f749b0ebf76dafaf0849f9a3b127c532068754793124f889400c1a9c503db13396ac7374a7b6d867ad02f16b5d7cccd37c49", 0xcd}, {&(0x7f0000000700)="6b9f084bae111dde803fb0dfa026bbb61bc255413703305e765645192103e2c03317c3f13d946eb9aa07cf738f6ea1ff97ffe4faedf81b7170b703f08ea43dd847fc33781f45a939f0c01bf299c6000635eac1526f960876edcaae6d0911c483816f8bfb33f8315f3dfb28818471d5e19f34e176904ca7b13663325c1431c0340d2aa58a18c760af7c5ea329f2e77dfe05542bd7be83feea746165f246abc53c01ae33f6b0f8798a87d68f2097d1cc7915e736", 0xb3}, {&(0x7f00000007c0)="741ac49277582130de2950646bdffac59c99b50c28882c3ccede607657e245d0283095da518d7c44c364bef25b178933e7683395562bdc66874cfa3d70cd11c5ee9a4b48ddb3908d7be5a8bcfd68f8d9a390d3ee675e2f691282d12e2f661e88a095274d64377dea3b203dfd9005bc67146dfe5a51f53e01873e071941e72241cd5a08c7023537e33e3b0371ba3985569721deb86bef5cee964dffc24bc5725a4e7643fc3e30751000a3742beb5cfd548602e62d4805ef438861347555d451a9aa44c5a3c907053d83d067e1f096157b6901482eac9b664afeff558a782b90996f83960c1629b8f25b7303e59e09d644080d0d", 0xf3}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000100)="3578d90de9", 0x5}], 0x6, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121f408, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) bind$can_raw(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xd94, 0xfffffffffffffff4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 2m37.00546583s ago: executing program 0 (id=513): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x80c0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff41, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) capset(&(0x7f0000000240)={0x20071026, r2}, &(0x7f0000000280)={0x1, 0x3, 0x9, 0x3, 0x7f, 0x400}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4, 0x0, @loopback}, 0x1c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000207c0)=""/39, 0x27}], 0x1}, 0x61) 2m36.99184919s ago: executing program 2 (id=514): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0xdb9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0x8, r3, 0x0, 0x9, 0x2ecd4c, 0x3, &(0x7f00000002c0)="fa363c", 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept$alg(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004100)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001880)="70041bf1af037f02b0e2a31763fb27cf170a0cd27c99482f8378cae752292bd667bda71457062f3643862b46a3fdbd08fdf88d29190d0d3b2169152152d200e10e5ad49d2128ee09fde9724fe910be868caf447520d9a4966303722e0c2d6b263aa9e1f0a2d0e49cfec999b07c3edcf0ef9ff9b97610a1e4412d1ceb10711e4319a9654f3706a3cde5736edf4f3a9df2220e0c360641e47005e95c79d8fb3ca617422afeb3db296bb43b877578df43055af0ce81ff56ef655dcd1f91234faa0095e640dae030805d40c0322b57e9ea91", 0xd0}], 0x1, &(0x7f0000000f80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000"], 0xfc}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r7, 0xd}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000007c0)={0x1, @pix={0x3, 0xf3b, 0x34324241, 0x2, 0x7, 0x10000, 0xb, 0xf, 0x0, 0xc3da533fd69e53e7, 0x0, 0x5}}) syz_open_dev$evdev(&(0x7f0000000380), 0x2, 0x200) 2m35.6912021s ago: executing program 0 (id=515): r0 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x5}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x200, 0x358, 0x358, 0x200, 0x358, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0xffffffff, 0xffffffff, 'bond0\x00', 'ip6erspan0\x00', {}, {}, 0x4, 0x1, 0x1}, 0x0, 0x180, 0x1e8, 0x0, {}, [@inet, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x9, 0x9, 0xfffffff9, 'pptp\x00', 'syz1\x00', {0x3}}}}, {{@ip={@loopback, @multicast2, 0x100, 0x0, 'wlan0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x8, 0x2, 0x4e}, 0x0, 0xb8, 0x100}, @common=@inet=@LOG={0x0, 'LOG\x00', 0x0, {0x5, 0x4, "ec96ed18dac0754af50adf18bca346a9a7259014553d6dabbb2170e97711"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 2m35.34567985s ago: executing program 2 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x208000, 0x0) 2m34.902785892s ago: executing program 32 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x208000, 0x0) 2m33.248115851s ago: executing program 0 (id=520): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2179, 0x77, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r4, 0x20000000000001c9, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x80000000}]) io_getevents(r4, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_destroy(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbf6, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a19, 0xfffffffe, 0x8000, 0xffffffff, 0x100, 0xa, 0x4, 0x6, 0x101}}}}]}, 0x58}}, 0x40804) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x10}, {0x1, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) io_submit(0x0, 0x0, 0x0) 2m30.849772494s ago: executing program 0 (id=530): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r3 = inotify_init1(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x200c0084) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x60004ce) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00008ff000/0x3000)=nil, 0x3000, 0xf) 2m15.172042064s ago: executing program 33 (id=530): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r3 = inotify_init1(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x200c0084) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x60004ce) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00008ff000/0x3000)=nil, 0x3000, 0xf) 1m45.369247954s ago: executing program 4 (id=640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(0x0, 0x1a0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x40) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003e80)=ANY=[], 0x3518}}, 0x0) socket(0x21, 0x6, 0x73) open$dir(&(0x7f0000000000)='./file0\x00', 0x141040, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m44.709250613s ago: executing program 4 (id=643): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) epoll_create1(0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x10000, 0x1, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) pipe(&(0x7f0000000040)) 1m44.353741421s ago: executing program 4 (id=645): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_none}]}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xffe0}, {0x1, 0x1}, {0xd, 0xffe0}}, [{0x8, 0xb, 0xe02}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) 1m42.713447366s ago: executing program 4 (id=651): r0 = io_uring_setup(0x177f, &(0x7f0000000240)={0x0, 0xfffffffe, 0x1000, 0x3, 0x2b4}) close_range(r0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000100)=0x10, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540)) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x1002}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=@unlock_all, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77"], 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) 1m41.04867113s ago: executing program 4 (id=655): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x2, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x10, 0x8, {0x8, 0x4, "c46c32155d69"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, 0x0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c006300", @ANYRES16=r2, @ANYBLOB="040027bd7000fedbdf25860000000800a100bd090000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000040}, 0x20042041) 1m37.64533574s ago: executing program 4 (id=663): socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f000000b200)='/dev/comedi1\x00', 0x8040, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x81, 0xaa, &(0x7f0000000400)=""/170, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0x2, &(0x7f0000000100)={0x8000d, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x4, 0x100010, r0, 0x8fe1e000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @private=0xa010101}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x14) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000000)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x28}}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) 1m22.147904709s ago: executing program 34 (id=663): socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f000000b200)='/dev/comedi1\x00', 0x8040, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x81, 0xaa, &(0x7f0000000400)=""/170, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0x2, &(0x7f0000000100)={0x8000d, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x4, 0x100010, r0, 0x8fe1e000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @private=0xa010101}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x14) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000000)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x28}}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) 53.95649109s ago: executing program 6 (id=727): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2002) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000400)={0x9, 0x5a, 0xfffffffc}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xb}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000328bd7000fddbdf25010000000000000008410000004c00180400000075647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000094) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x6, 0x6}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200093, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="a000000013022dbc7000fedbdf2500000000c08393420c08c5fede49c5e6a6e02b538ba0cbdf2600ef624a23f2d32be9cbdfe45d46a87f9684759eb50600000000000000", @ANYRES32=0x0, @ANYBLOB="200108000000000008001c00", @ANYRES32, @ANYBLOB="000035006261746164763000000000000000000034fe2e000300000058001680050011000800000008001c00", @ANYRES32, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x30008054}, 0x20000000) r5 = semget(0x2, 0x2, 0x0) semctl$IPC_RMID(r5, 0x0, 0x0) 53.235139506s ago: executing program 6 (id=731): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) syz_io_uring_setup(0x2000110, &(0x7f00000000c0)={0x0, 0x5885, 0x0, 0xfffffffc, 0x3c9}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x202480, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000fcebe440470501686f4301020301090212000100000000090400000008441300af24b17d5d41a067d227fc2208d0a8166fbdd19f59e88beff2a53f768ae2ff68ccb68a85515e6b8f5f595182a00a15a86f3147cf8fb8a020632cc26eada23c6d7406e2f2f67cc69809bb00"/140], 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="020000110000000096080000000000000180000000000000e800"/40]) r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r10, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000002240)=""/4094, 0xffe}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 50.00392257s ago: executing program 6 (id=734): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="12011400c7f36d088d0e0020c621000000010902290001000000000904000000db02ef00052406"], 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80003, 0x8) socket$inet6(0xa, 0x80003, 0xff) socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2098497107657808, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) prlimit64(0x0, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840)) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) close(0xffffffffffffffff) socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)=ANY=[], 0x1000f) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000107d1e2e2c000000000001090224000100000000090400000103000000092100000001180500090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x1, '\x00', @p_u8=&(0x7f0000000080)}}) 46.718111926s ago: executing program 6 (id=740): r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) wait4(r0, 0x0, 0x40000000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x40, 0x0, 0x3}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)='.', 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000100), 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) 45.614716367s ago: executing program 6 (id=742): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c19ffb872bbd700000000000020000110000"], 0x1c}}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000330007010000000000000000017c00000c00018006000600800a00fe0300b30032078d9862fd75040f8e70e0f4240fd182c69f11c5bd80f152d67394b05d673133096724311043adc6c71b4646cb11"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc810) write$UHID_INPUT(r4, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r9, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 40.59962709s ago: executing program 6 (id=753): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x110, r0, 0x10000000) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x0, {0x0, 0x0, 0x3}, 0x2}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/175, 0xaf}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/211, 0xd3}, {&(0x7f00000035c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000000)=""/92, 0x5c}], 0x9}, 0x81}], 0x3, 0x2100, 0x0) r5 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="db9a83e4557949d4d0035abb77e6dfa42d648c4af30de40477ac32efb2b7c74c641ecd09207fb127793587fb1f634c213a90d035f2c035c89d034f6f3a9e72ddfcee7683411b3dbd5dc76b5091d541f9772b0a81d0aa05388320d218938f4141bb918af97e099cc2cc9c76577da1c9565186a9b5291ae5a354a4d724d95a865e26522e4aee43c1931492c7b63f68fdd1b2e9", @ANYRES64, @ANYBLOB="cea89ca243b5c6850280077c02741787d3ab312676eceea96c5681afd17894157af7493b09bf8c8719f4e8363c1352c5dfd23b7dd548e748903f2c37e8b04cb6a333400364351eaf0181f7b848b4cff25f", @ANYRES16], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000000)={0x20, 0x0, 0xffffffffffffffef, "f00c1e869de029e02185ce7645d068d865784fc83fb8d4595689d159e8a55a3c43ea3a10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24.934188616s ago: executing program 35 (id=753): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x110, r0, 0x10000000) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x0, {0x0, 0x0, 0x3}, 0x2}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/175, 0xaf}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/211, 0xd3}, {&(0x7f00000035c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000000)=""/92, 0x5c}], 0x9}, 0x81}], 0x3, 0x2100, 0x0) r5 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="db9a83e4557949d4d0035abb77e6dfa42d648c4af30de40477ac32efb2b7c74c641ecd09207fb127793587fb1f634c213a90d035f2c035c89d034f6f3a9e72ddfcee7683411b3dbd5dc76b5091d541f9772b0a81d0aa05388320d218938f4141bb918af97e099cc2cc9c76577da1c9565186a9b5291ae5a354a4d724d95a865e26522e4aee43c1931492c7b63f68fdd1b2e9", @ANYRES64, @ANYBLOB="cea89ca243b5c6850280077c02741787d3ab312676eceea96c5681afd17894157af7493b09bf8c8719f4e8363c1352c5dfd23b7dd548e748903f2c37e8b04cb6a333400364351eaf0181f7b848b4cff25f", @ANYRES16], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000000)={0x20, 0x0, 0xffffffffffffffef, "f00c1e869de029e02185ce7645d068d865784fc83fb8d4595689d159e8a55a3c43ea3a10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.493508813s ago: executing program 7 (id=826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010828bd7000fddbdf251000000005000f0004000000080001", @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x14) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040040) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) keyctl$clear(0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd700002dcdf250100000008000100", @ANYRES32=r6, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000020000000000000000000500030003000000080004000700000008000600", @ANYRES32=r4, @ANYBLOB="ca0acedcf32ef693db7800127f62febc7ca4726dc6f53f4d62890d13aef7baca2713f6028bc15fcf58acb898f43d632cc204b92f37063c91d5292d47f1a3bb8acc1d5379d293a73f063c7fb7b8575668d869e95508e0a70424802df67e06ffb78b5803a5b041e8a3133caac55cde58"], 0x60}, 0x1, 0x0, 0x0, 0x4481}, 0x240400a4) mlockall(0x0) 7.408327245s ago: executing program 1 (id=828): io_setup(0x3, &(0x7f0000000140)=0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000) r2 = socket$inet(0x2, 0x3, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r3, 0x10000000005, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@userptr={0x5, 0x7, 0x4, 0x0, 0xb5c8, {}, {0x2, 0x2, 0x5, 0x77, 0xfd, 0x2, "95db0b8f"}, 0x9, 0x2, {}, 0x64}) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)={[{@usrquota}]}) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}}], {0xfffffffffffffeca, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000028fffe00000002907800000000ffffffff11009078e000000200fcd24902c50000024062d13c0000faff"], 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) syz_emit_ethernet(0x51, &(0x7f00000002c0)={@link_local, @local, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3b, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x23}}, @redirect={0x5, 0x1, 0x0, @remote, {0x6, 0x4, 0x1, 0x2, 0x9, 0x65, 0x2, 0x81, 0x8, 0xfffe, @remote, @multicast1, {[@end]}}, "722b7366eebd74"}}}}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}]) 6.089550467s ago: executing program 7 (id=829): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="8c0000005db0e2f86a2ab5221646a99669460423ab591cfbfedd1c71ad5c492e488e77cd88b5d461105561617ae30fb8db7ac36f5d1486f0eb20028776d4c1e2f9e25b52ff5761f4b34061393dcf758c7bfdb3e20d33b43762e68e3b2fcf9f2174f2b0ea221c2c69e5169f851ad4ad8287e7acaf1136f8d71aceb5ae82ab916492f28c5ae74e252a81a63c1c51", @ANYRES16=r3, @ANYBLOB="08000000000000000000047409062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002007f0000010800040073797374656d5f753a6f626a6563745f723a6e6577726f6c655f657890105f743a73300014000300ff0200000000000000000000000000010000000000000000cc2c0dc8988352e0b9c6bc7634c1ce0d511a092c2de3874e897c0fa8fd5c03a035e73fa61ed33e1cab61e3d1942b7d1c9636115e3f9eec7b1e3c4cb2e5e9733a161d8684111573ae8e30ed15654589c5f24109310ce75b154c0764b451426c37001c28bf72462927aae12476f79f"], 0x8c}, 0x1, 0xffffffff00000003}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$KDFONTOP_SET(r8, 0x4b6a, &(0x7f0000000000)={0x200e, 0x200c, 0x3, 0x1d, 0x200b, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x3) setreuid(0xee01, 0xee01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4044800}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000040000007b8af8ff2f400cff4a00"/40], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.882871424s ago: executing program 1 (id=830): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000003c0)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}) mq_notify(r0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x310, 0x34, 0x20, 0xd, 0x40, 0x77d, 0x627a, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x0, 0x8, [{{0x9, 0x4, 0x5c, 0xa, 0x0, 0x3, 0x90, 0xfd, 0x2}}]}}]}}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0}) 4.900388889s ago: executing program 7 (id=831): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000946f29612637ca3122a92e19a6db2b399e0506da1d942bbf66ba86866bb7ab5bf6b8af7cc80b5e58097cc24a1122624d3ba6fba5bd10c311b70c8c3c6399185edbe731e6b472c116fa9c4df441ef0ded115159e7e821748cd1ebe9776b7d218bf30795da020000002c4969baeb3e3761ab80c4df1af317fc68e3ca9a9638ba2197f99962895c0d7d64ece5237851ba16b4e436c0bf23b5d200499f10186ebca02a0fe976f3cdb4a0cfdea65594fff2c4e6f487c1a5a45eac7f31d759f02a33ad44d4ebda099bfc9bf39edf42cf32c186724b7d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x800) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000240)=0x800, 0x4) r2 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0xea) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x420800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000000002010400000000a90946190a000045300001802c00018014000300fc0100000000000000000000000000001400040000000000e84d7516e941f2aa000000013800038005000340000400002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000002c0)={0xa, 0x0, {0x0, 0x1, 0x2, 0x2, 0x9}, 0x2}) madvise(&(0x7f000030e000/0x3000)=nil, 0x3000, 0x2) syz_io_uring_setup(0x6536, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000090bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) r6 = gettid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x7, 0x4, 0x0, 'queue0\x00', 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x4, r6, 0x3, &(0x7f0000000000)) 4.753717168s ago: executing program 5 (id=832): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd6b) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x70000000) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x2, &(0x7f0000000180)=']{\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="203002000000023006872a86ab2f140be3d9dcb6f29246d48f54f185f7eb618d4f914ac8f36d05afe83ca8f7332242453dd936afb1000675a2d77eac617f11a27963f9f23e756c664a48ae9a23df08a60e0a853436"], 0x0, 0x0, 0x0}, 0x0) 4.604465094s ago: executing program 3 (id=833): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x8c) (async, rerun: 64) read$FUSE(r3, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x18, 0x0, 0x763}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) (async, rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) recvmsg$unix(r2, &(0x7f00000003c0)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/134, 0x86}, {&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f0000000240)=""/17, 0x11}], 0x4}, 0x1) 4.513232023s ago: executing program 7 (id=834): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfc, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) 4.225542048s ago: executing program 3 (id=835): unshare(0x26020480) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) write$sequencer(r6, &(0x7f0000000040)=[@v={0x93, 0x0, 0xa0, 0xd, @MIDI_NOTEON=@note=0x11, 0xe, 0x4}], 0x8) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x64}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) close(r8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @vbi={0x88df, 0xfc3, 0x6, 0x34324142, [0x6], [0x4d95, 0x3], 0x13b}}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) 3.292276484s ago: executing program 1 (id=836): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x1000aee1, 0x0, 0x1, 0x35e}, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)="ed", 0x1f}], 0x1}, 0x4004) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000cae500bfffb702000005000000b7030000000000008500000073000000181100"/84, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pread64(r9, 0x0, 0x0, 0x100000000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) setsockopt$inet6_tcp_int(r10, 0x6, 0x25, &(0x7f0000000200)=0x1, 0x4) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 3.196581011s ago: executing program 3 (id=837): r0 = socket$caif_stream(0x25, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x15, &(0x7f00000029c0)=""/149, &(0x7f0000002a80)=0x95) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x3}]}}]}, 0x40}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r4, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'rti800\x00', [0x401, 0x10, 0x401, 0xa, 0x14000000, 0xfffffffc, 0x9, 0x2, 0xffd, 0xa, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) 2.529685588s ago: executing program 1 (id=838): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000400000000ae614448187aa0339a50a529a3f7bc2b000000000000000000000000000000f4aaec3c4554636e6f1fcd116417aee62c7adf6f19d87ce142154c1bd84b68a96a4aad2f3829e01eed4a661674fcdd4a2231767861a2a959c218fe527f40d59db3b39b420f7c40b54e1f73ceff911c86035f047a860b3c63a67be4920f74c684e7557cecc33bf127d68d2e40a5093b5ecd1b85db357498711424cbf69df31b988ea5f8c30acafa6c89d612b2e4c8cfbc42036ba1de5d74bebaffe791ffd7daec"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 2.52907553s ago: executing program 5 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(0x0, 0x1a0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x40) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000040900010073797a30000000000900020073797a320000000070000000050a010300000000000000000200000008000b40000000020900010073797a300000000008000a40000000030b00070066696c"], 0x3518}}, 0x0) socket(0x21, 0x6, 0x73) open$dir(&(0x7f0000000000)='./file0\x00', 0x141040, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.381943866s ago: executing program 3 (id=840): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x10002, 0x1, 0x1}) r1 = gettid() r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x25dfdbfc, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x59}}}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x999}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0405626, &(0x7f0000000100)=0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.334798213s ago: executing program 5 (id=841): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x35, &(0x7f00000003c0)={@multicast2, @local, 0x0}, &(0x7f0000000400)=0xa) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="ade29a1f1c0814f52c9aeed43299692b12b744c961abe0ebadb3324f873ac639a87e2e3abf6efafc5ca348e3bac855397a723732e9bc", 0x36, 0x4, &(0x7f0000000140)={0x11, 0x15, r1, 0x1, 0x2, 0x6, @broadcast}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = inotify_init1(0x800) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r5) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x20044041}, 0x0) fchdir(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x356, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r8, 0x2}}, 0x10) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r9) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) tee(r10, r2, 0xfffffffffffffff7, 0x2) accept$alg(r0, 0x0, 0x0) 1.186328339s ago: executing program 8 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x7c, r2, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10001, 0x47}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x760}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x40]}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x4004000) 981.491585ms ago: executing program 3 (id=842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)={0x3f8, r1, 0x520, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x375d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0xab, 0x3, "2cb68e096552e051580ae7642101c7ee0a55d9b7e5f5af42fabe908520082f05cb2ddd4cce029706478e34abd0338a2ac9841b488871cf8d0bbf78330e7bd8c7e40088c9488b3eed65460089fde5b4ec9d6919bd78b7d1d98a25edf4ca7fa941219f65349dff67c2fc9dd32bf98cb67d09bba544a657c75bf8e990946b7772a73aad9ebea0d78a693b3590040ff019e23400f281ec2b7dd806aad726c96280de53080d3afaca6b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x98, 0x3, "8b52e4ed9dcfd058d4bc52f71d52531cce43fc10fe7ddb0c02dc5fc587131f041a8ff9f8443900e5645ba10b7573846f60908d6ae22ac9a14aeeb33b026f3b4677d87914e2bfec17f98f77d9d5ef225441fe77bcd038afe21355300d4e10218bf4dd8f81059fc7cb508afd176a7b18a16741b0cda9147f574886dd93a67d621018a22ce9005bee957bc7e11d3c002effdfd43f04"}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x10}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111040000000000731a0eff00000000950000f7ff000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x23}, 0x22) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x60, r2, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @action={{{}, {}, @device_b}, @sp_mp_open={0xf, 0x1, {0x4410, {}, @void, @val={0x2d, 0x1a, {0xe68a5446ef412049, 0x2, 0x2, 0x0, {0x7, 0xc, 0x0, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x6, 0x1}}}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x48891}, 0x24000005) 942.086559ms ago: executing program 7 (id=843): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711825000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0200260b0a000200aaaaaaaaaabb000008000f00fb"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', r2, 0x1, 0x7, 0x7, 0x9, {{0x1b, 0x4, 0x1, 0x3b, 0x6c, 0x68, 0x0, 0xc, 0x9237221666a1c8c9, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0x13, 0x11, [@empty, @broadcast, @broadcast, @private=0xa010101]}, @timestamp_prespec={0x44, 0x24, 0xbe, 0x3, 0x0, [{@empty}, {@multicast1, 0x1}, {@loopback, 0x5}, {@broadcast}]}, @noop, @end, @timestamp_prespec={0x44, 0x1c, 0x9a, 0x3, 0x9, [{@multicast1, 0x80000001}, {@loopback, 0x8}, {@remote, 0x9}]}]}}}}}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r6, 0x1, {0x0, 0x0, 0x2}, 0x2}, 0x18, &(0x7f00000000c0)={0x0}, 0x3f, 0x0, 0x0, 0x40014}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000300)={0x598, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x1fc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x598}, 0x1, 0x0, 0x0, 0x4049000}, 0x8004) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xc0d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 778.695264ms ago: executing program 8 (id=844): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="0a236bfc9e5cc36bc44dd1c5ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x7, 0xff}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0xff, {0x0, 0x0, 0x0, {0x8, 0x0, 0x10000000000, 0xa5, 0x6bf5, 0xfffffffffffffffe, 0x6, 0x10, 0x4, 0x6000, 0x8, r4, r5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\a\x00\x00'], 0x48) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r7, r7, 0x0, 0x8) ppoll(&(0x7f0000000080)=[{r6, 0x400}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r8 = syz_open_pts(r6, 0x121500) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000280)=0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r11}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x9}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x2000c000) 714.803976ms ago: executing program 1 (id=845): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) 637.649725ms ago: executing program 5 (id=846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56547, 0x0, 0x800000, {0x0, 0x0, 0x0, 0x0, {}, {0x8abae9b59d0949b7, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) utimensat(r1, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@bridge_newvlan={0x18, 0x78, 0x1}, 0x18}, 0x1, 0x5502000000000000}, 0x4000800) 405.353815ms ago: executing program 5 (id=847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x7}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 345.022268ms ago: executing program 1 (id=848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b000104000000090400004fd4695e00090532825b"], 0x0) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 0x1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x1f, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @jmp={0x5, 0x1, 0xd, 0x17, 0x9, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffe9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx={0x18, 0x2028fc1baca0b1f8, 0x5, 0x0, 0x3}, @jmp={0x5, 0x0, 0x5, 0x0, 0x3, 0xc, 0x4}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async) creat(&(0x7f0000000200)='./file0\x00', 0x0) (async) mount$afs(&(0x7f0000000100)=@cell={0x23, 'syz1:', 'syz1', '.backup'}, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x8, 0x0) 73.615934ms ago: executing program 5 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000003100)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2]) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1}, 0x4) ptrace$cont(0x20, r4, 0x7, 0xfffffffffffffff8) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 68.718599ms ago: executing program 7 (id=850): r0 = socket$caif_stream(0x25, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x15, &(0x7f00000029c0)=""/149, &(0x7f0000002a80)=0x95) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x3}]}}]}, 0x40}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'rti800\x00', [0x401, 0x10, 0x401, 0xa, 0x14000000, 0xfffffffc, 0x9, 0x2, 0xffd, 0xa, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) 0s ago: executing program 3 (id=851): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x102, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3fff, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x5}, 0x1c) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8081, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x20004000) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x4501, 0x0) bind$inet6(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) kernel console output (not intermixed with test programs): 804c67bc00: rx timeout, send abort [ 231.140435][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804c67bc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 231.176085][ T7242] batadv0: entered promiscuous mode [ 231.183035][ T7242] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 231.218019][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.759994][ T5833] gspca_sunplus: reg_w_riv err -71 [ 231.832518][ T5833] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 232.114282][ T5833] usb 4-1: USB disconnect, device number 12 [ 232.304954][ T7245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.348971][ T31] audit: type=1400 audit(1753900200.245:903): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7244 comm="syz.2.338" daddr=fe80::bb dest=20003 [ 232.411135][ T7245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.641219][ T7246] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.020018][ T7257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.339'. [ 235.086108][ T5961] usb 1-1: USB disconnect, device number 9 [ 235.550716][ T7246] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.659783][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.695544][ T7256] batadv_slave_0: entered promiscuous mode [ 236.900949][ T7246] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.328254][ T7246] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.359397][ T7269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.400310][ T7269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.572176][ T7280] input: syz0 as /devices/virtual/input/input13 [ 239.584607][ T6034] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 239.679275][ T7280] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 239.719943][ T7246] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.845976][ T6034] usb 5-1: Using ep0 maxpacket: 8 [ 240.072290][ T7246] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.093003][ T6034] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 240.150037][ T6034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.162190][ T7246] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.171433][ T6034] usb 5-1: Product: syz [ 240.191371][ T6034] usb 5-1: Manufacturer: syz [ 240.209487][ T7246] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.218161][ T6034] usb 5-1: SerialNumber: syz [ 240.295174][ T6034] usb 5-1: config 0 descriptor?? [ 240.663144][ T6034] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 240.874332][ T6034] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 241.302659][ T6034] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 241.464361][ T6034] usb 3-1: Using ep0 maxpacket: 32 [ 241.477986][ T6034] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 241.489976][ T6034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.531120][ T6034] usb 3-1: config 0 descriptor?? [ 241.568550][ T6034] gspca_main: sunplus-2.14.0 probing 041e:400b [ 241.606006][ T5901] usb 5-1: USB disconnect, device number 14 [ 242.189279][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032675800: rx timeout, send abort [ 242.198162][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032675800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 242.713453][ T6034] gspca_sunplus: reg_r err -110 [ 242.760893][ T6034] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 244.908716][ T5833] usb 3-1: USB disconnect, device number 23 [ 245.444233][ T5833] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 245.726958][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 245.758749][ T5833] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 245.785026][ T5833] usb 3-1: config 0 has no interface number 0 [ 245.811337][ T5833] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 245.839291][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.872513][ T5833] usb 3-1: Product: syz [ 245.880928][ T5833] usb 3-1: Manufacturer: syz [ 245.890108][ T5833] usb 3-1: SerialNumber: syz [ 245.918119][ T5833] usb 3-1: config 0 descriptor?? [ 245.992377][ T5833] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 246.030299][ T5833] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 246.116240][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 246.347733][ T5833] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 246.374757][ T5833] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 246.422152][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 246.462060][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.495063][ T9] usb 1-1: config 0 descriptor?? [ 246.526775][ T9] cp210x 1-1:0.0: cp210x converter detected [ 247.101626][ T9] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 247.339850][ T9] cp210x 1-1:0.0: querying part number failed [ 247.736021][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 247.961629][ T9] usb 1-1: USB disconnect, device number 10 [ 248.056967][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 248.104381][ T9] cp210x 1-1:0.0: device disconnected [ 248.245687][ T5908] usb 3-1: USB disconnect, device number 24 [ 249.171136][ T7394] syz.0.373: attempt to access beyond end of device [ 249.171136][ T7394] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 249.186252][ T7394] gfs2: error -5 reading superblock [ 250.022542][ T31] audit: type=1400 audit(1753900218.095:904): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7399 comm="syz.1.375" daddr=ff02::1 dest=20000 [ 250.053910][ T7400] omfs: Invalid superblock (0) [ 250.164179][ T5833] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 250.578107][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 250.842125][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 250.865946][ T5833] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 250.886476][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.899535][ T5833] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 251.027808][ T5833] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 251.038304][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.096473][ T5833] usb 4-1: Product: syz [ 251.127045][ T5833] usb 4-1: Manufacturer: syz [ 251.166010][ T5833] usb 4-1: SerialNumber: syz [ 251.205765][ T5833] usb 4-1: config 0 descriptor?? [ 251.260789][ T5833] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 251.306787][ T5833] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 251.381811][ T31] audit: type=1400 audit(1753900219.435:905): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7412 comm="syz.4.378" daddr=fc00:: [ 251.437821][ T5833] mcba_usb 4-1:0.0: probe with driver mcba_usb failed with error -90 [ 251.517255][ T7417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.526775][ T7417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.664124][ T5833] usb 4-1: USB disconnect, device number 13 [ 252.062799][ T7423] kvm: pic: non byte write [ 252.088145][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 252.685602][ T12] wlan1: Trigger new scan to find an IBSS to join [ 252.890513][ T7431] 9p: Unknown access argument 18446744073709551615: -34 [ 252.983454][ T7435] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 253.859489][ T7440] netlink: 48 bytes leftover after parsing attributes in process `syz.4.384'. [ 255.640115][ T7451] netlink: 'syz.3.386': attribute type 2 has an invalid length. [ 255.663940][ T5961] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 255.690939][ T7451] netlink: 'syz.3.386': attribute type 4 has an invalid length. [ 255.747143][ T7455] binder: 7450:7455 ioctl c0306201 2000000003c0 returned -22 [ 255.799709][ T5961] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 256.565930][ T7452] syz.1.388 (7452): drop_caches: 1 [ 256.572006][ T7468] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 256.688697][ T7447] input: syz0 as /devices/virtual/input/input14 [ 257.291796][ T6978] wlan1: Trigger new scan to find an IBSS to join [ 257.670111][ T7492] tmpfs: Bad value for 'mpol' [ 257.706269][ T5833] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 257.737720][ T31] audit: type=1400 audit(1753900225.815:906): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7496 comm="syz.2.396" daddr=fe80::bb dest=3 [ 257.841706][ T7499] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 257.857326][ T5833] usb 2-1: device descriptor read/64, error -71 [ 257.903703][ T7499] kvm: pic: non byte read [ 257.911652][ T7499] kvm: pic: level sensitive irq not supported [ 257.911716][ T7499] kvm: pic: non byte read [ 257.926221][ T5901] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 258.084151][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 258.092298][ T5901] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 258.102762][ T5901] usb 4-1: config 0 has no interface number 0 [ 258.114124][ T5833] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 258.115039][ T5901] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 258.152578][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.165694][ T5901] usb 4-1: Product: syz [ 258.172170][ T5901] usb 4-1: Manufacturer: syz [ 258.180555][ T5901] usb 4-1: SerialNumber: syz [ 258.337260][ T5833] usb 2-1: device descriptor read/64, error -71 [ 258.431740][ T6978] wlan1: Creating new IBSS network, BSSID 32:f4:dc:f1:be:7f [ 258.455196][ T5833] usb usb2-port1: attempt power cycle [ 258.775867][ T5901] usb 4-1: config 0 descriptor?? [ 258.957835][ T5833] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 258.975808][ T5833] usb 2-1: device descriptor read/8, error -71 [ 259.002479][ T5901] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 259.046674][ T5901] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 259.136848][ T5901] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 259.214592][ T5833] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 259.235310][ T5833] usb 2-1: device descriptor read/8, error -71 [ 259.322747][ T7506] tty tty29: ldisc open failed (-12), clearing slot 28 [ 259.344905][ T5833] usb usb2-port1: unable to enumerate USB device [ 259.417776][ T7488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.441088][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.512896][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.524594][ T7488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.707753][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 259.710600][ T5833] usb 4-1: USB disconnect, device number 14 [ 259.811236][ T5833] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 259.956389][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 259.966882][ T5833] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 260.942354][ T5833] quatech2 4-1:0.51: device disconnected [ 261.039318][ T7520] netlink: 44 bytes leftover after parsing attributes in process `syz.4.402'. [ 261.060399][ T31] audit: type=1400 audit(1753900229.135:907): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7516 comm="syz.4.402" daddr=ff01::1 dest=20004 [ 261.254994][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.261488][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.615953][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.630765][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 261.641225][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.751739][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.894687][ T7518] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 261.977329][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 262.013749][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.046402][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.069225][ T31] audit: type=1804 audit(1753900230.145:908): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.406" name="/newroot/73/file0" dev="tmpfs" ino=409 res=1 errno=0 [ 262.122144][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.154629][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.490739][ T5908] usb 3-1: USB disconnect, device number 25 [ 262.500787][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 265.033432][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 265.900837][ T31] audit: type=1400 audit(1753900233.965:909): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7564 comm="syz.4.414" daddr=fe80::bb dest=20001 [ 266.204222][ T5833] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 266.344400][ T31] audit: type=1326 audit(1753900234.375:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.2.422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f837938e9a9 code=0x0 [ 267.023573][ T5833] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 267.054008][ T5833] usb 1-1: config 0 has no interface number 0 [ 267.060832][ T5833] usb 1-1: config 0 interface 29 has no altsetting 0 [ 267.354157][ T5833] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 267.630446][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.651768][ T5833] usb 1-1: Product: syz [ 267.664040][ T5833] usb 1-1: Manufacturer: syz [ 267.669194][ T5833] usb 1-1: SerialNumber: syz [ 267.872898][ T31] audit: type=1400 audit(1753900235.935:911): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7592 comm="syz.1.424" daddr=::ac14:1400 [ 267.924686][ T5833] usb 1-1: config 0 descriptor?? [ 267.981888][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.426'. [ 268.114378][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.427'. [ 268.285209][ T5833] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 269.049029][ T5833] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 269.086211][ T5833] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 269.106116][ T5833] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 269.157391][ T7611] tipc: Failed to remove unknown binding: 66,1,1/0:1110503880/1110503882 [ 269.170045][ T7610] tipc: Failed to remove unknown binding: 66,1,1/0:1110503880/1110503882 [ 269.215017][ T7610] tipc: Failed to remove unknown binding: 66,1,1/0:1110503880/1110503882 [ 269.258227][ T5833] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -22 [ 269.287009][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 269.507614][ T5961] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 269.714437][ T5940] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 269.935070][ T5940] usb 3-1: device descriptor read/64, error -71 [ 270.264274][ T1215] usb 1-1: USB disconnect, device number 11 [ 270.276779][ T5940] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 270.334517][ T5961] usb 2-1: Using ep0 maxpacket: 8 [ 270.346322][ T5961] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 270.363923][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.384186][ T5901] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 270.401467][ T5961] pvrusb2: Hardware description: Terratec Grabster AV400 [ 270.428796][ T5961] pvrusb2: ********** [ 270.444186][ T5940] usb 3-1: device descriptor read/64, error -71 [ 270.445897][ T5961] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 270.510961][ T5961] pvrusb2: Important functionality might not be entirely working. [ 270.549356][ T5961] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 270.629290][ T5901] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.640783][ T5961] pvrusb2: ********** [ 270.646804][ T5901] usb 5-1: config 0 has no interface number 0 [ 270.653385][ T7609] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 270.660689][ T7609] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 270.790048][ T5901] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 270.900395][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.015498][ T7609] vhci_hcd vhci_hcd.0: Device attached [ 271.061650][ T5901] usb 5-1: Product: syz [ 271.147924][ T5901] usb 5-1: Manufacturer: syz [ 271.259664][ T5940] usb usb3-port1: attempt power cycle [ 271.289422][ T5915] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 271.357848][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 271.522924][ T5901] usb 5-1: SerialNumber: syz [ 271.707200][ T5940] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 271.880619][ T5940] usb 3-1: device descriptor read/8, error -71 [ 272.022407][ T7628] team0 (unregistering): Port device team_slave_0 removed [ 272.107904][ T7628] team0 (unregistering): Port device team_slave_1 removed [ 273.204201][ T5940] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 273.226085][ T5940] usb 3-1: device descriptor read/8, error -71 [ 273.341919][ T5940] usb usb3-port1: unable to enumerate USB device [ 273.577672][ T5901] usb 5-1: config 0 descriptor?? [ 274.021891][ T7619] usb usb1: usbfs: process 7619 (syz.4.433) did not claim interface 0 before use [ 274.163154][ T5901] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 274.234349][ T7626] vhci_hcd: connection reset by peer [ 274.240005][ T5901] usb 5-1: USB disconnect, device number 15 [ 274.246675][ T2343] pvrusb2: Invalid write control endpoint [ 274.260555][ T5961] usb 2-1: USB disconnect, device number 29 [ 274.292079][ T49] vhci_hcd: stop threads [ 274.325084][ T49] vhci_hcd: release socket [ 274.351412][ T49] vhci_hcd: disconnect device [ 274.469558][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'. [ 274.547181][ T2343] pvrusb2: Invalid write control endpoint [ 274.553124][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 274.620848][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 274.659117][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 274.691963][ T2343] pvrusb2: Device being rendered inoperable [ 274.714975][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 274.925920][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 274.947726][ T2343] pvrusb2: Attached sub-driver cx25840 [ 274.953357][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 275.001107][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 275.194186][ T5940] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 275.273650][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 275.273678][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.445'. [ 275.375569][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 275.395578][ T5940] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 275.395600][ T5940] usb 3-1: config 0 has no interface number 0 [ 275.412093][ T5940] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 275.412122][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.412138][ T5940] usb 3-1: Product: syz [ 275.412149][ T5940] usb 3-1: Manufacturer: syz [ 275.412161][ T5940] usb 3-1: SerialNumber: syz [ 275.487284][ T5940] usb 3-1: config 0 descriptor?? [ 275.516639][ T5940] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 275.516731][ T5940] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 275.986759][ T5940] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 275.987283][ T5940] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 278.202500][ T7689] kexec: Could not allocate control_code_buffer [ 278.243627][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 278.934309][ T5915] vhci_hcd: vhci_device speed not set [ 279.089379][ T5838] usb 3-1: USB disconnect, device number 30 [ 279.167957][ T6034] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 279.400036][ T5940] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 279.652697][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 279.661571][ T6034] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.077585][ T6034] usb 1-1: config 0 has no interface number 0 [ 280.097845][ T5940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.138184][ T6034] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 280.149473][ T5940] usb 5-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 280.171683][ T6034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.201380][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.223705][ T6034] usb 1-1: Product: syz [ 280.238620][ T5940] usb 5-1: Product: syz [ 280.253196][ T6034] usb 1-1: Manufacturer: syz [ 280.263308][ T5940] usb 5-1: Manufacturer: syz [ 280.273488][ T6034] usb 1-1: SerialNumber: syz [ 280.283019][ T5940] usb 5-1: SerialNumber: syz [ 280.303565][ T6034] usb 1-1: config 0 descriptor?? [ 280.411415][ T5940] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input15 [ 280.708001][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.460'. [ 280.748393][ T6034] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 280.756646][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.805020][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.938429][ T7723] overlayfs: empty lowerdir [ 281.007730][ T6034] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.038023][ T6034] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 281.042843][ T5190] bcm5974 5-1:1.0: could not read from device [ 281.084484][ T7726] netlink: 48 bytes leftover after parsing attributes in process `syz.3.462'. [ 281.514665][ T6034] usb 1-1: media controller created [ 281.650714][ T5940] usb 5-1: USB disconnect, device number 16 [ 281.679781][ T6034] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.875056][ T6034] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 281.954907][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 281.981864][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 282.608005][ T6034] usb 1-1: USB disconnect, device number 12 [ 283.836683][ T7745] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 283.850619][ T7745] netlink: 224 bytes leftover after parsing attributes in process `syz.2.467'. [ 284.258161][ T31] audit: type=1804 audit(1753900251.965:912): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.465" name="/newroot/83/file0" dev="tmpfs" ino=463 res=1 errno=0 [ 284.326919][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 284.338246][ T7748] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 284.347012][ T7748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.730251][ T7751] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 284.832808][ T31] audit: type=1400 audit(1753900252.885:913): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7746 comm="syz.3.468" daddr=ff02::1 dest=3 [ 284.906231][ T7751] 9pnet_fd: Insufficient options for proto=fd [ 287.204243][ T7774] netlink: 48 bytes leftover after parsing attributes in process `syz.2.474'. [ 287.374247][ T5915] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 288.004186][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 288.026209][ T5915] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 288.059559][ T5915] usb 1-1: config 0 has no interface number 0 [ 288.102504][ T5915] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 288.133207][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.145395][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 288.167093][ T5915] usb 1-1: Product: syz [ 288.186715][ T7785] hsr_slave_0: left promiscuous mode [ 288.186789][ T5915] usb 1-1: Manufacturer: syz [ 288.216074][ T5915] usb 1-1: SerialNumber: syz [ 288.232731][ T5915] usb 1-1: config 0 descriptor?? [ 288.248184][ T7785] hsr_slave_1: left promiscuous mode [ 288.257608][ T5915] smsc95xx v2.0.0 [ 288.287577][ T31] audit: type=1804 audit(1753900256.365:914): pid=7791 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.479" name="/newroot/100/file0" dev="tmpfs" ino=542 res=1 errno=0 [ 288.482743][ T6181] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 288.587963][ T5838] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 288.746495][ T5838] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.818704][ T5915] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 288.850848][ T5915] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 288.941741][ T5838] usb 3-1: config 0 has no interface number 0 [ 288.967904][ T5838] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 289.009438][ T31] audit: type=1400 audit(1753900257.055:915): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7795 comm="syz.1.483" daddr=fe80::15 dest=20000 [ 289.016675][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.343223][ T5838] usb 3-1: Product: syz [ 289.544656][ T5838] usb 3-1: Manufacturer: syz [ 289.562462][ T5838] usb 3-1: SerialNumber: syz [ 289.570763][ T7804] netlink: 'syz.4.484': attribute type 11 has an invalid length. [ 289.582635][ T5838] usb 3-1: config 0 descriptor?? [ 289.854242][ T5838] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 289.899591][ T5838] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 289.954907][ T5838] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 290.007575][ T5838] usb 3-1: media controller created [ 290.125546][ T5915] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 290.172417][ T5915] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 290.251244][ T7820] binder_alloc: binder_alloc_mmap_handler: 7813 200000ffc000-200001000000 already mapped failed -16 [ 290.285049][ T7821] netlink: 40 bytes leftover after parsing attributes in process `syz.1.486'. [ 290.382748][ T5915] usb 1-1: USB disconnect, device number 13 [ 290.970077][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.024705][ T7817] usb usb1: usbfs: process 7817 (syz.2.480) did not claim interface 0 before use [ 291.168313][ T5838] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 291.334529][ T5915] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 291.721382][ T5915] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 291.876913][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.174267][ T5915] usb 2-1: config 0 descriptor?? [ 292.349285][ T5838] usb 3-1: USB disconnect, device number 31 [ 292.540411][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.585922][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.767366][ T7844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.494'. [ 292.924154][ T5838] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 293.358235][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 293.424636][ T5915] ath6kl: Failed to submit usb control message: -110 [ 294.123110][ T7850] hub 8-0:1.0: USB hub found [ 294.129896][ T7850] hub 8-0:1.0: 1 port detected [ 294.397711][ T5838] usb 1-1: config 0 has no interfaces? [ 294.644150][ T5915] ath6kl: unable to send the bmi data to the device: -110 [ 294.673170][ T5915] ath6kl: Unable to send get target info: -110 [ 294.715401][ T5915] ath6kl: Failed to init ath6kl core: -110 [ 294.794494][ T5915] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 296.247260][ T5915] usb 2-1: USB disconnect, device number 30 [ 296.291714][ T5838] usb 1-1: string descriptor 0 read error: -71 [ 296.360710][ T5838] usb 1-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 296.414812][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.601528][ T5838] apple-mfi-fastcharge 1-1: config 0 descriptor?? [ 296.649644][ T5838] apple-mfi-fastcharge 1-1: can't set config #0, error -71 [ 296.676228][ T5838] apple-mfi-fastcharge 1-1: USB disconnect, device number 14 [ 296.722667][ T7861] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 296.781564][ T7865] netlink: 3 bytes leftover after parsing attributes in process `syz.3.496'. [ 296.999734][ T7861] bond2: entered promiscuous mode [ 297.006918][ T7861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.044821][ T7865] batadv1: entered promiscuous mode [ 297.050432][ T7865] batadv1: entered allmulticast mode [ 297.058342][ T7865] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 297.068103][ T7865] bond2: (slave batadv1): making interface the new active one [ 297.078310][ T7865] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 298.279548][ T7877] binder: 7874:7877 ioctl c0306201 2000000003c0 returned -22 [ 298.391683][ T7875] syz.0.499 (7875): drop_caches: 1 [ 298.437381][ T7875] syz.0.499 (7875): drop_caches: 1 [ 300.752543][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.503'. [ 300.844879][ T7897] netlink: 36 bytes leftover after parsing attributes in process `syz.3.505'. [ 301.124086][ T5961] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 301.328590][ T7916] netlink: 'syz.2.509': attribute type 1 has an invalid length. [ 301.357275][ T7916] netlink: 224 bytes leftover after parsing attributes in process `syz.2.509'. [ 301.457008][ T5961] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.468924][ T5961] usb 2-1: config 0 has no interface number 0 [ 301.515235][ T5961] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 301.544067][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.583569][ T5961] usb 2-1: Product: syz [ 301.607284][ T5961] usb 2-1: Manufacturer: syz [ 301.612325][ T5961] usb 2-1: SerialNumber: syz [ 301.754545][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 301.787347][ T5961] usb 2-1: config 0 descriptor?? [ 302.111968][ T5961] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 302.148447][ T5961] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 302.204138][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 302.214379][ T5961] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 302.228361][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 302.235678][ T5961] usb 2-1: media controller created [ 302.262282][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.330609][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.488095][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 302.504133][ T9] pvrusb2: ********** [ 302.508210][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 302.529290][ T9] pvrusb2: Important functionality might not be entirely working. [ 302.537615][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 302.549456][ T9] pvrusb2: ********** [ 302.574068][ T2343] pvrusb2: Invalid write control endpoint [ 303.556009][ T7928] usb usb1: usbfs: process 7928 (syz.1.504) did not claim interface 0 before use [ 303.763133][ T7938] 9pnet_fd: Insufficient options for proto=fd [ 303.922812][ T2343] pvrusb2: Invalid write control endpoint [ 303.945725][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 303.964391][ T2085] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 303.967578][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 304.004182][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 304.006049][ T5838] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 304.024175][ T2343] pvrusb2: Device being rendered inoperable [ 304.034999][ T2343] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 304.049709][ T2343] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 304.069411][ T2343] pvrusb2: Attached sub-driver cx25840 [ 304.079981][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 304.093661][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 304.147612][ T2085] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 304.174483][ T2085] usb 1-1: config 0 interface 0 has no altsetting 0 [ 304.195875][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 304.203589][ T2085] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 304.215279][ T5838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 304.226543][ T2085] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 304.239345][ T5838] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 304.249164][ T2085] usb 1-1: Product: syz [ 304.254559][ T2085] usb 1-1: Manufacturer: syz [ 304.259224][ T2085] usb 1-1: SerialNumber: syz [ 304.264886][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.273141][ T5838] usb 4-1: Product: syz [ 304.282275][ T2085] usb 1-1: config 0 descriptor?? [ 304.297137][ T5838] usb 4-1: Manufacturer: syz [ 304.301820][ T5838] usb 4-1: SerialNumber: syz [ 304.312361][ T2085] usb 1-1: selecting invalid altsetting 0 [ 304.322518][ T5838] usb 4-1: config 0 descriptor?? [ 304.340007][ T7938] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 304.362005][ T5838] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 304.418176][ T5961] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 304.433101][ T7920] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 304.639625][ T2085] usb 1-1: USB disconnect, device number 15 [ 305.561877][ T5961] usb 2-1: USB disconnect, device number 31 [ 305.621483][ T9] usb 5-1: USB disconnect, device number 17 [ 305.899400][ T7945] tmpfs: Unknown parameter '4' [ 306.309665][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 306.367154][ T5961] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 306.553001][ T5961] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 306.584290][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.603037][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.616949][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.629472][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.640176][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.659905][ T5961] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.675066][ T5961] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.701698][ T5961] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.710327][ T5961] usb 1-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 306.721251][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.734846][ T5961] usb 1-1: config 0 descriptor?? [ 306.821816][ T1215] usb 4-1: USB disconnect, device number 15 [ 306.821875][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 307.100248][ T7956] lo speed is unknown, defaulting to 1000 [ 307.164941][ T7965] netlink: 100 bytes leftover after parsing attributes in process `syz.4.524'. [ 307.199108][ T7965] bond_slave_1: entered promiscuous mode [ 307.222920][ T7965] bond_slave_1: left promiscuous mode [ 307.714359][ T5961] usbhid 1-1:0.0: can't add hid device: -71 [ 307.733241][ T5961] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 307.785586][ T7971] evm: overlay not supported [ 307.833166][ T5961] usb 1-1: USB disconnect, device number 16 [ 307.989124][ T7956] chnl_net:caif_netlink_parms(): no params data found [ 308.464667][ T5838] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 308.704129][ T5844] Bluetooth: hci2: command tx timeout [ 308.711275][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 308.742283][ T5838] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 308.797182][ T5838] usb 5-1: config 0 has no interface number 0 [ 308.864912][ T5838] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 308.923919][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.974086][ T5838] usb 5-1: Product: syz [ 308.985777][ T2085] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 309.021850][ T5838] usb 5-1: Manufacturer: syz [ 309.052670][ T5838] usb 5-1: SerialNumber: syz [ 309.166813][ T5838] usb 5-1: config 0 descriptor?? [ 309.184901][ T2085] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.219199][ T2085] usb 1-1: config 0 has no interface number 0 [ 309.344507][ T5838] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 309.570651][ T2085] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 309.621859][ T5838] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 309.645539][ T2085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.663790][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.673132][ T2085] usb 1-1: Product: syz [ 309.678749][ T2085] usb 1-1: Manufacturer: syz [ 309.685335][ T5838] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 309.693447][ T7956] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.701736][ T5838] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 309.709775][ T2085] usb 1-1: SerialNumber: syz [ 309.715728][ T7956] bridge_slave_0: entered allmulticast mode [ 309.726474][ T7956] bridge_slave_0: entered promiscuous mode [ 309.728826][ T2085] usb 1-1: config 0 descriptor?? [ 309.775477][ T7956] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.783649][ T7956] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.824926][ T7956] bridge_slave_1: entered allmulticast mode [ 309.838662][ T7956] bridge_slave_1: entered promiscuous mode [ 309.914316][ T7996] netlink: 512 bytes leftover after parsing attributes in process `syz.1.531'. [ 309.941664][ T2085] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 309.961599][ T7956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.973805][ T7996] netlink: 512 bytes leftover after parsing attributes in process `syz.1.531'. [ 309.991687][ T2085] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 310.003596][ T7996] netlink: 512 bytes leftover after parsing attributes in process `syz.1.531'. [ 310.015381][ T7956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.028827][ T2085] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 310.047690][ T2085] usb 1-1: media controller created [ 310.055586][ T7996] netlink: 512 bytes leftover after parsing attributes in process `syz.1.531'. [ 310.081706][ T7996] netlink: 512 bytes leftover after parsing attributes in process `syz.1.531'. [ 310.095358][ T2085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.106499][ T7996] netlink: 512 bytes leftover after parsing attributes in process `syz.1.531'. [ 310.149368][ T7996] netlink: 512 bytes leftover after parsing attributes in process `syz.1.531'. [ 310.184393][ T7996] netlink: 512 bytes leftover after parsing attributes in process `syz.1.531'. [ 310.259165][ T7956] team0: Port device team_slave_0 added [ 310.288024][ T7956] team0: Port device team_slave_1 added [ 310.390644][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.399987][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.451334][ T7956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.478847][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.489071][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.515820][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.525205][ T7956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.613913][ T7956] hsr_slave_0: entered promiscuous mode [ 310.625590][ T7956] hsr_slave_1: entered promiscuous mode [ 310.632423][ T7956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.640997][ T7956] Cannot create hsr debugfs directory [ 310.664055][ T5915] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 310.674139][ T5961] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 310.801132][ T5844] Bluetooth: hci2: command tx timeout [ 310.824177][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 310.835068][ T5961] usb 2-1: Using ep0 maxpacket: 8 [ 310.842104][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.857141][ T5915] usb 4-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30 [ 310.870864][ T5961] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 310.879746][ T5961] usb 2-1: config 0 has no interface number 1 [ 310.886583][ T5915] usb 4-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255 [ 310.897870][ T5961] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.911326][ T5915] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 310.927466][ T5961] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 310.939878][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.947110][ T5961] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 310.959546][ T5961] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 310.971089][ T5961] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.987442][ T5915] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 310.997550][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.006001][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 311.018262][ T5915] usb 4-1: Product: syz [ 311.022640][ T5915] usb 4-1: Manufacturer: syz [ 311.028951][ T5915] usb 4-1: SerialNumber: syz [ 311.036556][ T5961] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 311.048857][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.060750][ T5961] usb 2-1: Product: syz [ 311.066059][ T5915] usb 4-1: config 0 descriptor?? [ 311.076864][ T5961] usb 2-1: Manufacturer: syz [ 311.082639][ T8004] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 311.091749][ T5961] usb 2-1: SerialNumber: syz [ 311.106832][ T5961] usb 2-1: config 0 descriptor?? [ 311.122764][ T7956] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 311.126347][ T8005] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 311.147852][ T7956] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 311.161869][ T5961] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.165027][ T7956] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 311.182241][ T5961] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.186741][ T7956] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 311.244945][ T5961] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 311.269273][ T2085] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 311.311802][ T5838] usb 5-1: USB disconnect, device number 18 [ 311.327388][ T5915] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.365406][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.414628][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.496915][ T5961] usb 2-1: USB disconnect, device number 32 [ 311.524661][ T7956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.573602][ T5915] usb 4-1: USB disconnect, device number 16 [ 311.617506][ T7956] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.675389][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.682843][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.710155][ T7736] udevd[7736]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.739658][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.747006][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.800646][ T8014] udevd[8014]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 311.834425][ T8016] __nla_validate_parse: 25 callbacks suppressed [ 311.834441][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.534'. [ 312.346124][ T8027] ksmbd: Unknown IPC event: 3, ignore. [ 312.395437][ T8027] usb usb8: usbfs: process 8027 (syz.1.536) did not claim interface 0 before use [ 312.416477][ T31] audit: type=1400 audit(1753900280.495:916): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8022 comm="syz.1.536" daddr=fe80::1b dest=16385 [ 312.507562][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 312.744086][ T31] audit: type=1400 audit(1753900280.585:917): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8028 comm="syz.3.538" daddr=::ffff:172.20.20.0 [ 312.880642][ T5844] Bluetooth: hci2: command tx timeout [ 312.901435][ T7956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.964683][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 312.982214][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 312.998643][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 313.013107][ T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 313.031506][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.042706][ T9] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 313.065626][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 313.080092][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.091219][ T9] usb 5-1: Product: syz [ 313.096673][ T9] usb 5-1: Manufacturer: syz [ 313.102591][ T9] usb 5-1: SerialNumber: syz [ 313.312059][ T7956] veth0_vlan: entered promiscuous mode [ 313.333066][ T9] usb 5-1: 0:2 : does not exist [ 313.342900][ T7956] veth1_vlan: entered promiscuous mode [ 313.371545][ T9] usb 5-1: USB disconnect, device number 19 [ 313.448941][ T7956] veth0_macvtap: entered promiscuous mode [ 313.462570][ T7956] veth1_macvtap: entered promiscuous mode [ 313.492934][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.514390][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.529330][ T7956] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.539241][ T7956] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.548778][ T7956] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.558279][ T7956] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.659536][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.678503][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.712005][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.721286][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.871021][ T8042] netlink: 'syz.5.518': attribute type 29 has an invalid length. [ 315.974479][ T5844] Bluetooth: hci2: command tx timeout [ 316.155582][ T5915] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 316.314733][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 316.331830][ T5915] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 316.342908][ T5915] usb 4-1: config 0 has no interface number 0 [ 316.391508][ T5915] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 316.430551][ T5915] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 316.443823][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.452386][ T5915] usb 4-1: Product: syz [ 316.456868][ T5915] usb 4-1: Manufacturer: syz [ 316.461649][ T5915] usb 4-1: SerialNumber: syz [ 316.478811][ T5915] usb 4-1: config 0 descriptor?? [ 316.545393][ T5838] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 316.564425][ T5908] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 316.724879][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 316.737071][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.745886][ T5838] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.817610][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.826160][ T5838] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.837384][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.868894][ T5908] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.879354][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.882684][ T5838] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.893442][ T5908] usb 5-1: config 0 descriptor?? [ 316.988438][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.266157][ T6034] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 317.865618][ T5838] usb 6-1: Product: syz [ 318.377063][ T5838] usb 6-1: Manufacturer: syz [ 318.394454][ T5838] usb 6-1: SerialNumber: syz [ 318.416979][ T8053] netlink: 'syz.4.543': attribute type 4 has an invalid length. [ 318.427087][ T8053] netlink: 'syz.4.543': attribute type 5 has an invalid length. [ 318.436237][ T8053] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.543'. [ 318.467704][ T6034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.489117][ T6034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.499699][ T6034] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 318.509903][ T6034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.528073][ T6034] usb 2-1: config 0 descriptor?? [ 318.563842][ T5915] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 318.640390][ T5915] usb 4-1: USB disconnect, device number 17 [ 318.721694][ T5838] usb 6-1: can't set config #1, error -71 [ 318.742087][ T5908] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 318.819640][ T5838] usb 6-1: USB disconnect, device number 2 [ 318.887437][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.940964][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.312842][ T6034] usbhid 2-1:0.0: can't add hid device: -32 [ 319.321124][ T6034] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 319.816311][ T3017] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 320.024305][ T5908] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 320.205283][ T5908] usb 6-1: device descriptor read/64, error -71 [ 320.416866][ T8087] binder: 8085:8087 ioctl c0306201 2000000003c0 returned -22 [ 320.437895][ T8086] syz.3.552 (8086): drop_caches: 1 [ 320.454063][ T5908] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 320.520147][ T8086] syz.3.552 (8086): drop_caches: 1 [ 320.596713][ T5908] usb 6-1: device descriptor read/64, error -71 [ 320.714649][ T5908] usb usb6-port1: attempt power cycle [ 320.780231][ T5901] usb 5-1: USB disconnect, device number 20 [ 320.833342][ T5915] usb 2-1: USB disconnect, device number 33 [ 320.884571][ T6034] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 321.032563][ T8089] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 321.032563][ T8089] program syz.4.553 not setting count and/or reply_len properly [ 321.076460][ T6034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 321.140626][ T6034] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 321.214043][ T5908] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 321.391827][ T6034] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 321.402477][ T6034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.427806][ T6034] usb 4-1: config 0 descriptor?? [ 321.438264][ T8091] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 321.450742][ T5908] usb 6-1: device descriptor read/8, error -71 [ 321.462714][ T8099] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 321.470670][ T8099] netlink: 160 bytes leftover after parsing attributes in process `syz.1.556'. [ 321.545251][ T8102] ip6erspan0: entered allmulticast mode [ 321.725876][ T5908] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 321.870451][ T5908] usb 6-1: device descriptor read/8, error -71 [ 321.922399][ T6034] logitech 0003:046D:CA04.0007: unknown main item tag 0x6 [ 321.986018][ T5908] usb usb6-port1: unable to enumerate USB device [ 322.035479][ T6034] logitech 0003:046D:CA04.0007: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.3-1/input0 [ 322.047398][ T6034] logitech 0003:046D:CA04.0007: no inputs found [ 322.707453][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.713913][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.975289][ T8115] delete_channel: no stack [ 322.980459][ T8115] delete_channel: no stack [ 323.177340][ T8108] comedi comedi2: reset error (fatal) [ 323.356081][ T5908] usb 4-1: USB disconnect, device number 18 [ 323.463246][ T8107] fido_id[8107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 323.724000][ T8125] xt_hashlimit: overflow, rate too high: 0 [ 324.507089][ T5908] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 324.965815][ T5908] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.004432][ T5908] usb 6-1: config 0 has no interface number 0 [ 325.058182][ T8138] netlink: 'syz.4.566': attribute type 10 has an invalid length. [ 325.183601][ T5908] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 325.204346][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.212730][ T5908] usb 6-1: Product: syz [ 325.533789][ T5908] usb 6-1: Manufacturer: syz [ 325.538663][ T5908] usb 6-1: SerialNumber: syz [ 325.562147][ T5908] usb 6-1: config 0 descriptor?? [ 325.598495][ T8138] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 325.706311][ T8141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.567'. [ 325.812951][ T5908] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 325.880151][ T5908] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 325.931454][ T5908] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 325.950525][ T5908] usb 6-1: media controller created [ 326.117760][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.264462][ T5908] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 326.285540][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.305294][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.313863][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.333592][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.345394][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.404114][ T5908] usb 6-1: USB disconnect, device number 7 [ 326.490282][ T8149] lo speed is unknown, defaulting to 1000 [ 326.920416][ T8163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.573'. [ 327.091510][ T31] audit: type=1400 audit(1753900295.165:918): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8162 comm="syz.4.573" daddr=::ffff:0.0.0.0 dest=20002 [ 327.307830][ T31] audit: type=1326 audit(1753900295.385:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8169 comm="syz.5.574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac32f8e9a9 code=0x0 [ 327.358765][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.574'. [ 327.431703][ T8149] chnl_net:caif_netlink_parms(): no params data found [ 327.945778][ T8178] "syz.3.575" (8178) uses obsolete ecb(arc4) skcipher [ 328.117210][ T8178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.398675][ T5844] Bluetooth: hci5: command tx timeout [ 328.898527][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.917578][ T5901] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 328.928140][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.004604][ T8149] bridge_slave_0: entered allmulticast mode [ 329.044950][ T8149] bridge_slave_0: entered promiscuous mode [ 329.075868][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.094115][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 329.094281][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.115915][ T5901] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 329.131542][ T8149] bridge_slave_1: entered allmulticast mode [ 329.131595][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.170151][ T5901] usb 6-1: Product: syz [ 329.172196][ T8149] bridge_slave_1: entered promiscuous mode [ 329.184659][ T5901] usb 6-1: Manufacturer: syz [ 329.196355][ T8211] IPVS: length: 130 != 8 [ 329.202180][ T5901] usb 6-1: SerialNumber: syz [ 329.221815][ T5901] usb 6-1: config 0 descriptor?? [ 329.247662][ T5901] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 329.258760][ T8210] IPVS: set_ctl: invalid protocol: 4 172.20.20.46:20001 [ 329.406073][ T5901] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 329.905793][ T8215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.938987][ T8215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.008289][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.026672][ T5901] usb 6-1: USB disconnect, device number 8 [ 330.072977][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.297807][ T8149] team0: Port device team_slave_0 added [ 330.309617][ T8149] team0: Port device team_slave_1 added [ 330.330055][ T8219] binder: 8217:8219 ioctl c0306201 2000000003c0 returned -22 [ 330.414380][ T8224] fuse: Unknown parameter '0x0000000000000006' [ 330.483806][ T5844] Bluetooth: hci5: command tx timeout [ 331.950900][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.985163][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.068632][ T8149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.143768][ T8218] syz.1.585 (8218): drop_caches: 1 [ 332.174886][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.234057][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.234916][ T5940] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 332.338917][ T8149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.471894][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 332.527495][ T5940] usb 6-1: New USB device found, idVendor=5fc9, idProduct=0061, bcdDevice=cd.47 [ 332.544636][ T5844] Bluetooth: hci5: command tx timeout [ 332.568897][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.645376][ T5940] usb 6-1: Product: syz [ 333.144123][ T5940] usb 6-1: Manufacturer: syz [ 333.149357][ T5940] usb 6-1: SerialNumber: syz [ 333.242017][ T5940] usb 6-1: config 0 descriptor?? [ 333.266742][ T8149] hsr_slave_0: entered promiscuous mode [ 333.295834][ T8149] hsr_slave_1: entered promiscuous mode [ 333.302611][ T8149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.386107][ T8149] Cannot create hsr debugfs directory [ 333.711484][ T5940] usb 6-1: USB disconnect, device number 9 [ 334.319220][ T8258] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 334.481431][ T8262] overlay: filesystem on ./bus not supported as upperdir [ 334.700117][ T5844] Bluetooth: hci5: command tx timeout [ 334.827616][ T8273] fuse: Unknown parameter '0x0000000000000006' [ 334.991781][ T8275] overlayfs: empty lowerdir [ 335.051982][ T5940] IPVS: starting estimator thread 0... [ 335.154123][ T8278] IPVS: using max 23 ests per chain, 55200 per kthread [ 335.227995][ T8279] tmpfs: Unknown parameter 'usrquota_block' [ 336.733711][ T8149] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 337.397688][ T8149] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 337.687826][ T8149] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 337.722879][ T8149] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 337.765681][ T8294] tmpfs: Unknown parameter ':' [ 337.804850][ T8283] overlayfs: empty lowerdir [ 337.944161][ T5915] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 338.055864][ T8149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.090879][ T8302] binder: 8298:8302 ioctl c0306201 2000000003c0 returned -22 [ 338.111716][ T8149] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.186660][ T5915] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 338.236333][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.249981][ T5915] usb 5-1: Product: syz [ 338.256312][ T5915] usb 5-1: Manufacturer: syz [ 338.257910][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.261117][ T5915] usb 5-1: SerialNumber: syz [ 338.268320][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.287352][ T5915] usb 5-1: config 0 descriptor?? [ 338.300845][ T5915] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 338.717225][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.724642][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.852543][ T5915] sonixb 5-1:0.0: Error reading register 00: -110 [ 338.940943][ T8299] syz.1.604 (8299): drop_caches: 1 [ 339.043155][ T8289] netlink: 96 bytes leftover after parsing attributes in process `syz.4.602'. [ 339.240886][ T8299] syz.1.604 (8299): drop_caches: 1 [ 339.454110][ T5961] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 339.618454][ T8149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.638491][ T5961] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 339.679360][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.713712][ T5961] usb 4-1: Product: syz [ 339.729940][ T5961] usb 4-1: Manufacturer: syz [ 339.744226][ T5961] usb 4-1: SerialNumber: syz [ 339.753757][ T8329] netlink: 'syz.5.611': attribute type 4 has an invalid length. [ 339.790129][ T5961] usb 4-1: config 0 descriptor?? [ 339.911849][ T8333] fuse: Unknown parameter '0x0000000000000006' [ 340.419371][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 341.262879][ T8336] No buffer was provided with the request [ 341.922846][ T9] usb 5-1: USB disconnect, device number 21 [ 341.940851][ T5961] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 342.135369][ T5961] peak_usb 4-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 342.418039][ T8345] loop6: detected capacity change from 0 to 524287999 [ 343.836158][ T5961] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 343.911891][ T5961] usb 4-1: USB disconnect, device number 19 [ 344.699312][ T8353] overlayfs: empty lowerdir [ 345.016197][ T8357] netlink: 96 bytes leftover after parsing attributes in process `syz.5.617'. [ 345.043624][ T31] audit: type=1400 audit(1753900313.095:920): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8354 comm="syz.5.617" daddr=fe80::1b dest=16385 [ 345.184808][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 345.283008][ T31] audit: type=1400 audit(1753900313.355:921): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8367 comm="syz.5.621" daddr=fe80::aa dest=19997 [ 345.522480][ T8149] veth0_vlan: entered promiscuous mode [ 345.660820][ T8381] Cannot find del_set index 0 as target [ 345.851274][ T8149] veth1_vlan: entered promiscuous mode [ 345.924496][ T5838] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 346.726979][ T5838] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 346.749223][ T8386] fuse: Unknown parameter '0x0000000000000006' [ 347.127590][ T5838] usb 6-1: config 0 has no interface number 0 [ 347.544383][ T5838] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 1056, setting to 64 [ 347.567927][ T5838] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 347.577672][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.587257][ T5838] usb 6-1: Product: syz [ 347.591798][ T5838] usb 6-1: Manufacturer: syz [ 347.596590][ T5838] usb 6-1: SerialNumber: syz [ 347.612451][ T8149] veth0_macvtap: entered promiscuous mode [ 347.619979][ T5838] usb 6-1: config 0 descriptor?? [ 347.628709][ T8381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 347.635353][ T8149] veth1_macvtap: entered promiscuous mode [ 347.677560][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.734897][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.767878][ T8149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.809138][ T8149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.855358][ T5838] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 347.883088][ T8149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.901994][ T5838] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 347.915959][ T8149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.931177][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 347.940923][ T5838] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 347.961323][ T5838] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 347.978164][ T5838] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 348.028448][ T31] audit: type=1326 audit(1753900316.105:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8390 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a78f8e9a9 code=0x7ffc0000 [ 348.071350][ T5838] usb 6-1: USB disconnect, device number 10 [ 348.123339][ T5838] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 348.277243][ T31] audit: type=1326 audit(1753900316.105:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8390 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a78f8e9a9 code=0x7ffc0000 [ 348.438844][ T8400] overlayfs: empty lowerdir [ 348.509992][ T31] audit: type=1326 audit(1753900316.105:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8390 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f6a78f8e9a9 code=0x7ffc0000 [ 348.543428][ T31] audit: type=1326 audit(1753900316.275:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8390 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a78f8e9a9 code=0x7ffc0000 [ 348.929931][ T31] audit: type=1326 audit(1753900316.275:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8390 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a78f8e9a9 code=0x7ffc0000 [ 349.172091][ T5838] keyspan 6-1:0.133: device disconnected [ 349.480756][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.497728][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.798308][ T8405] netlink: 'syz.5.630': attribute type 1 has an invalid length. [ 350.135200][ T8407] block device autoloading is deprecated and will be removed. [ 350.470223][ T8413] x_tables: duplicate underflow at hook 3 [ 350.709987][ T6181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.908045][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 351.484060][ T6181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.801747][ T8436] fuse: Unknown parameter 'fd0x0000000000000006' [ 353.597549][ T8442] netlink: 60 bytes leftover after parsing attributes in process `syz.5.638'. [ 353.692601][ T8441] netlink: 60 bytes leftover after parsing attributes in process `syz.5.638'. [ 354.369298][ T8453] overlayfs: empty lowerdir [ 354.444181][ T1215] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 354.667638][ T1215] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.705408][ T1215] usb 6-1: config 0 interface 0 has no altsetting 0 [ 354.738371][ T1215] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 354.764079][ T1215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.817707][ T1215] usb 6-1: config 0 descriptor?? [ 355.274782][ T8451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.326001][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.375003][ T8475] netlink: 28 bytes leftover after parsing attributes in process `syz.6.647'. [ 355.407098][ T8475] netlink: 28 bytes leftover after parsing attributes in process `syz.6.647'. [ 355.411984][ T8451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.416839][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.484332][ T8475] netlink: 'syz.6.647': attribute type 4 has an invalid length. [ 356.179486][ T1215] magicmouse 0003:05AC:0269.0008: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.5-1/input0 [ 356.363480][ T1215] usb 6-1: USB disconnect, device number 11 [ 356.616874][ T8489] fuse: Unknown parameter 'fd0x0000000000000006' [ 358.190114][ T8496] netlink: 'syz.5.654': attribute type 10 has an invalid length. [ 358.276242][ T8496] team0: Device ipvlan1 failed to register rx_handler [ 358.838472][ T8500] pimreg: entered allmulticast mode [ 358.850870][ T8500] pimreg: left allmulticast mode [ 359.284049][ T5908] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 359.451240][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.472915][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.516268][ T5908] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 359.552359][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.598317][ T5908] usb 5-1: config 0 descriptor?? [ 359.904457][ T8514] netlink: 96 bytes leftover after parsing attributes in process `syz.6.658'. [ 359.914566][ T8514] 8021q: VLANs not supported on ip_vti0 [ 360.258061][ T5908] hid-picolcd 0003:04D8:C002.0009: unknown global tag 0xc [ 360.586409][ T5908] hid-picolcd 0003:04D8:C002.0009: item 0 0 1 12 parsing failed [ 360.636942][ T5908] hid-picolcd 0003:04D8:C002.0009: device report parse failed [ 360.646780][ T5908] hid-picolcd 0003:04D8:C002.0009: probe with driver hid-picolcd failed with error -22 [ 360.685124][ T5908] usb 5-1: USB disconnect, device number 22 [ 362.331952][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.664'. [ 370.280578][ T8533] sched: DL replenish lagged too much [ 370.861351][ T8550] netlink: 48 bytes leftover after parsing attributes in process `syz.1.668'. [ 376.685813][ T31] audit: type=1326 audit(1753900344.545:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5278e9a9 code=0x7ffc0000 [ 376.753026][ T31] audit: type=1326 audit(1753900344.545:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5278e9a9 code=0x7ffc0000 [ 377.073641][ T31] audit: type=1326 audit(1753900344.595:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fef5278e9a9 code=0x7ffc0000 [ 377.150189][ T31] audit: type=1326 audit(1753900344.605:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5278e9a9 code=0x7ffc0000 [ 377.251453][ T31] audit: type=1326 audit(1753900344.605:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5278e9a9 code=0x7ffc0000 [ 377.328784][ T31] audit: type=1326 audit(1753900344.625:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fef5278e9a9 code=0x7ffc0000 [ 377.463400][ T31] audit: type=1326 audit(1753900344.625:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5278e9a9 code=0x7ffc0000 [ 377.624159][ T31] audit: type=1326 audit(1753900344.625:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5278e9a9 code=0x7ffc0000 [ 377.725071][ T31] audit: type=1326 audit(1753900344.635:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fef5278e9a9 code=0x7ffc0000 [ 377.825275][ T31] audit: type=1326 audit(1753900344.635:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5278e9a9 code=0x7ffc0000 [ 378.036678][ T8586] fuse: Bad value for 'user_id' [ 378.041977][ T8586] fuse: Bad value for 'user_id' [ 378.100207][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.112546][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.123430][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.137982][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.147113][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.220328][ T8587] lo speed is unknown, defaulting to 1000 [ 378.556570][ T8587] chnl_net:caif_netlink_parms(): no params data found [ 379.567419][ T1159] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.772008][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.836919][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.873824][ T8587] bridge_slave_0: entered allmulticast mode [ 379.963412][ T8587] bridge_slave_0: entered promiscuous mode [ 380.062273][ T1159] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.110694][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.124919][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.142035][ T8587] bridge_slave_1: entered allmulticast mode [ 380.176798][ T8587] bridge_slave_1: entered promiscuous mode [ 380.227964][ T5844] Bluetooth: hci6: command tx timeout [ 380.479697][ T1159] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.569741][ T8609] netlink: 16 bytes leftover after parsing attributes in process `syz.5.682'. [ 380.600074][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.649908][ T1159] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.712648][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.252316][ T5961] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 381.628074][ T5961] usb 6-1: Using ep0 maxpacket: 32 [ 381.792932][ T5961] usb 6-1: config 0 interface 0 has no altsetting 0 [ 382.227073][ T5961] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 382.298326][ T8587] team0: Port device team_slave_0 added [ 382.305220][ T5908] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 382.323606][ T5844] Bluetooth: hci6: command tx timeout [ 382.341375][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.376046][ T5961] usb 6-1: Product: syz [ 382.389346][ T8587] team0: Port device team_slave_1 added [ 382.395800][ T5961] usb 6-1: Manufacturer: syz [ 382.400832][ T5961] usb 6-1: SerialNumber: syz [ 382.442878][ T5961] usb 6-1: config 0 descriptor?? [ 382.526307][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 382.558135][ T5908] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 382.572535][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.583016][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 382.596635][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.622011][ T8622] overlayfs: failed to verify upper (12/file1, ino=80, err=-116) [ 382.634407][ T5908] usb 2-1: Manufacturer: syz [ 382.642132][ T8622] overlayfs: failed to verify index dir 'upper' xattr [ 382.644127][ T5908] usb 2-1: config 0 descriptor?? [ 382.668786][ T8587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.681012][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 382.681055][ T31] audit: type=1400 audit(1753900350.755:957): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8621 comm="syz.6.687" daddr=ff02::1 dest=20003 [ 382.682980][ T5961] gs_usb 6-1:0.0: Configuring for 16 interfaces [ 382.691383][ T8622] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 382.726822][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.739631][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.775951][ T5961] gs_usb 6-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 382.795044][ T5961] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 382.818967][ T8587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.949934][ T9] usb 6-1: USB disconnect, device number 12 [ 383.101480][ T8057] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 383.161916][ T8629] netlink: 40 bytes leftover after parsing attributes in process `syz.3.688'. [ 383.226054][ T5844] Bluetooth: hci4: unexpected cc 0x040d length: 63 > 7 [ 383.234819][ T5844] Bluetooth: hci4: unexpected event for opcode 0x040d [ 383.939161][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 384.024245][ T8620] netlink: 'syz.1.686': attribute type 9 has an invalid length. [ 384.043006][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 384.077771][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.084395][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.162574][ T1159] bridge_slave_1: left allmulticast mode [ 384.170592][ T1159] bridge_slave_1: left promiscuous mode [ 384.183035][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.205599][ T1159] bridge_slave_0: left allmulticast mode [ 384.221914][ T1159] bridge_slave_0: left promiscuous mode [ 384.245285][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.394489][ T5844] Bluetooth: hci6: command tx timeout [ 384.636078][ T31] audit: type=1326 audit(1753900352.715:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8646 comm="syz.6.692" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fc9d8e9a9 code=0x0 [ 384.748384][ T1215] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 384.950282][ T1215] usb 4-1: Using ep0 maxpacket: 32 [ 384.959048][ T1215] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 384.969218][ T1215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.982597][ T1215] usb 4-1: config 0 descriptor?? [ 385.005217][ T1215] gspca_main: sunplus-2.14.0 probing 041e:400b [ 385.006915][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 385.176711][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 385.226180][ T9] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 385.235866][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.244851][ T9] usb 6-1: Product: syz [ 385.250458][ T9] usb 6-1: Manufacturer: syz [ 385.259959][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.269626][ T9] usb 6-1: SerialNumber: syz [ 385.278738][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.291196][ T9] usb 6-1: config 0 descriptor?? [ 385.298806][ T1159] bond0 (unregistering): Released all slaves [ 385.328770][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 385.342994][ T8587] hsr_slave_0: entered promiscuous mode [ 385.344304][ T8620] netlink: 'syz.1.686': attribute type 9 has an invalid length. [ 385.353817][ T8587] hsr_slave_1: entered promiscuous mode [ 385.375499][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 385.380644][ T8587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.404855][ T8587] Cannot create hsr debugfs directory [ 385.620930][ T5908] usbhid 2-1:0.0: can't add hid device: -71 [ 385.627420][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 385.676486][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806011ac00: rx timeout, send abort [ 385.686784][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806011ac00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 385.711084][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 385.946524][ T1215] gspca_sunplus: reg_w_riv err -71 [ 385.951846][ T1215] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 385.961878][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 385.964444][ T5908] usb 2-1: USB disconnect, device number 34 [ 385.979865][ T1215] usb 4-1: USB disconnect, device number 20 [ 386.056865][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 386.057365][ T8654] : entered promiscuous mode [ 386.086258][ T9] usb 6-1: media controller created [ 386.109378][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.694'. [ 386.184957][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.286248][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 386.301403][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 386.394129][ T5908] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 386.464074][ T5844] Bluetooth: hci6: command tx timeout [ 386.555150][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 386.572930][ T5908] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.608600][ T1215] usb 6-1: USB disconnect, device number 13 [ 386.624102][ T5908] usb 2-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.677676][ T5908] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 386.805822][ T5908] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 386.951525][ T5908] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 387.050346][ T1215] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 387.146202][ T8674] overlayfs: empty lowerdir [ 387.185391][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 387.241698][ T5908] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 387.280598][ T5844] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 387.300114][ T5844] Bluetooth: hci4: Injecting HCI hardware error event [ 387.373876][ T51] Bluetooth: hci4: hardware error 0x00 [ 389.822380][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.884808][ T5908] usb 2-1: config 0 descriptor?? [ 389.915176][ T5908] usb 2-1: can't set config #0, error -71 [ 389.968389][ T5908] usb 2-1: USB disconnect, device number 35 [ 390.066664][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 390.200704][ T8688] afs: Unknown parameter 'dynQ"rAhSU]ʝ0">Q-&#/8Lդ:i2<' [ 390.244188][ T1215] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 390.394309][ T5901] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 390.442145][ T1215] usb 6-1: config 48 has an invalid interface number: 4 but max is 0 [ 390.461013][ T1159] hsr_slave_0: left promiscuous mode [ 390.465406][ T1215] usb 6-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 390.514242][ T1215] usb 6-1: config 48 has no interface number 0 [ 390.524719][ T1159] hsr_slave_1: left promiscuous mode [ 390.545209][ T1215] usb 6-1: config 48 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 390.545509][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.583824][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.602333][ T1215] usb 6-1: config 48 interface 4 has no altsetting 0 [ 390.625948][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.633629][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.636735][ T1215] usb 6-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= b.d4 [ 390.654107][ T5901] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 390.675370][ T1215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.700127][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.712329][ T1215] usb 6-1: Product: syz [ 390.716843][ T1215] usb 6-1: Manufacturer: syz [ 390.721858][ T1215] usb 6-1: SerialNumber: syz [ 390.728096][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.740150][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.759638][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.776829][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.843361][ T1159] veth1_macvtap: left promiscuous mode [ 390.870699][ T1159] veth0_macvtap: left promiscuous mode [ 390.891516][ T1159] veth1_vlan: left promiscuous mode [ 390.915192][ T1159] veth0_vlan: left promiscuous mode [ 391.032034][ T8683] input: syz0 as /devices/virtual/input/input18 [ 391.053181][ T8683] input: failed to attach handler leds to device input18, error: -6 [ 391.063583][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.094181][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.132012][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.168317][ T5901] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 391.216950][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.251748][ T5901] usb 4-1: config 0 descriptor?? [ 391.265310][ T31] audit: type=1400 audit(1753900359.345:959): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8682 comm="syz.5.699" daddr=::ffff:224.0.0.2 dest=20001 [ 391.287194][ T5901] usb 4-1: bad CDC descriptors [ 391.380287][ T1215] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 391.454643][ T1215] snd-usb-audio 6-1:48.4: probe with driver snd-usb-audio failed with error -2 [ 391.499394][ T1215] usb 6-1: USB disconnect, device number 14 [ 391.518483][ T8685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.547509][ T8685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.578829][ T5901] usb 4-1: USB disconnect, device number 21 [ 395.087695][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 395.229991][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 396.703744][ T5940] lo speed is unknown, defaulting to 1000 [ 396.710530][ T5940] infiniband s: ib_query_port failed (-19) [ 396.763546][ T8587] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 396.949809][ T8587] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 397.053111][ T8587] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 397.324668][ T8743] overlayfs: empty lowerdir [ 397.377953][ T8745] comedi comedi0: Minor -2147450880 is invalid! [ 397.609313][ T8750] netlink: 'syz.1.712': attribute type 10 has an invalid length. [ 398.738945][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 399.789317][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 399.864155][ T8750] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.874016][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.047189][ T8750] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.054439][ T8750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.062030][ T8750] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.069446][ T8750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.278135][ T8750] bridge0: entered promiscuous mode [ 400.311109][ T8750] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 400.401284][ T8587] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 400.722611][ T8752] bridge_slave_1: left allmulticast mode [ 400.744161][ T8752] bridge_slave_1: left promiscuous mode [ 400.750419][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.865337][ T8752] bridge_slave_0: left allmulticast mode [ 400.892735][ T8752] bridge_slave_0: left promiscuous mode [ 400.923120][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.061714][ T8769] netlink: 182 bytes leftover after parsing attributes in process `syz.6.717'. [ 401.091034][ T8752] bond0: (slave bridge0): Releasing backup interface [ 401.100895][ T8752] bridge0 (unregistering): left promiscuous mode [ 402.143787][ T1159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.465920][ T1159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.901390][ T1159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.071140][ T8817] sctp: failed to load transform for md5: -2 [ 405.268565][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.584646][ T8830] XFS (nullb0): Invalid superblock magic number [ 405.755098][ T1159] bond0: (slave netdevsim0): Releasing backup interface [ 405.839303][ T1159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.889910][ T8840] overlayfs: invalid redirect ((null)) [ 405.943848][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.728'. [ 406.009121][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.5.728'. [ 406.055231][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.133234][ T8840] geneve2: entered promiscuous mode [ 407.159219][ T8840] geneve2: entered allmulticast mode [ 407.560165][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.567821][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.691403][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.699282][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.951490][ T8587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.034245][ T8587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.174080][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 408.314083][ T9] usb 7-1: device descriptor read/64, error -71 [ 408.723464][ T8843] tipc: Started in network mode [ 408.728815][ T8843] tipc: Node identity ac14140f, cluster identity 4711 [ 408.736638][ T8843] tipc: New replicast peer: 255.255.255.255 [ 408.743524][ T8843] tipc: Enabled bearer , priority 10 [ 408.838949][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 409.004013][ T9] usb 7-1: device descriptor read/64, error -71 [ 409.114356][ T9] usb usb7-port1: attempt power cycle [ 409.398838][ T1159] bridge_slave_1: left allmulticast mode [ 409.456679][ T1159] bridge_slave_1: left promiscuous mode [ 409.462593][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.533475][ T1159] bridge_slave_0: left allmulticast mode [ 409.563547][ T8866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.571498][ T8866] IPv6: NLM_F_CREATE should be set when creating new route [ 409.578977][ T8866] IPv6: NLM_F_CREATE should be set when creating new route [ 409.586269][ T8866] IPv6: NLM_F_CREATE should be set when creating new route [ 409.606703][ T1159] bridge_slave_0: left promiscuous mode [ 409.624570][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.684048][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 409.755730][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 409.798066][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.857015][ T1215] tipc: Node number set to 2886997007 [ 409.863437][ T9] usb 7-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 409.877122][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.889775][ T8872] netlink: 44 bytes leftover after parsing attributes in process `syz.5.737'. [ 409.913216][ T9] usb 7-1: config 0 descriptor?? [ 410.046718][ T8876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.075074][ T8876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.307379][ T1215] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 410.402526][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.440777][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.554653][ T1215] usb 4-1: device descriptor read/64, error -71 [ 410.844073][ T1215] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 411.016227][ T1215] usb 4-1: device descriptor read/64, error -71 [ 411.134723][ T1215] usb usb4-port1: attempt power cycle [ 411.251274][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 411.474471][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.487951][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.496826][ T1215] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 411.511057][ T1159] bond0 (unregistering): Released all slaves [ 411.539757][ T1215] usb 4-1: device descriptor read/8, error -71 [ 411.693157][ T1159] bond1 (unregistering): Released all slaves [ 411.725916][ T8889] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 411.784338][ T8587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.817402][ T1215] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 411.921532][ T1215] usb 4-1: device descriptor read/8, error -71 [ 412.043602][ T1215] usb usb4-port1: unable to enumerate USB device [ 412.254114][ T5915] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 412.404549][ T5833] usb 7-1: USB disconnect, device number 4 [ 412.495631][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 412.507230][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.549742][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.609533][ T5915] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 412.648208][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.708591][ T5915] usb 6-1: config 0 descriptor?? [ 413.315185][ T5915] hid-picolcd 0003:04D8:F002.000A: item fetching failed at offset 7/11 [ 413.464765][ T5915] hid-picolcd 0003:04D8:F002.000A: device report parse failed [ 413.529773][ T5915] hid-picolcd 0003:04D8:F002.000A: probe with driver hid-picolcd failed with error -22 [ 413.574514][ T6034] usb 6-1: USB disconnect, device number 15 [ 413.611381][ T8920] IPv6: NLM_F_CREATE should be specified when creating new route [ 413.964846][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.972465][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.002910][ T8920] bridge0: entered allmulticast mode [ 414.058842][ T1159] hsr_slave_0: left promiscuous mode [ 414.067392][ T1159] hsr_slave_1: left promiscuous mode [ 414.135232][ T1159] veth1_macvtap: left promiscuous mode [ 414.185243][ T1159] veth0_macvtap: left promiscuous mode [ 414.204045][ T5915] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 414.204471][ T1159] veth1_vlan: left promiscuous mode [ 414.253269][ T1159] veth0_vlan: left promiscuous mode [ 414.398905][ T5915] usb 7-1: Using ep0 maxpacket: 16 [ 414.421111][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.434574][ T3017] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 414.480347][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.514857][ T6034] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 414.521136][ T5915] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 414.574062][ T5915] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 414.604029][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.642042][ T5915] usb 7-1: config 0 descriptor?? [ 414.692208][ T6034] usb 6-1: Using ep0 maxpacket: 32 [ 414.726736][ T6034] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 414.760768][ T6034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.806194][ T6034] usb 6-1: Product: syz [ 414.827081][ T6034] usb 6-1: Manufacturer: syz [ 414.852063][ T6034] usb 6-1: SerialNumber: syz [ 414.862043][ T6034] usb 6-1: config 0 descriptor?? [ 414.872110][ T6034] cdc_ether 6-1:0.0: More than one union descriptor, skipping ... [ 414.882757][ T6034] usb 6-1: bad CDC descriptors [ 414.907086][ T6034] usb 6-1: unsupported MDLM descriptors [ 415.340993][ T8942] Invalid ELF header magic: != ELF [ 415.561215][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 415.561331][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 416.036182][ T8949] netlink: 'syz.6.742': attribute type 1 has an invalid length. [ 416.044745][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.742'. [ 416.732336][ T5915] usbhid 7-1:0.0: can't add hid device: -71 [ 416.791408][ T5915] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 416.847801][ T5915] usb 7-1: USB disconnect, device number 5 [ 416.944276][ T5908] usb 6-1: USB disconnect, device number 16 [ 418.661943][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.753'. [ 418.984361][ T5908] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 419.154415][ T5908] usb 7-1: device descriptor read/64, error -71 [ 419.500085][ T5908] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 419.748901][ T5908] usb 7-1: device descriptor read/64, error -71 [ 419.865998][ T5940] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 419.876657][ T5908] usb usb7-port1: attempt power cycle [ 419.911729][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fb7ac00: rx timeout, send abort [ 419.945891][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 420.015314][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 420.038533][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.049388][ T5940] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 420.079664][ T5940] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 420.093720][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.112263][ T5940] usb 2-1: Product: syz [ 420.136207][ T5940] usb 2-1: Manufacturer: syz [ 420.141065][ T5940] usb 2-1: SerialNumber: syz [ 420.172051][ T5940] usb 2-1: config 0 descriptor?? [ 420.191835][ T5940] radioshark2 2-1:0.0: Invalid radioSHARK2 device [ 420.199058][ T5940] radioshark2 2-1:0.0: probe with driver radioshark2 failed with error -22 [ 420.209156][ T5940] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 420.227898][ T5908] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 420.294453][ T5908] usb 7-1: device descriptor read/8, error -71 [ 420.399214][ T5940] usb 2-1: USB disconnect, device number 36 [ 420.420249][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fb7ac00: abort rx timeout. Force session deactivation [ 420.544838][ T5908] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 420.567641][ T5908] usb 7-1: device descriptor read/8, error -71 [ 420.686335][ T5908] usb usb7-port1: unable to enumerate USB device [ 421.991470][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 422.023674][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 422.367487][ T8587] veth0_vlan: entered promiscuous mode [ 422.461299][ T8587] veth1_vlan: entered promiscuous mode [ 422.742039][ T8587] veth0_macvtap: entered promiscuous mode [ 422.790451][ T8587] veth1_macvtap: entered promiscuous mode [ 422.871651][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.956549][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.993171][ T8587] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.049996][ T8587] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.114259][ T8587] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.123066][ T8587] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.586515][ T6978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.603059][ T9025] 9pnet: Could not find request transport: dno=0x000000000000000a [ 423.630009][ T6978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.756702][ T8057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.799959][ T8057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.994578][ T5901] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 425.377855][ T5901] usb 6-1: Using ep0 maxpacket: 8 [ 425.399955][ T5901] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 425.433408][ T5901] usb 6-1: config 0 has no interface number 0 [ 425.460911][ T5901] usb 6-1: config 0 interface 119 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 425.718332][ T5901] usb 6-1: config 0 interface 119 has no altsetting 0 [ 425.728099][ T5901] usb 6-1: New USB device found, idVendor=12d1, idProduct=e9fa, bcdDevice=f8.f0 [ 425.737855][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.746782][ T5901] usb 6-1: Product: syz [ 425.752210][ T5901] usb 6-1: Manufacturer: syz [ 425.757179][ T5901] usb 6-1: SerialNumber: syz [ 425.764954][ T5901] usb 6-1: config 0 descriptor?? [ 426.507626][ T9057] cgroup: fork rejected by pids controller in /syz3 [ 426.582593][ T5901] option 6-1:0.119: GSM modem (1-port) converter detected [ 427.289533][ T5901] usb 6-1: USB disconnect, device number 17 [ 427.327921][ T5901] option 6-1:0.119: device disconnected [ 427.390775][ T9053] netlink: 48 bytes leftover after parsing attributes in process `syz.7.766'. [ 428.954446][ T6034] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 430.210524][ T6034] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 430.260711][ T6034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.283373][ T6034] usb 6-1: Product: syz [ 430.289120][ T6034] usb 6-1: Manufacturer: syz [ 430.299248][ T6034] usb 6-1: SerialNumber: syz [ 430.335215][ T6034] usb 6-1: config 0 descriptor?? [ 431.058746][ T6034] usb 6-1: USB disconnect, device number 18 [ 431.117850][ T9125] syzkaller1: entered promiscuous mode [ 431.123442][ T9125] syzkaller1: entered allmulticast mode [ 431.133529][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 431.259316][ T5961] IPVS: starting estimator thread 0... [ 431.374085][ T9132] IPVS: using max 25 ests per chain, 60000 per kthread [ 432.226997][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 434.280185][ T9159] No such timeout policy "syz0" [ 435.854111][ T5833] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 436.011116][ T5833] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 436.037634][ T5833] usb 2-1: config 0 has no interface number 0 [ 436.073803][ T5833] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 436.112751][ T5833] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 436.163543][ T5833] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 436.190950][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.213125][ T5833] usb 2-1: Product: syz [ 436.232685][ T5833] usb 2-1: Manufacturer: syz [ 436.258345][ T5833] usb 2-1: SerialNumber: syz [ 436.294513][ T5833] usb 2-1: config 0 descriptor?? [ 436.327822][ T9176] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 436.575458][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.608275][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.618932][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.633455][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.633692][ T5833] usb 2-1: USB disconnect, device number 37 [ 436.650741][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 438.125002][ T9214] netlink: 'syz.1.792': attribute type 1 has an invalid length. [ 438.707148][ T5844] Bluetooth: hci3: command tx timeout [ 439.392483][ T9189] chnl_net:caif_netlink_parms(): no params data found [ 440.281951][ T9189] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.298625][ T9189] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.375349][ T9189] bridge_slave_0: entered allmulticast mode [ 440.413242][ T9189] bridge_slave_0: entered promiscuous mode [ 440.475891][ T9189] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.504155][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.559731][ T9189] bridge_slave_1: entered allmulticast mode [ 440.625600][ T9189] bridge_slave_1: entered promiscuous mode [ 440.794104][ T5844] Bluetooth: hci3: command tx timeout [ 440.875119][ T9250] loop7: detected capacity change from 0 to 16384 [ 440.901727][ T9189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.987916][ T9189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.336922][ T9252] loop7: detected capacity change from 16384 to 0 [ 441.625996][ T9189] team0: Port device team_slave_0 added [ 441.713421][ T9189] team0: Port device team_slave_1 added [ 441.948170][ T9189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.008559][ T9189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.162596][ T9189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.236734][ T9189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.295703][ T9265] sctp: [Deprecated]: syz.5.803 (pid 9265) Use of int in max_burst socket option deprecated. [ 442.295703][ T9265] Use struct sctp_assoc_value instead [ 442.327496][ T9189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.454015][ T9189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.894492][ T5844] Bluetooth: hci3: command tx timeout [ 443.501182][ T9189] hsr_slave_0: entered promiscuous mode [ 443.560522][ T9189] hsr_slave_1: entered promiscuous mode [ 443.604563][ T9189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.642818][ T9189] Cannot create hsr debugfs directory [ 443.800181][ T9294] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 443.814255][ T5908] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 444.225722][ T9304] overlay: ./bus is not a directory [ 444.666052][ T9309] netlink: 76 bytes leftover after parsing attributes in process `syz.1.813'. [ 444.704608][ T9309] nbd: illegal input index -65456 [ 444.841794][ T5833] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 444.947133][ T5844] Bluetooth: hci3: command tx timeout [ 444.974559][ T5833] usb 8-1: device descriptor read/64, error -71 [ 445.214705][ T5833] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 445.374593][ T5833] usb 8-1: device descriptor read/64, error -71 [ 445.422492][ T9189] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 445.459000][ T9189] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 445.482168][ T9189] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 445.509073][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.517483][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.521493][ T9189] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 445.524096][ T5833] usb usb8-port1: attempt power cycle [ 445.626388][ T5901] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 445.835126][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 445.853646][ T9333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.816'. [ 445.874297][ T5833] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 445.914275][ T5901] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 445.914905][ T5833] usb 8-1: device descriptor read/8, error -71 [ 445.942247][ T9333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.816'. [ 445.965217][ T5901] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 446.024005][ T5901] usb 4-1: config 8 has no interface number 0 [ 446.032744][ T5901] usb 4-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 446.052155][ T9189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.059515][ T5901] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 446.102405][ T5901] usb 4-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 446.119171][ T9189] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.133695][ T5901] usb 4-1: config 8 interface 206 has no altsetting 0 [ 446.147227][ T5901] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 446.185455][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.193012][ T6181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.204197][ T5833] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 446.206915][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.228437][ T5833] usb 8-1: device descriptor read/8, error -71 [ 446.251542][ T5901] usb 4-1: Product: syz [ 446.263185][ T5901] usb 4-1: Manufacturer: syz [ 446.363242][ T5833] usb usb8-port1: unable to enumerate USB device [ 446.370588][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.381528][ T6181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.399548][ T5901] usb 4-1: SerialNumber: syz [ 446.948892][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.975969][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.064668][ T9189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.113656][ T9319] netlink: 44 bytes leftover after parsing attributes in process `syz.3.815'. [ 447.226945][ T5901] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 447.269679][ T5901] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 447.306628][ T5901] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 447.334607][ T5901] usb 4-1: USB disconnect, device number 26 [ 447.360910][ T5901] garmin_gps 4-1:8.206: device disconnected [ 447.959783][ T31] audit: type=1400 audit(1753900416.025:960): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9364 comm="syz.1.820" daddr=ff02::1 dest=20130 [ 448.782721][ T9189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.004073][ T5908] usb 7-1: device descriptor read/64, error -110 [ 450.042138][ T9388] netlink: 'syz.7.824': attribute type 1 has an invalid length. [ 450.089485][ T5908] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 451.677269][ T5908] usb 7-1: device descriptor read/64, error -32 [ 451.796527][ T5908] usb usb7-port1: attempt power cycle [ 452.164559][ T5908] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 452.252040][ T5908] usb 7-1: device descriptor read/8, error -32 [ 452.438742][ T5908] raw-gadget.0 gadget.6: failed to queue suspend event [ 452.565196][ T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 452.860627][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 453.004327][ T5908] raw-gadget.0 gadget.6: failed to queue reset event [ 453.064650][ T9] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 453.098448][ T9] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 453.120556][ T9] usb 4-1: Product: syz [ 453.126299][ T9] usb 4-1: Manufacturer: syz [ 453.131039][ T9] usb 4-1: SerialNumber: syz [ 453.225613][ T5908] raw-gadget.0 gadget.6: failed to queue resume event [ 453.304375][ T5908] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 453.343198][ T9189] veth0_vlan: entered promiscuous mode [ 453.365492][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 453.389917][ T5908] usb 7-1: device descriptor read/8, error -32 [ 453.448893][ T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 453.459193][ T9189] veth1_vlan: entered promiscuous mode [ 453.516691][ T5908] raw-gadget.0 gadget.6: failed to queue suspend event [ 453.826601][ T5908] usb usb7-port1: unable to enumerate USB device [ 454.114344][ T9406] netlink: 'syz.3.827': attribute type 4 has an invalid length. [ 454.165219][ T9404] netlink: 'syz.3.827': attribute type 4 has an invalid length. [ 454.373986][ T5901] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 454.423059][ T9425] netlink: 'syz.7.831': attribute type 3 has an invalid length. [ 454.451366][ T9189] veth0_macvtap: entered promiscuous mode [ 454.479740][ T9189] veth1_macvtap: entered promiscuous mode [ 454.508783][ T9] vp7045: USB control message 'in' went wrong. [ 454.519081][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 454.561220][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 454.572008][ T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 454.602424][ T9189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.618307][ T5901] usb 2-1: config 4 has an invalid interface number: 92 but max is 0 [ 454.657122][ T5901] usb 2-1: config 4 has no interface number 0 [ 454.657291][ T9189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.663369][ T5901] usb 2-1: config 4 interface 92 has no altsetting 0 [ 454.714050][ T9] usb 4-1: USB disconnect, device number 27 [ 454.752844][ T5901] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 454.815649][ T9189] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.818044][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.854196][ T5961] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 454.856104][ T9189] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.882355][ T9189] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.888158][ T5901] usb 2-1: Product: syz [ 454.898336][ T5901] usb 2-1: Manufacturer: syz [ 454.902666][ T9189] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.903076][ T5901] usb 2-1: SerialNumber: syz [ 455.049823][ T5961] usb 6-1: Using ep0 maxpacket: 32 [ 455.058211][ T5961] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 455.071596][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.096040][ T9436] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.112702][ T5961] usb 6-1: config 0 descriptor?? [ 455.122676][ T5961] gspca_main: sunplus-2.14.0 probing 041e:400b [ 455.298415][ T5901] radioshark 2-1:4.92: Invalid radioSHARK device [ 455.305172][ T5901] radioshark 2-1:4.92: probe with driver radioshark failed with error -22 [ 455.314533][ T5901] usbhid 2-1:4.92: couldn't find an input interrupt endpoint [ 455.330235][ T5901] usb 2-1: USB disconnect, device number 38 [ 455.532146][ T9436] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.966719][ T5961] gspca_sunplus: reg_r err -71 [ 455.974536][ T5961] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 456.020126][ T9436] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.022644][ T5961] usb 6-1: USB disconnect, device number 19 [ 456.223344][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.268925][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.388308][ T9436] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.440650][ T9452] TCP: TCP_TX_DELAY enabled [ 456.665914][ T6181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.711035][ T6181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.018751][ T9461] netlink: 52 bytes leftover after parsing attributes in process `syz.5.839'. [ 457.124733][ T9436] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.804489][ T9436] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.878557][ T9436] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.997555][ T9436] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.814217][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 458.985866][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 459.047616][ T9] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 459.082809][ T9] usb 9-1: config 0 has no interface number 0 [ 459.127708][ T9] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 459.149663][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.184781][ T9] usb 9-1: Product: syz [ 459.191407][ T9] usb 9-1: Manufacturer: syz [ 459.219752][ T5962] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 459.221484][ T9] usb 9-1: SerialNumber: syz [ 459.270576][ T9] usb 9-1: config 0 descriptor?? [ 459.304873][ T9] radio-si470x 9-1:0.35: could not find interrupt in endpoint [ 459.347687][ T9] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 459.380869][ T31] audit: type=1400 audit(1753900427.455:961): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9511 comm="syz.3.851" daddr=::ffff:100.1.1.2 dest=20001 [ 459.493281][ T9] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 459.504701][ T9] usbhid 9-1:0.35: couldn't find an input interrupt endpoint [ 459.599740][ T9515] netlink: 48 bytes leftover after parsing attributes in process `syz.5.849'. [ 459.618035][ T32] INFO: task kworker/0:2:2085 blocked for more than 143 seconds. [ 459.627091][ T32] Not tainted 6.16.0-syzkaller #0 [ 459.632965][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 459.653775][ T5962] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 459.674800][ T32] task:kworker/0:2 state:D stack:20792 pid:2085 tgid:2085 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 459.695395][ T5962] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 460.436729][ T5962] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 460.457085][ T5962] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 460.474039][ T5962] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 460.474142][ T32] Workqueue: usb_hub_wq hub_event [ 460.483398][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.555567][ T9502] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 460.584027][ T32] [ 460.594631][ T32] Call Trace: [ 460.614389][ T32] [ 460.643456][ T32] __schedule+0x16aa/0x4c90 [ 460.713067][ T32] ? device_add+0x7b6/0xb50 [ 460.721538][ T32] ? usb_new_device+0xa39/0x16c0 [ 460.742942][ T32] ? worker_thread+0x8a0/0xda0 [ 460.755234][ T32] ? kthread+0x70e/0x8a0 [ 460.775423][ T32] ? schedule+0x165/0x360 [ 460.795281][ T9502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.822748][ T32] ? __lock_acquire+0xab9/0xd20 [ 460.829699][ T32] ? __pfx___schedule+0x10/0x10 [ 460.859982][ T32] ? schedule+0x91/0x360 [ 460.876398][ T32] schedule+0x165/0x360 [ 460.880752][ T32] schedule_timeout+0x9a/0x270 [ 460.891991][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 460.898960][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.912825][ T9502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.913920][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.927654][ T32] ? wait_for_completion+0x267/0x5d0 [ 460.933128][ T32] wait_for_completion+0x2bf/0x5d0 [ 460.938544][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 460.944765][ T32] i2c_del_adapter+0x581/0x6e0 [ 460.949726][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.955385][ T32] ? __pfx_i2c_del_adapter+0x10/0x10 [ 460.960755][ T32] ? dvb_usbv2_exit+0x85a/0x9e0 [ 460.988246][ T32] dvb_usbv2_probe+0x4ae/0x41a0 [ 460.993261][ T32] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 461.014179][ T32] ? __pm_runtime_set_status+0x785/0xa50 [ 461.019947][ T32] usb_probe_interface+0x641/0xbc0 [ 461.043961][ T32] ? __pfx_usb_probe_interface+0x10/0x10 [ 461.049907][ T32] really_probe+0x26a/0x9a0 [ 461.074555][ T32] __driver_probe_device+0x18c/0x2f0 [ 461.079991][ T32] driver_probe_device+0x4f/0x430 [ 461.100445][ T32] __device_attach_driver+0x2ce/0x530 [ 461.111451][ T32] bus_for_each_drv+0x251/0x2e0 [ 461.116895][ T32] ? __pfx___device_attach_driver+0x10/0x10 [ 461.123048][ T32] ? __pfx_bus_for_each_drv+0x10/0x10 [ 461.130356][ T32] __device_attach+0x2b8/0x400 [ 461.135620][ T32] ? __pfx___device_attach+0x10/0x10 [ 461.141033][ T32] ? do_raw_spin_unlock+0x122/0x240 [ 461.146798][ T32] bus_probe_device+0x185/0x260 [ 461.151725][ T32] device_add+0x7b6/0xb50 [ 461.156376][ T32] usb_set_configuration+0x1a87/0x20e0 [ 461.162032][ T32] usb_generic_driver_probe+0x8d/0x150 [ 461.169999][ T32] usb_probe_device+0x1c4/0x390 [ 461.177150][ T32] ? __pfx_usb_probe_device+0x10/0x10 [ 461.182825][ T32] really_probe+0x26a/0x9a0 [ 461.191206][ T32] __driver_probe_device+0x18c/0x2f0 [ 461.196895][ T32] driver_probe_device+0x4f/0x430 [ 461.202199][ T32] __device_attach_driver+0x2ce/0x530 [ 461.207933][ T32] bus_for_each_drv+0x251/0x2e0 [ 461.213129][ T32] ? __pfx___device_attach_driver+0x10/0x10 [ 461.219728][ T32] ? __pfx_bus_for_each_drv+0x10/0x10 [ 461.234062][ T32] __device_attach+0x2b8/0x400 [ 461.239077][ T32] ? __pfx___device_attach+0x10/0x10 [ 461.249260][ T32] ? do_raw_spin_unlock+0x122/0x240 [ 461.255432][ T32] bus_probe_device+0x185/0x260 [ 461.260358][ T32] device_add+0x7b6/0xb50 [ 461.270371][ T32] usb_new_device+0xa39/0x16c0 [ 461.276488][ T32] ? __pfx_usb_new_device+0x10/0x10 [ 461.281873][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.288841][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.294814][ T32] hub_event+0x2958/0x4a20 [ 461.301493][ T32] ? preempt_schedule_irq+0xb5/0x150 [ 461.307295][ T32] ? __pfx_hub_event+0x10/0x10 [ 461.312405][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 461.318424][ T32] ? __pfx_hub_event+0x10/0x10 [ 461.323392][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 461.330018][ T32] process_scheduled_works+0xade/0x17b0 [ 461.337783][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 461.344022][ T32] worker_thread+0x8a0/0xda0 [ 461.348830][ T32] kthread+0x70e/0x8a0 [ 461.353062][ T32] ? __pfx_worker_thread+0x10/0x10 [ 461.358685][ T32] ? __pfx_kthread+0x10/0x10 [ 461.363368][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.368727][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.374349][ T32] ? __pfx_kthread+0x10/0x10 [ 461.379212][ T32] ret_from_fork+0x3fc/0x770 [ 461.384090][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 461.389374][ T32] ? __switch_to_asm+0x39/0x70 [ 461.394612][ T32] ? __switch_to_asm+0x33/0x70 [ 461.399537][ T32] ? __pfx_kthread+0x10/0x10 [ 461.404657][ T32] ret_from_fork_asm+0x1a/0x30 [ 461.409689][ T32] [ 461.413039][ T32] INFO: task syz.0.530:8001 blocked for more than 145 seconds. [ 461.413522][ T9507] caif:caif_disconnect_client(): nothing to disconnect [ 461.421555][ T32] Not tainted 6.16.0-syzkaller #0 [ 461.440966][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.450717][ T32] task:syz.0.530 state:D stack:27240 pid:8001 tgid:7988 ppid:5837 task_flags:0x400040 flags:0x00004004 [ 461.463175][ T32] Call Trace: [ 461.466684][ T32] [ 461.469753][ T32] __schedule+0x16aa/0x4c90 [ 461.474643][ T32] ? __lock_acquire+0xab9/0xd20 [ 461.479658][ T32] ? schedule+0x165/0x360 [ 461.484325][ T32] ? __pfx___schedule+0x10/0x10 [ 461.489248][ T32] ? schedule+0x91/0x360 [ 461.493541][ T32] schedule+0x165/0x360 [ 461.497993][ T32] schedule_preempt_disabled+0x13/0x30 [ 461.503599][ T32] __mutex_lock+0x724/0xe80 [ 461.510668][ T32] ? __mutex_lock+0x51b/0xe80 [ 461.516053][ T32] ? usbdev_open+0x16e/0x760 [ 461.520923][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 461.526669][ T32] ? bus_find_device+0x273/0x2b0 [ 461.531976][ T32] ? __pfx_bus_find_device+0x10/0x10 [ 461.538236][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 461.543095][ T32] ? usbdev_open+0xa7/0x760 [ 461.548123][ T32] usbdev_open+0x16e/0x760 [ 461.552879][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 461.559167][ T32] ? do_raw_spin_unlock+0x122/0x240 [ 461.564731][ T32] chrdev_open+0x4c9/0x5e0 [ 461.569303][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 461.574452][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 461.579463][ T32] do_dentry_open+0xdf0/0x1970 [ 461.585005][ T32] vfs_open+0x3b/0x340 [ 461.589138][ T32] ? path_openat+0x2ecd/0x3830 [ 461.594159][ T32] path_openat+0x2ee5/0x3830 [ 461.598829][ T32] ? arch_stack_walk+0xfc/0x150 [ 461.603849][ T32] ? __pfx_path_openat+0x10/0x10 [ 461.609144][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.615683][ T32] do_filp_open+0x1fa/0x410 [ 461.620354][ T32] ? __lock_acquire+0xab9/0xd20 [ 461.629540][ T32] ? __pfx_do_filp_open+0x10/0x10 [ 461.635214][ T32] ? _raw_spin_unlock+0x28/0x50 [ 461.641116][ T32] ? alloc_fd+0x64c/0x6c0 [ 461.645824][ T32] do_sys_openat2+0x121/0x1c0 [ 461.651076][ T32] ? __se_sys_futex+0x36f/0x400 [ 461.656192][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 461.661663][ T32] ? rcu_is_watching+0x15/0xb0 [ 461.664932][ T5962] ath6kl: Failed to submit usb control message: -110 [ 461.666801][ T32] __x64_sys_openat+0x138/0x170 [ 461.673634][ T5962] ath6kl: unable to send the bmi data to the device: -110 [ 461.680582][ T32] do_syscall_64+0xfa/0x3b0 [ 461.691449][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.697214][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.701510][ T5962] ath6kl: Unable to send get target info: -110 [ 461.703493][ T32] ? clear_bhb_loop+0x60/0xb0 [ 461.715409][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.721381][ T32] RIP: 0033:0x7f89d5b8d310 [ 461.726386][ T32] RSP: 002b:00007f89d699cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 461.736195][ T32] RAX: ffffffffffffffda RBX: 000000000000a401 RCX: 00007f89d5b8d310 [ 461.741177][ T5962] ath6kl: Failed to init ath6kl core: -110 [ 461.746106][ T32] RDX: 000000000000a401 RSI: 00007f89d699cc10 RDI: 00000000ffffff9c [ 461.746130][ T32] RBP: 00007f89d699cc10 R08: 0000000000000000 R09: 0000000000000000 [ 461.746147][ T32] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 461.746164][ T32] R13: 0000000000000000 R14: 00007f89d5db6080 R15: 00007ffe3a593c98 [ 461.746202][ T32] [ 461.746324][ T32] [ 461.746324][ T32] Showing all locks held in the system: [ 461.746340][ T32] 1 lock held by khungtaskd/32: [ 461.746355][ T32] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 461.746447][ T32] 5 locks held by kworker/0:2/2085: [ 461.746462][ T32] #0: ffff888140ac3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 461.746527][ T32] #1: ffffc900045e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 461.746591][ T32] #2: ffff88823be8a998 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 461.746659][ T32] #3: ffff888023c96198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 461.746733][ T32] #4: ffff88807b5c0160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 461.746818][ T32] 1 lock held by dhcpcd/5500: [ 461.746832][ T32] #0: ffffffff8f509f08 (rtnl_mutex [ 461.873830][ T5962] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 461.912878][ T32] ){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 462.094487][ T32] 2 locks held by getty/5600: [ 462.099250][ T32] #0: ffff888034f220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 462.159739][ T32] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 462.229510][ T32] 3 locks held by kworker/0:3/5833: [ 462.249203][ T32] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 462.304434][ T32] #1: ffffc9000401fbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 462.350562][ T32] #2: ffff888027146240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180 [ 462.384154][ T32] 2 locks held by kworker/0:5/5940: [ 462.389441][ T32] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 462.424015][ T32] #1: ffffc90004537bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 462.453955][ T32] 2 locks held by syz.3.496/7863: [ 462.460173][ T32] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 462.520230][ T32] #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 462.584297][ T32] 4 locks held by udevd/7940: [ 462.589164][ T32] #0: ffff888030c89d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 462.603138][ T32] #1: ffff888034989488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 462.613194][ T32] #2: ffff88806d8fce18 (kn->active#22){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 462.644229][ T32] #3: ffff888023c96198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 462.672909][ T32] 1 lock held by syz.0.530/8001: [ 462.684173][ T32] #0: ffff88823be8a998 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 462.693784][ T32] 1 lock held by syz.6.753/8971: [ 462.704247][ T32] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 462.720508][ T32] 3 locks held by syz.1.848/9502: [ 462.726185][ T32] #0: ffff888073584dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 462.743995][ T32] #1: ffff8880735840b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 462.760373][ T32] #2: ffffffff8f672108 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 462.778752][ T32] 3 locks held by syz.7.850/9507: [ 462.784759][ T32] #0: ffff888079134a08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 462.805589][ T32] #1: ffff88805b83d258 (sk_lock-AF_CAIF){+.+.}-{0:0}, at: caif_release+0xf9/0x350 [ 462.821921][ T32] #2: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 462.833209][ T32] 4 locks held by syz.5.849/9509: [ 462.838650][ T32] #0: ffff88805b4bcdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 462.850079][ T32] #1: ffff88805b4bc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 462.865622][ T32] #2: ffffffff8f672108 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 462.877816][ T32] #3: ffff888056798b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 462.890672][ T32] 2 locks held by dhcpcd-run-hook/9526: [ 462.899411][ T32] #0: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 462.912435][ T32] #1: ffff88803244bd90 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: fast_dput+0xdd/0x430 [ 462.925542][ T32] 2 locks held by dhcpcd-run-hook/9536: [ 462.957601][ T32] [ 462.960008][ T32] ============================================= [ 462.960008][ T32] [ 463.034873][ T32] NMI backtrace for cpu 1 [ 463.034902][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 463.034929][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.034943][ T32] Call Trace: [ 463.034951][ T32] [ 463.034962][ T32] dump_stack_lvl+0x189/0x250 [ 463.034990][ T32] ? __wake_up_klogd+0xd9/0x110 [ 463.035024][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.035048][ T32] ? __pfx__printk+0x10/0x10 [ 463.035092][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 463.035129][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 463.035159][ T32] ? _printk+0xcf/0x120 [ 463.035196][ T32] ? __pfx__printk+0x10/0x10 [ 463.035235][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 463.035272][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 463.035308][ T32] watchdog+0xfee/0x1030 [ 463.035344][ T32] ? watchdog+0x1de/0x1030 [ 463.035385][ T32] kthread+0x70e/0x8a0 [ 463.035418][ T32] ? __pfx_watchdog+0x10/0x10 [ 463.035449][ T32] ? __pfx_kthread+0x10/0x10 [ 463.035480][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 463.035500][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.035520][ T32] ? __pfx_kthread+0x10/0x10 [ 463.035550][ T32] ret_from_fork+0x3fc/0x770 [ 463.035582][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 463.035611][ T32] ? __switch_to_asm+0x39/0x70 [ 463.035637][ T32] ? __switch_to_asm+0x33/0x70 [ 463.035662][ T32] ? __pfx_kthread+0x10/0x10 [ 463.035692][ T32] ret_from_fork_asm+0x1a/0x30 [ 463.035738][ T32] [ 463.035747][ T32] Sending NMI from CPU 1 to CPUs 0: [ 463.209024][ C0] NMI backtrace for cpu 0 [ 463.209042][ C0] CPU: 0 UID: 0 PID: 9509 Comm: syz.5.849 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 463.209064][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.209076][ C0] RIP: 0010:rcu_is_watching+0x70/0xb0 [ 463.209103][ C0] Code: c3 58 bf 9d 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 39 65 f5 10 74 11 83 e0 04 c1 e8 02 5b <41> 5e 41 5f e9 17 38 c2 09 cc e8 a1 7b 8c ff eb e8 48 c7 c7 40 4e [ 463.209120][ C0] RSP: 0018:ffffc9000ef7ef78 EFLAGS: 00000202 [ 463.209136][ C0] RAX: 0000000000000001 RBX: ffffffff902fd301 RCX: ed63028c14aa4200 [ 463.209150][ C0] RDX: ffffc9000ef7f101 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0 [ 463.209164][ C0] RBP: dffffc0000000000 R08: ffffc9000ef7f118 R09: 0000000000000000 [ 463.209177][ C0] R10: ffffc9000ef7f178 R11: fffff52001defe31 R12: ffffc9000ef7f128 [ 463.209191][ C0] R13: ffffffff8172aae5 R14: ffffffff8dba8c70 R15: dffffc0000000000 [ 463.209205][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 463.209220][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.209233][ C0] CR2: 00007f1ba37bafe8 CR3: 0000000033a5e000 CR4: 00000000003526f0 [ 463.209249][ C0] Call Trace: [ 463.209256][ C0] [ 463.209264][ C0] ? unwind_next_frame+0xa5/0x2390 [ 463.209283][ C0] lock_release+0x4b/0x3e0 [ 463.209300][ C0] ? deref_stack_reg+0x19f/0x230 [ 463.209322][ C0] ? unwind_next_frame+0xa5/0x2390 [ 463.209340][ C0] unwind_next_frame+0x19a9/0x2390 [ 463.209364][ C0] ? unwind_next_frame+0xa5/0x2390 [ 463.209382][ C0] ? __unwind_start+0xf8/0x760 [ 463.209405][ C0] __unwind_start+0x5b9/0x760 [ 463.209427][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 463.209452][ C0] arch_stack_walk+0xe4/0x150 [ 463.209476][ C0] ? arch_stack_walk+0xe4/0x150 [ 463.209499][ C0] stack_trace_save+0x9c/0xe0 [ 463.209522][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 463.209551][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 463.209573][ C0] ? kasan_save_stack+0x4d/0x60 [ 463.209604][ C0] kasan_save_stack+0x3e/0x60 [ 463.209663][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 463.209686][ C0] ? __pfx_i_callback+0x10/0x10 [ 463.209703][ C0] call_rcu+0x157/0x9c0 [ 463.209724][ C0] ? fsnotify_grab_connector+0x42/0x240 [ 463.209747][ C0] ? fsnotify_grab_connector+0x42/0x240 [ 463.209768][ C0] ? fsnotify_grab_connector+0x42/0x240 [ 463.209790][ C0] ? fsnotify_grab_connector+0x194/0x240 [ 463.209811][ C0] ? __pfx_call_rcu+0x10/0x10 [ 463.209832][ C0] ? fsnotify_destroy_marks+0x81/0x330 [ 463.209857][ C0] ? __destroy_inode+0x487/0x670 [ 463.209875][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 463.209892][ C0] ? __pfx_debugfs_free_inode+0x10/0x10 [ 463.209912][ C0] evict+0x847/0x9c0 [ 463.209944][ C0] ? __pfx_evict+0x10/0x10 [ 463.209968][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 463.209994][ C0] ? _raw_spin_unlock+0x28/0x50 [ 463.210021][ C0] ? iput+0x6d8/0x9d0 [ 463.210046][ C0] __dentry_kill+0x209/0x660 [ 463.210068][ C0] ? dput+0x37/0x2b0 [ 463.210089][ C0] dput+0x19f/0x2b0 [ 463.210108][ C0] find_next_child+0x1e5/0x250 [ 463.210137][ C0] ? __pfx_remove_one+0x10/0x10 [ 463.210156][ C0] simple_recursive_removal+0xf4/0x690 [ 463.210183][ C0] ? mntput+0x65/0xc0 [ 463.210208][ C0] ? __pfx_remove_one+0x10/0x10 [ 463.210226][ C0] ? __pfx_bt_host_release+0x10/0x10 [ 463.210256][ C0] debugfs_remove+0x5b/0x70 [ 463.210272][ C0] hci_release_dev+0x4a/0x1410 [ 463.210292][ C0] ? device_release+0x66/0x1c0 [ 463.210311][ C0] ? kfree+0x4d/0x440 [ 463.210340][ C0] ? __pfx_bt_host_release+0x10/0x10 [ 463.210366][ C0] bt_host_release+0x82/0x90 [ 463.210393][ C0] device_release+0x9c/0x1c0 [ 463.210413][ C0] kobject_put+0x22b/0x480 [ 463.210439][ C0] vhci_release+0x88/0xd0 [ 463.210461][ C0] ? __pfx_vhci_release+0x10/0x10 [ 463.210483][ C0] __fput+0x449/0xa70 [ 463.210513][ C0] task_work_run+0x1d1/0x260 [ 463.210547][ C0] ? __pfx_task_work_run+0x10/0x10 [ 463.210575][ C0] ? kmem_cache_free+0x18f/0x400 [ 463.210596][ C0] do_exit+0x6b5/0x22e0 [ 463.210624][ C0] ? do_raw_spin_lock+0x121/0x290 [ 463.210650][ C0] ? __pfx_do_exit+0x10/0x10 [ 463.210683][ C0] do_group_exit+0x21c/0x2d0 [ 463.210708][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.210728][ C0] get_signal+0x125e/0x1310 [ 463.210760][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 463.210788][ C0] ? __pfx___fput_deferred+0x10/0x10 [ 463.210811][ C0] ? __fget_files+0x2a/0x420 [ 463.210833][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 463.210870][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 463.210891][ C0] exit_to_user_mode_loop+0x75/0x110 [ 463.210908][ C0] do_syscall_64+0x2bd/0x3b0 [ 463.210928][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.210946][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.210964][ C0] ? clear_bhb_loop+0x60/0xb0 [ 463.210985][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.211003][ C0] RIP: 0033:0x7fac32f8e9a9 [ 463.211018][ C0] Code: Unable to access opcode bytes at 0x7fac32f8e97f. [ 463.211027][ C0] RSP: 002b:00007fac33def038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.211046][ C0] RAX: 0000000000018ff8 RBX: 00007fac331b5fa0 RCX: 00007fac32f8e9a9 [ 463.211059][ C0] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000007 [ 463.211071][ C0] RBP: 00007fac33010d69 R08: 0000000000000000 R09: 0000000000000000 [ 463.211083][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.211093][ C0] R13: 0000000000000000 R14: 00007fac331b5fa0 R15: 00007ffe4ed41af8 [ 463.211116][ C0] [ 464.118833][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 464.126043][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 464.136339][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.146538][ T32] Call Trace: [ 464.149983][ T32] [ 464.152955][ T32] dump_stack_lvl+0x99/0x250 [ 464.157825][ T32] ? __asan_memcpy+0x40/0x70 [ 464.162449][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.167899][ T32] ? __pfx__printk+0x10/0x10 [ 464.172828][ T32] panic+0x2db/0x790 [ 464.176857][ T32] ? __pfx_panic+0x10/0x10 [ 464.181596][ T32] ? nmi_backtrace_stall_check+0x433/0x440 [ 464.187573][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 464.192993][ T32] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 464.199451][ T32] watchdog+0x102d/0x1030 [ 464.203825][ T32] ? watchdog+0x1de/0x1030 [ 464.208314][ T32] kthread+0x70e/0x8a0 [ 464.212513][ T32] ? __pfx_watchdog+0x10/0x10 [ 464.217280][ T32] ? __pfx_kthread+0x10/0x10 [ 464.221980][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.227289][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.232683][ T32] ? __pfx_kthread+0x10/0x10 [ 464.237312][ T32] ret_from_fork+0x3fc/0x770 [ 464.241935][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 464.247166][ T32] ? __switch_to_asm+0x39/0x70 [ 464.251958][ T32] ? __switch_to_asm+0x33/0x70 [ 464.256862][ T32] ? __pfx_kthread+0x10/0x10 [ 464.261656][ T32] ret_from_fork_asm+0x1a/0x30 [ 464.266454][ T32] [ 464.269850][ T32] Kernel Offset: disabled [ 464.274241][ T32] Rebooting in 86400 seconds..