last executing test programs: 7.877714729s ago: executing program 2 (id=270): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0xfc1, &(0x7f0000000340)={0x0, 0x8886, 0x10100, 0x0, 0x45, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc884, 0x1}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 6.646208808s ago: executing program 2 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4", &(0x7f0000000300)=""/137, &(0x7f00000003c0), &(0x7f0000000440)="b2e36d24b839f76c5de1b0ce523e07a51b02b6b3ccb286293bd7d4a72f2b7c4b7b534cc7a3c927d74deb8132b1ced432ec290a9c17b2268a5a8576e220b6765e01f9f6a88668c0f2c9817b4b049aaa9926a0189a146227d115bd72fd3f4134c74fd5175a8bdf9c8b845d4db04e833f1525946fd0f65f50b268c2a3facb8e030659706e5e7a9fd2db", 0x1, r0}, 0x38) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc5", 0xb2}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbe, 0xbe, 0x8, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}, {0x6, 0x4}]}, @fwd={0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0xe0, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.374574892s ago: executing program 2 (id=274): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1694, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 4.968240061s ago: executing program 0 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff01000000000000e2ffffffffffff000001000000000000000a00000000000000800acf2d010000000300000000000000540200000000000008000000000000000100000000000000000100000000000005000000000000000300000006000000050000000020000008000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="0100000006000000000000000300000000000000050000000000000002000000060000002e2600"], 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) 3.109570833s ago: executing program 0 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), &(0x7f0000000440)="b2e36d24b839f76c5de1b0ce523e07a51b02b6b3ccb286293bd7d4a72f2b7c4b7b534cc7a3c927d74deb8132b1ced432ec290a9c17b2268a5a8576e220b6765e01f9f6a88668c0f2c9817b4b049aaa9926a0189a146227d115bd72fd3f4134c74fd5175a8bdf9c8b845d4db04e833f1525946fd0f65f50b268c2a3facb8e0306", 0x1, r0}, 0x38) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.099635511s ago: executing program 1 (id=284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b7"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 2.91814004s ago: executing program 1 (id=285): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pwritev2(r0, 0x0, 0x0, 0x5405, 0x0, 0x0) 2.797840319s ago: executing program 0 (id=287): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000000100)="05", 0x1) read$char_usb(r2, &(0x7f0000000000)=""/60, 0x3c) syz_usb_disconnect(r0) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) 2.665668466s ago: executing program 1 (id=288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.351564582s ago: executing program 1 (id=289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), &(0x7f0000000440)="b2e36d24b839f76c5de1b0ce523e07a51b02b6b3ccb286293bd7d4a72f2b7c4b7b534cc7a3c927d74deb8132b1ced432ec290a9c17b2268a5a8576e220b6765e01f9f6a88668c0f2c9817b4b049aaa9926a0189a146227d115bd72fd3f4134c74fd5175a8bdf9c8b845d4db04e833f1525946fd0f65f50b268c2a3facb8e0306", 0x1, r0}, 0x38) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f", 0xa7}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb2, 0xb2, 0x8, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @union={0x6, 0x2, 0x0, 0x5, 0x1, 0x1, [{0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}, {0x6, 0x4}]}, @fwd={0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0xd4, 0xa0, 0x1, 0xfffffff8}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.234208622s ago: executing program 2 (id=290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2.088877548s ago: executing program 1 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff01000000000000e2ffffffffffff000001000000000000000a00000000000000800acf2d010000000300000000000000540200000000000008000000000000000100000000000000000100000000000005000000000000000300000006000000050000000020000008000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="0100000006000000000000000300000000000000050000000000000002000000060000002e2600"], 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) 1.332581108s ago: executing program 0 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4", &(0x7f0000000300)=""/137, &(0x7f00000003c0), &(0x7f0000000440)="b2e36d24b839f76c5de1b0ce523e07a51b02b6b3ccb286293bd7d4a72f2b7c4b7b534cc7a3c927d74deb8132b1ced432ec290a9c17b2268a5a8576e220b6765e01f9f6a88668c0f2c9817b4b049aaa9926a0189a146227d115bd72fd3f4134c74fd5175a8bdf9c8b845d4db04e833f1525946fd0f65f50b268c2a3facb8e030659706e5e7a9fd2db", 0x1, r0}, 0x38) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc5", 0xb2}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbe, 0xbe, 0x8, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}, {0x6, 0x4}]}, @fwd={0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0xe0, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.195212774s ago: executing program 2 (id=293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1.16764765s ago: executing program 0 (id=294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x183080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x40, 0x3c0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019c09000f01c2", 0x69}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.138857205s ago: executing program 3 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), &(0x7f0000000440)="b2e36d24b839f76c5de1b0ce523e07a51b02b6b3ccb286293bd7d4a72f2b7c4b7b534cc7a3c927d74deb8132b1ced432ec290a9c17b2268a5a8576e220b6765e01f9f6a88668c0f2c9817b4b049aaa9926a0189a146227d115bd72fd3f4134c74fd5175a8bdf9c8b845d4db04e833f1525946fd0f65f50b268c2a3facb8e0306", 0x1, r0}, 0x38) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 973.692646ms ago: executing program 2 (id=296): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x811) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x2) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 973.468616ms ago: executing program 1 (id=297): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[]) 963.118545ms ago: executing program 3 (id=298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 644.65704ms ago: executing program 3 (id=299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), &(0x7f0000000440)="b2e36d24b839f76c5de1b0ce523e07a51b02b6b3ccb286293bd7d4a72f2b7c4b7b534cc7a3c927d74deb8132b1ced432ec290a9c17b2268a5a8576e220b6765e01f9f6a88668c0f2c9817b4b049aaa9926a0189a146227d115bd72fd3f4134c74fd5175a8bdf9c8b845d4db04e833f1525946fd0f65f50b268c2a3facb8e0306", 0x1, r0}, 0x38) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f", 0xa7}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xaa, 0xaa, 0x8, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}, {0x6, 0x4}]}, @fwd={0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0xcc, 0xa0, 0x1, 0xfffffff8}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 585.74937ms ago: executing program 0 (id=300): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000000100)="05", 0x1) read$char_usb(r2, &(0x7f0000000000)=""/60, 0x3c) syz_usb_disconnect(r0) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) 458.186738ms ago: executing program 3 (id=301): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 278.309008ms ago: executing program 3 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4", &(0x7f0000000300)=""/137, &(0x7f00000003c0), &(0x7f0000000440)="b2e36d24b839f76c5de1b0ce523e07a51b02b6b3ccb286293bd7d4a72f2b7c4b7b534cc7a3c927d74deb8132b1ced432ec290a9c17b2268a5a8576e220b6765e01f9f6a88668c0f2c9817b4b049aaa9926a0189a146227d115bd72fd3f4134c74fd5175a8bdf9c8b845d4db04e833f1525946fd0f65f50b268c2a3facb8e030659706e5e7a9fd2db", 0x1, r0}, 0x38) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc5", 0xb2}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbe, 0xbe, 0x8, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}, {0x6, 0x4}]}, @fwd={0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0xe0, 0xa0, 0x1, 0xfffffff8}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 3 (id=303): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x10005, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x38, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x20000000) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000980)=@v2={0x2000000, [{0x800001, 0xe}, {0x5}]}, 0x14, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 83.206274][ T5756] cgroup: Unknown subsys name 'net' [ 83.344998][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.144104][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.839209][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.848283][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.864409][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.873763][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.882901][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.891166][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.899588][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.907445][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.914918][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.944800][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.944922][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.954759][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.965731][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.967880][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.977335][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.990011][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.996209][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.002021][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.012488][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.020284][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.028429][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.043314][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.073329][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.082286][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.634590][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 87.761214][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.795033][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 87.867933][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 88.034976][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.042161][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.051121][ T5773] bridge_slave_0: entered allmulticast mode [ 88.059129][ T5773] bridge_slave_0: entered promiscuous mode [ 88.084647][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.091981][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.099939][ T5767] bridge_slave_0: entered allmulticast mode [ 88.107384][ T5767] bridge_slave_0: entered promiscuous mode [ 88.116860][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.124164][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.131402][ T5767] bridge_slave_1: entered allmulticast mode [ 88.139443][ T5767] bridge_slave_1: entered promiscuous mode [ 88.159316][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.167552][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.177711][ T5773] bridge_slave_1: entered allmulticast mode [ 88.186738][ T5773] bridge_slave_1: entered promiscuous mode [ 88.205036][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.212485][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.219836][ T5772] bridge_slave_0: entered allmulticast mode [ 88.227287][ T5772] bridge_slave_0: entered promiscuous mode [ 88.245722][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.254686][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.261861][ T5774] bridge_slave_0: entered allmulticast mode [ 88.269418][ T5774] bridge_slave_0: entered promiscuous mode [ 88.287532][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.294970][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.302308][ T5772] bridge_slave_1: entered allmulticast mode [ 88.309598][ T5772] bridge_slave_1: entered promiscuous mode [ 88.338501][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.346166][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.353920][ T5774] bridge_slave_1: entered allmulticast mode [ 88.361486][ T5774] bridge_slave_1: entered promiscuous mode [ 88.392579][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.406457][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.431621][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.444867][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.488740][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.503596][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.515131][ T5767] team0: Port device team_slave_0 added [ 88.525113][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.577007][ T5767] team0: Port device team_slave_1 added [ 88.585280][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.608089][ T5773] team0: Port device team_slave_0 added [ 88.620571][ T5772] team0: Port device team_slave_0 added [ 88.649218][ T5773] team0: Port device team_slave_1 added [ 88.659845][ T5772] team0: Port device team_slave_1 added [ 88.690109][ T5774] team0: Port device team_slave_0 added [ 88.709693][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.717165][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.743669][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.758425][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.765512][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.791592][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.824843][ T5774] team0: Port device team_slave_1 added [ 88.852667][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.859991][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.886172][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.898322][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.912996][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.939388][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.952311][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.959382][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.986659][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.986855][ T5775] Bluetooth: hci1: command tx timeout [ 89.025264][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.032772][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.053485][ T5775] Bluetooth: hci0: command tx timeout [ 89.067414][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.080447][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.087633][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.115564][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.133310][ T5775] Bluetooth: hci2: command tx timeout [ 89.133336][ T5082] Bluetooth: hci3: command tx timeout [ 89.170851][ T5767] hsr_slave_0: entered promiscuous mode [ 89.178260][ T5767] hsr_slave_1: entered promiscuous mode [ 89.186566][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.195691][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.225596][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.306028][ T5772] hsr_slave_0: entered promiscuous mode [ 89.312533][ T5772] hsr_slave_1: entered promiscuous mode [ 89.319664][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.327989][ T5772] Cannot create hsr debugfs directory [ 89.340952][ T5773] hsr_slave_0: entered promiscuous mode [ 89.347705][ T5773] hsr_slave_1: entered promiscuous mode [ 89.354377][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.361986][ T5773] Cannot create hsr debugfs directory [ 89.440217][ T5774] hsr_slave_0: entered promiscuous mode [ 89.447035][ T5774] hsr_slave_1: entered promiscuous mode [ 89.453577][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.461188][ T5774] Cannot create hsr debugfs directory [ 89.923910][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.942018][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.961238][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.973321][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.047700][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.061057][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.076947][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.108209][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.184691][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.196648][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.220826][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.231948][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.360850][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.374397][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.386949][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.399584][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.411404][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.502573][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.529682][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.537089][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.559569][ T982] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.566803][ T982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.615808][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.692720][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.710098][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.728095][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.735314][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.749495][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.786692][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.793901][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.856070][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.910848][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.918089][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.938404][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.964312][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.971522][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.048534][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.056829][ T5775] Bluetooth: hci1: command tx timeout [ 91.100414][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.107684][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.133655][ T5775] Bluetooth: hci0: command tx timeout [ 91.156651][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.163890][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.214234][ T5775] Bluetooth: hci2: command tx timeout [ 91.220073][ T5775] Bluetooth: hci3: command tx timeout [ 91.346594][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.552387][ T5773] veth0_vlan: entered promiscuous mode [ 91.599075][ T5773] veth1_vlan: entered promiscuous mode [ 91.630011][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.695912][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.776986][ T5773] veth0_macvtap: entered promiscuous mode [ 91.793810][ T5773] veth1_macvtap: entered promiscuous mode [ 91.836209][ T5774] veth0_vlan: entered promiscuous mode [ 91.849439][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.880249][ T5772] veth0_vlan: entered promiscuous mode [ 91.888758][ T5774] veth1_vlan: entered promiscuous mode [ 91.908331][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.934466][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.952513][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.964171][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.973284][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.984265][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.004121][ T5772] veth1_vlan: entered promiscuous mode [ 92.032630][ T5774] veth0_macvtap: entered promiscuous mode [ 92.107872][ T5774] veth1_macvtap: entered promiscuous mode [ 92.144800][ T5772] veth0_macvtap: entered promiscuous mode [ 92.196783][ T5772] veth1_macvtap: entered promiscuous mode [ 92.219099][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.230983][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.245037][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.271234][ T5767] veth0_vlan: entered promiscuous mode [ 92.281243][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.297042][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.311821][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.327469][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.340134][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.365163][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.377956][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.389007][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.401870][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.417993][ T1188] cfg80211: failed to load regulatory.db [ 92.424584][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.442165][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.451429][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.461276][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.470682][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.498789][ T5767] veth1_vlan: entered promiscuous mode [ 92.518261][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.529702][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.546897][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.559105][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.569337][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.580587][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.593174][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.634171][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.645383][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.658353][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.667882][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.750471][ T5767] veth0_macvtap: entered promiscuous mode [ 92.790453][ T5767] veth1_macvtap: entered promiscuous mode [ 92.838940][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.869180][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.895365][ T5837] syz.0.1[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.060602][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.088122][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.110496][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.123540][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.137419][ T5082] Bluetooth: hci1: command tx timeout [ 93.155631][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.171117][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.188812][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.219374][ T5082] Bluetooth: hci0: command tx timeout [ 93.232450][ T982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.260477][ T982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.293475][ T5082] Bluetooth: hci3: command tx timeout [ 93.299052][ T5082] Bluetooth: hci2: command tx timeout [ 93.322513][ T5837] loop0: detected capacity change from 0 to 40427 [ 93.349304][ T5837] F2FS-fs (loop0): LFS is not compatible with checkpoint=disable [ 93.404391][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.440551][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.477357][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.509531][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.533301][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.568060][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.601656][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.644510][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.662972][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.682432][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.692619][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.723201][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.737601][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.514530][ T5839] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.692596][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.734962][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.954399][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.962380][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.046131][ T5846] mmap: syz.3.4 (5846) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.110260][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.131129][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.213060][ T5775] Bluetooth: hci1: command tx timeout [ 95.293539][ T5775] Bluetooth: hci0: command tx timeout [ 95.333321][ T5852] loop2: detected capacity change from 0 to 8192 [ 95.342713][ T5852] ======================================================= [ 95.342713][ T5852] WARNING: The mand mount option has been deprecated and [ 95.342713][ T5852] and is ignored by this kernel. Remove the mand [ 95.342713][ T5852] option from the mount to silence this warning. [ 95.342713][ T5852] ======================================================= [ 95.390579][ T5775] Bluetooth: hci2: command tx timeout [ 95.396658][ T5082] Bluetooth: hci3: command tx timeout [ 95.458325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 95.485095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.966472][ T5864] loop1: detected capacity change from 0 to 128 [ 96.980233][ T5864] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.059011][ T982] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.844562][ T5876] netlink: 'syz.1.11': attribute type 4 has an invalid length. [ 99.318660][ T5893] loop3: detected capacity change from 0 to 128 [ 99.330380][ T5893] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.363301][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.496448][ T5819] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.652946][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.678579][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.710313][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.753078][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 99.764270][ T5819] usb 2-1: config 0 has no interfaces? [ 99.766644][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.780902][ T5819] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 99.792744][ T5819] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 99.801353][ T5819] usb 2-1: Manufacturer: syz [ 99.811437][ T5819] usb 2-1: config 0 descriptor?? [ 99.885208][ T5888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.949551][ T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 100.352734][ T9] usb 1-1: USB disconnect, device number 2 [ 101.193170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.982913][ T5919] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.942490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.965597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.081265][ T5925] loop3: detected capacity change from 0 to 128 [ 103.124077][ T5925] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.595654][ T1188] usb 2-1: USB disconnect, device number 2 [ 103.836442][ T5933] syzkaller0: entered promiscuous mode [ 103.903023][ T5933] syzkaller0: entered allmulticast mode [ 103.963751][ T59] syzkaller0: tun_net_xmit 48 [ 103.978767][ T5940] syzkaller0: create flow: hash 752059809 index 1 [ 104.092151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.116605][ T5926] loop0: detected capacity change from 0 to 40427 [ 104.167679][ T5926] F2FS-fs (loop0): invalid crc value [ 104.235703][ T5926] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.390775][ T5932] syzkaller0: delete flow: hash 752059809 index 1 [ 104.450851][ T5926] F2FS-fs (loop0): Start checkpoint disabled! [ 104.552995][ T5926] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 104.710586][ T5919] syz.0.27: attempt to access beyond end of device [ 104.710586][ T5919] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 104.823239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.834422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.946729][ T3544] kworker/u4:8: attempt to access beyond end of device [ 105.946729][ T3544] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 105.966339][ T3544] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 105.982615][ T3544] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 107.169002][ T5971] loop0: detected capacity change from 0 to 128 [ 107.178950][ T5971] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.593046][ T5778] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.797630][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 107.820515][ T5778] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 107.829241][ T5778] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 107.840803][ T5778] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 107.852970][ T5778] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 107.867620][ T5778] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.884378][ T5778] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 107.893792][ T5778] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 107.902280][ T5778] usb 1-1: Product: syz [ 107.909436][ T5778] usb 1-1: Manufacturer: syz [ 107.914557][ T5778] usb 1-1: SerialNumber: syz [ 107.928584][ T5778] usb 1-1: config 0 descriptor?? [ 107.952532][ T5778] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 107.990228][ T5778] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 108.641393][ T5778] usb 1-1: USB disconnect, device number 3 [ 108.641457][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 108.666526][ T5973] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 108.723811][ T5778] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 108.736635][ T5974] ldusb: No device or device unplugged -19 [ 109.723983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.724011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 117.483690][ T6022] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 117.490736][ T6022] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.520406][ T6028] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 117.527231][ T6028] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.560743][ T6022] vhci_hcd vhci_hcd.0: Device attached [ 117.607014][ T6032] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 117.613738][ T6032] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.703131][ T6028] vhci_hcd vhci_hcd.0: Device attached [ 117.719929][ T6032] vhci_hcd vhci_hcd.0: Device attached [ 117.733859][ T6022] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 117.740575][ T6022] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.789368][ T27] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 117.804757][ T6028] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 117.811660][ T6028] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.851193][ T6022] vhci_hcd vhci_hcd.0: Device attached [ 117.890064][ T6032] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(22) [ 117.896935][ T6032] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.965903][ T6028] vhci_hcd vhci_hcd.0: Device attached [ 118.036127][ T6022] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 118.044543][ T6032] vhci_hcd vhci_hcd.0: Device attached [ 118.103473][ T6022] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 118.247417][ T6033] vhci_hcd: connection closed [ 118.248839][ T6025] vhci_hcd: connection reset by peer [ 118.252265][ T6030] vhci_hcd: connection closed [ 118.255227][ T6044] vhci_hcd: connection closed [ 118.263974][ T6036] vhci_hcd: connection closed [ 118.276612][ T6038] vhci_hcd: connection closed [ 118.282943][ T1092] vhci_hcd: stop threads [ 118.307785][ T1092] vhci_hcd: release socket [ 118.331136][ T1092] vhci_hcd: disconnect device [ 118.343552][ T1092] vhci_hcd: stop threads [ 118.348010][ T1092] vhci_hcd: release socket [ 118.358559][ T1092] vhci_hcd: disconnect device [ 118.364566][ T1092] vhci_hcd: stop threads [ 118.369043][ T1092] vhci_hcd: release socket [ 118.378557][ T1092] vhci_hcd: disconnect device [ 118.388303][ T1092] vhci_hcd: stop threads [ 118.392609][ T1092] vhci_hcd: release socket [ 118.402486][ T1092] vhci_hcd: disconnect device [ 118.409869][ T1092] vhci_hcd: stop threads [ 118.438206][ T1092] vhci_hcd: release socket [ 118.444775][ T1092] vhci_hcd: disconnect device [ 118.459153][ T1092] vhci_hcd: stop threads [ 118.468884][ T1092] vhci_hcd: release socket [ 118.477330][ T1092] vhci_hcd: disconnect device [ 120.981764][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.193036][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 121.224236][ T9] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 121.249748][ T9] usb 2-1: config 251 has no interface number 0 [ 121.270105][ T9] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 121.301587][ T9] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 121.329573][ T9] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 121.351245][ T9] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 121.483177][ T9] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.507157][ T9] usb 2-1: config 251 interface 202 has no altsetting 0 [ 122.311936][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 122.332536][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.373058][ T9] usb 2-1: Product: syz [ 122.395264][ T9] usb 2-1: Manufacturer: syz [ 122.444631][ T9] usb 2-1: SerialNumber: syz [ 122.983962][ T27] vhci_hcd: vhci_device speed not set [ 123.007187][ T9] usb 2-1: can't set config #251, error -71 [ 123.038385][ T9] usb 2-1: USB disconnect, device number 3 [ 123.394766][ T6092] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 123.401346][ T6092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.425979][ T6092] vhci_hcd vhci_hcd.0: Device attached [ 123.710184][ T6092] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 123.716906][ T6092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.725626][ T5778] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 123.734064][ T6092] vhci_hcd vhci_hcd.0: Device attached [ 123.742362][ T6092] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 123.749023][ T6092] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 123.777598][ T6092] vhci_hcd vhci_hcd.0: Device attached [ 123.791672][ T6092] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 123.798357][ T6092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.807380][ T6092] vhci_hcd vhci_hcd.0: Device attached [ 123.819414][ T6092] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16) [ 123.826086][ T6092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.834424][ T6092] vhci_hcd vhci_hcd.0: Device attached [ 123.844194][ T6092] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20) [ 123.850850][ T6092] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 123.882888][ T6092] vhci_hcd vhci_hcd.0: Device attached [ 123.889988][ T6092] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 123.919549][ T6092] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 123.950848][ T6106] vhci_hcd: connection closed [ 123.951119][ T6104] vhci_hcd: connection closed [ 123.951206][ T4303] vhci_hcd: stop threads [ 123.962160][ T6098] vhci_hcd: connection closed [ 123.965751][ T6102] vhci_hcd: connection closed [ 123.966400][ T6093] vhci_hcd: connection reset by peer [ 123.970726][ T6100] vhci_hcd: connection closed [ 125.679923][ T4303] vhci_hcd: release socket [ 125.691472][ T4303] vhci_hcd: disconnect device [ 125.701251][ T4303] vhci_hcd: stop threads [ 125.705884][ T4303] vhci_hcd: release socket [ 125.710582][ T4303] vhci_hcd: disconnect device [ 125.716498][ T4303] vhci_hcd: stop threads [ 125.720868][ T4303] vhci_hcd: release socket [ 125.727645][ T4303] vhci_hcd: disconnect device [ 125.734204][ T4303] vhci_hcd: stop threads [ 125.738592][ T4303] vhci_hcd: release socket [ 125.744309][ T4303] vhci_hcd: disconnect device [ 125.749544][ T4303] vhci_hcd: stop threads [ 125.772923][ T4303] vhci_hcd: release socket [ 125.777532][ T4303] vhci_hcd: disconnect device [ 125.789263][ T4303] vhci_hcd: stop threads [ 125.798631][ T4303] vhci_hcd: release socket [ 125.806486][ T4303] vhci_hcd: disconnect device [ 125.974453][ T5819] usb usb40-port1: attempt power cycle [ 127.567186][ T5819] usb usb40-port1: unable to enumerate USB device [ 127.599110][ T6129] loop1: detected capacity change from 0 to 128 [ 127.624033][ T6129] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.093362][ T5819] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.307750][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 128.327476][ T5819] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 128.359886][ T5819] usb 1-1: config 251 has no interface number 0 [ 130.023000][ T5819] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 130.033391][ T5819] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 130.052938][ T5819] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 130.064408][ T5819] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 130.084139][ T5778] vhci_hcd: vhci_device speed not set [ 130.111638][ T5819] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.147366][ T5819] usb 1-1: config 251 interface 202 has no altsetting 0 [ 130.172763][ T5819] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 130.204662][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.212749][ T5819] usb 1-1: Product: syz [ 130.230304][ T5819] usb 1-1: Manufacturer: syz [ 130.237986][ T5819] usb 1-1: SerialNumber: syz [ 130.269924][ T6130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.277961][ T6130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.639198][ T6153] loop3: detected capacity change from 0 to 128 [ 131.660872][ T6153] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.837980][ T5819] cxacru 1-1:251.202: usbatm_usb_probe: bind failed: -19! [ 131.894086][ T5819] usb 1-1: USB disconnect, device number 4 [ 131.915546][ T5834] usb usb36-port1: attempt power cycle [ 133.584484][ T5834] usb usb36-port1: unable to enumerate USB device [ 133.613106][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.620081][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.066348][ T6183] loop3: detected capacity change from 0 to 128 [ 136.095736][ T6183] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.819352][ T6191] hpfs: Bad magic ... probably not HPFS [ 138.731854][ T6193] loop2: detected capacity change from 0 to 512 [ 138.971564][ T6193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.035571][ T6193] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.163932][ T6193] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 65536 (only 1 groups) [ 139.400000][ T6193] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 139.423005][ T5778] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.459623][ T5778] usb 1-1: Using ep0 maxpacket: 16 [ 140.510824][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.678052][ T5778] usb 1-1: device descriptor read/all, error -71 [ 141.888836][ T6221] loop2: detected capacity change from 0 to 128 [ 141.943343][ T6221] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.554882][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.177273][ T6236] loop0: detected capacity change from 0 to 4096 [ 148.232938][ T1188] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 148.425421][ T1188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 148.455075][ T1188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 148.486688][ T1188] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 148.506766][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.537098][ T1188] usb 4-1: Product: syz [ 148.549661][ T1188] usb 4-1: Manufacturer: syz [ 148.579770][ T1188] usb 4-1: SerialNumber: syz [ 148.611763][ T1188] usb 4-1: config 0 descriptor?? [ 148.869497][ T6230] overlayfs: missing 'lowerdir' [ 148.886360][ T6235] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 149.276864][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 149.292249][ T6262] loop2: detected capacity change from 0 to 2048 [ 149.355959][ T6262] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 149.421096][ T5783] udevd[5783]: incorrect nilfs2 checksum on /dev/loop2 [ 149.454049][ T6262] NILFS (loop2): mounting unchecked fs [ 149.473075][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 149.480721][ T27] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 149.489903][ T27] usb 2-1: config 251 has no interface number 0 [ 149.497256][ T27] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 149.507813][ T27] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 149.515483][ T5783] udevd[5783]: incorrect nilfs2 checksum on /dev/loop2 [ 149.519489][ T27] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 149.565453][ T27] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 149.576902][ T27] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.579511][ T6265] loop0: detected capacity change from 0 to 128 [ 149.601635][ T27] usb 2-1: config 251 interface 202 has no altsetting 0 [ 149.602032][ T6262] NILFS (loop2): recovery complete [ 149.615250][ T27] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 149.624888][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.633261][ T27] usb 2-1: Product: syz [ 149.637626][ T27] usb 2-1: Manufacturer: syz [ 149.642342][ T27] usb 2-1: SerialNumber: syz [ 149.666270][ T6253] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 149.675431][ T6253] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 149.763207][ T6266] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.783454][ T6265] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.073154][ T3544] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.948058][ T27] cxacru 2-1:251.202: usbatm_usb_probe: bind failed: -19! [ 151.986401][ T27] usb 2-1: USB disconnect, device number 4 [ 153.785500][ T1188] usb 4-1: USB disconnect, device number 2 [ 155.407670][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.467187][ T6294] loop2: detected capacity change from 0 to 128 [ 155.507972][ T6294] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.740819][ T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.957779][ T6303] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 155.964364][ T6303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.053145][ T6303] vhci_hcd vhci_hcd.0: Device attached [ 156.212797][ T6308] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 156.219517][ T6308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.248769][ T6312] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 156.255535][ T6312] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 156.329522][ T6308] vhci_hcd vhci_hcd.0: Device attached [ 156.415485][ T6312] vhci_hcd vhci_hcd.0: Device attached [ 156.927450][ T6303] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 156.934331][ T6303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.087980][ T1188] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 157.113744][ T6312] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 157.149194][ T6308] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(19) [ 157.156415][ T6308] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 157.189353][ T6303] vhci_hcd vhci_hcd.0: Device attached [ 157.245556][ T6319] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(22) [ 157.252407][ T6319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.264431][ T6308] vhci_hcd vhci_hcd.0: Device attached [ 157.374508][ T6331] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 157.428132][ T6319] vhci_hcd vhci_hcd.0: Device attached [ 157.509437][ T6326] vhci_hcd: connection closed [ 157.513672][ T59] vhci_hcd: stop threads [ 157.521909][ T6304] vhci_hcd: connection reset by peer [ 157.523101][ T6324] vhci_hcd: connection closed [ 157.528398][ T6314] vhci_hcd: connection closed [ 157.533376][ T6316] vhci_hcd: connection closed [ 157.533621][ T6311] vhci_hcd: connection closed [ 157.565032][ T59] vhci_hcd: release socket [ 157.586279][ T59] vhci_hcd: disconnect device [ 157.780340][ T59] vhci_hcd: stop threads [ 157.793197][ T59] vhci_hcd: release socket [ 157.798065][ T59] vhci_hcd: disconnect device [ 158.639712][ T59] vhci_hcd: stop threads [ 158.656561][ T59] vhci_hcd: release socket [ 158.679638][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 158.737035][ T59] vhci_hcd: disconnect device [ 158.909483][ T59] vhci_hcd: stop threads [ 159.160254][ T59] vhci_hcd: release socket [ 159.203358][ T59] vhci_hcd: disconnect device [ 159.227759][ T59] vhci_hcd: stop threads [ 159.232170][ T59] vhci_hcd: release socket [ 159.253027][ T59] vhci_hcd: disconnect device [ 159.293029][ T59] vhci_hcd: stop threads [ 159.297370][ T59] vhci_hcd: release socket [ 159.352955][ T59] vhci_hcd: disconnect device [ 159.404496][ T6345] loop0: detected capacity change from 0 to 128 [ 159.432465][ T6345] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.304750][ T3544] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.754048][ T6360] netlink: 52 bytes leftover after parsing attributes in process `syz.3.150'. [ 161.122320][ T6365] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 161.128938][ T6365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.178736][ T6365] vhci_hcd vhci_hcd.0: Device attached [ 161.199428][ T6369] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 161.206111][ T6369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.242575][ T6369] vhci_hcd vhci_hcd.0: Device attached [ 161.288546][ T6365] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 161.295344][ T6365] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.328129][ T6365] vhci_hcd vhci_hcd.0: Device attached [ 161.359041][ T6369] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 161.365723][ T6369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.420149][ T6365] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 161.427186][ T6365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.458283][ T6369] vhci_hcd vhci_hcd.0: Device attached [ 161.486455][ T6365] vhci_hcd vhci_hcd.0: Device attached [ 161.515674][ T6381] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(22) [ 161.522369][ T6381] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 161.567177][ T6365] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.603538][ T6381] vhci_hcd vhci_hcd.0: Device attached [ 161.627275][ T6369] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.678416][ T6382] vhci_hcd: connection closed [ 161.679346][ T3446] vhci_hcd: stop threads [ 161.695893][ T6385] loop3: detected capacity change from 0 to 128 [ 161.702480][ T6377] vhci_hcd: connection closed [ 161.706262][ T6366] vhci_hcd: connection closed [ 161.713719][ T6373] vhci_hcd: connection closed [ 161.718962][ T6371] vhci_hcd: connection closed [ 161.733466][ T6375] vhci_hcd: connection closed [ 161.747124][ T3446] vhci_hcd: release socket [ 161.767215][ T6385] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.782560][ T3446] vhci_hcd: disconnect device [ 161.802466][ T3446] vhci_hcd: stop threads [ 161.829735][ T3446] vhci_hcd: release socket [ 161.850091][ T3446] vhci_hcd: disconnect device [ 161.891895][ T3446] vhci_hcd: stop threads [ 161.898503][ T3446] vhci_hcd: release socket [ 161.916976][ T3446] vhci_hcd: disconnect device [ 161.928395][ T3446] vhci_hcd: stop threads [ 161.939281][ T3544] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.958225][ T3446] vhci_hcd: release socket [ 161.965156][ T3446] vhci_hcd: disconnect device [ 161.997222][ T3446] vhci_hcd: stop threads [ 162.001547][ T3446] vhci_hcd: release socket [ 162.037587][ T3446] vhci_hcd: disconnect device [ 162.063752][ T3446] vhci_hcd: stop threads [ 162.083481][ T3446] vhci_hcd: release socket [ 162.101457][ T3446] vhci_hcd: disconnect device [ 162.253905][ T6363] sched: RT throttling activated [ 163.137090][ T1188] vhci_hcd: vhci_device speed not set [ 164.312012][ T6399] netlink: 52 bytes leftover after parsing attributes in process `syz.2.161'. [ 164.477238][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 164.815880][ T5815] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 165.214034][ T5815] usb 3-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x93, skipping [ 165.335294][ T5815] usb 3-1: config 0 interface 0 has no altsetting 0 [ 165.352156][ T5815] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.367618][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.375033][ T6410] loop1: detected capacity change from 0 to 128 [ 165.378820][ T5815] usb 3-1: Product: syz [ 165.391975][ T5815] usb 3-1: Manufacturer: syz [ 165.397380][ T5815] usb 3-1: SerialNumber: syz [ 165.399541][ T6410] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.425719][ T5815] usb 3-1: config 0 descriptor?? [ 165.491528][ T6412] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 165.498211][ T6412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.513249][ T6412] vhci_hcd vhci_hcd.0: Device attached [ 165.536989][ T5815] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 165.568666][ T59] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.581730][ T6299] udevd[6299]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.593449][ T6412] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 165.604223][ T6412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.643744][ T5778] usb usb34-port1: attempt power cycle [ 165.677857][ T6412] vhci_hcd vhci_hcd.0: Device attached [ 165.685972][ T6417] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 165.692638][ T6417] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 165.703004][ T6417] vhci_hcd vhci_hcd.0: Device attached [ 165.741435][ T6412] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 165.748208][ T6412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.756594][ T6412] vhci_hcd vhci_hcd.0: Device attached [ 165.774202][ T6412] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 165.780903][ T6412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.789102][ T6412] vhci_hcd vhci_hcd.0: Device attached [ 165.803925][ T6412] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 165.810691][ T6412] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 165.819174][ T6412] vhci_hcd vhci_hcd.0: Device attached [ 165.848371][ T5815] usb 3-1: USB disconnect, device number 2 [ 165.896834][ T6412] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.916428][ T6412] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.940192][ T6426] vhci_hcd: connection closed [ 165.940680][ T49] vhci_hcd: stop threads [ 165.952942][ T6420] vhci_hcd: connection closed [ 165.953701][ T6413] vhci_hcd: connection closed [ 165.958558][ T6415] vhci_hcd: connection closed [ 165.964431][ T6418] vhci_hcd: connection closed [ 165.969320][ T6424] vhci_hcd: connection closed [ 165.974361][ T49] vhci_hcd: release socket [ 166.017430][ T49] vhci_hcd: disconnect device [ 166.022568][ T49] vhci_hcd: stop threads [ 166.031195][ T49] vhci_hcd: release socket [ 166.037619][ T49] vhci_hcd: disconnect device [ 166.042741][ T49] vhci_hcd: stop threads [ 166.057863][ T49] vhci_hcd: release socket [ 166.065387][ T49] vhci_hcd: disconnect device [ 166.073860][ T49] vhci_hcd: stop threads [ 166.093208][ T49] vhci_hcd: release socket [ 166.097839][ T49] vhci_hcd: disconnect device [ 166.133368][ T49] vhci_hcd: stop threads [ 166.137820][ T49] vhci_hcd: release socket [ 166.142424][ T49] vhci_hcd: disconnect device [ 166.148841][ T49] vhci_hcd: stop threads [ 166.153569][ T49] vhci_hcd: release socket [ 166.158438][ T49] vhci_hcd: disconnect device [ 168.131707][ T1188] vhci_hcd: vhci_device speed not set [ 169.580120][ T6451] netlink: 52 bytes leftover after parsing attributes in process `syz.3.171'. [ 169.649708][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 169.892331][ T6459] loop1: detected capacity change from 0 to 128 [ 169.990168][ T6459] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.154808][ T4303] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.431644][ T6470] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 170.438326][ T6470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.445928][ T6467] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 170.452579][ T6467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.529412][ T6470] vhci_hcd vhci_hcd.0: Device attached [ 170.540823][ T6467] vhci_hcd vhci_hcd.0: Device attached [ 170.793080][ T27] usb 35-2: new low-speed USB device number 3 using vhci_hcd [ 171.103368][ T6475] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 171.110071][ T6475] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 171.930349][ T6470] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 171.937074][ T6470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.946037][ T6470] vhci_hcd vhci_hcd.0: Device attached [ 171.979376][ T6475] vhci_hcd vhci_hcd.0: Device attached [ 172.003563][ T6467] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 172.010366][ T6467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.023205][ T6467] vhci_hcd vhci_hcd.0: Device attached [ 172.066334][ T6470] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20) [ 172.068975][ T6475] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 172.073028][ T6470] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 172.102343][ T6475] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 172.159088][ T6470] vhci_hcd vhci_hcd.0: Device attached [ 172.249532][ T6477] vhci_hcd: connection closed [ 172.249935][ T6486] vhci_hcd: connection closed [ 172.255016][ T6479] vhci_hcd: connection closed [ 172.260144][ T1092] vhci_hcd: stop threads [ 172.283262][ T6476] vhci_hcd: connection closed [ 172.283516][ T6471] vhci_hcd: connection reset by peer [ 172.293681][ T1092] vhci_hcd: release socket [ 172.300042][ T6469] vhci_hcd: connection closed [ 172.304491][ T1092] vhci_hcd: disconnect device [ 172.352204][ T1092] vhci_hcd: stop threads [ 172.384110][ T6491] netlink: 52 bytes leftover after parsing attributes in process `syz.3.181'. [ 172.395066][ T1092] vhci_hcd: release socket [ 172.401066][ T1092] vhci_hcd: disconnect device [ 172.408682][ T1092] vhci_hcd: stop threads [ 172.414989][ T1092] vhci_hcd: release socket [ 172.419967][ T1092] vhci_hcd: disconnect device [ 172.425947][ T1092] vhci_hcd: stop threads [ 172.430470][ T1092] vhci_hcd: release socket [ 172.437341][ T1092] vhci_hcd: disconnect device [ 172.443798][ T1092] vhci_hcd: stop threads [ 172.448400][ T1092] vhci_hcd: release socket [ 172.456444][ T1092] vhci_hcd: disconnect device [ 172.462715][ T1092] vhci_hcd: stop threads [ 172.468215][ T1092] vhci_hcd: release socket [ 172.473408][ T1092] vhci_hcd: disconnect device [ 172.783815][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 172.998227][ T6502] loop3: detected capacity change from 0 to 128 [ 173.020899][ T6502] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.194612][ T3446] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.039415][ T6514] netlink: 52 bytes leftover after parsing attributes in process `syz.0.190'. [ 174.564238][ T6523] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 174.570871][ T6523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.683272][ T6523] vhci_hcd vhci_hcd.0: Device attached [ 174.812784][ T6528] netlink: 32 bytes leftover after parsing attributes in process `syz.1.194'. [ 174.973626][ T5778] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 175.483729][ T6531] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 175.490519][ T6531] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.586580][ T6523] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 175.593268][ T6523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.609388][ T6530] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 175.616164][ T6530] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 175.643169][ T6532] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 175.649857][ T6532] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.659370][ T6523] vhci_hcd vhci_hcd.0: Device attached [ 175.668319][ T6531] vhci_hcd vhci_hcd.0: Device attached [ 175.675377][ T6532] vhci_hcd vhci_hcd.0: Device attached [ 175.683010][ T6530] vhci_hcd vhci_hcd.0: Device attached [ 175.696697][ T6541] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(24) [ 175.704250][ T6541] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 175.729316][ T6523] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 175.753337][ T6541] vhci_hcd vhci_hcd.0: Device attached [ 175.770372][ T6523] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 175.822410][ T6544] vhci_hcd: connection closed [ 175.822704][ T1092] vhci_hcd: stop threads [ 175.835786][ T6529] vhci_hcd: connection closed [ 175.837477][ T6536] vhci_hcd: connection closed [ 175.842628][ T6535] vhci_hcd: connection closed [ 175.844729][ T6524] vhci_hcd: connection reset by peer [ 175.847839][ T6534] vhci_hcd: connection closed [ 175.854876][ T1092] vhci_hcd: release socket [ 175.883024][ T6549] loop1: detected capacity change from 0 to 128 [ 175.898535][ T1092] vhci_hcd: disconnect device [ 175.904158][ T1092] vhci_hcd: stop threads [ 175.908672][ T6549] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 175.922924][ T1092] vhci_hcd: release socket [ 175.928199][ T1092] vhci_hcd: disconnect device [ 175.936251][ T1092] vhci_hcd: stop threads [ 175.950822][ T1092] vhci_hcd: release socket [ 175.962808][ T1092] vhci_hcd: disconnect device [ 175.981192][ T1092] vhci_hcd: stop threads [ 176.005232][ T1092] vhci_hcd: release socket [ 176.013318][ T27] vhci_hcd: vhci_device speed not set [ 176.033526][ T1092] vhci_hcd: disconnect device [ 176.041692][ T1092] vhci_hcd: stop threads [ 176.050946][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.066326][ T1092] vhci_hcd: release socket [ 176.075602][ T1092] vhci_hcd: disconnect device [ 176.092742][ T1092] vhci_hcd: stop threads [ 176.101467][ T1092] vhci_hcd: release socket [ 176.112008][ T1092] vhci_hcd: disconnect device [ 177.359585][ T6562] netlink: 52 bytes leftover after parsing attributes in process `syz.0.202'. [ 177.664414][ T6570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.205'. [ 177.719375][ T6574] loop2: detected capacity change from 0 to 128 [ 177.763016][ T6574] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.894169][ T5815] usb usb36-port1: attempt power cycle [ 177.924782][ T3446] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.137899][ T6584] netlink: 52 bytes leftover after parsing attributes in process `syz.3.213'. [ 179.233456][ T5815] usb usb36-port1: unable to enumerate USB device [ 179.942796][ T6578] loop0: detected capacity change from 0 to 32768 [ 180.011597][ T6578] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.210 (6578) [ 180.031191][ T6600] netlink: 32 bytes leftover after parsing attributes in process `syz.3.218'. [ 180.114377][ T6578] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.162635][ T6578] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 180.197549][ T5778] vhci_hcd: vhci_device speed not set [ 180.233003][ T6578] BTRFS info (device loop0): setting nodatasum [ 180.298428][ T6578] BTRFS info (device loop0): force zlib compression, level 3 [ 180.344584][ T6578] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 180.397940][ T6602] loop3: detected capacity change from 0 to 128 [ 180.411131][ T6578] BTRFS info (device loop0): use lzo compression, level 0 [ 180.447766][ T6578] BTRFS info (device loop0): turning on flush-on-commit [ 180.476537][ T6578] BTRFS info (device loop0): enabling auto defrag [ 180.485716][ T6602] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.502506][ T6578] BTRFS info (device loop0): max_inline at 4096 [ 180.533589][ T6578] BTRFS info (device loop0): using free space tree [ 180.685279][ T1092] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.892180][ T6578] BTRFS info (device loop0): enabling ssd optimizations [ 181.042455][ T5773] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.146373][ T6626] netlink: 52 bytes leftover after parsing attributes in process `syz.1.222'. [ 182.247973][ T6283] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (6283) [ 182.565958][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 182.827078][ T6641] overlayfs: failed to verify index (index/00fb2100016d6b047976254c42b289b56a58a838f65893b6de2401000000000000, ftype=8000, err=-61) [ 182.868328][ T6641] overlayfs: failed index dir cleanup (-61) [ 182.869864][ T6644] loop3: detected capacity change from 0 to 128 [ 182.901265][ T6641] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 182.934524][ T6644] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.174622][ T6446] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.654276][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 185.819375][ T6690] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 185.826030][ T6690] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.849267][ T6690] vhci_hcd vhci_hcd.0: Device attached [ 185.871374][ T6694] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 185.878147][ T6694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.926858][ T6694] vhci_hcd vhci_hcd.0: Device attached [ 185.955820][ T6690] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(10) [ 185.962716][ T6690] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 185.987726][ T6690] vhci_hcd vhci_hcd.0: Device attached [ 185.999382][ T6700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 186.008861][ T6690] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 186.015536][ T6690] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.047142][ T6690] vhci_hcd vhci_hcd.0: Device attached [ 186.073735][ T6694] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 186.080414][ T6694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.113037][ T5815] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 186.132044][ T6694] vhci_hcd vhci_hcd.0: Device attached [ 186.137926][ T6690] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21) [ 186.137954][ T6690] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 186.138040][ T6690] vhci_hcd vhci_hcd.0: Device attached [ 186.141274][ T6690] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.204663][ T6694] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.237680][ T6708] loop0: detected capacity change from 0 to 256 [ 186.264027][ T6708] exfat: Deprecated parameter 'utf8' [ 186.300887][ T6708] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 186.301466][ T6705] vhci_hcd: connection closed [ 186.323401][ T6703] vhci_hcd: connection closed [ 186.329157][ T6697] vhci_hcd: connection closed [ 186.331821][ T6695] vhci_hcd: connection closed [ 186.345706][ T6692] vhci_hcd: connection reset by peer [ 186.353529][ T6701] vhci_hcd: connection closed [ 186.376025][ T6446] vhci_hcd: stop threads [ 186.389167][ T6446] vhci_hcd: release socket [ 186.413313][ T6446] vhci_hcd: disconnect device [ 186.423084][ T6446] vhci_hcd: stop threads [ 186.427409][ T6446] vhci_hcd: release socket [ 186.482983][ T6446] vhci_hcd: disconnect device [ 186.510047][ T6446] vhci_hcd: stop threads [ 186.533877][ T6446] vhci_hcd: release socket [ 186.554814][ T6446] vhci_hcd: disconnect device [ 186.587661][ T6446] vhci_hcd: stop threads [ 186.600175][ T6446] vhci_hcd: release socket [ 186.626960][ T6446] vhci_hcd: disconnect device [ 186.655520][ T6446] vhci_hcd: stop threads [ 186.661487][ T6446] vhci_hcd: release socket [ 186.669060][ T6446] vhci_hcd: disconnect device [ 186.676890][ T6446] vhci_hcd: stop threads [ 186.681296][ T6446] vhci_hcd: release socket [ 186.688572][ T6446] vhci_hcd: disconnect device [ 187.049545][ T6720] loop3: detected capacity change from 0 to 1764 [ 188.613278][ T5812] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 188.813206][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 188.843487][ T5812] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 188.871110][ T5812] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 188.926618][ T5812] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 188.976604][ T5812] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 189.048501][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.092516][ T5812] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 189.133276][ T5812] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 189.170747][ T5812] usb 2-1: Product: syz [ 189.184074][ T5812] usb 2-1: Manufacturer: syz [ 189.199644][ T5812] usb 2-1: SerialNumber: syz [ 189.257184][ T5812] usb 2-1: config 0 descriptor?? [ 189.287637][ T5812] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 189.336651][ T5812] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 189.528827][ T6744] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 189.535615][ T6744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.573175][ T6744] vhci_hcd vhci_hcd.0: Device attached [ 189.662115][ T6744] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 189.668812][ T6744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.714209][ T6748] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 189.720895][ T6748] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 189.753041][ T6752] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 189.759722][ T6752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.769589][ T6744] vhci_hcd vhci_hcd.0: Device attached [ 189.795036][ T6748] vhci_hcd vhci_hcd.0: Device attached [ 189.841547][ T6752] vhci_hcd vhci_hcd.0: Device attached [ 189.843390][ T6744] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(12) [ 189.853819][ T6744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.932272][ T6748] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21) [ 189.939053][ T6748] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 189.947540][ T6744] vhci_hcd vhci_hcd.0: Device attached [ 189.966059][ T5834] usb 2-1: USB disconnect, device number 5 [ 189.966102][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 189.993170][ T6740] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 190.001166][ T6752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.010565][ T5834] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 190.023801][ T6757] ldusb: No device or device unplugged -19 [ 190.052161][ T6748] vhci_hcd vhci_hcd.0: Device attached [ 190.081412][ T6744] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.119659][ T6758] vhci_hcd: connection closed [ 190.122977][ T4303] vhci_hcd: stop threads [ 190.142536][ T6747] vhci_hcd: connection closed [ 190.144180][ T6755] vhci_hcd: connection closed [ 190.149171][ T6749] vhci_hcd: connection closed [ 190.150747][ T6753] vhci_hcd: connection closed [ 190.160764][ T6745] vhci_hcd: connection closed [ 190.180566][ T4303] vhci_hcd: release socket [ 190.203690][ T4303] vhci_hcd: disconnect device [ 190.222560][ T4303] vhci_hcd: stop threads [ 190.230840][ T4303] vhci_hcd: release socket [ 190.247620][ T4303] vhci_hcd: disconnect device [ 190.263940][ T4303] vhci_hcd: stop threads [ 190.268455][ T4303] vhci_hcd: release socket [ 190.285477][ T4303] vhci_hcd: disconnect device [ 190.300637][ T4303] vhci_hcd: stop threads [ 190.311089][ T4303] vhci_hcd: release socket [ 190.324907][ T4303] vhci_hcd: disconnect device [ 190.346725][ T4303] vhci_hcd: stop threads [ 190.351055][ T4303] vhci_hcd: release socket [ 190.371573][ T4303] vhci_hcd: disconnect device [ 190.381955][ T4303] vhci_hcd: stop threads [ 190.401939][ T4303] vhci_hcd: release socket [ 190.412767][ T4303] vhci_hcd: disconnect device [ 191.213042][ T5815] vhci_hcd: vhci_device speed not set [ 192.855800][ T6788] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 192.862471][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.905249][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 192.943373][ T6788] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 192.950055][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.958143][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 192.968357][ T6788] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 192.975113][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 192.986309][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 192.996062][ T6788] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 193.002737][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.014186][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 193.048765][ T6788] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 193.055541][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.097533][ T6112] usb usb38-port1: attempt power cycle [ 193.124226][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 193.152093][ T6788] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 193.158987][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 193.167817][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 193.178090][ T6788] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.193765][ T6788] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.233889][ T6799] vhci_hcd: connection closed [ 193.234414][ T6795] vhci_hcd: connection closed [ 193.239971][ T6797] vhci_hcd: connection closed [ 193.243805][ T6804] vhci_hcd: connection closed [ 193.253137][ T6790] vhci_hcd: connection closed [ 193.258045][ T6801] vhci_hcd: connection closed [ 193.273406][ T6446] vhci_hcd: stop threads [ 193.297986][ T6446] vhci_hcd: release socket [ 193.312997][ T6112] usb 38-1: SetAddress Request (4) to port 0 [ 193.323042][ T6446] vhci_hcd: disconnect device [ 193.323411][ T6112] usb 38-1: new SuperSpeed USB device number 4 using vhci_hcd [ 193.350065][ T6446] vhci_hcd: stop threads [ 193.366589][ T6446] vhci_hcd: release socket [ 193.436080][ T6446] vhci_hcd: disconnect device [ 193.492549][ T6446] vhci_hcd: stop threads [ 193.510664][ T6446] vhci_hcd: release socket [ 193.543141][ T6446] vhci_hcd: disconnect device [ 193.558943][ T6446] vhci_hcd: stop threads [ 193.573100][ T6446] vhci_hcd: release socket [ 193.583260][ T6446] vhci_hcd: disconnect device [ 193.596461][ T6446] vhci_hcd: stop threads [ 193.605984][ T6446] vhci_hcd: release socket [ 193.613033][ T6446] vhci_hcd: disconnect device [ 193.635633][ T6446] vhci_hcd: stop threads [ 193.639963][ T6446] vhci_hcd: release socket [ 193.652132][ T6446] vhci_hcd: disconnect device [ 193.802994][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 193.993137][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 194.001856][ T8] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 194.023169][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 194.057850][ T8] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 194.086121][ T8] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 194.133056][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.164049][ T8] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 194.205895][ T8] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 194.236508][ T8] usb 4-1: Product: syz [ 194.240775][ T8] usb 4-1: Manufacturer: syz [ 194.256809][ T8] usb 4-1: SerialNumber: syz [ 194.268365][ T8] usb 4-1: config 0 descriptor?? [ 194.288675][ T8] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 194.314907][ T8] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 194.820153][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.826785][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.235599][ T5812] usb 4-1: USB disconnect, device number 3 [ 195.235910][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 195.248646][ T6808] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 195.363052][ T5812] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 195.370840][ T6821] ldusb: No device or device unplugged -19 [ 195.986212][ T5082] Bluetooth: unknown link type 128 [ 198.013074][ T5775] Bluetooth: hci0: command tx timeout [ 198.235624][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 198.423797][ T6112] usb 38-1: device descriptor read/8, error -110 [ 198.440447][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 198.449852][ T27] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 198.467856][ T27] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 198.493991][ T27] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 198.506748][ T27] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 198.524511][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.535185][ T27] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 198.544528][ T27] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 198.553166][ T27] usb 1-1: Product: syz [ 198.557487][ T27] usb 1-1: Manufacturer: syz [ 198.562163][ T27] usb 1-1: SerialNumber: syz [ 198.574738][ T27] usb 1-1: config 0 descriptor?? [ 198.583762][ T27] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 198.601644][ T27] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 198.646037][ T5815] vhci_hcd: vhci_device speed not set [ 198.977325][ T23] usb 1-1: USB disconnect, device number 7 [ 198.983373][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 198.995062][ T6854] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 199.009337][ T23] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 199.026733][ T6873] ldusb: No device or device unplugged -19 [ 199.715246][ T6112] usb usb38-port1: unable to enumerate USB device [ 200.062931][ T6112] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 200.213154][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 200.272977][ T6112] usb 2-1: Using ep0 maxpacket: 8 [ 200.282089][ T6112] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 200.290970][ T6112] usb 2-1: config 179 has no interface number 0 [ 200.298084][ T6112] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 200.310478][ T6112] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 200.323281][ T6112] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 200.335260][ T6112] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 200.353959][ T6112] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 200.368586][ T6112] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 200.401668][ T6112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.480514][ T6891] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 200.483568][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 200.536297][ T9] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 200.580177][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 200.676849][ T9] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 200.908652][ T9] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 200.922334][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 200.936725][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 200.946511][ T9] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 200.969715][ T9] usb 1-1: Product: syz [ 200.981787][ T9] usb 1-1: Manufacturer: syz [ 201.016868][ T9] usb 1-1: SerialNumber: syz [ 201.049302][ T9] usb 1-1: config 0 descriptor?? [ 201.086417][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 201.101714][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 201.610566][ T9] usb 1-1: USB disconnect, device number 8 [ 201.616774][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 201.643131][ T6896] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 201.752489][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 201.760918][ T6906] ldusb: No device or device unplugged -19 [ 201.920149][ T8] usb 2-1: USB disconnect, device number 6 [ 201.920325][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 201.934449][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 201.943812][ C1] ================================================================== [ 201.951919][ C1] BUG: KASAN: slab-use-after-free in register_lock_class+0x80b/0x8a0 [ 201.960134][ C1] Read of size 1 at addr ffff88807dbf3891 by task swapper/1/0 [ 201.967861][ C1] [ 201.970290][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 201.977401][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.987583][ C1] Call Trace: [ 201.990874][ C1] [ 201.993815][ C1] dump_stack_lvl+0x18c/0x250 [ 201.998684][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 202.003720][ C1] ? show_regs_print_info+0x20/0x20 [ 202.009019][ C1] ? load_image+0x400/0x400 [ 202.013813][ C1] ? __virt_addr_valid+0x469/0x540 [ 202.019040][ C1] print_report+0xa8/0x210 [ 202.023676][ C1] ? register_lock_class+0x80b/0x8a0 [ 202.029188][ C1] kasan_report+0x117/0x150 [ 202.033706][ C1] ? register_lock_class+0x80b/0x8a0 [ 202.039047][ C1] register_lock_class+0x80b/0x8a0 [ 202.044181][ C1] ? __down_timeout+0x10/0x10 [ 202.049139][ C1] ? is_dynamic_key+0x260/0x260 [ 202.054438][ C1] ? prb_read_valid+0x3d/0x60 [ 202.059133][ C1] __lock_acquire+0x188/0x7d40 [ 202.064164][ C1] ? mark_lock+0x94/0x320 [ 202.068502][ C1] ? __lock_acquire+0x1347/0x7d40 [ 202.073535][ C1] ? mark_lock+0x94/0x320 [ 202.077873][ C1] ? __lock_acquire+0x1347/0x7d40 [ 202.082989][ C1] ? verify_lock_unused+0x140/0x140 [ 202.088636][ C1] lock_acquire+0x19e/0x420 [ 202.093165][ C1] ? __wake_up+0x10b/0x1a0 [ 202.097703][ C1] ? read_lock_is_recursive+0x20/0x20 [ 202.103285][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 202.108667][ C1] ? __wake_up+0x10b/0x1a0 [ 202.113107][ C1] ? _raw_spin_lock+0x40/0x40 [ 202.117818][ C1] __wake_up+0x10b/0x1a0 [ 202.122077][ C1] ? __wake_up_bit+0x210/0x210 [ 202.127032][ C1] __usb_hcd_giveback_urb+0x396/0x520 [ 202.132529][ C1] dummy_timer+0xc04/0x3080 [ 202.137371][ C1] ? debug_deactivate+0x1d/0x1c0 [ 202.142513][ C1] ? lock_chain_count+0x20/0x20 [ 202.147399][ C1] ? dummy_free_streams+0x530/0x530 [ 202.152617][ C1] ? debug_object_deactivate+0x67/0x390 [ 202.158269][ C1] __hrtimer_run_queues+0x52a/0xc40 [ 202.163487][ C1] ? dummy_free_streams+0x530/0x530 [ 202.169031][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 202.174159][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 202.180245][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 202.185390][ C1] handle_softirqs+0x280/0x820 [ 202.190181][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 202.195572][ C1] ? do_softirq+0x1a0/0x1a0 [ 202.200262][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 202.205829][ C1] __irq_exit_rcu+0xd3/0x190 [ 202.210562][ C1] ? irq_exit_rcu+0x20/0x20 [ 202.215357][ C1] irq_exit_rcu+0x9/0x20 [ 202.219612][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 202.225562][ C1] [ 202.228510][ C1] [ 202.231440][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 202.237505][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 202.243276][ C1] Code: c7 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 d1 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 202.262908][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 202.268999][ C1] RAX: 8f652d1cbb7eb100 RBX: ffffffff8162a490 RCX: 8f652d1cbb7eb100 [ 202.277251][ C1] RDX: 0000000000000001 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 202.285238][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 202.293214][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff110036ce780 [ 202.301495][ C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000 [ 202.309846][ C1] ? do_idle+0x1f0/0x4e0 [ 202.314235][ C1] default_idle+0x13/0x20 [ 202.318580][ C1] default_idle_call+0x6c/0xa0 [ 202.323481][ C1] do_idle+0x1f0/0x4e0 [ 202.327681][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 202.333103][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 202.339457][ C1] cpu_startup_entry+0x43/0x60 [ 202.344251][ C1] start_secondary+0xee/0xf0 [ 202.348864][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 202.355097][ C1] [ 202.358212][ C1] [ 202.360546][ C1] Allocated by task 6112: [ 202.366091][ C1] kasan_set_track+0x4e/0x70 [ 202.370797][ C1] __kasan_kmalloc+0x8f/0xa0 [ 202.375396][ C1] xpad_probe+0x41c/0x1ec0 [ 202.379824][ C1] usb_probe_interface+0x5c9/0xb20 [ 202.385209][ C1] really_probe+0x25b/0xb20 [ 202.389736][ C1] __driver_probe_device+0x18c/0x330 [ 202.395109][ C1] driver_probe_device+0x4f/0x420 [ 202.400133][ C1] __device_attach_driver+0x2ca/0x510 [ 202.405889][ C1] bus_for_each_drv+0x252/0x2e0 [ 202.410770][ C1] __device_attach+0x2c2/0x420 [ 202.415622][ C1] bus_probe_device+0x180/0x260 [ 202.420480][ C1] device_add+0x85b/0xc20 [ 202.424815][ C1] usb_set_configuration+0x1a79/0x20c0 [ 202.430365][ C1] usb_generic_driver_probe+0x8d/0x150 [ 202.435847][ C1] usb_probe_device+0x13d/0x270 [ 202.440704][ C1] really_probe+0x25b/0xb20 [ 202.445210][ C1] __driver_probe_device+0x18c/0x330 [ 202.450515][ C1] driver_probe_device+0x4f/0x420 [ 202.455562][ C1] __device_attach_driver+0x2ca/0x510 [ 202.460941][ C1] bus_for_each_drv+0x252/0x2e0 [ 202.465798][ C1] __device_attach+0x2c2/0x420 [ 202.470559][ C1] bus_probe_device+0x180/0x260 [ 202.475440][ C1] device_add+0x85b/0xc20 [ 202.479946][ C1] usb_new_device+0xa3c/0x1660 [ 202.484808][ C1] hub_event+0x29bf/0x49f0 [ 202.489524][ C1] process_scheduled_works+0xa5d/0x15d0 [ 202.495110][ C1] worker_thread+0xa55/0xfc0 [ 202.500235][ C1] kthread+0x2fa/0x390 [ 202.504502][ C1] ret_from_fork+0x48/0x80 [ 202.508944][ C1] ret_from_fork_asm+0x11/0x20 [ 202.513744][ C1] [ 202.516104][ C1] Freed by task 8: [ 202.519825][ C1] kasan_set_track+0x4e/0x70 [ 202.524431][ C1] kasan_save_free_info+0x2e/0x50 [ 202.529465][ C1] ____kasan_slab_free+0x126/0x1e0 [ 202.534915][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 202.540415][ C1] __kmem_cache_free+0xba/0x1e0 [ 202.545415][ C1] xpad_disconnect+0x350/0x480 [ 202.550283][ C1] usb_unbind_interface+0x1f2/0x870 [ 202.555578][ C1] device_release_driver_internal+0x4cb/0x7a0 [ 202.561821][ C1] bus_remove_device+0x342/0x400 [ 202.567044][ C1] device_del+0x522/0x910 [ 202.571484][ C1] usb_disable_device+0x3e9/0x8a0 [ 202.576607][ C1] usb_disconnect+0x34c/0x8a0 [ 202.581297][ C1] hub_event+0x1d0f/0x49f0 [ 202.585729][ C1] process_scheduled_works+0xa5d/0x15d0 [ 202.591546][ C1] worker_thread+0xa55/0xfc0 [ 202.596142][ C1] kthread+0x2fa/0x390 [ 202.600308][ C1] ret_from_fork+0x48/0x80 [ 202.604744][ C1] ret_from_fork_asm+0x11/0x20 [ 202.609535][ C1] [ 202.611890][ C1] The buggy address belongs to the object at ffff88807dbf3800 [ 202.611890][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 202.626312][ C1] The buggy address is located 145 bytes inside of [ 202.626312][ C1] freed 1024-byte region [ffff88807dbf3800, ffff88807dbf3c00) [ 202.640415][ C1] [ 202.642738][ C1] The buggy address belongs to the physical page: [ 202.649246][ C1] page:ffffea0001f6fc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dbf0 [ 202.659491][ C1] head:ffffea0001f6fc00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 202.668422][ C1] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 202.676411][ C1] page_type: 0xffffffff() [ 202.680742][ C1] raw: 00fff00000000840 ffff888017c41dc0 ffffea0001e0e800 dead000000000002 [ 202.689497][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 202.698184][ C1] page dumped because: kasan: bad access detected [ 202.704698][ C1] page_owner tracks the page as allocated [ 202.710418][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 3446, tgid 3446 (kworker/u4:7), ts 93008940510, free_ts 93007417662 [ 202.731108][ C1] post_alloc_hook+0x1c1/0x200 [ 202.735958][ C1] get_page_from_freelist+0x1951/0x19e0 [ 202.741683][ C1] __alloc_pages+0x1f0/0x460 [ 202.746282][ C1] alloc_slab_page+0x5d/0x160 [ 202.750958][ C1] new_slab+0x87/0x2d0 [ 202.755030][ C1] ___slab_alloc+0xc5d/0x12f0 [ 202.759802][ C1] __kmem_cache_alloc_node+0x19e/0x250 [ 202.765268][ C1] __kmalloc+0xa4/0x230 [ 202.769440][ C1] ___neigh_create+0x6d2/0x2440 [ 202.774481][ C1] ip6_finish_output2+0x1581/0x1630 [ 202.779822][ C1] ndisc_send_skb+0xc26/0x14f0 [ 202.784594][ C1] addrconf_dad_completed+0x7ef/0xd90 [ 202.789976][ C1] addrconf_dad_work+0xc90/0x1530 [ 202.795183][ C1] process_scheduled_works+0xa5d/0x15d0 [ 202.800733][ C1] worker_thread+0xa55/0xfc0 [ 202.805333][ C1] kthread+0x2fa/0x390 [ 202.809402][ C1] page last free stack trace: [ 202.814079][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 202.819562][ C1] free_unref_page+0x32/0x2e0 [ 202.824248][ C1] __unfreeze_partials+0x1cf/0x210 [ 202.829359][ C1] put_cpu_partial+0x17c/0x250 [ 202.834118][ C1] __slab_free+0x319/0x400 [ 202.838541][ C1] qlist_free_all+0x75/0xd0 [ 202.843053][ C1] kasan_quarantine_reduce+0x143/0x160 [ 202.848518][ C1] __kasan_slab_alloc+0x22/0x80 [ 202.853368][ C1] slab_post_alloc_hook+0x6e/0x4b0 [ 202.858503][ C1] kmem_cache_alloc_node+0x14c/0x320 [ 202.863796][ C1] __alloc_skb+0x103/0x2c0 [ 202.868308][ C1] mld_newpack+0x154/0xbe0 [ 202.872818][ C1] add_grhead+0x5a/0x2a0 [ 202.877075][ C1] add_grec+0x13ad/0x1660 [ 202.881427][ C1] mld_send_initial_cr+0xed/0x240 [ 202.886473][ C1] ipv6_mc_dad_complete+0x88/0x210 [ 202.891599][ C1] [ 202.893947][ C1] Memory state around the buggy address: [ 202.899669][ C1] ffff88807dbf3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.907906][ C1] ffff88807dbf3800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.916019][ C1] >ffff88807dbf3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.924110][ C1] ^ [ 202.928714][ C1] ffff88807dbf3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.936791][ C1] ffff88807dbf3980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.944913][ C1] ================================================================== [ 202.953081][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 202.960358][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 202.967380][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.977434][ C1] Call Trace: [ 202.980719][ C1] [ 202.983570][ C1] dump_stack_lvl+0x18c/0x250 [ 202.988261][ C1] ? show_regs_print_info+0x20/0x20 [ 202.993466][ C1] ? load_image+0x400/0x400 [ 202.998079][ C1] panic+0x2dc/0x730 [ 203.002010][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 203.006528][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 203.012434][ C1] ? _raw_spin_unlock+0x40/0x40 [ 203.017488][ C1] ? print_memory_metadata+0x314/0x400 [ 203.022972][ C1] ? register_lock_class+0x80b/0x8a0 [ 203.028281][ C1] check_panic_on_warn+0x84/0xa0 [ 203.033232][ C1] ? register_lock_class+0x80b/0x8a0 [ 203.038522][ C1] end_report+0x6f/0x130 [ 203.042773][ C1] kasan_report+0x128/0x150 [ 203.047303][ C1] ? register_lock_class+0x80b/0x8a0 [ 203.052604][ C1] register_lock_class+0x80b/0x8a0 [ 203.057724][ C1] ? __down_timeout+0x10/0x10 [ 203.062422][ C1] ? is_dynamic_key+0x260/0x260 [ 203.067279][ C1] ? prb_read_valid+0x3d/0x60 [ 203.071970][ C1] __lock_acquire+0x188/0x7d40 [ 203.076835][ C1] ? mark_lock+0x94/0x320 [ 203.081169][ C1] ? __lock_acquire+0x1347/0x7d40 [ 203.086196][ C1] ? mark_lock+0x94/0x320 [ 203.090609][ C1] ? __lock_acquire+0x1347/0x7d40 [ 203.095753][ C1] ? verify_lock_unused+0x140/0x140 [ 203.101521][ C1] lock_acquire+0x19e/0x420 [ 203.106059][ C1] ? __wake_up+0x10b/0x1a0 [ 203.110669][ C1] ? read_lock_is_recursive+0x20/0x20 [ 203.116161][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 203.121470][ C1] ? __wake_up+0x10b/0x1a0 [ 203.126003][ C1] ? _raw_spin_lock+0x40/0x40 [ 203.130781][ C1] __wake_up+0x10b/0x1a0 [ 203.135224][ C1] ? __wake_up_bit+0x210/0x210 [ 203.140259][ C1] __usb_hcd_giveback_urb+0x396/0x520 [ 203.145831][ C1] dummy_timer+0xc04/0x3080 [ 203.150376][ C1] ? debug_deactivate+0x1d/0x1c0 [ 203.155335][ C1] ? lock_chain_count+0x20/0x20 [ 203.160398][ C1] ? dummy_free_streams+0x530/0x530 [ 203.165716][ C1] ? debug_object_deactivate+0x67/0x390 [ 203.171701][ C1] __hrtimer_run_queues+0x52a/0xc40 [ 203.177019][ C1] ? dummy_free_streams+0x530/0x530 [ 203.182457][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 203.187935][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 203.194224][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 203.199366][ C1] handle_softirqs+0x280/0x820 [ 203.204330][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 203.209196][ C1] ? do_softirq+0x1a0/0x1a0 [ 203.213750][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 203.219013][ C1] __irq_exit_rcu+0xd3/0x190 [ 203.223656][ C1] ? irq_exit_rcu+0x20/0x20 [ 203.228192][ C1] irq_exit_rcu+0x9/0x20 [ 203.232469][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 203.238183][ C1] [ 203.241469][ C1] [ 203.244463][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 203.250484][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 203.256140][ C1] Code: c7 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 d1 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 203.276096][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 203.282214][ C1] RAX: 8f652d1cbb7eb100 RBX: ffffffff8162a490 RCX: 8f652d1cbb7eb100 [ 203.290214][ C1] RDX: 0000000000000001 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 203.298222][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 203.306403][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff110036ce780 [ 203.314574][ C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000 [ 203.322578][ C1] ? do_idle+0x1f0/0x4e0 [ 203.326866][ C1] default_idle+0x13/0x20 [ 203.331212][ C1] default_idle_call+0x6c/0xa0 [ 203.335988][ C1] do_idle+0x1f0/0x4e0 [ 203.340097][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 203.345400][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 203.351584][ C1] cpu_startup_entry+0x43/0x60 [ 203.356380][ C1] start_secondary+0xee/0xf0 [ 203.361078][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 203.367167][ C1] [ 204.513725][ C1] Shutting down cpus with NMI [ 204.519106][ C1] Kernel Offset: disabled [ 204.523773][ C1] Rebooting in 86400 seconds..