last executing test programs: 4m19.922189564s ago: executing program 0 (id=574): r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x52bf36cf, 0x37df, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) lseek(r0, 0x80000001, 0x4) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0xf) writev(r2, &(0x7f0000001b80)=[{&(0x7f0000000a00)="835e02f5dd616e0c0f9f29058e17ff7bb36219698097482fbf66a332e0321c4c4f3035c4d79cb3c90e93f59ca59a055de4689a7c2c4751", 0x37}, {&(0x7f0000001b40)="37cc12650c541baa5211c69b297c203ac0d5ce4b07fe119b68504ba7aeaf7772", 0x20}], 0x2) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) fcntl$setflags(r4, 0x2, 0x1) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000001c80)) read$FUSE(r3, &(0x7f0000001cc0)={0x2020}, 0x2020) rmdir(&(0x7f0000003d40)='./file0\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000003f80)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003f40)={&(0x7f0000003e00)={0xe4, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf5b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0xc900) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x8) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000004000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000004140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe}}, './file0\x00'}) 4m19.69403176s ago: executing program 0 (id=575): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x25, 0x10, @void}, 0x10) r4 = fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000002c0)='+*@[(\x00', &(0x7f00000003c0)='./file0\x00', r1) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000006c0)={0x7, 0x2, 0x5, 0x7, 0x6, 0x0, [{0xfffffffffffffff9, 0x7, 0x1c00000000, '\x00', 0x40}, {0x40, 0x200, 0x40, '\x00', 0xd00}, {0x7fff, 0x5, 0x8000000000000000, '\x00', 0x880}, {0x10, 0x80000000, 0x1, '\x00', 0x2181}, {0x9, 0x7fcb1706, 0x328e, '\x00', 0x200}, {0x0, 0x0, 0x1c1, '\x00', 0x800}]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m19.502952152s ago: executing program 0 (id=577): r0 = memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x1) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000100)=ANY=[@ANYBLOB="03029d"], 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x80000000, 0x7fffffff}) mlockall(0x5) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4m19.324839029s ago: executing program 0 (id=578): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400840, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040080}, 0x14004089) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r4, &(0x7f0000000940)=[{{&(0x7f00000001c0)=@vsock, 0x80, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f00000004c0)=""/185, 0xb9}, {&(0x7f00000005c0)=""/53, 0x35}, {&(0x7f0000000600)=""/170, 0xaa}, {&(0x7f00000006c0)=""/113, 0x71}, {&(0x7f0000000980)=""/222, 0xde}], 0x7, &(0x7f00000008c0)=""/103, 0x67}, 0x1}], 0x1, 0x40000002, 0x0) 4m18.621540272s ago: executing program 0 (id=579): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x12, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002300)=""/102400, 0x19000) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0'}, 0x7c) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) getpid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000022c0)={'wlan1\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x40001043, r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r5, 0x0, 0x6, 0x0) write$binfmt_misc(r8, &(0x7f00000000c0), 0xfdef) close_range(r3, 0xffffffffffffffff, 0x0) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, 0x0, 0x700) rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000040)={0x60, 0x0, 0x0, {{0x6, 0x7cf7, 0x7, 0x0, 0xffffffffffffeffd, 0x5, 0x8, 0xffffffff}}}, 0x60) 4m17.188718302s ago: executing program 0 (id=584): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r2, 0xffff) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x40, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="990500"/13, 0xd}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) syz_io_uring_setup(0x7dc0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r5}, 0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r5, 0x3}, 0x8) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x0, 0x8000}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4m2.151773487s ago: executing program 32 (id=584): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r2, 0xffff) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x40, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="990500"/13, 0xd}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) syz_io_uring_setup(0x7dc0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r5}, 0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r5, 0x3}, 0x8) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x0, 0x8000}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17.010463416s ago: executing program 5 (id=1450): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000efffffff8500000023009ea65d083277543c6a7422932abe000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003f0000008500da3da8d6a538aca3a9e773f731a1de6783c05b7f693cd5d8020372558b95f31c6e165aa3c968afe7d31cfd855c19b90029e53de4a430c5c0099429f40c89170e81465cb2de6a5d4247281ee11ec740b2b84287"], &(0x7f00000006c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket(0x2, 0x80805, 0x0) (async) io_setup(0xfffffffa, &(0x7f0000000000)=0x0) io_pgetevents(r3, 0x80000000000, 0x9, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x400018a, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) (async) shutdown(r4, 0x1) (async) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 14.277029744s ago: executing program 5 (id=1460): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000005f304433b3c4d403b4c4ddca0e3cf4c122da00a646d2f5d832c05d66d0c0e7f6a1e88d3116c882674e74c604fab452ac64e43e8effe88a272982ecf2ef60b197aa20a77e8bd43cee3440b80f4fc8720bf57f597c50f8b2373f9a67f3e6511c9bcadd35d5cb65433d9e4a97b8a71c5fb1f84d973937eb4ce52122c6d0441ffca0a1bb962430859b3ebbb7782a4e014285611f3adb985f54b120b42a6b64a654918151ae42fa286de83507118c213a27209c9905c676164775c1aa94f5d41ad4a1660f0f3b24109bd9f70bb1ec61eb2516a8fbbf1dda00"/227], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13.550465011s ago: executing program 5 (id=1461): fsmount(0xffffffffffffffff, 0x0, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x684, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000180), 0x1, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) 9.061630975s ago: executing program 5 (id=1477): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x7, 0x0, &(0x7f0000000c40)="63eced8e46dc3f", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x10) 8.975436698s ago: executing program 3 (id=1480): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x3, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.251996673s ago: executing program 3 (id=1483): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10820, 0x400}}, 0x20}}, 0x4084) 6.72254703s ago: executing program 5 (id=1484): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000000)={0x0, 0x140d, 0x8, 0x2, 0x1fe}, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x708e, &(0x7f0000000100)={0x0, 0x2683, 0x4000, 0x0, 0x394, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000004c0)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x5, 0x8000000, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x49}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r5 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6.45733155s ago: executing program 2 (id=1487): fsmount(0xffffffffffffffff, 0x0, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x684, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000180), 0x1, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) 5.592134638s ago: executing program 3 (id=1489): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3}}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000540)='./file0\x00', 0x2) syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0x22}, 0x20) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x3, {0x3, 0x24, "d8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.029332693s ago: executing program 1 (id=1495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = socket(0x25, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x2, 0x15, 0xf7, 0x0, 0x22, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_x_sec_ctx={0x1e, 0x18, 0x8, 0x0, 0xe7, "14ac5c5899a5a3b2813039588400fb0df80352f9824a092e0b49eee4dd7bdcff57aab902dc2b75535aea739a0503e6b6c2ce543cc42e329ef7d4703a1f5af467b222d8b8b5d008a09f3760000253bad158709ac38d81798c86bcebbeb3073dea3273d4b82265a9f5370e0a5af831aa83a75c16593855f3d9744e0d7f80179a871b5fbff63c716c16dd751f6387c4ff468490355baf51fac597751e68ddca5015ce269c929898e0757f9ee3f734b2820e584644937f5dcd0c9c00816250d2dca2790dd0cf20f19d048d1b22cf7884cc00c88b990fdc2d58928dffaead8227454151959d7f71e2e0"}, @sadb_x_nat_t_type={0x1, 0x14, 0xd}]}, 0x110}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,loose,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f6d6561737572652c736d61636b6673666c6f6f723d2c657569643dabbff60bd737ba6ef77b31743f8c971711e0e2e2e2bfa8dfae23e6958ddfb4154823c5b8d84afcbca94c43456ee6efaf81b8ad632d4771e06ae0c182ce68a75579", @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,loose,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f6d6561737572652c736d61636b6673666c6f6f723d2c657569643dabbff60bd737ba6ef77b31743f8c971711e0e2e2e2bfa8dfae23e6958ddfb4154823c5b8d84afcbca94c43456ee6efaf81b8ad632d4771e06ae0c182ce68a75579", @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) getpid() (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 4.479428544s ago: executing program 4 (id=1496): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, 0x141, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.715923432s ago: executing program 1 (id=1497): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) unshare(0x26020480) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'nicvf0\x00', 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000600)=r3) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 3.715232708s ago: executing program 2 (id=1498): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4fd71626fed0cc5b26301569415701736f6c9228585b2b91e8826c677113443940cabd15bc6d2d3cedb2c6dcb54c9a9d9ac75809f9905b0d5d12345f159ecc4c9cbb28511754bbdcf3c1084cd4c0e771ca8dc463844f6e49", 0x58) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_REGISTER(r4, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x6100, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.509859578s ago: executing program 1 (id=1499): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e1338720402068829527010203010902240001020000100904d30002be79e8000905040200020500ff090582"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000140)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = getpid() preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/206, 0xce}, {&(0x7f0000000540)=""/27, 0x1b}, {&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/120, 0x78}, {&(0x7f0000000740)=""/240, 0xf0}], 0x7, 0x26, 0x2) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$TIOCGPTPEER(r4, 0x5441, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000006c000000000000000100000018110000aeff12", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x54) sendto$inet(r2, &(0x7f0000000200)="cd4326a78cb3f193742c4a15a03925bb4b407f66599db84926441b4ad4faf8d67b6a1a4f329c2a022e36400c708d32786a3caad501056633019d0c90916856d9e5f645b2aaf9ccfee8e20b5b76", 0x4d, 0x10, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x2, 0x1}, @timestamp, @window={0x3, 0x9, 0xd3b}, @mss={0x2, 0xfffffffe}, @window={0x3, 0x4, 0xdd}, @mss={0x2, 0x7}, @window={0x3, 0xfff5, 0x8}, @window={0x3, 0x3, 0x8}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000940)='illinois\x00', 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000001fc0)={0x0, 'veth1\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.509154724s ago: executing program 4 (id=1500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000000000000000000a05000000000000000000010000000900010073797a300000000064000000060a010400000000000000000100000008000b40000000003c050480380001800b00010064796e73000028"], 0xac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) socket$unix(0x1, 0x2, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) socket$nl_generic(0x11, 0x3, 0x10) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') 2.928347483s ago: executing program 3 (id=1501): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x18) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0xc80, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) 2.927919498s ago: executing program 4 (id=1502): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x10) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) 2.895345972s ago: executing program 2 (id=1503): r0 = socket(0x21, 0x800, 0x891) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 2.807728801s ago: executing program 5 (id=1504): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)=@x86={0xff, 0xe, 0x7, 0x0, 0x9, 0x3, 0x7f, 0x9, 0x62, 0x81, 0x7, 0xc, 0x0, 0x3ff, 0x7, 0x7, 0x2, 0xcd, 0x1, '\x00', 0xe, 0x84}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000180)={[0x9da6]}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_proto_private(r4, 0x89e0, 0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_create1(0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) socket$inet(0x2, 0x1, 0x0) 2.72925276s ago: executing program 4 (id=1505): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x7, 0x0, &(0x7f0000000c40)="63eced8e46dc3f", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x10) 1.993134517s ago: executing program 2 (id=1506): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x61, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x7e, 0xff, 0x200, 0x6, 0x18, "06c1cd2106c9b2d52e36ba5139f92fa023855c"}) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$FUSE(r5, &(0x7f0000001480)={0x2020}, 0x2020) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, r6, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x800) 1.90023095s ago: executing program 3 (id=1507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x403, 0x5989}) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='dvmrp0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@uuid_off}], [], 0x2c}) 1.891860566s ago: executing program 1 (id=1508): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x35314258}}) socket$inet(0x2, 0x4000000000000001, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0280, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x36) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x2, 0x5}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5, 0x0, 0x0, 0x4}]}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0xffc8}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) (async) getrusage(0xffffffffffffffff, &(0x7f0000000380)) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8304050000000000800012800e00010069703665727370616e0000006c000280140006002001000000000000000000000000000214000600fc020000000000000000000000000001060002000030000014000700fc02000000000000000000000000000004001200050008004b00000008000100", @ANYRES32=0x0, @ANYBLOB="080004"], 0xa0}}, 0x0) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async) r10 = syz_io_uring_setup(0x9e, 0x0, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) (async) io_uring_enter(r10, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.272044256s ago: executing program 4 (id=1509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e08906", 0x0, 0xfe, 0x60000e1e, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200000, &(0x7f0000000000)=ANY=[]) 1.151197665s ago: executing program 1 (id=1510): mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/200, 0xc8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file1\x00'}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x400, 0xac, 0x8}, 0x18) fanotify_mark(r0, 0x400, 0x40000018, r2, &(0x7f0000000300)='./file0\x00') r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x2000000, &(0x7f0000000580)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8001}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@allow_other}], [{@subj_type={'subj_type', 0x3d, 'pipefs\x00'}}, {@subj_user={'subj_user', 0x3d, ':{*'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, 'pipefs\x00'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, 'pipefs\x00'}}]}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000740), 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) pwritev2(r6, &(0x7f00000008c0)=[{&(0x7f00000007c0)="f0762a2300a75b13a8e3db2c05da35890813e0e8b70ad6a9a40961fd8bd450fe7a0d8346dee75f7e974c8e21961a809725e4245d842fe20df98043547e50f86cc2289acc99b16fddeb1e917d5bff04f878cea43b48745502dbaffc529935994651c11af2d37e14e7fd79b39e62af7ec3", 0x70}, {&(0x7f0000000840)="5b9957159fa9346c09572d51d0bfd1c1a7f34b533bc9662eee8e811c10913feac94ad32e70e08d4393d0d913f005a1dbbcb09cdc5d4f2dc58c78d00da6d88d020a77d3779115eb5c62eeda3be7d8746bd2b8d97cd7301a7ad2dc7bbcd9238ec9050ee755c092", 0x66}], 0x2, 0x2, 0x4, 0x18) r7 = accept4$vsock_stream(r1, &(0x7f0000000900)={0x28, 0x0, 0xffffd8ee}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r7, 0x28, 0x6, &(0x7f0000000940)={0x77359400}, 0x10) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980), 0x41042, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r9, {0xee00, r5}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000a40)=0x1, 0x4) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80), 0x400080, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000bc0)={&(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], 0x4, 0x1, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_CURSOR(r11, 0xc01c64a3, &(0x7f0000000c00)={0x2, r12, 0x9, 0xfd2, 0x2, 0x1, 0xffffff7f}) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000c40)={0x18, 0x0, {0x4, @remote, 'rose0\x00'}}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000001000)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x24c, r13, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x9e, 0x5b, "bcc530280a3626e50af0db2362a72c86e73e5f360f285bad0d9ad60904b76bec1b9d8c08f6c9fa2d0305fa97b4bb2942ad816d88e1722ba7e6771dca567344b6fc75ba6de21bfe3264f4515e0da06c0e51ad3bdc679740dad24608510a48c0316bbd5177d516f3dd332b035db4afe13f15e6bcded407c177e6a7a79721abdd8a96c516fde815577a664c24d1b605f87b58fd1f93405075a16215"}, @NL80211_ATTR_FRAME_MATCH={0xeb, 0x5b, "6d8aace8b68721f9027c9759fa6da31e2e557412593952ebeeab9bb4747e49cabf720142d8c3fad4874cba0896a949a81af4cd6c87ab9caddc899b4beda1351e26e27dfb0109be5b2c3657eb6173567a2df70e4a45da77a682c6fd4d8e45baa390400e7581dbf4c14ca29fb248b0488788cf8d2b756c28e3955ed43f9da9aad65e1908392198fddd182ba341fd8958b046d80d025041fa15cb18f0c0527ec96ae2bf2d10d7a6215f7d59399865c4fced773409c66fc77e93fae0731d5e8ead74e47ea9834f5d9a040737415ebf6b900ebff9a5962a24319859339230666042e21479e409adf7be"}, @NL80211_ATTR_FRAME_MATCH={0x8b, 0x5b, "595759d8407e972f81c8dceed93c33c06957a1bfbc961398d2af65a7d770c24fa7baccf2939fa8e9c03c371562b7939cd7d40c17fc60147937c8e4f3db99db88a7e6bd11fc8956f25fdef3bd909c911384802ab71df53318de3a83b3dd0adb600436acda09f729604a6e5d953504ff0207d29f4867c34493b9f4acb0214f1f346a2af2bdf9a466"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xe12}]}, 0x24c}, 0x1, 0x0, 0x0, 0x8004}, 0x2001) syz_usb_connect(0x6, 0xce2, &(0x7f0000001040)={{0x12, 0x1, 0x250, 0x83, 0x37, 0x3b, 0x884363492a0243df, 0x83a, 0x7511, 0x1e63, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd0, 0x4, 0x1, 0x8, 0x20, 0x8, [{{0x9, 0x4, 0x63, 0x6, 0x9, 0x6c, 0xea, 0x84, 0x8, [@hid_hid={0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x250}}], [{{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x7f, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x4, 0x3, [@generic={0xd2, 0x0, "da341c3bafaf8c9b72bb8665327c8227f9716c49d94440e26152960c00d927d6b036848e7f9c9829be1a5f08eca33787f2adb1824470da2d8ffe6da62600f4bd7a1c7ee6a5e2584cd6c39d7e35e965bf3b7c29987211105e2eb57772bc6a75483e4f1a5ec23fe559991150bf641e28c1966bab94cefcfb1e1ea73bcaec03b94fd13ea94c4359b565b1ca88a70b06e338c6d2ef9c84bd639eaa2e89927be78840d3d280257942e65815a27f6e6173adbb7dd651a98923d3421f3dd06ddb9f84b94e52dd5a3b1c4d8e141ec5b5f986af90"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0xa2, 0x6, 0x6}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x6, 0x4, 0x1, [@generic={0x81, 0x22, "37660973f915ddbf0abd01bf29f33525c81e7c1522bbeeadbf96bde9490833f3267308ec0dc119d4de37d630db6dedb959d291c12bd641b23dfd54d2f45447ca99bef1275f6a833b46e5ee152ddc078b2fa1acf04139f89c74876b7b572d54e1761cf035f916866c3f281febf7b51af26432ff1e20af0d69356b7c9465f89e"}]}}, {{0x9, 0x5, 0xd, 0x6, 0x40, 0x29, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x9, 0x7, 0x8, [@generic={0x80, 0x4, "cbe522ca3a5aea25144b6f3d34b67075c3ac659c5861ca805edde8ddbec525308d9e6a627257a762f60856c6ea4f3396fdba30bc9523b4b5a0d69c83f71d9b3f5d22424befb90b5e1d7193fd03a9ec2ba511d889ee2f03f7573431adaec49d00bd6edf5f8176b54ccc1203fe864d39d1c34a38a100e5adf17aa0da0a9401"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x200, 0x7, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x4}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x9, 0xf8, 0x7f, [@generic={0xad, 0xa, "bf12681956de88ac03b76b7c2c18a09e9bb59a908261c3101fb302d21d8ac0bfb1370491efddcb853374a794960772a2608d02eaaff624543e3e08f598e67f651bce76067eacb964f8888aa31956713b66ec9e6cf18fbef5381918db00686e8de38569923c345f8cfc77e4e02f030213bab9c98808178e7bee60b6c9c03b5d60a82bc28b84a7bdbe2d0853b79b7d6b482725b974fbf968813482aa33d9d365838ce8ccaed6e06179f7f53a"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x0, 0x4, 0x8, 0xd, [@generic={0x34, 0xc, "2b1d775171dce273cbf3bb4fcd1fd51f3e56c62331ddcc8cbefb539c3723db7c4f698d957153c7d11465005db3d168268a04"}]}}]}}, {{0x9, 0x4, 0x62, 0x4, 0xd, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x3, 0x0, "11"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x30, 0x4, 0x4, 0x4, "", "3e43d3"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2, 0x9}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6b, 0x2, 0x0, 0x6, "37d2cf", "7250ef"}]}, @uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x65, 0x81, "86c10f1175ec"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0xa5, 0x5e, 0x7, [@generic={0x83, 0x10, "6d6b70ef1676cfa65e1e614d1ede961c54232e1bfe9fabada6be0495bb357a1050bf18605b2533076f54d8c7ef1631ada80f1068195b486125c4faff12a85152b967dcccb07df2a942e07dc9c3fe2596a8d08d7b27d95586b48d9077278c476f63f5d2c6fb9beaa8218f155d775c1541a9dd559c10a28353a979fc0441c7976cde"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x0, 0xf9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x1}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x40, 0x32, 0x8, [@generic={0x3c, 0x6, "ab447a518bceecadad7e677ccaedebb156a5a6c758078d877016429b4cc1001baac7df4aeb637faa25e09ed887991343f37cca2caecd139bb1a2"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x8, 0x80, 0x1}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x1, 0x10, 0x8, [@generic={0xd0, 0x21, "2b2f7de5ab938736c2c548dfed03bcc951a849e045476267aebabbf6f8d86777661ce2b2959a379190136aea0d636955680e7959b8122fbdf7e2d0d2d8db4efec3452a6f3c988846fb58e94dccefe94ee467f278f308c8cc20a8a3b1d6025db75e21c5c34bcc7439e96307ef876f599589ee9aa45a5caba25e745b1213911df2fe481a7c0e058f2a622dc9d7be2373587013c68deb0ba1da2c0e2474bb3a00aead65944c5fd66d24c1c0c8942018f049b4ce1837ee79cc23995db46e195fde6b9c7bb25a0474c6ea45f40c7a8c99"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0xfa, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x8}, @generic={0xea, 0x22, "3cdedebd2bf202ebe504cefc7bc28d7c9cc441b0db5af0e1467e98b16387563d0515bf57b327c71a171b2bdfd6cc3ee4d1c9c748dfa1a07b834655c58f19630d8c010a64e924d4ae804fca8490de400fee6e622e301788d3102721769edb75df1a043b782bc2f36e9e4dc1aa7f46737f3c1f600d1d173eff17910ac3020e85f2dc6bf2c889e419c4291eb7139e226b42a6cc0a84a3d01da37794bf6f02ee4f69815854839fd8a347158d4a274705feb33d802bdff6616c608e2da99d96d601c417035750450a4a5d07483890018c9eadd2965fdc906f7a09c1e7fa2dd482fc3ce93145ec7bdb88f6"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0xea, 0x90, 0x1, [@generic={0x44, 0x31, "959409b9a90b6bf9069e9d87fe4660980ef71d723f563878a545b7b9193dc78b7bdd7df4230dcd8673c84820174048bf180de64b134b53e6049eb76a1bb23268a238"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x5, 0x4, 0xe, [@generic={0xdc, 0x10, "a227e57ee96677b438109b292614d657f29e3181280d7bfa602c1188deabee9bb0bf6cb4eb9c046db5d6e34dda7f3e555080fbb96b6f677d0d5469e1c75c892021a4477b551d17eb018568cac1fe0af464c95a685be7fe863f278471a51f73aef9afba655d7099652b8e4aa71abcd825893fbd3952c8e45a539de7488928f5d31f188900fcb194dbe1edae158fbe93cff728f2571a1f62d792e4120a4e16d1c7802cacb237c0e87a9c72e13fef997e7f93506005802b36e60904ecd7fbc2b8624df1812403107a38ac9575f238091bceab04456043cfdc174757"}, @generic={0x75, 0xc, "5049bf30b5490e33837edf17d9b6ea84fad1da667cd2e9303d3df9eafc32d0f3e1d7a6e659c547721d842a6be3b91bc9ee00950592578b054f80fbefdb1e37933fac056f63408979901f15e0b55384d5941b343b6788fe9416f33c49e16c856708cfca9291dd1ce9ca48fbcc98024ce398b51a"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x40, 0x1, 0x8, 0xa5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x7}]}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x2, 0x1, 0x6e}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x7, 0x0, 0xde, [@generic={0xd9, 0x5, "c02d07a4de2879787fde43b9812dd8d5af9add82ff3a8944ab29180c5a396f7cc645e7c1fdab5df6d25a628bb09cc8188798c1e422e38a986e6264c332823e355a6c2a526a4999278f60ff978cd3edfb011f8ff087a13db748b51dd2a04b1d5c67470227721e97dd64708a1573f21cc91a0e9f474a6ac9f6c90aa9d538bef13dadbe3e7a5c7bc7708fde777ba4620e206c5d343a293161821c915717d206711ffcdd3951b643fd3067fbe852ee9bd68c233cabc2fca592b41b92e9de83e79bd50c8b3c17ddc313c8d0176495a9c622b5ad53039e1db973"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x6, 0x30, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x8a, 0x4000}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xc, 0x7, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x8000}]}}]}}, {{0x9, 0x4, 0xe8, 0x8, 0x3, 0xff, 0x36, 0x51, 0x8, [@uac_as, @generic={0xd, 0x21, "12cf7744eb6e9c380998ac"}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x8, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x98, 0x5}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0xe, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x55, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x5, 0x5, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x4}, @generic={0x77, 0x7, "6ccd2f721e79393e0126cfdc0b929296787eb6312e3f4577eb2c0d6e14d743641100ba1af365b21814af3351280e21ee3caa61285800edb072ea0803fac8461a67ffb7ada0be63ed7a7bc31ad904d875c1e19fed757f10adaa9f32279e9a7180aecf58f35c1ab93ab26fa569351210f893a2d8e76e"}]}}]}}, {{0x9, 0x4, 0x7, 0xfa, 0xa, 0xf0, 0xd, 0xd3, 0xff, [], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x10, 0x7, 0x85, [@generic={0x7b, 0x24, "db9a608689d0995753a764d688965c67543e465722bcd1dd99e38c937b7bb6807f81e4388b1f0be6c1e6b95b7096c7122b5bc874e13ec68094f32d618d6348cbcdded64e6112398083d10fd660a950292536efbffe046950a9e5dda3a1f06f6b4c2c918b286c76241168bd3ff4f47dcdf251f02f805bba3535"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x0, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6b, 0x62d1}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x14, 0x6}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x81, 0x5, 0xd6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xe3, 0x8}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x8, 0x3, 0x4, [@generic={0x9a, 0x4, "98b3dbbf3a08ee03e36d256a489238f7204ccc14ac7b384c13ad19cd65f379625d9f9c3ee32e22f21dace7f44da112a80bc9cd1a60f9eace1cf4fb25e746beed029c1e40f75b566c4cdc75cdb569949836cc320dae00128c0aca16ff43cb4caa25276489ce6ce2473c6b174d7f215907f3238122dc5b531ef7996cbf64ffda44ee4e0836b3cf11abfcddb3e5ea6f5de489247f0fa0c81a5f"}, @generic={0xa2, 0xf, "ac50d3c31f29d897b21dff066c5fd44f0f5808d48c56522a9a7387e6a120d26900a9b41d18af80ddb20bccc3a4a532cab57aa26df5d2a0a945f0685235dd9d1ed6ea31864f1497f83bb8cc77cba1a50544fd800ba4dabb3fa175faa55030e0c4dcf87481068d9022a71ab31c390c2ff7c7672f8765bb911d3d625bd97c4800c674f2a0403e8b2b9c345b8314da86ce13c3e4296dd73b82c957f4357d51b5f651"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x2b, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x35}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x0, 0x4, 0xc, [@generic={0xb4, 0x24, "acd8e07a683bd2a762b761afd5b9a5dac9d5fe7b4d5d13417c6b60b710e57c3fbdf464ef90ec8ad8ee985bc9e42d796409f05ff8f9ed0a574ec795e8323536b452b819cbfa1f7785ef5bf011d2d9ee5d183ff6358c9ef4820e6d243ad9865a270dbeb8920a057acb23c2b0105da69fcf5ad4ace8ad201763cb1972268b7f9660e7093bc37aa9ddb9618e439aec89bdcf0170670f05e1c8e0833e0431bd48d20f6d01b5d37118844cd27173eeeac7c7f91a02"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x1ff, 0x6, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x401}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x8, 0x2, 0x9}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0xff, 0x2, 0x97, [@generic={0x1e, 0xd, "6e4baca03ca05ba73a0afa47a04fed655055bf5d0f579265ac6e5729"}]}}]}}]}}]}}, &(0x7f0000002080)={0xa, &(0x7f0000001d40)={0xa, 0x6, 0x300, 0x9, 0x7, 0x7, 0x20, 0xc}, 0x1c, &(0x7f0000001d80)={0x5, 0xf, 0x1c, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xf, 0x3, 0x180, 0x5f}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x5, 0xf0f, 0x4}]}, 0x5, [{0xba, &(0x7f0000001dc0)=@string={0xba, 0x3, "1786799fb10a4b3d084939dab4c72335601ed7581e6206248edd9e9433a8dd6dfee517a9af0336e814443cd434dbf38b89a727ae980295ba58cf570241b4464eb9c1124357d29e6f9b896b2d8f8acc32074cec416ad5a2e99e4ea6e7b04329799a816fe21c759edda365a5f397f967ed319a9d5492b32668d8b440d898020fecdc82c5960cf1cdc2da3ea331e2feafaf19c365ddcc507b56661a56fb1533db2bb26524afec4d21158365b69ba9b507ed076eb5d5e5563ae2"}}, {0x1d, &(0x7f0000001e80)=@string={0x1d, 0x3, "ece1c9841d86a6f734658c55811986b6a806f4ee672833e20d46cc"}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x403}}, {0xae, &(0x7f0000001f00)=@string={0xae, 0x3, "d7a64af5f0426be35c37617617dde1dc9704f50609b3119d88d45d8c3a2d407fbfef5ad9ca165d0a0a0de617b80c21c13d195be8049e968cd3c63e85f336d085e75d002be6a8cde2d0517c7becdb009beb1ac78783ba85b72bbefba2eca58c40741a3ef5fdbe165ae0e4e4c53e3836ca02db78a0db787d77ca213c842e78422decebb5e837876b0d5c24dd028365a6fc1796f0b05c4b64d79cbeb4abd49216dcaab4d0ba40c9890692325dd0"}}, {0xa9, &(0x7f0000001fc0)=@string={0xa9, 0x3, "c504b1ee67c8fcf2d5d6b91e7f1c089334aa5a02675d6aee761dfa2e068fc72ef54faa78224c7b3b7a1f245399a8aa56318d9144dc4220d6ae5b3d3789e22ddd385ce0d4e37f8d9dbdf114f17952cb3edd9111a9c1a81ec9db7dbb9211439189e47a52ef462604b3e6e4acf068c33646470e01ed34ab235df13ad8b960da3ec61b2461924eb4e17cda4d83c6c77408af0c60c86a6332f085e854353896d8ea32e7cb3429a4ca2a"}}]}) clock_gettime(0x0, &(0x7f0000002140)={0x0, 0x0}) futimesat(r1, &(0x7f0000002100)='./file0\x00', &(0x7f0000002180)={{r15, r16/1000+60000}, {0x77359400}}) 1.036793777s ago: executing program 3 (id=1511): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="2001000014da2108ab1204000000000000010902240001b30000040904410c010000000009050f1f05e13f00f060f8c4fa0e7cea0f26ddaa0009058303", @ANYRES64=r1], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f0000000080)=ANY=[@ANYBLOB="120120020e13e5088d1a0d109e300102030109022600010755e001090406fe02ffff025c09050f070000020905021109"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x4, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@getqdisc={0x34, 0x26, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0xffff}, {0x9, 0xffff}, {0x10, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES8=r1], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r6}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'team_slave_1\x00'}, 0x18) syz_open_dev$media(0x0, 0x1ff, 0x52300) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) timerfd_create(0x7, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x51) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x2, 0x200, &(0x7f0000003c40)="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"}) 1.036396374s ago: executing program 4 (id=1512): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000002540)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x9, 0x0, 0xfffffff9, 0x9}, {0x7fff, 0x7, 0x3, 0xd06a}}}, 0x0, 0x600) sendmmsg(r4, 0x0, 0x0, 0x40840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x52, &(0x7f0000000000)=0x5481, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) 1.030602977s ago: executing program 2 (id=1513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402"], 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000bec0", @ANYRES16=r5, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r6, @ANYBLOB="38007a800c000300a79c32ffb9fbee54140002002084a000000000000000000000000000140002007d4bb34b47bff88be0ce47246f6866c9"], 0x54}}, 0x4000840) ioctl$KVM_RUN(r3, 0xae80, 0x0) 674.39373ms ago: executing program 2 (id=1514): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be707e005c"], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1515): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x10) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) kernel console output (not intermixed with test programs): y0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.297147][ T8631] batman_adv: batadv0: Interface activated: dummy0 [ 292.871951][ T8641] netlink: 48 bytes leftover after parsing attributes in process `syz.2.691'. [ 292.898871][ T5845] Bluetooth: hci5: command tx timeout [ 292.938196][ T8511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.951581][ T8511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.473569][ T8511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.867151][ T8660] FAULT_INJECTION: forcing a failure. [ 293.867151][ T8660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.880556][ T8660] CPU: 1 UID: 0 PID: 8660 Comm: syz.4.694 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 293.880581][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.880594][ T8660] Call Trace: [ 293.880603][ T8660] [ 293.880612][ T8660] dump_stack_lvl+0x189/0x250 [ 293.880639][ T8660] ? __pfx____ratelimit+0x10/0x10 [ 293.880661][ T8660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.880682][ T8660] ? __pfx__printk+0x10/0x10 [ 293.880706][ T8660] ? __might_fault+0xb0/0x130 [ 293.880738][ T8660] should_fail_ex+0x414/0x560 [ 293.880763][ T8660] _copy_from_user+0x2d/0xb0 [ 293.880792][ T8660] ___sys_sendmsg+0x158/0x2a0 [ 293.880824][ T8660] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.880860][ T8660] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 293.880923][ T8660] ? __fget_files+0x2a/0x420 [ 293.880944][ T8660] ? __fget_files+0x3a0/0x420 [ 293.880976][ T8660] __sys_sendmmsg+0x227/0x430 [ 293.881011][ T8660] ? __pfx___sys_sendmmsg+0x10/0x10 [ 293.881084][ T8660] __x64_sys_sendmmsg+0xa0/0xc0 [ 293.881115][ T8660] do_syscall_64+0xfa/0x3b0 [ 293.881138][ T8660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.881157][ T8660] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 293.881175][ T8660] ? clear_bhb_loop+0x60/0xb0 [ 293.881199][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.881217][ T8660] RIP: 0033:0x7fb2d978ebe9 [ 293.881235][ T8660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.881253][ T8660] RSP: 002b:00007fb2da616038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 293.881273][ T8660] RAX: ffffffffffffffda RBX: 00007fb2d99b6180 RCX: 00007fb2d978ebe9 [ 293.881288][ T8660] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 293.881301][ T8660] RBP: 00007fb2da616090 R08: 0000000000000000 R09: 0000000000000000 [ 293.881313][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.881324][ T8660] R13: 00007fb2d99b6218 R14: 00007fb2d99b6180 R15: 00007ffcd871d2e8 [ 293.881356][ T8660] [ 294.780776][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 295.440188][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 295.447430][ T9] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 295.502065][ T9] usb 5-1: config 0 has no interface number 0 [ 295.508240][ T9] usb 5-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 295.593167][ T9] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 295.618503][ T9] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 295.629535][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.651424][ T9] usb 5-1: Product: syz [ 295.656316][ T9] usb 5-1: Manufacturer: syz [ 295.667220][ T8511] veth0_vlan: entered promiscuous mode [ 295.670074][ T9] usb 5-1: SerialNumber: syz [ 295.692614][ T9] usb 5-1: config 0 descriptor?? [ 295.698415][ T8672] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 295.717254][ T8511] veth1_vlan: entered promiscuous mode [ 295.837929][ T8511] veth0_macvtap: entered promiscuous mode [ 295.901727][ T8511] veth1_macvtap: entered promiscuous mode [ 295.912805][ T9] ath6kl: Failed to submit usb control message: -71 [ 295.922870][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 295.935718][ T9] ath6kl: Unable to send get target info: -71 [ 295.959182][ T9] ath6kl: Failed to init ath6kl core: -71 [ 295.981498][ T5855] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 295.982071][ T9] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 295.993317][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.022285][ T9] usb 5-1: USB disconnect, device number 24 [ 296.052466][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.067009][ T8696] netlink: 452 bytes leftover after parsing attributes in process `syz.2.703'. [ 296.102224][ T8511] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.127458][ T8511] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.138100][ T8511] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.152811][ T8511] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.162850][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 296.177653][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.208468][ T5855] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 296.286880][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.705'. [ 296.645370][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.689811][ T5855] usb 4-1: config 0 descriptor?? [ 296.861370][ T8229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.890441][ T8229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.006530][ T8239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.026394][ T8239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.141593][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.150976][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.197192][ T8689] FAULT_INJECTION: forcing a failure. [ 297.197192][ T8689] name failslab, interval 1, probability 0, space 0, times 0 [ 297.209940][ T8689] CPU: 1 UID: 0 PID: 8689 Comm: syz.3.702 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 297.209955][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.209961][ T8689] Call Trace: [ 297.209967][ T8689] [ 297.209973][ T8689] dump_stack_lvl+0x189/0x250 [ 297.209995][ T8689] ? __pfx____ratelimit+0x10/0x10 [ 297.210014][ T8689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.210034][ T8689] ? __pfx__printk+0x10/0x10 [ 297.210061][ T8689] ? __pfx___might_resched+0x10/0x10 [ 297.210079][ T8689] ? fs_reclaim_acquire+0x7d/0x100 [ 297.210107][ T8689] should_fail_ex+0x414/0x560 [ 297.210130][ T8689] should_failslab+0xa8/0x100 [ 297.210151][ T8689] __kmalloc_noprof+0xcb/0x4f0 [ 297.210168][ T8689] ? kfree+0x4d/0x440 [ 297.210188][ T8689] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 297.210205][ T8689] tomoyo_realpath_from_path+0xe3/0x5d0 [ 297.210219][ T8689] ? tomoyo_domain+0xda/0x130 [ 297.210235][ T8689] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 297.210246][ T8689] tomoyo_path_number_perm+0x1e8/0x5a0 [ 297.210258][ T8689] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 297.210278][ T8689] ? __lock_acquire+0xab9/0xd20 [ 297.210301][ T8689] ? __fget_files+0x2a/0x420 [ 297.210315][ T8689] ? __fget_files+0x2a/0x420 [ 297.210325][ T8689] ? __fget_files+0x3a0/0x420 [ 297.210335][ T8689] ? __fget_files+0x2a/0x420 [ 297.210348][ T8689] security_file_ioctl+0xcb/0x2d0 [ 297.210362][ T8689] __se_sys_ioctl+0x47/0x170 [ 297.210379][ T8689] do_syscall_64+0xfa/0x3b0 [ 297.210390][ T8689] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.210401][ T8689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.210411][ T8689] ? clear_bhb_loop+0x60/0xb0 [ 297.210423][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.210433][ T8689] RIP: 0033:0x7ff7bc58ebe9 [ 297.210443][ T8689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.210453][ T8689] RSP: 002b:00007ff7bd40a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.210464][ T8689] RAX: ffffffffffffffda RBX: 00007ff7bc7b5fa0 RCX: 00007ff7bc58ebe9 [ 297.210472][ T8689] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 000000000000000b [ 297.210479][ T8689] RBP: 00007ff7bd40a090 R08: 0000000000000000 R09: 0000000000000000 [ 297.210485][ T8689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.210492][ T8689] R13: 00007ff7bc7b6038 R14: 00007ff7bc7b5fa0 R15: 00007ffff7100ee8 [ 297.210509][ T8689] [ 297.476502][ T8689] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.793534][ T5855] usbhid 4-1:0.0: can't add hid device: -71 [ 297.850340][ T5855] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 297.883174][ T5855] usb 4-1: USB disconnect, device number 16 [ 297.926275][ T8715] tmpfs: Bad value for 'size' [ 297.946796][ T8721] overlayfs: failed to clone upperpath [ 298.008829][ T8723] netlink: 56 bytes leftover after parsing attributes in process `syz.5.653'. [ 298.019064][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.653'. [ 298.955906][ T8753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.716'. [ 299.785182][ T5855] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 300.090612][ T8770] xt_TCPMSS: Only works on TCP SYN packets [ 300.183310][ T8772] netlink: 32 bytes leftover after parsing attributes in process `syz.4.721'. [ 300.513164][ T5855] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 300.526290][ T5855] usb 6-1: config 0 has no interface number 0 [ 300.535644][ T5855] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.559777][ T5855] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 300.680165][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.688650][ T5855] usb 6-1: Product: syz [ 300.693468][ T5855] usb 6-1: Manufacturer: syz [ 300.698391][ T5855] usb 6-1: SerialNumber: syz [ 300.765854][ T5855] usb 6-1: config 0 descriptor?? [ 301.064758][ T5855] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 301.184203][ C1] yurex 6-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 301.432065][ T8757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.614334][ T8757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.130706][ T5956] usb 6-1: USB disconnect, device number 2 [ 302.232403][ T5956] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 303.459223][ T8814] netlink: 52 bytes leftover after parsing attributes in process `syz.1.734'. [ 303.630316][ T5956] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 303.798468][ T5901] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 303.816893][ T5956] usb 4-1: config 0 has an invalid interface number: 189 but max is 0 [ 303.829178][ T5956] usb 4-1: config 0 has no interface number 0 [ 303.838256][ T5956] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.856474][ T5956] usb 4-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 304.720873][ T5956] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 304.737069][ T5956] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 304.750267][ T5956] usb 4-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 304.755950][ T5901] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 304.766400][ T5956] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 304.787683][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.793042][ T5901] usb 6-1: config 0 has no interface number 0 [ 304.919738][ T5901] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 304.935226][ T5956] usb 4-1: Product: syz [ 304.939105][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.948249][ T5956] usb 4-1: Manufacturer: syz [ 304.952214][ T5901] usb 6-1: Product: syz [ 304.953615][ T5956] usb 4-1: SerialNumber: syz [ 305.549609][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 305.841839][ T5956] usb 4-1: config 0 descriptor?? [ 305.860769][ T8812] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.860769][ T5901] usb 6-1: Manufacturer: syz [ 305.865413][ T5956] ums-alauda 4-1:0.189: USB Mass Storage device detected [ 305.873180][ T5901] usb 6-1: SerialNumber: syz [ 305.901160][ T5901] usb 6-1: config 0 descriptor?? [ 305.969021][ T5956] scsi host1: usb-storage 4-1:0.189 [ 306.166238][ T8816] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 306.783073][ T5956] usb 4-1: USB disconnect, device number 17 [ 307.046507][ T5901] asix 6-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x39 [ 307.324665][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 307.334234][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 307.366337][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.748'. [ 307.403778][ T5956] usb 6-1: USB disconnect, device number 3 [ 309.513161][ T8884] netlink: 44 bytes leftover after parsing attributes in process `syz.5.755'. [ 309.881243][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 309.968748][ T8852] bridge_slave_1: left allmulticast mode [ 309.977619][ T8852] bridge_slave_1: left promiscuous mode [ 309.989156][ T8852] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.016736][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 310.035747][ T8852] bridge_slave_0: left allmulticast mode [ 310.048283][ T8852] bridge_slave_0: left promiscuous mode [ 310.056854][ T8852] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.643578][ T8919] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.764'. [ 310.950419][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 310.959334][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 310.968552][ T8927] netlink: 'syz.3.763': attribute type 20 has an invalid length. [ 310.979868][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 310.988797][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 310.997901][ T8927] netlink: 'syz.3.763': attribute type 20 has an invalid length. [ 312.876287][ T5927] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 313.030757][ T8954] fuse: Bad value for 'fd' [ 313.231980][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.250078][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.266856][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 313.292189][ T5927] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.850083][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.016251][ T5927] usb 5-1: config 0 descriptor?? [ 314.129050][ T8969] 9pnet_fd: Insufficient options for proto=fd [ 314.585579][ T5855] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 314.666183][ T5927] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 314.755362][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.769878][ T5927] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 314.787093][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.858979][ T8983] syz.2.781(8983): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 314.880121][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 314.897596][ T5901] usb 5-1: USB disconnect, device number 25 [ 314.912625][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 314.926491][ T5855] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 314.935929][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.944926][ T5855] usb 4-1: Product: syz [ 314.949671][ T5855] usb 4-1: Manufacturer: syz [ 314.963151][ T5855] usb 4-1: SerialNumber: syz [ 314.989490][ T5855] usb 4-1: config 0 descriptor?? [ 315.011379][ T5855] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 315.042437][ T5855] usb 4-1: Detected FT232H [ 315.050560][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 315.075024][ T10] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 315.085276][ T10] usb 6-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 315.094939][ T10] usb 6-1: New USB device found, idVendor=f65e, idProduct=3868, bcdDevice=c6.17 [ 315.104059][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.321352][ T10] usb 6-1: string descriptor 0 read error: -71 [ 315.336816][ T10] usb 6-1: USB disconnect, device number 4 [ 316.528127][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 316.965378][ T5855] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 317.000216][ T5855] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 317.130232][ T5855] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 317.185863][ T5855] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 317.240464][ T5855] usb 4-1: USB disconnect, device number 18 [ 317.265984][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.303068][ T5855] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 317.336269][ T5855] ftdi_sio 4-1:0.0: device disconnected [ 317.389005][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 321.106270][ T9053] binder: 9051:9053 ioctl c0306201 200000000640 returned -22 [ 321.292474][ T9056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'. [ 322.449752][ T9067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.805'. [ 323.133687][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 323.142678][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.805'. [ 323.151797][ T9080] netlink: 'syz.4.805': attribute type 20 has an invalid length. [ 323.163147][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 323.172076][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.805'. [ 323.181154][ T9080] netlink: 'syz.4.805': attribute type 20 has an invalid length. [ 323.720923][ T30] audit: type=1326 audit(1755920377.806:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9073 comm="syz.5.807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f910a78ebe9 code=0x0 [ 325.821630][ T981] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 326.030220][ T5956] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 326.071042][ T981] usb 6-1: device descriptor read/64, error -71 [ 326.310292][ T981] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 326.590171][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 326.598327][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 326.625992][ T5956] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 326.644059][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.660180][ T981] usb 6-1: device descriptor read/64, error -71 [ 326.660234][ T5956] usb 4-1: Product: syz [ 326.674978][ T5956] usb 4-1: Manufacturer: syz [ 326.679635][ T5956] usb 4-1: SerialNumber: syz [ 326.703197][ T5956] usb 4-1: config 0 descriptor?? [ 326.721290][ T5956] hub 4-1:0.0: bad descriptor, ignoring hub [ 326.727262][ T5956] hub 4-1:0.0: probe with driver hub failed with error -5 [ 326.742659][ T5956] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.782637][ T981] usb usb6-port1: attempt power cycle [ 327.140228][ T981] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 327.368767][ T9125] netlink: 'syz.1.821': attribute type 2 has an invalid length. [ 327.426696][ T8239] wlan1: Trigger new scan to find an IBSS to join [ 328.267346][ T981] usb 6-1: device descriptor read/8, error -71 [ 328.558892][ T9095] delete_channel: no stack [ 328.566193][ T5855] usb 4-1: USB disconnect, device number 19 [ 329.752912][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 329.762718][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.824'. [ 329.772806][ T9140] netlink: 'syz.3.824': attribute type 20 has an invalid length. [ 329.788152][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 329.797134][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.824'. [ 329.806212][ T9140] netlink: 'syz.3.824': attribute type 20 has an invalid length. [ 331.703000][ T9148] loop2: detected capacity change from 0 to 7 [ 331.786856][ T5854] loop2: [ 331.789885][ T5854] loop2: partition table partially beyond EOD, truncated [ 331.928608][ T9148] loop2: [ 331.937509][ T9148] loop2: partition table partially beyond EOD, truncated [ 332.150726][ T5208] loop2: [ 332.382682][ T8248] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 332.385853][ T5208] loop2: partition table partially beyond EOD, truncated [ 334.237723][ T9182] netlink: 452 bytes leftover after parsing attributes in process `syz.5.836'. [ 334.338578][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'. [ 335.185139][ T5901] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 335.399776][ T5901] usb 5-1: device descriptor read/64, error -71 [ 335.640185][ T5901] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 335.840113][ T5901] usb 5-1: device descriptor read/64, error -71 [ 335.884710][ T9206] netlink: 452 bytes leftover after parsing attributes in process `syz.2.845'. [ 335.966337][ T5901] usb usb5-port1: attempt power cycle [ 336.056159][ T9205] loop2: detected capacity change from 0 to 7 [ 336.196826][ T9205] loop2: [ 336.216231][ T9205] loop2: partition table partially beyond EOD, truncated [ 336.460555][ T5901] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 336.500674][ T5901] usb 5-1: device descriptor read/8, error -71 [ 336.865366][ T9216] lo speed is unknown, defaulting to 1000 [ 336.872089][ T9216] lo speed is unknown, defaulting to 1000 [ 336.879721][ T9216] lo speed is unknown, defaulting to 1000 [ 336.890256][ T9216] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 336.903196][ T9216] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 336.926986][ T5901] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 337.090269][ T9217] netlink: 452 bytes leftover after parsing attributes in process `syz.5.847'. [ 337.104589][ T5901] usb 5-1: device descriptor read/8, error -71 [ 337.128984][ T9216] lo speed is unknown, defaulting to 1000 [ 337.137253][ T9216] lo speed is unknown, defaulting to 1000 [ 337.145148][ T9216] lo speed is unknown, defaulting to 1000 [ 337.152024][ T9216] lo speed is unknown, defaulting to 1000 [ 337.158896][ T9216] lo speed is unknown, defaulting to 1000 [ 337.165733][ T9216] lo speed is unknown, defaulting to 1000 [ 337.366218][ T5901] usb usb5-port1: unable to enumerate USB device [ 337.457396][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 338.991209][ T9225] netlink: 452 bytes leftover after parsing attributes in process `syz.3.850'. [ 340.470357][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 340.544069][ T9249] netlink: 452 bytes leftover after parsing attributes in process `syz.3.858'. [ 340.569545][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'. [ 341.409178][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.647649][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.910116][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.919214][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.955179][ T24] usb 6-1: Product: syz [ 341.959445][ T24] usb 6-1: Manufacturer: syz [ 341.964397][ T24] usb 6-1: SerialNumber: syz [ 343.149501][ T24] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 343.179860][ T9263] netlink: 452 bytes leftover after parsing attributes in process `syz.1.862'. [ 343.327810][ T24] usb 6-1: USB disconnect, device number 9 [ 343.580734][ T9268] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 344.277933][ T9268] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 344.522746][ T9272] netlink: 452 bytes leftover after parsing attributes in process `syz.3.864'. [ 344.966890][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.868'. [ 345.250087][ T5901] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 345.520051][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 345.529096][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.549546][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.580879][ T5901] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 345.600165][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.780540][ T5901] usb 5-1: config 0 descriptor?? [ 345.830363][ T981] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 346.080088][ T9296] netlink: 452 bytes leftover after parsing attributes in process `syz.2.871'. [ 346.303784][ T5901] gt683r_led 0003:1770:FF00.000C: item fetching failed at offset 2/5 [ 346.328091][ T5901] gt683r_led 0003:1770:FF00.000C: hid parsing failed [ 346.340119][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 346.391742][ T5901] gt683r_led 0003:1770:FF00.000C: probe with driver gt683r_led failed with error -22 [ 346.402140][ T981] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.448621][ T981] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.497257][ T981] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.508720][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.509611][ T5855] usb 5-1: USB disconnect, device number 30 [ 346.519906][ T981] usb 4-1: Product: syz [ 346.530147][ T981] usb 4-1: Manufacturer: syz [ 346.534747][ T981] usb 4-1: SerialNumber: syz [ 347.516733][ T9307] team_slave_0: entered promiscuous mode [ 347.522802][ T9307] team_slave_1: entered promiscuous mode [ 347.531133][ T9307] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 347.538721][ T9307] team0: Device macvtap1 is already an upper device of the team interface [ 347.565860][ T9307] team_slave_0: left promiscuous mode [ 347.571433][ T9307] team_slave_1: left promiscuous mode [ 348.743231][ T981] usb 4-1: 0:2 : does not exist [ 348.842990][ T981] usb 4-1: USB disconnect, device number 20 [ 348.890377][ T5901] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 348.944313][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.100071][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 349.142602][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.173988][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 349.868413][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.976252][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 349.989464][ T5901] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 349.998868][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.010165][ T5901] usb 5-1: config 0 descriptor?? [ 350.699669][ T5901] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 350.776741][ T5901] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 350.838907][ T5901] microsoft 0003:045E:07DA.000D: no inputs found [ 350.904202][ T5901] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 351.935839][ T24] usb 5-1: USB disconnect, device number 31 [ 352.104208][ T9376] netlink: 47 bytes leftover after parsing attributes in process `syz.3.893'. [ 352.895427][ T9389] netlink: 'syz.4.898': attribute type 21 has an invalid length. [ 352.914288][ T9389] netlink: 144 bytes leftover after parsing attributes in process `syz.4.898'. [ 353.038742][ T9394] xt_CT: No such helper "pptp" [ 353.192136][ T5956] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 354.480099][ T5956] usb 6-1: Using ep0 maxpacket: 16 [ 354.488048][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.785310][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.795449][ T5956] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 354.808591][ T5956] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 354.818091][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.881194][ T5956] usb 6-1: config 0 descriptor?? [ 355.718059][ T9430] trusted_key: encrypted_key: insufficient parameters specified [ 355.838620][ T9430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.908'. [ 355.847834][ T9430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.908'. [ 355.885501][ T5956] usbhid 6-1:0.0: can't add hid device: -71 [ 355.913053][ T5956] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 355.931438][ T9437] loop2: detected capacity change from 0 to 7 [ 355.948903][ T9437] loop2: [ 355.952377][ T9437] loop2: partition table partially beyond EOD, truncated [ 355.993576][ T5956] usb 6-1: USB disconnect, device number 10 [ 360.029350][ T9480] netlink: 168 bytes leftover after parsing attributes in process `syz.2.921'. [ 360.140314][ T9459] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 360.146491][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 360.335323][ T9459] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 360.375329][ T9459] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 361.081007][ T9488] could not allocate digest TFM handle cmac-aes-ce [ 361.666996][ T9500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.927'. [ 362.446146][ T9503] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 362.446768][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 364.542341][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 364.785001][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 364.866548][ T9551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.940'. [ 364.960293][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 364.969868][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 364.993723][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.015738][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.036931][ T9549] ieee802154 phy0 wpan0: encryption failed: -22 [ 365.066438][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.085732][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.128990][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 365.150331][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.399205][ T10] usb 5-1: usb_control_msg returned -32 [ 365.416781][ T10] usbtmc 5-1:16.0: can't read capabilities [ 366.834721][ T9574] netlink: 32 bytes leftover after parsing attributes in process `syz.3.943'. [ 368.206946][ T5855] usb 5-1: USB disconnect, device number 32 [ 368.312885][ T9596] loop2: detected capacity change from 0 to 7 [ 368.336828][ T9596] loop2: [ 368.339844][ T9596] loop2: partition table partially beyond EOD, truncated [ 368.481131][ T9604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.543530][ T9604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.745885][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 369.342625][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 369.373212][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.484681][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.792306][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.833012][ T9613] netlink: 452 bytes leftover after parsing attributes in process `syz.1.956'. [ 369.845796][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 369.877999][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.907211][ T9] usb 6-1: config 0 descriptor?? [ 370.557913][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 370.564141][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 370.609863][ T9] usb 6-1: USB disconnect, device number 11 [ 370.662905][ T9619] lo speed is unknown, defaulting to 1000 [ 370.710492][ T9630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.961'. [ 370.977073][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 371.711362][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 372.068481][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 372.278896][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 372.557851][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 373.076993][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.111380][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.147222][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.222274][ T9] usb 3-1: config 0 descriptor?? [ 373.248519][ T9636] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 373.587557][ T5956] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 373.671060][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 373.696170][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 373.710859][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 373.721384][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 373.739591][ T9] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 373.740391][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 373.761800][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.776041][ T9] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 373.779409][ T5956] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 373.880111][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.901058][ T9636] netlink: 'syz.2.963': attribute type 4 has an invalid length. [ 373.913719][ T5956] usb 5-1: config 0 descriptor?? [ 373.926814][ T9636] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.963'. [ 373.983660][ T5956] usbhid 5-1:0.0: can't add hid device: -22 [ 373.998993][ T5956] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 374.055585][ T9] usb 3-1: USB disconnect, device number 13 [ 374.258856][ T9677] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.974'. [ 374.500280][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.520391][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.180031][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.220874][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.361207][ T9697] CIFS: Unable to determine destination address [ 375.775946][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 375.784940][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 375.794463][ T9712] netlink: 'syz.1.983': attribute type 20 has an invalid length. [ 375.850288][ T9712] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.859059][ T9712] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.867901][ T9712] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.876685][ T9712] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.894087][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 375.903196][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 375.912305][ T9712] netlink: 'syz.1.983': attribute type 20 has an invalid length. [ 376.162848][ T5845] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 376.211473][ T9669] mkiss: ax0: crc mode is auto. [ 376.542066][ T5956] usb 5-1: USB disconnect, device number 33 [ 376.688436][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 378.771652][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.987941][ T9726] 9pnet_virtio: no channels available for device 127.0.0.1 [ 379.758338][ T9744] loop2: detected capacity change from 0 to 7 [ 379.791100][ T9744] loop2: [ 379.800562][ T9744] loop2: partition table partially beyond EOD, truncated [ 379.972199][ T9747] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 380.091993][ T9753] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 380.241343][ T9762] netlink: 52 bytes leftover after parsing attributes in process `syz.2.995'. [ 380.256743][ T9761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.997'. [ 380.270314][ T9762] netlink: 52 bytes leftover after parsing attributes in process `syz.2.995'. [ 381.770203][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 381.960366][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 382.000057][ T9] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.031138][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 382.049031][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 382.072565][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.453902][ T9] usb 3-1: config 0 descriptor?? [ 382.923549][ T9795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1006'. [ 383.378181][ T9] uclogic 0003:5543:0042.000F: unbalanced delimiter at end of report description [ 383.406156][ T9] uclogic 0003:5543:0042.000F: parse failed [ 383.424010][ T9] uclogic 0003:5543:0042.000F: probe with driver uclogic failed with error -22 [ 383.621329][ T9] usb 3-1: USB disconnect, device number 14 [ 384.650843][ T8247] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 384.905286][ T9812] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 386.423482][ T981] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 386.598810][ T981] usb 3-1: Using ep0 maxpacket: 16 [ 386.648956][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.665164][ T981] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 386.674802][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.779831][ T9837] xt_ecn: cannot match TCP bits for non-tcp packets [ 386.787648][ T981] usb 3-1: config 0 descriptor?? [ 386.806361][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 387.047759][ T9845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1019'. [ 387.436200][ T9847] trusted_key: syz.5.1020 sent an empty control message without MSG_MORE. [ 387.597377][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.628395][ T9849] netlink: 'syz.3.1021': attribute type 1 has an invalid length. [ 387.635633][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.774279][ T9853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.786300][ T9849] bond1: entered promiscuous mode [ 387.792852][ T9849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.058940][ T981] usbhid 3-1:0.0: can't add hid device: -71 [ 388.066368][ T981] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 388.078980][ T981] usb 3-1: USB disconnect, device number 15 [ 388.130228][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 388.310381][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 388.495425][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 388.656634][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 388.690013][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 388.828130][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.846205][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.854322][ T9] usb 6-1: Product: syz [ 388.858513][ T9] usb 6-1: Manufacturer: syz [ 388.863264][ T9] usb 6-1: SerialNumber: syz [ 388.933454][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 389.134200][ T9] cdc_ncm 6-1:1.0: bind() failure [ 389.172117][ T9] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 389.180144][ T9] cdc_ncm 6-1:1.1: bind() failure [ 389.240715][ T9] usb 6-1: USB disconnect, device number 12 [ 389.793471][ T9891] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 389.856455][ T9895] loop8: detected capacity change from 0 to 79 [ 390.000528][ T9895] loop8: detected capacity change from 79 to 78 [ 390.059833][ T9900] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1034'. [ 390.395124][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 391.106835][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 391.164491][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'. [ 391.210237][ T9877] netlink: 'syz.2.1028': attribute type 20 has an invalid length. [ 391.239112][ T9877] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.239137][ T9877] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.239154][ T9877] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.239178][ T9877] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.243437][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 391.243454][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'. [ 391.243469][ T9877] netlink: 'syz.2.1028': attribute type 20 has an invalid length. [ 391.520069][ T5855] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 391.529040][ T9912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1038'. [ 391.766100][ T9903] tty tty30: ldisc open failed (-12), clearing slot 29 [ 392.242933][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'. [ 392.610134][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 392.811512][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 392.854847][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.965461][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 393.032185][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.130845][ T24] usb 3-1: config 0 descriptor?? [ 393.140681][ T5855] usb 6-1: device descriptor read/64, error -71 [ 393.388235][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 393.400069][ T5855] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 393.584635][ T5855] usb 6-1: Using ep0 maxpacket: 8 [ 393.633788][ T5855] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 393.668598][ T9922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.684664][ T5855] usb 6-1: config 179 has no interface number 0 [ 393.719487][ T5855] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 393.741861][ T9922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.829043][ T5855] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 393.964397][ T5855] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 394.072732][ T5855] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 394.187422][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 394.209052][ T5855] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 394.270642][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 394.377294][ T5855] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 394.490633][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.566168][ T24] usb 3-1: USB disconnect, device number 16 [ 395.187400][ T9945] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1046'. [ 395.525173][ T9935] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 396.120342][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 396.120347][ T981] usb 6-1: USB disconnect, device number 14 [ 396.135812][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 396.156807][ T9952] 8021q: VLANs not supported on ipvlan0 [ 396.163087][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 396.202712][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 397.173193][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 397.200576][ T9968] tipc: Can't bind to reserved service type 1 [ 397.209205][ T9969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1055'. [ 397.437337][ T9974] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 397.514083][ T9982] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1058'. [ 397.886800][ T5927] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 398.695166][ T5927] usb 3-1: device descriptor read/64, error -71 [ 398.898486][T10002] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 398.910254][T10002] cramfs: wrong magic [ 398.919592][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.928266][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.950119][ T5927] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 399.106486][ T5927] usb 3-1: device descriptor read/64, error -71 [ 399.323411][ T5927] usb usb3-port1: attempt power cycle [ 399.607626][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1068'. [ 400.130112][ T5927] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 400.190931][ T5927] usb 3-1: device descriptor read/8, error -71 [ 400.197597][T10021] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1070'. [ 400.500146][ T5927] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 400.744090][ T5927] usb 3-1: device not accepting address 20, error -71 [ 400.791674][ T5927] usb usb3-port1: unable to enumerate USB device [ 401.914564][T10057] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 402.119424][T10063] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 403.043884][T10077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1084'. [ 403.299056][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 403.549636][T10096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1089'. [ 404.520103][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 404.549929][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 404.576303][ T9] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 404.619138][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.652683][T10104] : renamed from bond_slave_0 (while UP) [ 404.664290][ T9] usb 6-1: Product: syz [ 404.668719][ T9] usb 6-1: Manufacturer: syz [ 404.682598][ T9] usb 6-1: SerialNumber: syz [ 404.696464][ T9] usb 6-1: config 0 descriptor?? [ 404.732722][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 404.839338][T10111] veth1_macvtap: left promiscuous mode [ 404.845207][T10111] macsec0: entered promiscuous mode [ 404.850685][T10111] macsec0: entered allmulticast mode [ 404.919337][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.000273][T10112] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1091'. [ 405.036700][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.043059][ T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 405.272514][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.358826][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.389893][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.428934][ T9] usb 6-1: USB disconnect, device number 15 [ 405.661655][T10122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1094'. [ 406.380523][T10100] Bluetooth: hci5: command 0x0c1a tx timeout [ 406.434244][T10135] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1100'. [ 406.484024][T10133] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 406.511259][ T5927] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 406.767715][T10145] overlay: Unknown parameter 'default_permissions:/' [ 406.840074][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 406.847235][ T5927] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.859374][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 406.868814][ T5927] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 407.171036][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 407.179103][ T5927] usb 3-1: Product: syz [ 407.186279][ T5927] usb 3-1: config 0 descriptor?? [ 407.240610][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 407.410160][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 407.434868][ T9] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 407.450127][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 407.463476][ T9] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 407.493849][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.512333][ T9] usb 5-1: Product: syz [ 407.516769][ T9] usb 5-1: Manufacturer: syz [ 407.522479][ T9] usb 5-1: SerialNumber: syz [ 407.541831][ T9] usb 5-1: config 0 descriptor?? [ 407.641200][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 407.715290][T10171] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1111'. [ 407.830830][T10174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1110'. [ 407.935480][ T9] usb 5-1: USB disconnect, device number 34 [ 407.947881][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1099'. [ 407.960363][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 407.969581][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 407.978608][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.993123][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 408.002496][ T10] usb 6-1: config 1 has no interface number 1 [ 408.009847][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 408.268204][ T10] usb 6-1: New USB device found, idVendor=9f6b, idProduct=c643, bcdDevice= 0.9d [ 408.278284][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.283632][ T5927] usbhid 3-1:0.0: can't add hid device: -71 [ 408.287002][ T10] usb 6-1: Product: syz [ 408.298418][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.308317][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.330440][ T10] usb 6-1: Manufacturer: syz [ 408.335096][ T10] usb 6-1: SerialNumber: syz [ 408.350556][ T5927] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 408.430483][ T5927] usb 3-1: USB disconnect, device number 21 [ 408.494235][T10177] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 408.582305][ T10] usb 6-1: cannot find UAC_HEADER [ 408.609386][ T10] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 408.630798][ T10] usb 6-1: USB disconnect, device number 16 [ 408.650079][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 408.752552][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.830284][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 408.854590][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.890108][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 408.919475][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 409.140443][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.151670][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 409.161216][ T9] usb 5-1: SerialNumber: syz [ 409.200386][ T5927] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 409.340610][ T5927] usb 4-1: device descriptor read/64, error -71 [ 409.403487][T10190] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1116'. [ 409.648695][ T5927] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 409.653194][ T9] usb 5-1: USB disconnect, device number 35 [ 410.074938][ T5927] usb 4-1: device descriptor read/64, error -71 [ 410.234979][T10203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.242298][T10203] IPv6: NLM_F_CREATE should be set when creating new route [ 410.405355][ T5927] usb usb4-port1: attempt power cycle [ 410.486703][T10207] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 410.590058][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 410.750081][ T5927] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 410.759611][ T9] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 410.768006][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.772703][ T5927] usb 4-1: device descriptor read/8, error -71 [ 410.784270][ T9] usb 5-1: config 0 has no interface number 0 [ 410.792834][ T9] usb 5-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.808214][ T9] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 410.822471][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.835265][ T9] usb 5-1: config 0 has no interface number 0 [ 410.843911][ T9] usb 5-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.865912][ T9] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 410.876054][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.889096][T10209] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1122'. [ 410.892170][ T9] usb 5-1: config 0 has no interface number 0 [ 410.913435][ T9] usb 5-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.928729][ T9] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=65.bf [ 410.946068][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.966178][ T9] usb 5-1: config 0 descriptor?? [ 410.987534][ T9] usb 5-1: bad CDC descriptors [ 411.008121][ T9] cdc_acm 5-1:0.219: Zero length descriptor references [ 411.015597][ T9] cdc_acm 5-1:0.219: probe with driver cdc_acm failed with error -22 [ 411.145164][ T5927] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 411.170759][ T5927] usb 4-1: device descriptor read/8, error -71 [ 411.283644][ T5927] usb usb4-port1: unable to enumerate USB device [ 411.561731][T10226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1127'. [ 412.180264][ T5927] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 412.365046][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.393961][ T5927] usb 6-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 412.419698][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.444337][T10243] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1131'. [ 412.464206][ T5927] usb 6-1: config 0 descriptor?? [ 412.473541][ T30] audit: type=1326 audit(1755920466.566:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ad98ebe9 code=0x7ffc0000 [ 412.503306][ T30] audit: type=1326 audit(1755920466.566:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ad98ebe9 code=0x7ffc0000 [ 412.533169][ T30] audit: type=1326 audit(1755920466.566:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ad98ebe9 code=0x7ffc0000 [ 412.560763][ T30] audit: type=1326 audit(1755920466.566:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fe1ad98ebe9 code=0x7ffc0000 [ 412.587769][ T30] audit: type=1326 audit(1755920466.566:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ad98ebe9 code=0x7ffc0000 [ 412.610847][ T30] audit: type=1326 audit(1755920466.566:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe1ad98ebe9 code=0x7ffc0000 [ 412.632942][ T30] audit: type=1326 audit(1755920466.586:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fe1ad98ebe9 code=0x7ffc0000 [ 412.659354][ T30] audit: type=1326 audit(1755920466.586:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ad98ebe9 code=0x7ffc0000 [ 412.718420][ T30] audit: type=1326 audit(1755920466.586:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ad98ebe9 code=0x7ffc0000 [ 412.740578][ T30] audit: type=1326 audit(1755920466.616:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.2.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe1ad98ebe9 code=0x7ffc0000 [ 412.930771][ T5927] wacom 0003:056A:0016.0010: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 413.385651][T10228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.388106][ T5901] usb 5-1: USB disconnect, device number 36 [ 413.416879][ T5927] wacom 0003:056A:0016.0010: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.5-1/input0 [ 413.428588][T10228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.544976][ T5927] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0016.0010/input/input14 [ 413.964513][T10263] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 413.990882][ T5927] usb 6-1: USB disconnect, device number 17 [ 414.107471][T10265] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 414.498103][T10267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1137'. [ 414.507636][T10267] netlink: 'syz.4.1137': attribute type 7 has an invalid length. [ 414.516434][T10267] netlink: 'syz.4.1137': attribute type 8 has an invalid length. [ 414.528691][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 414.786559][T10271] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1139'. [ 415.698597][T10284] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1142'. [ 416.504857][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 416.706769][T10291] loop2: detected capacity change from 0 to 7 [ 416.751859][ T5864] loop2: [ 416.755092][ T5864] loop2: partition table partially beyond EOD, truncated [ 416.780273][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 416.814144][ T9] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 416.824482][T10291] loop2: [ 416.836922][T10291] loop2: partition table partially beyond EOD, truncated [ 416.854485][ T9] usb 4-1: config 0 has no interface number 1 [ 416.891979][ T9] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 416.962629][ T9] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 417.009260][ T9] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 417.039914][ T9] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 417.102308][ T9] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.119260][ T8231] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 417.170932][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 417.287612][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 417.315577][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 417.329206][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.339030][ T9] usb 4-1: Product: syz [ 417.348116][ T9] usb 4-1: Manufacturer: syz [ 417.355593][ T9] usb 4-1: SerialNumber: syz [ 417.369374][ T9] usb 4-1: config 0 descriptor?? [ 417.396113][T10286] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 417.439054][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 417.496452][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 417.512983][ T9] usb 4-1: invalid MIDI in EP 0 [ 417.634169][ T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 417.752423][T10309] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1150'. [ 417.762389][T10309] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1150'. [ 417.763782][T10306] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 418.784353][ T9] usb 4-1: USB disconnect, device number 25 [ 419.012297][T10312] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1151'. [ 420.083694][T10314] udevd[10314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.203494][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 420.219843][T10325] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.412380][T10325] bridge_slave_1 (unregistering): left allmulticast mode [ 420.460576][T10325] bridge_slave_1 (unregistering): left promiscuous mode [ 420.469150][T10325] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.482479][T10327] netlink: 'syz.5.1154': attribute type 10 has an invalid length. [ 420.974770][T10327] team0: Device hsr_slave_0 failed to register rx_handler [ 421.430693][T10339] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1156'. [ 422.190253][ T5855] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 422.760938][T10356] fuse: Bad value for 'fd' [ 422.902945][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 423.018810][T10358] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1164'. [ 423.060187][ T9] usb 6-1: device descriptor read/64, error -71 [ 423.091919][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.107063][ T5855] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 423.128005][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.181756][ T5855] usb 5-1: config 0 descriptor?? [ 423.323432][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 423.470090][ T9] usb 6-1: device descriptor read/64, error -71 [ 423.602964][ T5855] magicmouse 0003:05AC:0265.0011: unbalanced collection at end of report description [ 423.645432][ T5855] magicmouse 0003:05AC:0265.0011: magicmouse hid parse failed [ 423.669132][ T5855] magicmouse 0003:05AC:0265.0011: probe with driver magicmouse failed with error -22 [ 423.753210][ T9] usb usb6-port1: attempt power cycle [ 423.798848][T10341] [U] v3f"S/4:XTzWtlW= [ 423.807007][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 423.930738][ T10] usb 5-1: USB disconnect, device number 37 [ 424.100950][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 424.616559][ T9] usb 6-1: device descriptor read/8, error -71 [ 424.870119][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 424.912430][T10383] netlink: 'syz.2.1174': attribute type 1 has an invalid length. [ 424.960113][ T9] usb 6-1: device descriptor read/8, error -71 [ 425.116256][ T5908] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 425.180064][ T9] usb usb6-port1: unable to enumerate USB device [ 425.301715][ T24] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 425.522715][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 425.565794][ T24] usb 4-1: config 0 has no interface number 0 [ 425.597165][ T5908] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 425.597193][ T5908] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 425.597211][ T5908] usb 5-1: config 8 has no interface number 0 [ 425.597563][ T5908] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 425.597590][ T5908] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid wMaxPacketSize 0 [ 425.597611][ T5908] usb 5-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.597637][ T5908] usb 5-1: config 8 interface 177 has no altsetting 0 [ 425.597671][ T5908] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 425.597694][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.604261][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 425.604291][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 425.604333][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 425.604357][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.616876][ T24] usb 4-1: config 0 descriptor?? [ 425.617509][T10385] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 425.691724][ T24] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 426.500394][ T5901] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 426.660158][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 426.781070][ T5901] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 426.781169][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.781191][ T5901] usb 3-1: Product: syz [ 426.781206][ T5901] usb 3-1: Manufacturer: syz [ 426.781243][ T5901] usb 3-1: SerialNumber: syz [ 426.797744][ T5901] usb 3-1: config 0 descriptor?? [ 426.850856][ T5901] gspca_main: sq905-2.14.0 probing 2770:9120 [ 427.521288][ T5901] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 427.533042][ T5901] sq905 3-1:0.0: probe with driver sq905 failed with error -110 [ 427.789415][ T5908] usb 5-1: string descriptor 0 read error: -71 [ 427.826022][ T24] usb 4-1: USB disconnect, device number 26 [ 427.831795][ T5908] ir_toy 5-1:8.177: required endpoints not found [ 427.886855][ T5908] usb 5-1: USB disconnect, device number 38 [ 428.802119][ T5901] usb 3-1: USB disconnect, device number 22 [ 429.028384][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1183'. [ 429.353151][ T5901] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 429.744485][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 429.780727][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.375626][ T5901] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 430.397737][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.411437][ T5901] usb 3-1: config 0 descriptor?? [ 430.610089][ T5908] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 430.628092][T10431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1188'. [ 430.640586][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1188'. [ 430.787671][ T5908] usb 5-1: device descriptor read/64, error -71 [ 430.841273][T10407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.853946][T10407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.353466][T10407] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 431.372622][T10407] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 431.381813][ T5908] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 431.415757][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 431.437780][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 431.482731][ T5901] usb 3-1: USB disconnect, device number 23 [ 431.562045][ T5908] usb 5-1: device descriptor read/64, error -71 [ 431.697695][ T5908] usb usb5-port1: attempt power cycle [ 432.180102][ T5908] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 432.310646][ T5908] usb 5-1: device descriptor read/8, error -71 [ 433.242589][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1192'. [ 433.292420][T10457] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 433.296946][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'. [ 433.299392][T10457] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.362568][T10457] vhci_hcd vhci_hcd.0: Device attached [ 433.580687][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 433.610267][ T5901] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 433.661241][ T5908] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 433.890111][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 433.900535][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 433.931121][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.942957][ T10] usb 4-1: config 0 has no interfaces? [ 433.948488][ T10] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 433.957778][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.976946][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.985866][ T5908] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.998312][ T10] usb 4-1: config 0 descriptor?? [ 434.010082][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.034520][ T5908] usb 5-1: config 0 descriptor?? [ 434.060504][ T5908] hub 5-1:0.0: USB hub found [ 434.227600][T10458] usb 39-1: recv xbuf, 0 [ 434.248320][ T8237] vhci_hcd: stop threads [ 434.258436][ T8237] vhci_hcd: release socket [ 434.268566][ T5908] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 434.273680][ T8237] vhci_hcd: disconnect device [ 434.296155][T10457] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 434.337826][ T5927] usb 4-1: USB disconnect, device number 27 [ 434.384859][ T5908] usbhid 5-1:0.0: can't add hid device: -71 [ 434.408236][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 434.472425][ T5908] usb 5-1: USB disconnect, device number 42 [ 435.590313][T10495] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 435.653516][ T8232] Bluetooth: hci6: Frame reassembly failed (-84) [ 436.038965][ T8232] Bluetooth: hci6: Frame reassembly failed (-84) [ 436.175739][T10499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1203'. [ 436.552881][T10480] syz.2.1199: attempt to access beyond end of device [ 436.552881][T10480] loop2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 436.567128][T10480] gfs2: error -5 reading superblock [ 437.660092][ T5157] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 439.576053][T10511] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1205'. [ 439.624702][T10518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.790297][T10518] overlayfs: failed to resolve './file1': -2 [ 439.977230][T10527] fuse: Bad value for 'fd' [ 440.144616][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.360160][ T5927] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 440.475624][T10530] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1212'. [ 440.530201][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 440.594781][ T5927] usb 6-1: unable to get BOS descriptor or descriptor too short [ 440.653920][T10535] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1215'. [ 440.697216][T10538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1214'. [ 440.715208][T10535] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 440.733444][T10538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1214'. [ 440.780973][ T5927] usb 6-1: config 7 has an invalid interface number: 48 but max is 0 [ 440.822857][ T5927] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 440.859409][ T5927] usb 6-1: config 7 has no interface number 0 [ 440.880692][ T5927] usb 6-1: config 7 interface 48 has no altsetting 0 [ 440.905570][ T5927] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 440.963954][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.980842][ T5901] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 440.988942][ T5927] usb 6-1: Product: syz [ 440.992967][T10541] Falling back ldisc for ptm0. [ 441.003814][ T5927] usb 6-1: Manufacturer: syz [ 441.027275][ T5927] usb 6-1: SerialNumber: syz [ 441.032674][T10542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.036803][T10541] ucma_write: process 838 (syz.3.1217) changed security contexts after opening file descriptor, this is not allowed. [ 441.170072][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 441.183871][ T5901] usb 5-1: config 1 has an invalid interface number: 233 but max is 0 [ 441.194266][ T5901] usb 5-1: config 1 has no interface number 0 [ 441.219685][ T5901] usb 5-1: config 1 interface 233 altsetting 250 bulk endpoint 0x9 has invalid maxpacket 8 [ 441.253121][ T5901] usb 5-1: config 1 interface 233 has no altsetting 0 [ 441.298871][ T5901] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 441.308992][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.328268][ T5901] usb 5-1: Product: syz [ 441.337294][ T5901] usb 5-1: Manufacturer: syz [ 441.352536][ T5901] usb 5-1: SerialNumber: syz [ 441.374015][T10535] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 441.651394][ T5901] imon_raw 5-1:1.233: IR endpoint missing [ 441.786761][T10546] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 442.199064][ T8237] Bluetooth: hci6: Frame reassembly failed (-84) [ 442.211324][ T5901] usb 5-1: USB disconnect, device number 43 [ 442.301347][ T5927] cdc_phonet 6-1:7.48: probe with driver cdc_phonet failed with error -22 [ 442.355687][ T5927] usb 6-1: USB disconnect, device number 22 [ 444.040150][ T5157] Bluetooth: hci6: command 0x1003 tx timeout [ 444.046721][T10100] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 444.501896][T10564] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 444.582494][T10562] xt_hashlimit: max too large, truncated to 1048576 [ 444.834434][T10573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1226'. [ 444.921149][ T5927] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 445.011691][T10576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1227'. [ 445.124069][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.135360][T10581] input: syz0 as /devices/virtual/input/input17 [ 445.159895][ T5927] usb 6-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 445.197407][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.245295][ T5927] usb 6-1: config 0 descriptor?? [ 445.284475][ T5927] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 445.313470][ T5927] command write [95] error -22 [ 445.481637][ T5927] usb 6-1: USB disconnect, device number 23 [ 446.571469][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'. [ 446.959973][T10614] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1233'. [ 447.830482][T10626] fuse: Bad value for 'rootmode' [ 447.979012][T10625] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 447.989682][ T8231] Bluetooth: hci6: Frame reassembly failed (-84) [ 448.438969][T10602] team0 (unregistering): Port device team_slave_0 removed [ 448.533652][T10602] team0 (unregistering): Port device team_slave_1 removed [ 449.101312][ T8231] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 449.929631][T10662] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 450.064449][T10100] Bluetooth: hci6: command 0x1003 tx timeout [ 450.071361][ T5845] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 450.300035][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 450.362248][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1247'. [ 450.650041][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 450.840274][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 450.848635][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.870161][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.890015][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.910013][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.940089][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 450.949280][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.010513][T10671] block device autoloading is deprecated and will be removed. [ 451.022492][T10671] syz.4.1247: attempt to access beyond end of device [ 451.022492][T10671] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 451.770400][ T5901] usb 6-1: USB disconnect, device number 24 [ 452.402791][T10699] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1252'. [ 453.375945][T10693] netlink: 'syz.3.1250': attribute type 1 has an invalid length. [ 453.383855][T10693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1250'. [ 453.393251][T10693] netlink: 'syz.3.1250': attribute type 2 has an invalid length. [ 453.401234][T10693] netlink: 'syz.3.1250': attribute type 1 has an invalid length. [ 453.408975][T10693] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1250'. [ 453.556311][T10711] xt_NFQUEUE: number of total queues is 0 [ 453.727671][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 453.727691][ T30] audit: type=1326 audit(1755920507.816:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10716 comm="syz.3.1259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7bc58ebe9 code=0x0 [ 453.965959][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1259'. [ 454.570084][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 454.771297][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.842272][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.865659][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 454.875324][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.919787][ T9] usb 3-1: config 0 descriptor?? [ 455.389108][ T9] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 455.436569][ T9] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 455.473124][ T9] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 455.483234][ T9] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 455.499223][ T9] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 455.508112][ T9] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 455.621315][ T9] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 455.997048][T10750] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 455.999185][T10728] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 456.012790][ T9] pyra 0003:1E7D:2CF6.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 456.613828][ T9] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 456.631592][ T9] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 456.652137][ T9] pyra 0003:1E7D:2CF6.0012: probe with driver pyra failed with error -71 [ 456.707058][T10754] overlayfs: failed to clone upperpath [ 456.710210][ T9] usb 3-1: USB disconnect, device number 24 [ 459.258755][T10822] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 461.178407][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 461.191535][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1295'. [ 461.201014][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 461.261609][T10856] 9pnet_fd: Insufficient options for proto=fd [ 461.899585][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 461.993612][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 462.002747][T10880] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1305'. [ 462.040688][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 462.205266][ T9] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 462.224838][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.299488][ T9] usb 5-1: config 0 descriptor?? [ 462.404802][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 462.416555][T10887] hsr_slave_0: left promiscuous mode [ 462.423618][T10887] hsr_slave_1: left promiscuous mode [ 462.496970][ T30] audit: type=1800 audit(1755920516.586:167): pid=10890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1308" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 462.526750][T10889] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 462.764405][ T9] pantherlord 0003:0F30:0111.0013: item fetching failed at offset 0/4 [ 462.801251][ T9] pantherlord 0003:0F30:0111.0013: parse failed [ 462.808167][ T9] pantherlord 0003:0F30:0111.0013: probe with driver pantherlord failed with error -22 [ 462.959399][T10894] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 463.097800][ T8233] Bluetooth: hci6: Frame reassembly failed (-84) [ 464.492061][T10903] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1310'. [ 464.999304][T10905] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1311'. [ 465.020160][ T5845] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 465.453082][ T24] usb 5-1: USB disconnect, device number 44 [ 465.491321][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 465.805951][T10916] ceph: No mds server is up or the cluster is laggy [ 465.850046][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 465.957725][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 465.964020][ T9] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 465.977553][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 465.992770][ T9] usb 4-1: config 0 has no interface number 0 [ 466.030189][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 466.045215][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.061249][ T9] usb 4-1: Product: syz [ 466.073433][ T9] usb 4-1: Manufacturer: syz [ 466.103796][ T9] usb 4-1: SerialNumber: syz [ 466.119442][ T9] usb 4-1: config 0 descriptor?? [ 466.304133][ T5901] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 466.367914][ T9] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 466.396030][ T9] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 466.435598][ T9] usb 4-1: Failed to create links for entity 5 [ 466.450345][ T9] usb 4-1: Failed to register entities (-22). [ 466.470520][T10936] geneve1: entered allmulticast mode [ 466.470653][ T9] usb 4-1: USB disconnect, device number 28 [ 466.493796][ T5901] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 466.518382][ T5901] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 466.534434][ T5901] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 466.545506][ T5901] usb 5-1: config 220 has no interface number 2 [ 466.554780][ T5901] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 466.580542][ T5901] usb 5-1: config 220 interface 0 has no altsetting 0 [ 466.587382][ T5901] usb 5-1: config 220 interface 76 has no altsetting 0 [ 466.595777][ T5901] usb 5-1: config 220 interface 1 has no altsetting 0 [ 466.605672][ T5901] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 466.617612][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.626044][ T5901] usb 5-1: Product: syz [ 466.630981][ T5901] usb 5-1: Manufacturer: syz [ 466.635674][ T5901] usb 5-1: SerialNumber: syz [ 466.875266][ T5901] usb 5-1: selecting invalid altsetting 0 [ 466.890920][ T5901] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 466.906660][ T5901] usb 5-1: No valid video chain found. [ 466.924537][ T5901] usb 5-1: selecting invalid altsetting 0 [ 466.930562][ T5901] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 466.974839][ T5901] usb 5-1: USB disconnect, device number 45 [ 467.744785][T10945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1321'. [ 467.764641][T10945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1321'. [ 468.072120][T10968] netlink: 'syz.1.1325': attribute type 10 has an invalid length. [ 468.086141][T10968] netlink: 'syz.1.1325': attribute type 10 has an invalid length. [ 468.102645][T10968] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 468.128223][T10968] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 468.236710][T10972] tipc: Failed to remove unknown binding: 66,1,1/0:3344685926/3344685928 [ 468.251831][T10972] tipc: Failed to remove unknown binding: 66,1,1/0:3344685926/3344685928 [ 468.261304][T10972] tipc: Failed to remove unknown binding: 66,1,1/0:3344685926/3344685928 [ 468.290156][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 468.450355][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 468.457430][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 468.469333][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 468.482482][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 468.491821][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.499828][ T24] usb 4-1: Product: syz [ 468.504225][ T24] usb 4-1: Manufacturer: syz [ 468.509585][ T24] usb 4-1: SerialNumber: syz [ 468.516497][ T24] usb 4-1: config 0 descriptor?? [ 468.525347][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 468.535787][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 469.205990][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 469.216126][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 469.326671][T10987] netlink: 384 bytes leftover after parsing attributes in process `syz.1.1332'. [ 469.337016][T10987] netlink: 'syz.1.1332': attribute type 2 has an invalid length. [ 469.432638][T10988] netlink: 212196 bytes leftover after parsing attributes in process `syz.1.1332'. [ 470.653022][ T24] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 470.667892][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 471.278232][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 471.594489][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 471.653484][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 471.692341][T10991] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1333'. [ 471.703717][T10991] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1333'. [ 471.712895][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1333'. [ 471.733009][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 471.868640][ T24] usb 4-1: USB disconnect, device number 29 [ 471.905037][T10991] netlink: 'syz.5.1333': attribute type 10 has an invalid length. [ 472.372223][T10991] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 472.526005][T10994] openvswitch: netlink: Missing key (keys=40, expected=80) [ 472.717364][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 472.728356][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 472.859730][T11004] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1337'. [ 472.940643][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 473.310306][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 473.328392][ T24] usb 4-1: config 0 has an invalid interface number: 58 but max is 0 [ 473.923574][ T24] usb 4-1: config 0 has no interface number 0 [ 473.940196][ T24] usb 4-1: config 0 interface 58 altsetting 0 endpoint 0x6 has invalid maxpacket 51046, setting to 64 [ 474.037822][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 474.070284][ T24] usb 4-1: config 0 interface 58 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 474.120101][ T24] usb 4-1: config 0 interface 58 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 474.156940][ T24] usb 4-1: config 0 interface 58 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 474.181121][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 474.199413][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=5c.24 [ 474.209676][T11023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1342'. [ 474.211714][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.231014][ T24] usb 4-1: Product: syz [ 474.235471][ T24] usb 4-1: Manufacturer: syz [ 474.239737][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 474.257350][ T24] usb 4-1: SerialNumber: syz [ 474.372433][ T24] usb 4-1: config 0 descriptor?? [ 474.440288][T11027] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1343'. [ 474.490009][ T9] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 474.785180][ T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 474.810050][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.843670][ T9] usb 6-1: Product: syz [ 474.847897][ T9] usb 6-1: Manufacturer: syz [ 474.890179][ T9] usb 6-1: SerialNumber: syz [ 475.262766][ T9] rtsx_usb 6-1:6.0: probe with driver rtsx_usb failed with error -22 [ 475.373224][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'. [ 475.813383][ T9] usb 6-1: USB disconnect, device number 25 [ 476.354645][ T24] appletouch 4-1:0.58: Could not find int-in endpoint [ 476.370225][ T24] appletouch 4-1:0.58: probe with driver appletouch failed with error -5 [ 476.390265][ T43] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 476.403971][ T24] usbhid 4-1:0.58: couldn't find an input interrupt endpoint [ 476.552504][ T24] usb 4-1: USB disconnect, device number 30 [ 476.614002][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.730785][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.857708][ T43] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 476.952913][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 477.008370][ T43] usb 5-1: SerialNumber: syz [ 477.344522][ T43] usb 5-1: 0:2 : does not exist [ 477.349523][ T43] usb 5-1: unit 255 not found! [ 477.420832][ T43] usb 5-1: USB disconnect, device number 46 [ 477.502011][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.790245][ T981] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 477.941968][T11075] program syz.3.1356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.050281][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 478.068002][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.085005][ T981] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 478.097782][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.214773][ T981] usb 6-1: config 0 descriptor?? [ 479.687133][ T981] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 479.703760][ T981] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 479.731012][ T981] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 479.741609][ T981] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 479.749622][ T981] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 479.921074][T11088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1359'. [ 480.351381][ T981] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 480.738882][ T9] usb 6-1: USB disconnect, device number 26 [ 481.165131][ T8238] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 481.278244][T11097] xt_hashlimit: max too large, truncated to 1048576 [ 481.946215][T11105] xt_connbytes: Forcing CT accounting to be enabled [ 481.967638][T11105] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 482.006854][T11103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.081982][T11103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.143924][T11103] dns_resolver: Unsupported content type (24) [ 482.190084][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 482.332848][ T24] usb 6-1: device descriptor read/64, error -71 [ 483.272557][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 483.490237][ T24] usb 6-1: device descriptor read/64, error -71 [ 483.602057][ T24] usb usb6-port1: attempt power cycle [ 483.816464][T11130] lo speed is unknown, defaulting to 1000 [ 484.055227][T11130] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 484.092984][T11134] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1373'. [ 484.150231][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 484.206772][ T24] usb 6-1: device descriptor read/8, error -71 [ 484.306722][T11137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1374'. [ 484.576162][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 484.788837][ T24] usb 6-1: device descriptor read/8, error -71 [ 484.931776][ T24] usb usb6-port1: unable to enumerate USB device [ 485.500114][ T43] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 486.216596][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1380'. [ 486.310177][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 486.321747][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 486.350437][ T43] usb 4-1: config 0 has no interface number 0 [ 486.575599][ T43] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 487.250118][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.258533][ T43] usb 4-1: Product: syz [ 487.264159][ T43] usb 4-1: Manufacturer: syz [ 487.269233][ T43] usb 4-1: SerialNumber: syz [ 487.320141][ T43] usb 4-1: config 0 descriptor?? [ 487.831740][ T43] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 487.844958][ T43] usb 4-1: selecting invalid altsetting 1 [ 487.851333][ T43] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 487.864027][ T43] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 487.875308][ T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 487.890815][ T43] usb 4-1: media controller created [ 487.924112][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.012290][ T43] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 488.031874][ T43] zl10353_read_register: readreg error (reg=127, ret==-71) [ 488.063266][ T43] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 488.910588][ T43] usb 4-1: USB disconnect, device number 31 [ 489.657224][ T30] audit: type=1326 audit(1755920543.746:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910a78ebe9 code=0x7ffc0000 [ 490.413347][ T30] audit: type=1326 audit(1755920543.746:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f910a78ebe9 code=0x7ffc0000 [ 490.487727][ T30] audit: type=1326 audit(1755920543.746:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910a78ebe9 code=0x7ffc0000 [ 490.530995][ T30] audit: type=1326 audit(1755920543.746:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f910a78ebe9 code=0x7ffc0000 [ 490.552611][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.591606][T11220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1396'. [ 490.600685][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'. [ 490.612096][T11220] overlayfs: failed to clone upperpath [ 490.650004][ T30] audit: type=1326 audit(1755920543.746:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910a78ebe9 code=0x7ffc0000 [ 490.671582][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.671615][ T43] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 490.690472][ T30] audit: type=1326 audit(1755920543.956:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f910a78ebe9 code=0x7ffc0000 [ 490.714374][ T30] audit: type=1326 audit(1755920544.336:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910a78ebe9 code=0x7ffc0000 [ 490.735945][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.750115][ T30] audit: type=1326 audit(1755920544.476:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910a78ebe9 code=0x7ffc0000 [ 490.772031][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.781259][ T30] audit: type=1326 audit(1755920544.486:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f910a78d550 code=0x7ffc0000 [ 490.802823][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.912967][ T43] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 490.924225][ T43] usb 6-1: config 0 has no interface number 0 [ 490.936496][ T43] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 490.946144][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.964659][ T30] audit: type=1326 audit(1755920544.496:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f910a78e7eb code=0x7ffc0000 [ 490.986298][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.030170][ T43] usb 6-1: Product: syz [ 491.035857][ T43] usb 6-1: Manufacturer: syz [ 491.040650][ T43] usb 6-1: SerialNumber: syz [ 491.449032][ T43] usb 6-1: config 0 descriptor?? [ 491.686863][ T43] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 491.698172][ T43] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 491.706604][ T43] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 491.715592][ T43] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 491.726930][ T43] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 493.107832][ T43] usb 6-1: USB disconnect, device number 31 [ 493.151937][ T43] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 493.200777][ T43] keyspan 6-1:0.133: device disconnected [ 493.551907][T11256] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 494.270660][T11246] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 496.020097][ T43] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 496.231955][T11308] bridge0: port 1(macvlan0) entered blocking state [ 496.238916][T11308] bridge0: port 1(macvlan0) entered disabled state [ 496.254123][T11308] macvlan0: entered allmulticast mode [ 496.261168][T11308] bridge0: entered allmulticast mode [ 496.269388][T11308] macvlan0: left allmulticast mode [ 496.276884][T11308] bridge0: left allmulticast mode [ 496.280157][ T43] usb 5-1: device descriptor read/64, error -71 [ 496.458151][T11312] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1414'. [ 496.605853][ T43] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 496.653723][T11278] delete_channel: no stack [ 497.243179][ T43] usb 5-1: device descriptor read/64, error -71 [ 497.360346][ T43] usb usb5-port1: attempt power cycle [ 497.720195][ T43] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 497.784485][ T43] usb 5-1: device descriptor read/8, error -71 [ 498.180412][ T43] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 498.285130][ T43] usb 5-1: device descriptor read/8, error -71 [ 498.521210][ T43] usb usb5-port1: unable to enumerate USB device [ 498.541148][T11339] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1421'. [ 499.649790][T11349] binder: BINDER_SET_CONTEXT_MGR already set [ 499.656105][T11349] binder: 11347:11349 ioctl 4018620d 200000004a80 returned -16 [ 500.674041][T11370] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 500.809058][T11370] ALSA: mixer_oss: invalid OSS volume 'F4|׃|t@' [ 500.827952][T11370] ALSA: mixer_oss: invalid OSS volume 'GJJ³team_lock_key#3){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 531.180749][ T8239] [ 531.180749][ T8239] but task is already holding lock: [ 531.188091][ T8239] ffff888054be0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 531.198430][ T8239] [ 531.198430][ T8239] which lock already depends on the new lock. [ 531.198430][ T8239] [ 531.208814][ T8239] [ 531.208814][ T8239] the existing dependency chain (in reverse order) is: [ 531.217806][ T8239] [ 531.217806][ T8239] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 531.225517][ T8239] lock_acquire+0x120/0x360 [ 531.230521][ T8239] __mutex_lock+0x182/0xe80 [ 531.235526][ T8239] ieee80211_open+0xed/0x1f0 [ 531.240625][ T8239] __dev_open+0x470/0x880 [ 531.245471][ T8239] netif_open+0xaa/0x170 [ 531.250237][ T8239] dev_open+0x125/0x260 [ 531.254911][ T8239] team_add_slave+0xb36/0x2840 [ 531.260193][ T8239] do_set_master+0x530/0x6d0 [ 531.265302][ T8239] do_setlink+0xcf0/0x41c0 [ 531.270245][ T8239] rtnl_newlink+0x160b/0x1c70 [ 531.275439][ T8239] rtnetlink_rcv_msg+0x7cc/0xb70 [ 531.280899][ T8239] netlink_rcv_skb+0x205/0x470 [ 531.286182][ T8239] netlink_unicast+0x75c/0x8e0 [ 531.291462][ T8239] netlink_sendmsg+0x805/0xb30 [ 531.296743][ T8239] __sock_sendmsg+0x21c/0x270 [ 531.301936][ T8239] ____sys_sendmsg+0x505/0x830 [ 531.307220][ T8239] ___sys_sendmsg+0x21f/0x2a0 [ 531.312417][ T8239] __x64_sys_sendmsg+0x19b/0x260 [ 531.317875][ T8239] do_syscall_64+0xfa/0x3b0 [ 531.322894][ T8239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.329307][ T8239] [ 531.329307][ T8239] -> #0 (team->team_lock_key#3){+.+.}-{4:4}: [ 531.337535][ T8239] validate_chain+0xb9b/0x2140 [ 531.342834][ T8239] __lock_acquire+0xab9/0xd20 [ 531.348044][ T8239] lock_acquire+0x120/0x360 [ 531.353062][ T8239] __mutex_lock+0x182/0xe80 [ 531.358085][ T8239] team_del_slave+0x32/0x1c0 [ 531.363195][ T8239] team_device_event+0x285/0xa20 [ 531.368650][ T8239] notifier_call_chain+0x1b3/0x3e0 [ 531.374279][ T8239] unregister_netdevice_many_notify+0x15d8/0x2320 [ 531.381212][ T8239] unregister_netdevice_queue+0x33c/0x380 [ 531.387447][ T8239] _cfg80211_unregister_wdev+0x165/0x590 [ 531.393599][ T8239] ieee80211_remove_interfaces+0x49a/0x6d0 [ 531.399939][ T8239] ieee80211_unregister_hw+0x5d/0x2c0 [ 531.405859][ T8239] mac80211_hwsim_del_radio+0x275/0x460 [ 531.411937][ T8239] hwsim_exit_net+0x584/0x640 [ 531.417133][ T8239] ops_undo_list+0x497/0x990 [ 531.422243][ T8239] cleanup_net+0x4c5/0x800 [ 531.427174][ T8239] process_scheduled_works+0xade/0x17b0 [ 531.433240][ T8239] worker_thread+0x8a0/0xda0 [ 531.438344][ T8239] kthread+0x70e/0x8a0 [ 531.442930][ T8239] ret_from_fork+0x3fc/0x770 [ 531.448036][ T8239] ret_from_fork_asm+0x1a/0x30 [ 531.453319][ T8239] [ 531.453319][ T8239] other info that might help us debug this: [ 531.453319][ T8239] [ 531.463537][ T8239] Possible unsafe locking scenario: [ 531.463537][ T8239] [ 531.470975][ T8239] CPU0 CPU1 [ 531.476327][ T8239] ---- ---- [ 531.481681][ T8239] lock(&rdev->wiphy.mtx); [ 531.486184][ T8239] lock(team->team_lock_key#3); [ 531.493655][ T8239] lock(&rdev->wiphy.mtx); [ 531.500681][ T8239] lock(team->team_lock_key#3); [ 531.505622][ T8239] [ 531.505622][ T8239] *** DEADLOCK *** [ 531.505622][ T8239] [ 531.513758][ T8239] 5 locks held by kworker/u8:36/8239: [ 531.519122][ T8239] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 531.530092][ T8239] #1: ffffc9001b30fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 531.540708][ T8239] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 531.550034][ T8239] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 531.559880][ T8239] #4: ffff888054be0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 531.570680][ T8239] [ 531.570680][ T8239] stack backtrace: [ 531.576576][ T8239] CPU: 1 UID: 0 PID: 8239 Comm: kworker/u8:36 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 531.576596][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.576608][ T8239] Workqueue: netns cleanup_net [ 531.576638][ T8239] Call Trace: [ 531.576649][ T8239] [ 531.576657][ T8239] dump_stack_lvl+0x189/0x250 [ 531.576678][ T8239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.576695][ T8239] ? __pfx__printk+0x10/0x10 [ 531.576716][ T8239] ? print_lock_name+0xde/0x100 [ 531.576737][ T8239] print_circular_bug+0x2ee/0x310 [ 531.576757][ T8239] check_noncircular+0x134/0x160 [ 531.576778][ T8239] validate_chain+0xb9b/0x2140 [ 531.576803][ T8239] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.576824][ T8239] __lock_acquire+0xab9/0xd20 [ 531.576841][ T8239] ? team_del_slave+0x32/0x1c0 [ 531.576862][ T8239] lock_acquire+0x120/0x360 [ 531.576876][ T8239] ? team_del_slave+0x32/0x1c0 [ 531.576898][ T8239] ? __mutex_trylock_common+0x153/0x260 [ 531.576919][ T8239] __mutex_lock+0x182/0xe80 [ 531.576936][ T8239] ? team_del_slave+0x32/0x1c0 [ 531.576957][ T8239] ? rcu_is_watching+0x15/0xb0 [ 531.576976][ T8239] ? team_del_slave+0x32/0x1c0 [ 531.576997][ T8239] ? __pfx___mutex_lock+0x10/0x10 [ 531.577015][ T8239] ? bond_netdev_event+0xd9/0xe80 [ 531.577040][ T8239] ? __pfx___mutex_lock+0x10/0x10 [ 531.577057][ T8239] ? __pfx_bond_netdev_event+0x10/0x10 [ 531.577083][ T8239] team_del_slave+0x32/0x1c0 [ 531.577105][ T8239] team_device_event+0x285/0xa20 [ 531.577122][ T8239] notifier_call_chain+0x1b3/0x3e0 [ 531.577143][ T8239] unregister_netdevice_many_notify+0x15d8/0x2320 [ 531.577168][ T8239] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 531.577188][ T8239] ? __lock_acquire+0xab9/0xd20 [ 531.577211][ T8239] unregister_netdevice_queue+0x33c/0x380 [ 531.577228][ T8239] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 531.577248][ T8239] _cfg80211_unregister_wdev+0x165/0x590 [ 531.577272][ T8239] ieee80211_remove_interfaces+0x49a/0x6d0 [ 531.577292][ T8239] ? __pfx_synchronize_rcu+0x10/0x10 [ 531.577312][ T8239] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 531.577330][ T8239] ? rcu_is_watching+0x15/0xb0 [ 531.577350][ T8239] ieee80211_unregister_hw+0x5d/0x2c0 [ 531.577376][ T8239] mac80211_hwsim_del_radio+0x275/0x460 [ 531.577401][ T8239] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 531.577429][ T8239] hwsim_exit_net+0x584/0x640 [ 531.577450][ T8239] ? __pfx_hwsim_exit_net+0x10/0x10 [ 531.577471][ T8239] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 531.577496][ T8239] ops_undo_list+0x497/0x990 [ 531.577520][ T8239] ? __pfx_ops_undo_list+0x10/0x10 [ 531.577545][ T8239] cleanup_net+0x4c5/0x800 [ 531.577568][ T8239] ? __pfx_cleanup_net+0x10/0x10 [ 531.577589][ T8239] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.577603][ T8239] ? process_scheduled_works+0x9ef/0x17b0 [ 531.577620][ T8239] ? process_scheduled_works+0x9ef/0x17b0 [ 531.577637][ T8239] process_scheduled_works+0xade/0x17b0 [ 531.577664][ T8239] ? __pfx_process_scheduled_works+0x10/0x10 [ 531.577686][ T8239] worker_thread+0x8a0/0xda0 [ 531.577713][ T8239] kthread+0x70e/0x8a0 [ 531.577734][ T8239] ? __pfx_worker_thread+0x10/0x10 [ 531.577751][ T8239] ? __pfx_kthread+0x10/0x10 [ 531.577771][ T8239] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.577790][ T8239] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.577805][ T8239] ? __pfx_kthread+0x10/0x10 [ 531.577825][ T8239] ret_from_fork+0x3fc/0x770 [ 531.577842][ T8239] ? __pfx_ret_from_fork+0x10/0x10 [ 531.577859][ T8239] ? __switch_to_asm+0x39/0x70 [ 531.577878][ T8239] ? __switch_to_asm+0x33/0x70 [ 531.577896][ T8239] ? __pfx_kthread+0x10/0x10 [ 531.577916][ T8239] ret_from_fork_asm+0x1a/0x30 [ 531.577941][ T8239] [ 531.931202][ T8239] team0: Port device wlan1 removed [ 532.236842][ T8239] hsr_slave_0: left promiscuous mode [ 532.242608][ T8239] hsr_slave_1: left promiscuous mode [ 532.248202][ T8239] batman_adv: batadv0: Interface deactivated: dummy0 [ 532.255226][ T8239] batman_adv: batadv0: Removing interface: dummy0 [ 532.262367][ T8239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.271534][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.281481][ T8239] hsr_slave_0: left promiscuous mode [ 532.287523][ T8239] hsr_slave_1: left promiscuous mode [ 532.293285][ T8239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.301136][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.308792][ T8239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.316348][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.325961][ T8239] hsr_slave_0: left promiscuous mode [ 532.332173][ T8239] hsr_slave_1: left promiscuous mode [ 532.337789][ T8239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.345326][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.352956][ T8239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.360865][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.371898][ T8239] hsr_slave_0: left promiscuous mode [ 532.377566][ T8239] hsr_slave_1: left promiscuous mode [ 532.383369][ T8239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.390796][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.398373][ T8239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.406236][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.421461][ T8239] veth0_macvtap: left promiscuous mode [ 532.427522][ T8239] veth1_macvtap: left promiscuous mode [ 532.433080][ T8239] veth0_macvtap: left promiscuous mode [ 532.438636][ T8239] veth1_vlan: left promiscuous mode [ 532.444033][ T8239] veth0_vlan: left promiscuous mode [ 532.450460][ T8239] veth1_macvtap: left promiscuous mode [ 532.455947][ T8239] veth0_macvtap: left promiscuous mode [ 532.461530][ T8239] veth1_vlan: left promiscuous mode [ 532.466776][ T8239] veth0_vlan: left promiscuous mode [ 532.472752][ T8239] veth1_macvtap: left promiscuous mode [ 532.478227][ T8239] veth0_macvtap: left promiscuous mode [ 532.483888][ T8239] veth1_vlan: left promiscuous mode [ 532.489223][ T8239] veth0_vlan: left promiscuous mode [ 532.708885][ T8239] team0 (unregistering): Port device team_slave_1 removed [ 532.733908][ T8239] team0 (unregistering): Port device team_slave_0 removed [ 532.994417][ T8239] team0 (unregistering): Port device team_slave_1 removed [ 533.021794][ T8239] team0 (unregistering): Port device team_slave_0 removed [ 533.227356][ T8239] team0 (unregistering): Port device team_slave_1 removed [ 533.252175][ T8239] team0 (unregistering): Port device team_slave_0 removed