last executing test programs: 4m16.223953225s ago: executing program 3 (id=1482): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}, 0x1, 0x0, 0x0, 0x804}, 0x0) 4m14.969342624s ago: executing program 3 (id=1485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r1}, 0x10) memfd_create(&(0x7f0000000680)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x15x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x01i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f\a\x87\x83\xdb\xfcA\x8ef\xe0\xfd0\x7fc\xc2\x16\x0f5m\x80\x17\x84\x87\xc9\xf4.:\xfd+$m\x8c\xfb\"\xa2/\xdc\'\xa9\xebCrZ\xfd\xa8\xe1\xd3!\xeb\xdd\x96\xa9\x8bCg\xc7\xcdd5\xcf\xc4\x0e\xd85\x11\xa5\xe9&Y\xa8\x8f\x98\xc7\xdf\xf5\xd8tP\x04\xfd\x0f%e\\\xde\xc0\xae\x0e\xd0\xa2\x13\xcd\xb3\x88\x1fq:\xefr\x00\x87\xb4 \x83>o|\xe0wF\xa8/\xa5D\xa9;\xeb\x12\xe1ka\xe9\xe5\a\xd8\xb7\x8c\xfe\xf4\x1d\xf6\x04\x98', 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000039000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) write$input_event(r6, &(0x7f0000000080)={{0x77359400}, 0x11, 0x1, 0x43298}, 0x18) ftruncate(r6, 0x2007ffb) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) preadv2(r8, 0x0, 0x0, 0xfffffffe, 0x0, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000680)="b806008ee0f2d8ab030066b8000000800f23c80f21f86635000060000f23f80f2e3a26660f38804800ba4200ec66b9b903000066b83c9f00006686ba0000e800003044653e0f30663509000000440f22c028360f00d8e8", 0x57}], 0x1, 0x17, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000600)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000400)=""/109, 0x6d}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/122, 0x7a}, {&(0x7f0000000240)=""/8, 0x8}], 0x5, &(0x7f00000002c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x40) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRESHEX=r10, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r10, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 4m12.891508167s ago: executing program 3 (id=1489): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, 0x0, 0x14e) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x815) r4 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0xa2a00) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/108) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x9, @private2, 0x93}}}, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x52}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0f3d1dbe4572c1f755867e3839338b1e67b9de7db84da7469d9500"/42]) execveat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0) unshare(0x22020600) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x700) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x301, 0x0, 0x0, {0x8, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x4a, 0x6, "206cdf37457480f8244511085bd3e0b5ef2c6022622fcc20a035d10189b167f0221d7b1e728281bb72f298eb88f37dd42601ec0874a1b127b12f0563de7b63ef91974cc95308"}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0xa8}}, 0x0) 4m11.500613932s ago: executing program 3 (id=1491): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x3a, 0x40, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10, 0x80000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x1) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffbf4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) 4m9.472022919s ago: executing program 3 (id=1498): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0xfd, 0x15, 0x0, 0xfc, 0xff, 0xfc, 0xfc, 0x0, 0x4, 0x81, 0x80, 0x8}, 0xe) sendto$inet6(r1, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) readv(r1, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000180)={0x11}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2}, [@NDTA_THRESH1={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20050}, 0x40080) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x3) 4m8.779289809s ago: executing program 3 (id=1500): mkdir(&(0x7f0000000000)='./file1\x00', 0x1a2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101442, 0x80) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x5, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000002c0)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400000000fedbdf", @ANYRES32=0x0, @ANYBLOB="adf9aa88e16000002400128009000100626f6e640000000014000280050015000100000005"], 0x44}}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 3m52.973695025s ago: executing program 32 (id=1500): mkdir(&(0x7f0000000000)='./file1\x00', 0x1a2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101442, 0x80) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x5, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000002c0)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400000000fedbdf", @ANYRES32=0x0, @ANYBLOB="adf9aa88e16000002400128009000100626f6e640000000014000280050015000100000005"], 0x44}}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 3m31.230568091s ago: executing program 1 (id=539): r0 = syz_io_uring_setup(0x6042, &(0x7f00000000c0)={0x0, 0x29ee, 0x4, 0x3, 0x8002ae}, &(0x7f0000001280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x4c, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x2, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0xd, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e0000000c000000ffffffff000000004010", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r3, &(0x7f0000000000), 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = socket(0x10, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 2m50.973826925s ago: executing program 1 (id=539): r0 = syz_io_uring_setup(0x6042, &(0x7f00000000c0)={0x0, 0x29ee, 0x4, 0x3, 0x8002ae}, &(0x7f0000001280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x4c, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x2, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"d1347423facc5d1c40c9990badb12af40568dcf49f9a8810b8b798247df29281d071fae787e8ef6eb83481d5060be1bd1d5f4221ee4951277e25aac97f5e4b7765b0408038c6ba8f6fd9c57f3b4ffb6b2762c807cccd0d63c8b7b4e5c66e65bf436355d47d0b07e3afe376c4796d06d228507a9b36640ea5e90f393a5b251138781833fed0b6c3df77ffd6c4d0ce481977b27e84359a45d225231ce0ab05985b65c524dfaf90433e5dc08e663015d86270ce0b7b87a1d7fac3d02279d75b4928bf043317cadd8146b5e3dded47f5f74e7b0cb026dbeacb11eb7001a9e3a974e76e8ae491db04e5e060af7e956306168cb1afed82be4b2e66fc7a47117b49274747d23367c2d65f1b8d7a2b8c28e3b3115bbb90ec09f2add68bad5f9f125572d00249173c1046f043ee0aaadab9700cfc8910820cdd9ff89fbc21b37c708228104471e1b5414b87b3113d6e24d2b5b2515e4aa305cfe4aa0e30a75d682ededddcf5c5df45c1e113eeacba8104313959644fbc8c1813dac5c77314bd35981fdd95b3d46fc3f65e98b8b80c50064cd24e6d99a808cb7573755f97a4f1e771a362b41b2c1383603207c004fbf9e16db9f8fe71f9be9752c496be52bbaafd0722bb0013e33209d56557d5d3c3e76d4d3d2b4c27b0b800691291f31798fe0bf9efc57b83d5444dbcaae41f40ee4944d5b6c5b53ddf03fe6c81cf31809023765bdac31076e91864db9a73b654e7f53375a063ed3a3ca8aba998cddc9e5f9973e0ee8084388f5b8497fa33ff843dbceae13e8ef9e549252aa30d081c11951253f8d8e3b578b3ad02e2ea168c7c9e54f71a8755d7f83e0ad9a3fabb85e3c12a45f3beb48385d26d9dd22c00ead8c9b30a1959d3e345d1ba7ee049f1cba644defff7c3ba2ad549a3130103497efcf5e9c44079dcfaf4f6f55d0c488616de63d6cf659749b31dda2940923002e4395c232d376d0e8917e433e0506e96d078b9e1c050d3783b61c6ce3ba25aa745a2c97f246a0df5e4518d7e696de40b41e50dfe42935f76a4655aaf89b62df109f3ee5cced942083c2e015979e8017d0a435ccef44a6d122a7a61beb38fb0bf2cf20ff6538b343d33de81649f06b29536867760cd8fbec922f26d5373882bdf82bf7b4ce169d73cfb90e9b5366e630b1e6f86e79f935625fc84c9da002f89ed69cc902a755a0f65946466356c4d10501306c4afd04042cf9caa2ba5cdaf021549ff0f4e5329a6cf103e16be76907f038b983768c6608c29d52d5c0ecbc4d18de0d6511f976f03bf433a575680b3faa3069fb0725a46688a206cd6ac37a993fb98534c87a88517e8a8fdc1dff9243c3f328c96c5520c1549044ff729f4c1645d438afabd12f9a937c7f7eedfe11668211b595ffe174347a3a8b8c05175c8069dc44d35144a15e2cc0f4d6d2625fc2b8c89ade5d5ce723bf624694284baacefc181053d3e3cad426c832438f81177256f12e89c0cfe7647355017118a3a055e8869fa6de5ae0aba0bf0d3aa6dbc861a1ff61bbe8746d02f52c0d0d43671e153824c0db8cbbc56590b63dc87c84782ffbb6ef9ef0686501d1fdb7d7dcb1106c0c6a5fafcf82470a33009d953d64f657ddeb3a899822e41a92a089f9a9a5670c37e87c954214a05ee850e1f5387b2d8cdee9f75e8a4187053b838f7e759386bca861fa4f3a78de19c40825f77af4f316519df5a7e927b66399a6e7a6a5eb226252717fc40a1deabdff88ed50a760a3eb330038869f9b5d5b3d30c119b02e0e55fe61e1042243e912042989eae1e5ebd4e1c7b27230479e25f95eae977adb855ff10c5e6d0130d3b80c50e089c22d52943bf3a3ae6fd8f0f257ece4af2749b6c1f6b11db67c0770c6b2b86de957af81f10a06d76f9af780e805f704b823424e9782412e5788d6188d96c80c12a4e1e725e5dc6a9dbad152a688485c49b3b58f8412cad7ef04392bb8d51fe5de21dd2c49cf74c1d5bca87e339c522762cc65f7b45009e2ff57aeb067ea5bbf155d009b97ce1ee0eb0f4b5a02beb09d8fa54b63bc636ba2fa05dfe27d6e71d9f2c54a748bcdd8de453c3e7cfb039eaae05445f5146ae19eea8d1bc21364ad98439e1ee3229b1bf4e6506016ad5b526eae3d53adbcc930654a70169b895f70e64671cb5db886686ce829d6ba71c41ae6f4be6c7f2b8e770c8aecc8991ca0793abc970d2f595329d5cab231f22848415053290e33a87874a34f8f9f63847ed75bc29d48b038e3bc471da7e04bfaf14e447300a42febcd4eda28a44c45ada90acdd71a7314f7602d1f8bb46ff9d7ffdd5c246e5fb0e34df6303e7185a5897eca8bebdadb27d6754144a8aeeb9d9f0dd680fe81d22304c05f2b9020ad442ee2a98cde4e94c7a9a3c1c5db63c4b1b583e768f28c6b15d3cc8efa7d96d4a0eab8ec891a141d6b6f63530a93527ad1b47b2659a6a3d5a680f62d78adc78348affba123d8554aadd30f956b371d713654c3ee9731f9052b2b0b17a1470af0bf0f0e4d4797295ae08c96b09eef9c071bc71cdeef6bea0877f61a80a7975107f07e79fa0261f9a172c0c9841ee5a2a32c32b3882fd0a7c96f71cac2fddfd8acfff1b135a1f7b3ccf966b8b0fb32eadcfaa0c54ff11bf0abaebeaac4b0795180f240148b393668ec8911b38fb11a7042623f0c57a248b2afd30603ce8a20bc88180638d0571e51c0e3fce6f194a01762880d665369b335819d1e879307b0b01fb250577bbfe8ae03d33d0b97ceb697a1855a15f761a0108d3c59ead2194ea18c42487d900a0de473910bb0271cb54ee98b293305263ccf93a18e2a4b320ecc8e23b6d450f48b83d01f75f5b7f3354635b6e5022313f04e4cfefddcf284c2e5dde920a07303f442949ce949fbf2b08264f36dcfabdcece29d1743f839aa94cf7e747a48e6d1a4a65e9445def8c5e3d5ddf3040d24da56a7eec5edb2687eabf174b690d05bdbcdff9aec0a8dcfb94e4fff5a5b441fe3ef5b6189b2971dfb7b4976564a11bb8672d74e54251707acea501c02b66b0b7fe792e8180788b00aade3195f12b837144945e1f9263fd9894c52bea060578933702c85796c618a31243f7af6f6d4c22606fbe5ca70dadea0afa10c0ab3ae9beec09cddffa07be5b072f2dd5f3e54e3de8c232584ac76fa5dcdaeab544225c9c4786d9566eef1f0659e3ae462f9f3bef10117f77a26cf6ef3d0fa6a1d218d555f866da6e4efd5215813d28a54a98e8ef1529515f6a2bfa2cdf88797837d181965905f6878597834699995335fac5a58b5e10a4dfc8a96f2dcfd0fa122ffa0929d858a5cdf8a6347968d672e7dfea5210d2fa145c1d5731d9f8c1d37c97a8f779dc4c31ab5e7123f06c44f0efe58989bb70d4a3bfe2063360d9772653d7328f117607b5f447ea5beaf0df2408a8cb06d6d698915b8d19b9795bd411f4c129ad817bc02b563b3f92da951f952a05195f980e74d15ec221d5ccd1bf13a1bcc36d5de16b29a9465359b580230a34c2f3ed7c247ad15ffa3203d0020b5651c6b85f72c912c063b886b012b1a45c6a19d228cd8164951825de096a07d00b2e1d95d6d622682b515f1b9c72fb3f0acba749d4d4e0d8a30e3f07793d7efc567e47a90f03f01efc16fe174c8e16f84d9eff10d12175a13f064288094e9a873106c82b170858574bbcc16c5d901997b2357f750952e1155a9c2d542668cdcc31e038011b9214b7ca033aec807e07559f65879ed836be06950040fe314ff9939426ccdf47578999a517fe66a1dcadd05f6ef7659faa5cdbf0f9513677b9284dbe54497b18ac415585ef36b4a0a33972207a02c7e76960756eecff183a27be94143adf47179d8dc58c6d8834018d8169257743d77cd48a56516cfab7ce275a81e3359b72aaecf653fc52d88532adae33a1477c492aa307273252c7b61e44d7dc8e6270926560cf4abb2bdf3e821badfe807b9c69b73646e1c5d25e0d06a66c0b00b5069008c0ddaeb89d15fe63816dacd2496395e7f7c6237647dd6ebc286801ae91c05bad19a84ff8aef6628e633249ce60a5041b271ad8ceed29b75c9b9fc039854e55cb01b8bc83a89a7f69a7a6f6717c7920f030bb6617342e3418600681ced7360835323cb58d1b98c344cae84cc88fec716ba5682e786dc16e9370ada8e38e68018f770302a9e8a086b0e08f9a359d3e9c8beba655b1a247688e98650cefb822fa40c4b69221cd5e2208a76cae84fac46802887230846f74bb95da04a7bdfcaad2e9f2db404a985756a1be077e8a8c01a149818487ae896b91ff8d82bf2863712acaa564337d6e925a90b4646d06947ccf2a74d4a1a97d4cb50a53dac0a03c3e09c699a1708a0c26b7c386c97640c2a8f30d2d3bae0db2d018ce658dc3fd9802c308b00a86872fcd8d806dccc46bc763e8292f7d3d681d8cffcc95333e78ebf67bda3e90452a2e08c52957daa98ce0cf2329abda5ccac2b013bde8a4fc75b8258824e14fb87c154b7ac22f58531fcde7082aabd47cbbd0a3a112df521a5391bb047ac4fdb3ea39da1efead0860de63037253708d5e9fd63dc6ee7eacc17b6d9f5a2ea0a27059ec8ec7e696ee05727756fb31ffca4c9261cb8f72023a00d551da0bc08c21174882d5159842aa6316b4624a7d46cecc399bcfce0fca0cc5d3d307194e8bd60a76e43e0b3539ffa23a2b2a58942b1bd21f7c86cd824f4878a7e6dc946db839610f31b24d428cbd0038e314badd51f0f3dc85c3f5df1d08adacdb3553df04803700e53802c67d992e0b7ae12c660fd83cd84fe5ebd2584a5b27db59c948f9793868475b0e1b7a94b4b91555aeb2211f5518883c0f6c9662da5e9271d8e4075a92fae0c013952a947646d84e0d80ea05c6ff5a8308a32b3106e5e0299521d3facc2ab23331054429207bf895d62c949dcca014f136b99d6d42e62cb8ce740c2d10073956a66e95751d3df58e8f8be906baa58720a728ec17bcdca87f8c2e6eb458672b24105a5b4f028fc1c245b129ba99850af1688646eb8df27eb6f1c2804878b5da2280ae9f65416311709304f5e088acbd4ccca49b46ef5a5c256b1c4abd3ca07d9f8f74eefecd736b4fdf1cdfe9bdd084ed472746337afce3b6feadb9923a8b34db65b4e69c933aad7d7fd5648b2ec16c773890483dc2917ca4acd2cb4356aa6ba9769f37c550f0a3ab843d1d9b22b6b4fc6662f63b35f0f81f1b475491aa613f40ff96360ca29d07857f061fb66745caf98f7922ee920f499b56bd8a708df5cce704766ff09dcd49c952c49e1062e9b7b1ffc73982a20c71747015bcdac7fba9da1b8d9447f923b550e27a4e68f8d3b74c138e1291ead6637db271daa182cff002e3d78040378ac4b1aa3802ea70290bcd36efac75a2944ac63d0aaedca5d35f29ef168fa6c9f1f6f00a624fdee74ef2a110fe5b61e0af026b9e33a76639753b85326292a1b866b158576ae797509d6b0d1292afeed41e4d770f6b3df73140a699868ad2aa492f5f2d33447c86cbd65b02ea2fc0ac6f6741c6cb0aab6e0213ff77ad7290eb77edbcd538d7ee9d62d231382cc6e8af6d37cc37193c777faa5468023ef21ff6741905b3fd6d37476e2f2535201d9ee4b87ed35b65838757b74d7eccc00c1351fa0cf076026695c749dcdbb8ba5cc0cb17792712124b3ed779a945c5cd795ced3bb7611f26913512f34f38b946b1f06fa68c948d34ead4e162d893cae23e2389d8c22570fe9c76a0a1dc53f8a50f08872517b459d27e32ce15225c3dd27b19cdf09a2921f2d2a77b7db9c595e38d84d18cf5aac564168f", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0xd, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e0000000c000000ffffffff000000004010", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r3, &(0x7f0000000000), 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = socket(0x10, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 2m21.105178812s ago: executing program 1 (id=539): r0 = syz_io_uring_setup(0x6042, &(0x7f00000000c0)={0x0, 0x29ee, 0x4, 0x3, 0x8002ae}, &(0x7f0000001280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x4c, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x2, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0xd, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e0000000c000000ffffffff000000004010", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r3, &(0x7f0000000000), 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = socket(0x10, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 1m29.039217465s ago: executing program 1 (id=539): r0 = syz_io_uring_setup(0x6042, &(0x7f00000000c0)={0x0, 0x29ee, 0x4, 0x3, 0x8002ae}, &(0x7f0000001280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x4c, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x2, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0xd, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e0000000c000000ffffffff000000004010", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r3, &(0x7f0000000000), 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = socket(0x10, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 55.450173995s ago: executing program 1 (id=539): r0 = syz_io_uring_setup(0x6042, &(0x7f00000000c0)={0x0, 0x29ee, 0x4, 0x3, 0x8002ae}, &(0x7f0000001280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x4c, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x2, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0xd, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e0000000c000000ffffffff000000004010", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r3, &(0x7f0000000000), 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = socket(0x10, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 24.383552956s ago: executing program 1 (id=539): r0 = syz_io_uring_setup(0x6042, &(0x7f00000000c0)={0x0, 0x29ee, 0x4, 0x3, 0x8002ae}, &(0x7f0000001280)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x4c, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x2, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0xd, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e0000000c000000ffffffff000000004010", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r3, &(0x7f0000000000), 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = socket(0x10, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 10.071320455s ago: executing program 0 (id=2020): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000280)=0x64, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x10008) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x44, &(0x7f0000000040), 0x5d) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xffff}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r4}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_open_procfs$namespace(r7, 0xfffffffffffffffe) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414bb0c0002800500010000000000080007400000000024000e"], 0x88}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 9.884614737s ago: executing program 2 (id=2022): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x9a}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0600090097eb3a1935054d8f80"], 0x11) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000003, 0x4010, r2, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x403, 0x0) 9.759030769s ago: executing program 4 (id=2023): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) r2 = syz_open_dev$usbfs(0x0, 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}}, 0x14}}, 0x20000086) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x1, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x3f8, 0x200, 0x70bd22, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24040000) (fail_nth: 3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2, 0xa, 0xff, 0x5, 0x4, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d3, 0x3, 0xc, 0x26, 0x0, 0x40000000}]}, 0x20}}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in=@loopback, 0x4e24, 0x7fff, 0x4e20, 0x4, 0xa, 0x20, 0x20, 0x2b, 0x0, r1}, {0xbf, 0x18f584bc, 0x8, 0x1, 0x5, 0x7fffffffffffffff, 0x100000001, 0xa837}, {0xd49, 0x8, 0x8, 0x3}, 0x7fffffff, 0x6e6bbf, 0x0, 0x0, 0x3, 0x1}, {{@in=@empty, 0x4d3, 0x32}, 0xa, @in6=@empty, 0x3507, 0x3, 0x0, 0xf8, 0x2, 0x91, 0x7f}}, 0xe8) 9.435779509s ago: executing program 4 (id=2025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1}}], 0x1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x21, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) 9.390107338s ago: executing program 2 (id=2026): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="8b040400000000003800128008000100736974002c0002800800140000000000060008003f00000008000200ac1414aa05000900000000000600100000000000"], 0x58}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xa1641000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x4000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$inet(0x2, 0x802, 0x1) setsockopt$inet_opts(r7, 0x0, 0xd, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r8, &(0x7f0000000e00)={&(0x7f00000003c0)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}, 0x0) r9 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x103b83) ioctl$LOOP_GET_STATUS64(r9, 0x4c05, &(0x7f00000001c0)) kexec_load(0xffffffffffefffff, 0x0, 0x0, 0x0) 8.422196494s ago: executing program 0 (id=2027): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) r1 = syz_open_dev$radio(0x0, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4820) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x2}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x10, 0xc9, 0x81}}}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x5, 0x7}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000003c0)={0x28, 0x3, 0x0, r5, 0x0, 0x0, 0x0, 0xac, &(0x7f0000000300)="839f996d24f7f4b213c36adf0844d3bc7939d93943bda3855bfa8936a7c7ced3d7e932eb421336b05c235a352ebd75c88f63d1b58da0ed5d6668e8d423916f1234f1da150594fddde2c762fe576642a249e862de7e683a12bbc7d8b30ed3722c09910633d91ee9e4068289c32be6985bc6112bd88cf8f4123c198020e9d7515d9016c4975aaa422ef79ef4788e489d0df56ba6858250d414f936cad4a2b3d8e827a58d9fb338997584339b9e"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0xffffffffffffff29, 0xfeffffffffffff, &(0x7f0000001c40)="d7"}) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x40, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 8.404509192s ago: executing program 2 (id=2028): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x20, 0xc, 0x84, {0x84, 0x9, "54c48059e80ce6d49a740f9b8b045046f82a216c3ac8e5e8a2f031fdcafd388b20553f246004d806f06ab143ddf1070f1a10e7c128aac91cf7466c84cc6c677db803ff9fea3b343d9da1403c2cca99bd730ce601a7044a88774e5a57413f7aad8b6661aee01e65ac0f32903d5cbfe6ff58341d41a9e383153ceb4aa95abbc6fc3de0"}}, &(0x7f0000000140)={0x0, 0x3, 0xab, @string={0xab, 0x3, "55de56c0f5aa9d8d88b3dd172739b7450fe4468bfcbcab0b0f1d56cc4144f48cad00367cb88ba09555c1542b9371ddec1bb22ae2598f27d637a201989ccf74e400173de881051386baf7632170ff13a5ba4f2efbc35e4a868730781ca3976433f97419007f72d79d645b8c0ddc039c36b537193a14a8fd5d244eb003b7d31b27b7a571917d26cf45d6dfe9df7e10a647154270ab7237ff7b2e4dab64d43897b98b6eb4d9ea48d18495"}}, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "0409d1bf"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x24, 0x1, {0x22, 0xd90}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0xf, 0x32, "a1f81dff05c6904df7e85615adacfebd0553ccc392593ccb982a341d0b8ae55048fce3d852e27a06439ff803c65f67865f0d"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x1, 0x17, "89409ca28d8ef248d029e3d9c5ec4f1bf33dde953b43b8"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0xff}}) r1 = open$dir(0x0, 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x80, 0x3, 0x2, {0x2, 0x7e8e703122aff25f}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.363937461s ago: executing program 4 (id=2029): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0xfffffffffffffc7f, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 7.707590858s ago: executing program 4 (id=2031): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socket(0x5, 0x6, 0x9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00660000000000000000000000000000000000cbbcf7220e2f3fde8f"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 6.788163389s ago: executing program 5 (id=2032): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) r3 = syz_open_dev$radio(0x0, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4820) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x2}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x10, 0xc9, 0x81}}}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x80000000, 0x99, &(0x7f0000000600)=""/153, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x3, r2, 0x8, &(0x7f0000000100)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x0, 0x4, 0x7}, 0x10, 0xffffffffffffffff, r1, 0x0, 0x0, &(0x7f0000000240), 0x10, 0x7fffffff, @void, @value}, 0x94) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x5, 0x7}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, 0x3, 0xfffffffffefffff8, 0x3fff}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000003c0)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac, &(0x7f0000000300)="839f996d24f7f4b213c36adf0844d3bc7939d93943bda3855bfa8936a7c7ced3d7e932eb421336b05c235a352ebd75c88f63d1b58da0ed5d6668e8d423916f1234f1da150594fddde2c762fe576642a249e862de7e683a12bbc7d8b30ed3722c09910633d91ee9e4068289c32be6985bc6112bd88cf8f4123c198020e9d7515d9016c4975aaa422ef79ef4788e489d0df56ba6858250d414f936cad4a2b3d8e827a58d9fb338997584339b9e"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0xffffffffffffff29, 0xfeffffffffffff, &(0x7f0000001c40)="d7"}) 6.698237078s ago: executing program 0 (id=2033): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000280)=0x64, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x10008) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x44, &(0x7f0000000040), 0x5d) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xffff}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r4}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_open_procfs$namespace(r7, 0xfffffffffffffffe) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414bb0c0002800500010000000000080007400000000024000e"], 0x88}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 5.7392417s ago: executing program 0 (id=2034): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) mprotect(&(0x7f00004f5000/0x4000)=nil, 0x4000, 0x2000005) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) close(0xffffffffffffffff) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x27) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r1, r5}) 5.725841227s ago: executing program 5 (id=2035): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c2020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000ffffffffffff000000850000002d000000950000000000000012f4ee75a9f70ecabb92ca6e7a039314131644212886236cbb029b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r7, &(0x7f0000000500)={'syz1\x00', {0x7, 0x1, 0x4, 0x15}, 0x31, [0x0, 0x1, 0x7, 0x2, 0x9, 0x5, 0x0, 0x858, 0x5, 0x2, 0xcdb9, 0xc8c, 0x4, 0x9, 0xb043, 0x5, 0x6, 0x3b8, 0xfffffff8, 0x9, 0x8000, 0x82, 0x10001, 0x1, 0xe, 0x8, 0x8, 0x1, 0x0, 0x4b0e880e, 0x80000000, 0xb, 0xbd92, 0x81, 0x7, 0x2, 0x6, 0x3e18b6be, 0x2, 0x7, 0x5b98, 0x1ff, 0x4, 0x6, 0x1, 0x1, 0x7ff, 0xffffff01, 0x8001, 0x8000, 0x2, 0xf8000000, 0x654, 0x729e4a8b, 0x1, 0x8, 0xffffffff, 0x6, 0x8, 0x3, 0xfffffffe, 0xffff43d0, 0x5, 0x400], [0x4, 0x4, 0x70, 0x3, 0x1, 0x6, 0x1, 0x5, 0x454, 0x80, 0x1, 0x6, 0x10000, 0x7, 0x9, 0x9, 0xffffff7f, 0x9, 0x6, 0x3, 0x5, 0x8, 0x2, 0x80000001, 0x1ff, 0x411, 0x201, 0x3, 0x9, 0x8001, 0x8, 0x100, 0x3, 0x3099, 0x374, 0x0, 0x40, 0x7ff, 0x3, 0x8, 0x9, 0xfa, 0x5, 0xce81, 0xd, 0x9, 0x1, 0x0, 0x7f, 0x10, 0x4f3b7fa9, 0x6, 0x4a8, 0x6, 0x0, 0x2, 0xeb, 0x0, 0x9, 0x7fff, 0xf, 0x1001, 0x401, 0x1], [0x81, 0x6, 0xd, 0x9, 0x1, 0x9, 0xfffff23f, 0x2, 0x401, 0x8, 0x2, 0xa8, 0x622, 0xb, 0x8, 0x3ff, 0xfffffffa, 0x7, 0x8, 0xffff8000, 0x200, 0x1, 0x0, 0x4, 0x3, 0x200, 0x1a40, 0xac22, 0x4, 0x10000e, 0xffffffff, 0x9, 0x4, 0x81, 0x6, 0xff, 0x4, 0x3, 0x3, 0x6, 0x5, 0x5b04a85a, 0x1, 0x5, 0x9, 0x2, 0x6, 0x1, 0xfffffffb, 0xffff, 0x8, 0x2, 0x2, 0x800, 0x0, 0x8, 0x3, 0x80000001, 0x7, 0xfffff939, 0x2, 0x2, 0xb3, 0x9], [0x1, 0x2, 0x7fff, 0x3f1, 0x7, 0x8ba8, 0x40, 0x0, 0xfffffffd, 0xf4, 0x4, 0xdee, 0x5, 0x1, 0x1c, 0xa9bf, 0xffff8000, 0x0, 0x8, 0x40, 0x0, 0xfffffffd, 0x8, 0x3290, 0x5, 0x1, 0x0, 0x6, 0x4, 0x2, 0x4, 0xf, 0x4, 0x4dc, 0x6, 0xfffffff8, 0x200, 0x72, 0x4, 0xfffffffc, 0x3, 0xb, 0x37f, 0x4, 0x9, 0x3, 0x20, 0xfa91, 0x7, 0x401, 0x5, 0x81, 0x20000000, 0x603, 0x0, 0x2, 0x2, 0xd, 0xa, 0x280000, 0x5, 0x627b6092, 0x6, 0x6]}, 0x45c) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x806a}, {0x20, 0x0, 0x2, 0xfffff034}, {0x6, 0xfc, 0x0, 0x4}]}, 0x10) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000940)=0x200000000) write$vhost_msg_v2(r9, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x3, 0x2}}, 0x48) 4.642437286s ago: executing program 5 (id=2036): r0 = syz_clone(0x42008800, &(0x7f0000000080)="ffdb5803b4aa39bf0adabbea004bfb283fe57c89379b85d34ee68945278cf9421149860ba21121", 0x27, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)="a734f08142bf05f3ecaeea763a146808ba1900214384177d5646173e5d41") prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x2d, 0x0, &(0x7f0000003300)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x46201, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100), 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 4.523475324s ago: executing program 2 (id=2037): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000d80)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0x45}, &(0x7f0000000040)=0x8) io_setup(0x2, &(0x7f0000000dc0)=0x0) io_getevents(r6, 0x2, 0x3, &(0x7f0000000e40)=[{}, {}, {}], 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) io_getevents(r6, 0x1, 0x15b, &(0x7f0000000600), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6ab) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x2, r2, 0x0}]) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) r8 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r8, 0x400455c8, 0x1) ioctl$TIOCSETD(r8, 0x5412, &(0x7f0000000140)=0xffffffc0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000180)=0xc, 0x4) creat(&(0x7f0000000080)='./file0\x00', 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYRESHEX=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x7e) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f00000001c0)="690c8bab01c0f321600c815623951243", 0x10) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0xdb) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x84a81, 0x0) 4.460693077s ago: executing program 5 (id=2038): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="8b040400000000003800128008000100736974002c0002800800140000000000060008003f00000008000200ac1414aa05000900000000000600100000000000"], 0x58}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xa1641000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$inet(0x2, 0x802, 0x1) setsockopt$inet_opts(r7, 0x0, 0xd, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r8, &(0x7f0000000e00)={&(0x7f00000003c0)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}, 0x0) r9 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x103b83) ioctl$LOOP_GET_STATUS64(r9, 0x4c05, &(0x7f00000001c0)) kexec_load(0xffffffffffefffff, 0x0, 0x0, 0x0) 3.979730537s ago: executing program 4 (id=2039): syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x834, &(0x7f0000000180)={0x0, 0x679a, 0x800, 0x6, 0x3cc}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001042abd70000020000000000000", @ANYRES32=r6, @ANYBLOB="c68306009854070008000300", @ANYRES32=r6, @ANYBLOB="2740f1128102a402"], 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x44000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r7, 0x80, &(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x8000}}) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) signalfd(r0, &(0x7f0000000200)={[0xd3]}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x6, 0x2}, @window={0x3, 0xa, 0x2}, @sack_perm, @mss={0x2, 0x6}], 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r11, &(0x7f00000004c0)=[{&(0x7f0000000500)="aefdcd9d240200005a90f57f077029eff0f64ebbee07942c22595943bb05e374cbee8ad1b7244232b0772e11b44e65d766", 0x31}], 0x1) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000000c0)={0x0, 0x1}) 3.375379084s ago: executing program 5 (id=2040): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.215708272s ago: executing program 0 (id=2041): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_tables_targets\x00') preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/135, 0x87}], 0x1, 0x7, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000000)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40400a0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) sendmsg$OSF_MSG_ADD(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) 971.270861ms ago: executing program 0 (id=2042): socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000080)={0x15, 0xfffffffd, 0x10007, 0x8, 0x7ff}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r2 = syz_open_dev$dri(&(0x7f0000000400), 0x200001ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@broadcast, @dev}, &(0x7f0000000340)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000104ffffffff00000000e4f24805", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=r5, @ANYBLOB], 0x40}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x8) r7 = socket$kcm(0xa, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x428101, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b19, &(0x7f0000000000)={'bridge_slave_0\x00', @broadcast}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)) setsockopt$inet_int(r6, 0x0, 0x21, &(0x7f0000000000)=0x8, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TCSETS2(r10, 0x402c542b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x8bee, 0x0, "87d3865187b8c6f0a84af6a637903184033c67"}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000001c00)=0x3) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r11 = socket$inet(0x2, 0x3, 0x6) dup3(r6, r11, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x15) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 930.939109ms ago: executing program 2 (id=2043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="060000000400000003000000050000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x61) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x34}}, 0x10040) io_uring_enter(0xffffffffffffffff, 0xce3, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x22c000, 0x800}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073110d00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 845.872843ms ago: executing program 4 (id=2044): syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0xc) socket$inet6(0xa, 0x3, 0xfe) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x662a, &(0x7f0000000400)={0x0, 0xfffffffc, 0x0, 0x7, 0xc2}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2026c1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0xffffffffffffff9f) accept4(r2, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x0, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f00000007c0)=ANY=[@ANYBLOB="85100000000000008510000000000000851000000000000085100000080000008510"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000021401006abd700002dcdf2508000100000000000900020073797a32000000007f9f108cffca6623b74202a42fc9acd30a4974b7cc30501aeb4f", @ANYBLOB="3e8829a2ef3805450119be0487ac516d1db5b3885045b39e75de3700b6720ab22154a65e7d4b80ac53283d241622950076", @ANYRES32=r3], 0x29}, 0x1, 0x0, 0x0, 0x14000801}, 0x40810) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa7c44a8d5ef31080046000018000000000106907864010101ac1414aa9404000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) 593.942742ms ago: executing program 2 (id=2045): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000280)=0x64, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x10008) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x44, &(0x7f0000000040), 0x5d) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xffff}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r4}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_open_procfs$namespace(r7, 0xfffffffffffffffe) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414bb0c0002800500010000000000080007400000000024000e"], 0x88}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 0s ago: executing program 5 (id=2046): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xdddd0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe7fa, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x100000000000) dup(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000041197000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) kernel console output (not intermixed with test programs): uetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 717.243677][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 717.261893][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 717.291766][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 717.303190][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 717.849490][T13079] bridge_slave_0: entered allmulticast mode [ 717.857520][T13079] bridge_slave_0: entered promiscuous mode [ 717.866507][T13079] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.873760][T13079] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.881034][T13079] bridge_slave_1: entered allmulticast mode [ 717.888844][T13079] bridge_slave_1: entered promiscuous mode [ 717.947036][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 718.061381][T13179] netlink: 'syz.4.1546': attribute type 1 has an invalid length. [ 718.220927][T13079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.275500][ T51] Bluetooth: hci2: command tx timeout [ 718.716772][T13079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.200416][T13184] netlink: 'syz.0.1549': attribute type 1 has an invalid length. [ 719.210638][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'. [ 719.398328][T10950] Bluetooth: hci5: command tx timeout [ 719.871821][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.406697][T13079] team0: Port device team_slave_0 added [ 720.890285][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.928288][T13079] team0: Port device team_slave_1 added [ 721.291239][ T5869] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 721.485516][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 721.525546][T10950] Bluetooth: hci5: command 0x041b tx timeout [ 721.938133][ T5869] usb 3-1: config 0 has an invalid interface number: 145 but max is 1 [ 721.950785][ T5869] usb 3-1: config 0 has an invalid interface number: 43 but max is 1 [ 721.975201][ T5869] usb 3-1: config 0 has no interface number 0 [ 721.981547][ T5869] usb 3-1: config 0 has no interface number 1 [ 721.993980][ T5869] usb 3-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 722.003061][T13079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.058210][ T5869] usb 3-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 722.065366][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.094956][ T5869] usb 3-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 722.094987][ T5869] usb 3-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 722.095011][ T5869] usb 3-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 722.095033][ T5869] usb 3-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 722.095053][ T5869] usb 3-1: config 0 interface 145 has no altsetting 0 [ 722.095069][ T5869] usb 3-1: config 0 interface 43 has no altsetting 0 [ 722.459211][ T5869] usb 3-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 722.468927][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.487270][T13079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.637616][T13079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.644715][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.676195][ T5869] usb 3-1: Product: syz [ 722.695252][ T5869] usb 3-1: Manufacturer: syz [ 722.699897][ T5869] usb 3-1: SerialNumber: syz [ 723.332353][ T5869] usb 3-1: config 0 descriptor?? [ 723.413489][T13079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.494021][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.555341][T10950] Bluetooth: hci5: command 0x041b tx timeout [ 724.324628][ T5869] keyspan_pda 3-1:0.145: required endpoints missing [ 724.566196][ T5869] keyspan_pda 3-1:0.43: Keyspan PDA converter detected [ 724.589428][ T5869] usb 3-1: Keyspan PDA converter now attached to ttyUSB0 [ 724.604506][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.624073][ T5869] usb 3-1: USB disconnect, device number 21 [ 724.726119][ T5869] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 724.761509][ T5869] keyspan_pda 3-1:0.43: device disconnected [ 724.834074][T13252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1565'. [ 724.848109][T13079] hsr_slave_0: entered promiscuous mode [ 724.871852][T13079] hsr_slave_1: entered promiscuous mode [ 724.895979][ T5895] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 725.057515][ T5895] usb 5-1: config 0 has no interfaces? [ 725.063218][ T5895] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 725.082928][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.114655][ T5895] usb 5-1: config 0 descriptor?? [ 725.264525][T13167] chnl_net:caif_netlink_parms(): no params data found [ 725.390087][ T12] bridge_slave_1: left allmulticast mode [ 725.397943][ T12] bridge_slave_1: left promiscuous mode [ 725.403688][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.418765][ T12] bridge_slave_0: left allmulticast mode [ 725.424446][ T12] bridge_slave_0: left promiscuous mode [ 725.431588][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.635544][T10950] Bluetooth: hci5: command 0x041b tx timeout [ 725.945254][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.956303][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.966952][ T12] bond0 (unregistering): Released all slaves [ 726.064176][ T5925] usb 5-1: USB disconnect, device number 30 [ 727.036447][T13167] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.050857][T13167] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.062595][T13167] bridge_slave_0: entered allmulticast mode [ 727.071383][T13167] bridge_slave_0: entered promiscuous mode [ 727.083741][T13167] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.092327][T13167] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.106123][T13167] bridge_slave_1: entered allmulticast mode [ 727.113953][T13167] bridge_slave_1: entered promiscuous mode [ 727.726790][T10950] Bluetooth: hci5: command 0x041b tx timeout [ 727.804394][ T12] hsr_slave_0: left promiscuous mode [ 727.813228][T13281] fuse: Bad value for 'fd' [ 727.821997][ T12] hsr_slave_1: left promiscuous mode [ 727.858586][ T12] veth1_macvtap: left promiscuous mode [ 727.864347][ T12] veth0_macvtap: left promiscuous mode [ 727.880253][ T12] veth1_vlan: left promiscuous mode [ 727.891046][ T12] veth0_vlan: left promiscuous mode [ 728.158325][ T5895] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 728.301606][ T5895] usb 1-1: device descriptor read/64, error -71 [ 728.452468][ T12] team0 (unregistering): Port device team_slave_1 removed [ 728.512943][ T12] team0 (unregistering): Port device team_slave_0 removed [ 728.545586][ T5895] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 728.685552][ T5895] usb 1-1: device descriptor read/64, error -71 [ 728.802382][ T5895] usb usb1-port1: attempt power cycle [ 729.030824][T13167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.045974][T13167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.155655][ T5895] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 729.190942][ T5895] usb 1-1: device descriptor read/8, error -71 [ 729.465714][ T5895] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 729.575455][ T5895] usb 1-1: device descriptor read/8, error -71 [ 729.719428][T13167] team0: Port device team_slave_0 added [ 729.745644][ T5895] usb usb1-port1: unable to enumerate USB device [ 729.890055][T13167] team0: Port device team_slave_1 added [ 730.023794][T13306] netlink: 'syz.4.1575': attribute type 3 has an invalid length. [ 730.026171][T13310] IPVS: set_ctl: invalid protocol: 53 0.0.0.0:0 [ 730.119440][T13167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.151846][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.192561][T13167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.247054][T13167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.262298][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.303500][T13167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.305621][ T5925] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 730.320809][ T12] IPVS: stop unused estimator thread 0... [ 730.485393][ T5925] usb 3-1: device descriptor read/64, error -71 [ 730.509414][T13167] hsr_slave_0: entered promiscuous mode [ 730.527249][T13167] hsr_slave_1: entered promiscuous mode [ 730.534471][T13167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 730.555279][T13167] Cannot create hsr debugfs directory [ 730.745399][ T5925] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 730.802923][T13079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 730.854569][T13079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 730.905322][ T5925] usb 3-1: device descriptor read/64, error -71 [ 730.908431][T13079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 730.956722][T13079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 731.026713][ T5925] usb usb3-port1: attempt power cycle [ 731.482355][ T5925] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 731.800997][T13079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.849216][ T5925] usb 3-1: device descriptor read/8, error -71 [ 731.890034][T13167] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 731.936716][T13167] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 731.974684][T13167] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 732.021220][T13167] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 732.072634][T13079] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.096189][ T5925] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 732.126012][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.133173][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.143547][ T5925] usb 3-1: device descriptor read/8, error -71 [ 732.190999][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.198181][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.265781][ T5925] usb usb3-port1: unable to enumerate USB device [ 732.338195][T13079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 732.368995][T13079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 732.638245][T13167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.668240][T13167] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.708973][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.716301][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.783434][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.790791][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.709238][T13079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.926955][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 733.935942][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 733.993572][T13079] veth0_vlan: entered promiscuous mode [ 734.047853][T13079] veth1_vlan: entered promiscuous mode [ 734.167475][T13079] veth0_macvtap: entered promiscuous mode [ 734.397874][T13079] veth1_macvtap: entered promiscuous mode [ 734.464128][T13079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.477221][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'. [ 734.608746][T13079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.663153][T13079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.689586][T13079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.710846][T13079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.726211][T13079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.772574][T13375] netlink: 'syz.0.1586': attribute type 3 has an invalid length. [ 734.864705][T13167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.153429][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.161509][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.382171][ T7480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.412565][ T7480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.429873][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 736.585302][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 736.634751][ T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 736.692017][ T10] usb 1-1: config 0 has no interface number 0 [ 736.744506][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 736.782218][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.815026][ T10] usb 1-1: Product: syz [ 736.825206][ T10] usb 1-1: Manufacturer: syz [ 736.844639][ T10] usb 1-1: SerialNumber: syz [ 736.848330][T13167] veth0_vlan: entered promiscuous mode [ 736.896009][ T10] usb 1-1: config 0 descriptor?? [ 736.919430][ T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 737.161886][ T10] usb 1-1: qt2_attach - failed to power on unit: -71 [ 737.172529][T13167] veth1_vlan: entered promiscuous mode [ 737.221718][ T10] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 737.402832][ T10] usb 1-1: USB disconnect, device number 27 [ 737.895347][ T6271] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.012214][T13426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1594'. [ 738.032643][T13167] veth0_macvtap: entered promiscuous mode [ 738.061405][T13167] veth1_macvtap: entered promiscuous mode [ 738.286658][ T6271] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.300911][T13424] "syz.2.1594" (13424) uses obsolete ecb(arc4) skcipher [ 738.509653][T13167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.610619][ T6271] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.642744][T13167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.671381][T13167] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.692128][T13167] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.703457][T13167] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.716354][T13167] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.854049][ T6271] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.059562][ T7480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.087732][ T7480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.162801][ T6271] bridge_slave_1: left allmulticast mode [ 739.170044][ T6271] bridge_slave_1: left promiscuous mode [ 739.177479][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.189871][ T6271] bridge_slave_0: left allmulticast mode [ 739.195734][ T6271] bridge_slave_0: left promiscuous mode [ 739.201632][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.723755][ T6271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.734729][ T6271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.745442][ T6271] bond0 (unregistering): Released all slaves [ 739.761446][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.783316][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.285773][ T5869] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 740.627802][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 740.662860][T13454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.735625][T13454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.516361][ T5869] usb 3-1: unable to get BOS descriptor or descriptor too short [ 741.537651][ T5869] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 741.561084][ T5869] usb 3-1: can't read configurations, error -71 [ 741.803108][T13470] netlink: 'syz.5.1598': attribute type 3 has an invalid length. [ 741.823209][T13472] overlay: Bad value for 'redirect_dir' [ 741.933505][ T6271] hsr_slave_0: left promiscuous mode [ 741.961673][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 741.972104][ T6271] hsr_slave_1: left promiscuous mode [ 741.974706][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 741.996983][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 742.007365][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 742.007746][ T6271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.027292][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 742.070448][ T6271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.089615][ T6271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.105801][ T6271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.149418][ T6271] veth1_macvtap: left promiscuous mode [ 742.158198][ T6271] veth0_macvtap: left promiscuous mode [ 742.164284][ T6271] veth1_vlan: left promiscuous mode [ 742.175368][ T6271] veth0_vlan: left promiscuous mode [ 742.185900][ T5895] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 742.398659][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 742.511516][ T5895] usb 5-1: config 16 has an invalid descriptor of length 116, skipping remainder of the config [ 742.539321][ T5895] usb 5-1: config 16 interface 0 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 742.627986][ T5895] usb 5-1: config 16 interface 0 has no altsetting 0 [ 742.665593][ T5895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice= 7.23 [ 742.684925][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.116293][T10950] Bluetooth: hci2: command tx timeout [ 745.808810][T13507] netlink: 'syz.2.1606': attribute type 2 has an invalid length. [ 745.976673][ T6271] team0 (unregistering): Port device team_slave_1 removed [ 746.080751][ T6271] team0 (unregistering): Port device team_slave_0 removed [ 746.097007][ T5895] usb 5-1: string descriptor 0 read error: -71 [ 746.119426][ T5895] usb 5-1: USB disconnect, device number 31 [ 746.199229][T10950] Bluetooth: hci2: command tx timeout [ 747.481297][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.712382][T10950] Bluetooth: hci2: command tx timeout [ 749.503150][T13534] sctp: [Deprecated]: syz.5.1613 (pid 13534) Use of struct sctp_assoc_value in delayed_ack socket option. [ 749.503150][T13534] Use struct sctp_sack_info instead [ 750.155472][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 750.648729][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 750.698418][ T10] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 750.720382][T13559] netlink: 'syz.4.1620': attribute type 2 has an invalid length. [ 750.736558][ T10] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 750.745999][ T10] usb 6-1: config 0 has no interface number 1 [ 750.754538][ T10] usb 6-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 750.755519][T10950] Bluetooth: hci2: command tx timeout [ 750.774606][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.784492][T13475] chnl_net:caif_netlink_parms(): no params data found [ 750.885358][ T10] usb 6-1: Product: syz [ 750.889791][ T10] usb 6-1: Manufacturer: syz [ 750.894399][ T10] usb 6-1: SerialNumber: syz [ 750.981741][ T10] usb 6-1: config 0 descriptor?? [ 751.671004][ T10] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 751.770389][ T10] vmk80xx 6-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 751.952662][ T5920] usb 6-1: USB disconnect, device number 2 [ 752.122422][T13575] netlink: 'syz.4.1623': attribute type 3 has an invalid length. [ 752.182219][T13475] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.202087][T13475] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.233492][T13475] bridge_slave_0: entered allmulticast mode [ 752.355021][T13475] bridge_slave_0: entered promiscuous mode [ 752.495849][T13475] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.512091][T13475] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.531282][T13475] bridge_slave_1: entered allmulticast mode [ 752.559587][T13584] sctp: [Deprecated]: syz.0.1625 (pid 13584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 752.559587][T13584] Use struct sctp_sack_info instead [ 752.586807][T13475] bridge_slave_1: entered promiscuous mode [ 752.766176][T13475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.789344][T13475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.994190][T13475] team0: Port device team_slave_0 added [ 753.003584][T13475] team0: Port device team_slave_1 added [ 753.065388][ T5920] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 753.986057][T13475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.993045][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.607271][ T5920] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 754.620405][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 754.638344][T13475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.647472][ T5920] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 754.654468][T13475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.665083][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.713895][T13475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.835379][ T5869] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 754.959516][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.967803][ T5920] usb 3-1: Product: syz [ 754.972047][ T5920] usb 3-1: Manufacturer: syz [ 754.976784][ T5920] usb 3-1: SerialNumber: syz [ 755.043686][ T5920] usb 3-1: config 0 descriptor?? [ 755.350844][T13475] hsr_slave_0: entered promiscuous mode [ 755.507769][T13475] hsr_slave_1: entered promiscuous mode [ 755.539149][T13612] netlink: 'syz.0.1633': attribute type 2 has an invalid length. [ 755.558700][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 756.365914][ T5869] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 756.373560][ T5869] usb 6-1: can't read configurations, error -71 [ 756.547929][T13619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.610324][T13619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.872867][T13626] FAULT_INJECTION: forcing a failure. [ 756.872867][T13626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.998197][T13626] CPU: 0 UID: 0 PID: 13626 Comm: syz.0.1637 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 756.998224][T13626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 756.998236][T13626] Call Trace: [ 756.998244][T13626] [ 756.998252][T13626] dump_stack_lvl+0x189/0x250 [ 756.998284][T13626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.998306][T13626] ? __pfx__printk+0x10/0x10 [ 756.998334][T13626] ? __might_fault+0xb0/0x130 [ 756.998368][T13626] should_fail_ex+0x414/0x560 [ 756.998394][T13626] _copy_from_user+0x2d/0xb0 [ 756.998418][T13626] ___sys_sendmsg+0x158/0x2a0 [ 756.998443][T13626] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.998499][T13626] ? __fget_files+0x2a/0x420 [ 756.998521][T13626] ? __fget_files+0x3a0/0x420 [ 756.998553][T13626] __x64_sys_sendmsg+0x19b/0x260 [ 756.998577][T13626] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 756.998615][T13626] ? do_syscall_64+0xba/0x220 [ 756.998639][T13626] do_syscall_64+0xf6/0x220 [ 756.998659][T13626] ? clear_bhb_loop+0x60/0xb0 [ 756.998680][T13626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.998696][T13626] RIP: 0033:0x7f55f8d8e969 [ 756.998713][T13626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.998726][T13626] RSP: 002b:00007f55f9c76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.998745][T13626] RAX: ffffffffffffffda RBX: 00007f55f8fb5fa0 RCX: 00007f55f8d8e969 [ 756.998757][T13626] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 756.998768][T13626] RBP: 00007f55f9c76090 R08: 0000000000000000 R09: 0000000000000000 [ 756.998778][T13626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.998789][T13626] R13: 0000000000000000 R14: 00007f55f8fb5fa0 R15: 00007fff0b14e748 [ 756.998817][T13626] [ 758.801641][T13633] netlink: 'syz.5.1639': attribute type 3 has an invalid length. [ 760.178654][ T5869] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 760.499568][ T5920] mos7840 3-1:0.0: required endpoints missing [ 760.516309][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 760.524164][ T5869] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 760.672504][ T5920] usb 3-1: USB disconnect, device number 28 [ 760.682682][ T5869] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 760.711321][ T5869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.365454][ T5869] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 761.463928][ T5869] usb 1-1: config 1 has no interface number 0 [ 761.488010][ T5869] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 761.521741][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.591848][T13475] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 761.796290][ T5869] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 762.292700][T13475] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 762.461346][T13475] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 763.921418][ T5869] snd_usb_pod 1-1:1.1: set_interface failed [ 763.927679][ T5869] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 763.937259][ T5869] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 763.948517][ T5869] usb 1-1: USB disconnect, device number 28 [ 764.072398][T13475] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 764.193418][T13679] netlink: 'syz.4.1651': attribute type 3 has an invalid length. [ 764.323212][T13475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.390618][T13475] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.509480][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.516887][ T7478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.531904][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.539144][ T7478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.465424][ T5871] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 766.665866][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 767.863183][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 767.863201][ T30] audit: type=1326 audit(1748371670.665:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13698 comm="syz.0.1660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55f8d8e969 code=0x0 [ 768.149806][ T5871] usb 1-1: unable to get BOS descriptor or descriptor too short [ 768.198514][ T5871] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 768.224357][ T5871] usb 1-1: can't read configurations, error -71 [ 768.345930][T13726] netlink: 'syz.0.1666': attribute type 3 has an invalid length. [ 768.397440][T13475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.008960][T13475] veth0_vlan: entered promiscuous mode [ 769.920187][T13475] veth1_vlan: entered promiscuous mode [ 769.971438][T13742] FAULT_INJECTION: forcing a failure. [ 769.971438][T13742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.015302][T13742] CPU: 1 UID: 0 PID: 13742 Comm: syz.4.1671 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 770.015328][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.015338][T13742] Call Trace: [ 770.015344][T13742] [ 770.015351][T13742] dump_stack_lvl+0x189/0x250 [ 770.015376][T13742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.015396][T13742] ? __pfx__printk+0x10/0x10 [ 770.015419][T13742] ? __might_fault+0xb0/0x130 [ 770.015449][T13742] should_fail_ex+0x414/0x560 [ 770.015472][T13742] _copy_from_user+0x2d/0xb0 [ 770.015487][T13742] __sys_sendto+0x25c/0x520 [ 770.015507][T13742] ? __pfx___sys_sendto+0x10/0x10 [ 770.015522][T13742] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 770.015552][T13742] ? __fget_files+0x3a0/0x420 [ 770.015586][T13742] ? ksys_write+0x22a/0x250 [ 770.015604][T13742] ? rcu_is_watching+0x15/0xb0 [ 770.015632][T13742] __x64_sys_sendto+0xde/0x100 [ 770.015654][T13742] do_syscall_64+0xf6/0x220 [ 770.015674][T13742] ? clear_bhb_loop+0x60/0xb0 [ 770.015693][T13742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.015708][T13742] RIP: 0033:0x7f5466b8e969 [ 770.015724][T13742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.015737][T13742] RSP: 002b:00007f54649f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 770.015756][T13742] RAX: ffffffffffffffda RBX: 00007f5466db5fa0 RCX: 00007f5466b8e969 [ 770.015769][T13742] RDX: 00000000000100a6 RSI: 0000200000000180 RDI: 0000000000000004 [ 770.015777][T13742] RBP: 00007f54649f6090 R08: 0000200000000140 R09: 0000000000000014 [ 770.015788][T13742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.015797][T13742] R13: 0000000000000000 R14: 00007f5466db5fa0 R15: 00007ffe3483a238 [ 770.015822][T13742] [ 770.070220][T13475] veth0_macvtap: entered promiscuous mode [ 771.459821][T13475] veth1_macvtap: entered promiscuous mode [ 771.516697][T13475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.606101][T13475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.653222][T13475] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.878118][T13475] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.911394][T13475] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.921544][T13475] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.568979][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.195748][T13768] 9pnet_fd: Insufficient options for proto=fd [ 773.225659][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.243745][T13763] nftables ruleset with unbound set [ 773.262049][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.270536][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.682767][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 773.905553][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 774.488466][ T10] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 776.486077][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 776.532016][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.817080][ T10] usb 1-1: config 0 has no interface number 0 [ 776.827648][ T10] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 776.837430][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.848430][ T10] usb 1-1: config 0 descriptor?? [ 776.855944][ T10] usb 1-1: can't set config #0, error -71 [ 776.863613][ T10] usb 1-1: USB disconnect, device number 31 [ 778.427293][T13801] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 778.434833][T13801] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 778.527681][ T3542] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.651309][ T3542] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.793183][ T3542] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.932825][ T3542] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.249251][ T3542] bridge_slave_1: left allmulticast mode [ 779.255031][ T3542] bridge_slave_1: left promiscuous mode [ 779.274924][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.300820][ T3542] bridge_slave_0: left allmulticast mode [ 779.325330][ T3542] bridge_slave_0: left promiscuous mode [ 779.331227][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.906099][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.940419][T13843] 9pnet_fd: Insufficient options for proto=fd [ 781.975759][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.037248][ T3542] bond0 (unregistering): Released all slaves [ 782.166370][T13863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1694'. [ 782.205485][T13863] unsupported nlmsg_type 40 [ 782.229160][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'. [ 782.481481][T13783] Bluetooth: hci0: unexpected event for opcode 0x200a [ 782.485228][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 782.837045][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.840015][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 782.851847][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.860463][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 782.867823][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 782.881809][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.885783][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 782.908967][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 782.923384][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 783.357817][ T10] usb 6-1: config 0 descriptor?? [ 783.487218][T13883] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 783.613412][T13883] qnx6: wrong signature (magic) in superblock #1. [ 783.776644][T13883] qnx6: unable to read the first superblock [ 785.037391][ T5903] usb 6-1: USB disconnect, device number 5 [ 785.147038][ T3542] hsr_slave_0: left promiscuous mode [ 785.155532][ T5826] Bluetooth: hci2: command tx timeout [ 785.178992][ T3542] hsr_slave_1: left promiscuous mode [ 785.222294][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.234837][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.253716][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.261749][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.304086][ T3542] veth1_macvtap: left promiscuous mode [ 785.316098][ T3542] veth0_macvtap: left promiscuous mode [ 785.325252][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 785.343760][ T3542] veth1_vlan: left promiscuous mode [ 785.349873][ T3542] veth0_vlan: left promiscuous mode [ 785.364774][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 785.508085][ T10] usb 1-1: config 0 has no interfaces? [ 785.513665][ T10] usb 1-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 785.565269][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.582343][ T10] usb 1-1: config 0 descriptor?? [ 785.824466][T13894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1700'. [ 786.202911][ T5903] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 786.344418][ T5903] usb 6-1: device descriptor read/64, error -71 [ 786.534607][ T3542] team0 (unregistering): Port device team_slave_1 removed [ 786.585551][ T5903] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 786.597369][ T3542] team0 (unregistering): Port device team_slave_0 removed [ 786.740940][ T5903] usb 6-1: device descriptor read/64, error -71 [ 786.864887][ T5903] usb usb6-port1: attempt power cycle [ 787.245529][ T5826] Bluetooth: hci2: command tx timeout [ 787.266314][ T5903] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 787.309313][ T5903] usb 6-1: device descriptor read/8, error -71 [ 787.625280][ T5903] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 787.652741][ T10] usb 1-1: USB disconnect, device number 32 [ 787.667527][ T5903] usb 6-1: device descriptor read/8, error -71 [ 787.825681][ T5903] usb usb6-port1: unable to enumerate USB device [ 788.476533][T13875] chnl_net:caif_netlink_parms(): no params data found [ 789.345655][ T5826] Bluetooth: hci2: command tx timeout [ 790.028153][T13967] netlink: 'syz.4.1710': attribute type 10 has an invalid length. [ 790.282503][T13967] team0: Device ipvlan1 failed to register rx_handler [ 790.464506][T13967] syz.4.1710 (13967) used greatest stack depth: 18952 bytes left [ 790.649353][T13875] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.675393][T13875] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.682960][T13875] bridge_slave_0: entered allmulticast mode [ 790.790991][T13975] overlayfs: missing 'lowerdir' [ 790.912333][T13875] bridge_slave_0: entered promiscuous mode [ 790.921181][T13875] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.928628][T13875] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.936038][T13875] bridge_slave_1: entered allmulticast mode [ 790.943807][T13875] bridge_slave_1: entered promiscuous mode [ 791.557637][ T5826] Bluetooth: hci2: command tx timeout [ 791.772590][T13875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.817359][T13875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.110852][T13875] team0: Port device team_slave_0 added [ 792.668789][T13875] team0: Port device team_slave_1 added [ 792.898322][T13875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.936169][T13875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.023832][T13875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.059947][T13875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.084234][T13875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.145222][T13875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.361182][T13875] hsr_slave_0: entered promiscuous mode [ 793.396297][T13875] hsr_slave_1: entered promiscuous mode [ 794.895681][T14030] dns_resolver: Unsupported content type (254) [ 795.376087][T14016] delete_channel: no stack [ 795.425437][ T5920] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 795.804358][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.990741][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.061504][ T5920] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 796.129867][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.362654][ T5920] usb 6-1: config 0 descriptor?? [ 797.364104][T14021] binder: BINDER_SET_CONTEXT_MGR already set [ 797.380790][T14021] binder: 14020:14021 ioctl 4018620d 200000000040 returned -16 [ 797.401025][T14021] binder: 14020:14021 ioctl c0306201 2000000003c0 returned -14 [ 797.453183][T14021] bridge0: entered allmulticast mode [ 797.481076][T14021] pim6reg: entered allmulticast mode [ 797.665301][ T5895] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 797.825428][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 797.830641][ T5895] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 797.830668][ T5895] usb 5-1: config 0 has no interface number 0 [ 797.832864][ T5895] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 797.929823][ T5920] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 797.940672][ T5920] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 797.947613][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.947637][ T5895] usb 5-1: Product: syz [ 797.947652][ T5895] usb 5-1: Manufacturer: syz [ 797.947665][ T5895] usb 5-1: SerialNumber: syz [ 797.959153][ T5895] usb 5-1: config 0 descriptor?? [ 797.992484][ T5895] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 798.072097][T13875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 798.130163][T13875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 798.144868][T14039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.158637][T14039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.175773][ T5871] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 798.220870][T14040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.229249][T14040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.331489][ T5871] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 798.331562][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 798.331664][ T5871] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 798.331726][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.337778][ T5871] usb 1-1: config 0 descriptor?? [ 798.348643][T13875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 798.428367][T13875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 798.720210][T13875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.761985][T13875] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.766845][ T5871] hid-thrustmaster 0003:044F:B65D.0007: hidraw1: USB HID v1.03 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 798.767125][ T5871] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints? [ 798.790852][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.790975][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.810850][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.810967][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.854158][ T5895] gspca_spca1528: reg_w err -71 [ 798.865728][ T5895] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 798.868431][ T5895] usb 5-1: USB disconnect, device number 32 [ 798.960830][ C0] hid-thrustmaster 0003:044F:B65D.0007: Unknown packet type 0x0, unable to proceed further with wheel init [ 798.982118][T13875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 798.982177][T13875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 799.329774][ T5920] cp2112 0003:10C4:EA90.0006: error requesting version [ 799.372099][ T5920] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 799.422089][ T5920] usb 6-1: USB disconnect, device number 10 [ 799.545842][T14075] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 799.552732][T14075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 799.617994][T14075] vhci_hcd vhci_hcd.0: Device attached [ 799.643549][T13875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.407192][ T5895] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 800.499665][ T5920] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 800.721064][ T5920] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 800.743238][ T5920] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 800.752751][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.785508][T13875] veth0_vlan: entered promiscuous mode [ 800.856882][ T5920] usb 6-1: config 0 descriptor?? [ 801.028186][T13875] veth1_vlan: entered promiscuous mode [ 801.138138][ T5871] usb 1-1: USB disconnect, device number 33 [ 801.623609][T13875] veth0_macvtap: entered promiscuous mode [ 802.182979][T13875] veth1_macvtap: entered promiscuous mode [ 802.515500][T13783] Bluetooth: hci2: command 0x0405 tx timeout [ 803.291187][T13875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.714149][T13875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.922596][T13875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.503718][T13875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.512908][T13875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.522150][T13875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.664655][ T43] usb 6-1: USB disconnect, device number 11 [ 804.670012][T14076] vhci_hcd: connection reset by peer [ 804.731025][ T2947] vhci_hcd: stop threads [ 804.768757][ T2947] vhci_hcd: release socket [ 804.816932][ T2947] vhci_hcd: disconnect device [ 804.888749][T13850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.965789][T13850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.625242][ T5895] vhci_hcd: vhci_device speed not set [ 806.010256][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.077798][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.685726][ T5895] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 808.136406][ T5895] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 808.197793][ T5895] usb 3-1: config 0 has no interface number 0 [ 808.204053][ T5895] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 808.255716][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.313806][ T5895] usb 3-1: config 0 descriptor?? [ 808.360058][ T5895] usb 3-1: selecting invalid altsetting 1 [ 808.391831][ T5895] dvb_ttusb_budget: ttusb_init_controller: error [ 808.438428][ T5895] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 808.478138][ T3542] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.604168][T14150] pim6reg: entered allmulticast mode [ 808.644359][ T5895] DVB: Unable to find symbol cx22700_attach() [ 808.659301][T14150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.689734][T14150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.702314][ T3542] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.773455][ T5895] DVB: Unable to find symbol tda10046_attach() [ 808.781653][ T5895] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 808.801321][ T5895] usb 3-1: USB disconnect, device number 29 [ 808.842019][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.877182][ T3542] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.941519][ T3542] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.142314][ T3542] bridge_slave_1: left allmulticast mode [ 809.154764][ T3542] bridge_slave_1: left promiscuous mode [ 809.162594][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.182803][ T3542] bridge_slave_0: left allmulticast mode [ 809.189069][ T3542] bridge_slave_0: left promiscuous mode [ 809.194973][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.487117][ T5826] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 809.649237][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.661087][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.671609][ T3542] bond0 (unregistering): Released all slaves [ 810.070113][ T3542] hsr_slave_0: left promiscuous mode [ 810.095248][ T3542] hsr_slave_1: left promiscuous mode [ 810.102457][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.123166][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.143686][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.154971][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.186247][ T3542] veth1_macvtap: left promiscuous mode [ 810.191924][ T3542] veth0_macvtap: left promiscuous mode [ 810.197750][ T3542] veth1_vlan: left promiscuous mode [ 810.204272][ T3542] veth0_vlan: left promiscuous mode [ 810.634861][T14219] FAULT_INJECTION: forcing a failure. [ 810.634861][T14219] name failslab, interval 1, probability 0, space 0, times 0 [ 811.359532][T14219] CPU: 1 UID: 0 PID: 14219 Comm: syz.0.1753 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 811.359560][T14219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 811.359570][T14219] Call Trace: [ 811.359577][T14219] [ 811.359585][T14219] dump_stack_lvl+0x189/0x250 [ 811.359613][T14219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.359634][T14219] ? __pfx__printk+0x10/0x10 [ 811.359661][T14219] ? __pfx___might_resched+0x10/0x10 [ 811.359678][T14219] ? fs_reclaim_acquire+0x7d/0x100 [ 811.359707][T14219] should_fail_ex+0x414/0x560 [ 811.359733][T14219] should_failslab+0xa8/0x100 [ 811.359756][T14219] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 811.359776][T14219] ? __d_alloc+0x31/0x6f0 [ 811.359796][T14219] __d_alloc+0x31/0x6f0 [ 811.359810][T14219] ? inode_set_ctime_current+0x277/0xb40 [ 811.359830][T14219] d_alloc_pseudo+0x1f/0xb0 [ 811.359847][T14219] alloc_file_pseudo+0xcc/0x210 [ 811.359867][T14219] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 811.359891][T14219] ? alloc_anon_inode+0x1c1/0x360 [ 811.359916][T14219] aio_setup_ring+0x1e7/0xd80 [ 811.359946][T14219] ? pcpu_alloc_noprof+0xfdb/0x16b0 [ 811.359972][T14219] ? __pfx_aio_setup_ring+0x10/0x10 [ 811.360004][T14219] ioctx_alloc+0x32f/0x7a0 [ 811.360035][T14219] __se_sys_io_setup+0x7b/0x1a0 [ 811.360057][T14219] do_syscall_64+0xf6/0x220 [ 811.360078][T14219] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 811.360095][T14219] ? clear_bhb_loop+0x60/0xb0 [ 811.360116][T14219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.360136][T14219] RIP: 0033:0x7f55f8d8e969 [ 811.360153][T14219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.360167][T14219] RSP: 002b:00007f55f9c55038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 811.360193][T14219] RAX: ffffffffffffffda RBX: 00007f55f8fb6080 RCX: 00007f55f8d8e969 [ 811.360206][T14219] RDX: 0000000000000000 RSI: 0000200000001740 RDI: 0000000000000004 [ 811.360217][T14219] RBP: 00007f55f9c55090 R08: 0000000000000000 R09: 0000000000000000 [ 811.360227][T14219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.360237][T14219] R13: 0000000000000001 R14: 00007f55f8fb6080 R15: 00007fff0b14e748 [ 811.360267][T14219] [ 811.542264][ T5903] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 812.115376][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 812.159289][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 812.229931][ T5903] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 812.299345][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.339078][ T5903] usb 5-1: Product: syz [ 812.345394][ T5903] usb 5-1: Manufacturer: syz [ 812.371979][ T5903] usb 5-1: SerialNumber: syz [ 812.426152][ T5903] usb 5-1: config 0 descriptor?? [ 812.473589][ T5903] hub 5-1:0.0: bad descriptor, ignoring hub [ 813.500351][ T5903] hub 5-1:0.0: probe with driver hub failed with error -5 [ 813.764024][T13783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 813.780640][T13783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 813.798567][T13783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 813.827772][T13783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 813.837441][T13783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 813.938980][ T5903] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input39 [ 814.205267][ T5903] usb 5-1: USB disconnect, device number 33 [ 814.221115][T14224] futex_wake_op: syz.5.1757 tries to shift op by 144; fix this program [ 815.250011][T14259] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 815.257906][T14259] UDF-fs: Scanning with blocksize 512 failed [ 815.268354][T14259] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 815.275967][T14259] UDF-fs: Scanning with blocksize 1024 failed [ 815.322681][T14259] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 815.333225][T14259] UDF-fs: Scanning with blocksize 2048 failed [ 815.342127][T14259] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 815.350368][T14259] UDF-fs: Scanning with blocksize 4096 failed [ 815.875565][T13783] Bluetooth: hci2: command tx timeout [ 817.856844][T14284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1767'. [ 818.186083][T14284] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 818.188926][T14284] block (null): Could not allocate knbd recv work queue. [ 818.206671][T14284] nbd: failed to add new device [ 818.212531][T14283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1767'. [ 818.223571][T14283] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 818.223644][T14283] block (null): Could not allocate knbd recv work queue. [ 818.240250][T14283] nbd: failed to add new device [ 818.380547][T13783] Bluetooth: hci2: command tx timeout [ 820.446360][T13783] Bluetooth: hci2: command tx timeout [ 822.564045][T13783] Bluetooth: hci2: command tx timeout [ 823.257015][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 823.266204][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 823.922661][T14336] netlink: 'syz.2.1779': attribute type 1 has an invalid length. [ 824.533254][ T3542] team0 (unregistering): Port device team_slave_1 removed [ 824.704370][ T3542] team0 (unregistering): Port device team_slave_0 removed [ 826.014552][T14357] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 826.048101][T14357] qnx6: wrong signature (magic) in superblock #1. [ 826.060396][T14357] qnx6: unable to read the first superblock [ 828.685601][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 828.929111][T14372] can: request_module (can-proto-0) failed. [ 829.030220][ T43] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 829.039533][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.391796][ T43] usb 3-1: config 0 descriptor?? [ 829.424147][ T43] cp210x 3-1:0.0: cp210x converter detected [ 829.718183][T14236] chnl_net:caif_netlink_parms(): no params data found [ 829.924001][ T43] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 830.001477][ T43] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 830.230803][ T43] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 830.386704][ T43] usb 3-1: cp210x converter now attached to ttyUSB0 [ 830.681427][ T43] usb 3-1: USB disconnect, device number 30 [ 830.839620][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 830.855511][ T43] cp210x 3-1:0.0: device disconnected [ 832.097396][T14398] fuse: Bad value for 'fd' [ 832.842571][T14417] hsr0: entered allmulticast mode [ 832.860164][T14428] netlink: 'syz.0.1799': attribute type 1 has an invalid length. [ 832.881476][T14417] hsr_slave_0: entered allmulticast mode [ 833.001399][T14417] hsr_slave_1: entered allmulticast mode [ 833.489601][T14426] hsr_slave_0: left promiscuous mode [ 833.546557][T14426] hsr_slave_1: left promiscuous mode [ 833.619695][T14426] hsr0 (unregistering): left allmulticast mode [ 833.739568][ T5869] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 833.990297][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 834.098665][T14444] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 834.154197][T14444] qnx6: wrong signature (magic) in superblock #1. [ 834.302732][ T5869] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 834.313673][T14444] qnx6: unable to read the first superblock [ 834.461829][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 834.524418][T14443] netlink: 'syz.0.1802': attribute type 7 has an invalid length. [ 834.684511][T14443] : entered promiscuous mode [ 834.796150][T14236] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.841584][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.873507][T14236] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.884738][ T5869] usb 3-1: Product: syz [ 834.997336][ T5869] usb 3-1: Manufacturer: syz [ 835.001972][ T5869] usb 3-1: SerialNumber: syz [ 835.006902][T14236] bridge_slave_0: entered allmulticast mode [ 835.014662][T14236] bridge_slave_0: entered promiscuous mode [ 835.025004][T14236] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.032356][T14236] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.107413][ T5869] usb 3-1: config 0 descriptor?? [ 835.113236][T14236] bridge_slave_1: entered allmulticast mode [ 835.138242][ T5869] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 835.245568][T14236] bridge_slave_1: entered promiscuous mode [ 835.292607][T13167] cgroup: fork rejected by pids controller in /syz5 [ 835.995397][T14236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.999711][ T5869] gspca_zc3xx: reg_w_i err -71 [ 836.562746][T14236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.915441][ T5869] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 837.921920][ T5869] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 837.945480][ T5869] usb 3-1: USB disconnect, device number 31 [ 838.124958][T14236] team0: Port device team_slave_0 added [ 838.208511][T14236] team0: Port device team_slave_1 added [ 838.299217][T14482] netlink: 'syz.0.1812': attribute type 1 has an invalid length. [ 838.341564][T14236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.362976][T14236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.419529][T14236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.434811][T14236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.442226][T14236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.471835][T14236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.535238][ T5869] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 838.590888][T14236] hsr_slave_0: entered promiscuous mode [ 838.617570][T14236] hsr_slave_1: entered promiscuous mode [ 838.697741][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 838.711271][ T5869] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 838.742105][ T5869] usb 3-1: config 0 has no interface number 0 [ 838.929682][T14497] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 838.944784][ T5869] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 839.057403][T14497] qnx6: wrong signature (magic) in superblock #1. [ 839.271185][T14497] qnx6: unable to read the first superblock [ 839.782323][T14496] netlink: 'syz.4.1816': attribute type 7 has an invalid length. [ 840.307892][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.316020][ T5869] usb 3-1: Product: syz [ 840.320206][ T5869] usb 3-1: Manufacturer: syz [ 840.324817][ T5869] usb 3-1: SerialNumber: syz [ 840.420495][ T5869] usb 3-1: config 0 descriptor?? [ 840.438157][ T5869] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 840.642897][ T5869] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 840.718052][ T5869] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 840.829370][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 840.858048][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 840.866752][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 840.875000][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 840.885289][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 842.554585][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 842.775279][ T5869] usb 3-1: USB disconnect, device number 32 [ 842.792480][ T5869] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 842.876304][T14531] fuse: Bad value for 'fd' [ 842.903000][ T5869] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 842.915481][ T5826] Bluetooth: hci4: command tx timeout [ 842.979596][ T5869] quatech2 3-1:0.51: device disconnected [ 843.862459][T14511] chnl_net:caif_netlink_parms(): no params data found [ 844.996866][ T5826] Bluetooth: hci4: command tx timeout [ 845.094308][T14236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 845.137163][T14236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 845.244940][T14236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 845.486569][T14563] netlink: 'syz.2.1825': attribute type 1 has an invalid length. [ 845.531315][T14236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 845.595404][T14511] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.644363][T14511] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.814069][T14511] bridge_slave_0: entered allmulticast mode [ 845.824861][T14511] bridge_slave_0: entered promiscuous mode [ 845.842093][T14511] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.857650][T14511] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.868395][T14511] bridge_slave_1: entered allmulticast mode [ 845.878466][T14511] bridge_slave_1: entered promiscuous mode [ 845.967761][T14511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.015879][T14511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.151984][T14511] team0: Port device team_slave_0 added [ 846.208313][T14511] team0: Port device team_slave_1 added [ 846.354239][T14511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.388503][T14511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.414416][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.749429][T14511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.777286][T14511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.784287][T14511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.027777][T14511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.086596][ T5826] Bluetooth: hci4: command tx timeout [ 847.855575][T14594] fuse: Bad value for 'fd' [ 847.917903][T14511] hsr_slave_0: entered promiscuous mode [ 847.924585][T14511] hsr_slave_1: entered promiscuous mode [ 848.007334][T14511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 848.020281][T14511] Cannot create hsr debugfs directory [ 848.235593][ T5895] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 848.415571][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 848.454162][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.567505][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.675566][ T5895] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 848.720684][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.155017][ T5895] usb 1-1: config 0 descriptor?? [ 849.155625][ T5826] Bluetooth: hci4: command tx timeout [ 849.232070][T14236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.339607][T14236] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.411071][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.418311][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.428704][T14617] netlink: 'syz.2.1837': attribute type 1 has an invalid length. [ 849.669455][ T5895] greenasia 0003:0E8F:0012.0008: item fetching failed at offset 0/3 [ 849.807009][T14511] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.918798][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.926055][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.941243][ T5895] greenasia 0003:0E8F:0012.0008: parse failed [ 849.947863][ T5895] greenasia 0003:0E8F:0012.0008: probe with driver greenasia failed with error -22 [ 850.162067][T14511] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.128341][ T5871] usb 1-1: USB disconnect, device number 34 [ 851.272893][T14511] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.379736][T14650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1844'. [ 851.695171][T14511] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.967520][T14661] fuse: Bad value for 'fd' [ 853.551103][T14511] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 853.778675][T14511] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 853.850320][T14511] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 853.882183][T14511] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 854.072787][T14236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.102262][T14690] netlink: 'syz.0.1849': attribute type 1 has an invalid length. [ 854.290490][T14511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.351106][T14236] veth0_vlan: entered promiscuous mode [ 854.392379][T14511] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.442427][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.449742][ T7478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.480828][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.488034][ T7478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.722970][ T5871] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 854.836244][T14236] veth1_vlan: entered promiscuous mode [ 854.891378][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.922761][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.941194][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 854.978618][ T5871] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 855.475764][T13783] Bluetooth: hci4: command 0x0405 tx timeout [ 855.522445][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.540410][ T5871] usb 5-1: config 0 descriptor?? [ 855.551374][ T5871] hub 5-1:0.0: USB hub found [ 855.631569][T14511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 855.757186][ T5871] hub 5-1:0.0: 14 ports detected [ 855.763016][ T5871] hub 5-1:0.0: insufficient power available to use all downstream ports [ 855.778720][T14236] veth0_macvtap: entered promiscuous mode [ 855.822916][T14236] veth1_macvtap: entered promiscuous mode [ 855.909219][T14236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.948823][T14236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.015258][T14695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.143335][T14695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.469172][T14236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.513580][T14236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.545377][T14236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.554130][T14236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.712796][ T5871] usb 5-1: USB disconnect, device number 34 [ 857.143152][T14731] fuse: Bad value for 'fd' [ 857.333591][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.365586][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.462904][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.481607][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.526929][T14511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.587949][T14739] FAULT_INJECTION: forcing a failure. [ 857.587949][T14739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.651726][T14739] CPU: 0 UID: 0 PID: 14739 Comm: syz.0.1861 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 857.651753][T14739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 857.651764][T14739] Call Trace: [ 857.651772][T14739] [ 857.651780][T14739] dump_stack_lvl+0x189/0x250 [ 857.651812][T14739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 857.651834][T14739] ? __pfx__printk+0x10/0x10 [ 857.651857][T14739] ? __might_fault+0xb0/0x130 [ 857.651891][T14739] should_fail_ex+0x414/0x560 [ 857.651916][T14739] _copy_from_user+0x2d/0xb0 [ 857.651934][T14739] ___sys_sendmsg+0x158/0x2a0 [ 857.651959][T14739] ? __pfx____sys_sendmsg+0x10/0x10 [ 857.652015][T14739] ? __fget_files+0x2a/0x420 [ 857.652038][T14739] ? __fget_files+0x3a0/0x420 [ 857.652070][T14739] __x64_sys_sendmsg+0x19b/0x260 [ 857.652094][T14739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 857.652129][T14739] ? do_syscall_64+0xba/0x220 [ 857.652152][T14739] do_syscall_64+0xf6/0x220 [ 857.652172][T14739] ? clear_bhb_loop+0x60/0xb0 [ 857.652193][T14739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.652210][T14739] RIP: 0033:0x7f55f8d8e969 [ 857.652226][T14739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.652239][T14739] RSP: 002b:00007f55f9c76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.652257][T14739] RAX: ffffffffffffffda RBX: 00007f55f8fb5fa0 RCX: 00007f55f8d8e969 [ 857.652270][T14739] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 857.652281][T14739] RBP: 00007f55f9c76090 R08: 0000000000000000 R09: 0000000000000000 [ 857.652306][T14739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.652316][T14739] R13: 0000000000000000 R14: 00007f55f8fb5fa0 R15: 00007fff0b14e748 [ 857.652344][T14739] [ 858.530638][ T30] audit: type=1326 audit(1748371761.345:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14767 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3a78e969 code=0x7ffc0000 [ 859.259061][ T30] audit: type=1326 audit(1748371761.345:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14767 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3a78e969 code=0x7ffc0000 [ 859.288678][ T30] audit: type=1326 audit(1748371761.345:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14767 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f1b3a78e969 code=0x7ffc0000 [ 859.311451][ T30] audit: type=1326 audit(1748371761.345:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14767 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3a78e969 code=0x7ffc0000 [ 859.398529][ T30] audit: type=1326 audit(1748371761.345:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14767 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3a78e969 code=0x7ffc0000 [ 860.112451][T14779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1869'. [ 860.129719][ T7478] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.238845][T14511] veth0_vlan: entered promiscuous mode [ 860.364613][ T7478] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.589034][ T7478] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.686950][T14511] veth1_vlan: entered promiscuous mode [ 860.815905][ T7478] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.951619][T14511] veth0_macvtap: entered promiscuous mode [ 860.984180][T14511] veth1_macvtap: entered promiscuous mode [ 861.149729][T14511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.269349][T14511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.337435][T14511] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.375267][T14511] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.384026][T14511] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.397211][T14511] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.411452][ T7478] bridge_slave_1: left allmulticast mode [ 861.418799][ T7478] bridge_slave_1: left promiscuous mode [ 861.424586][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.439304][ T7478] bridge_slave_0: left allmulticast mode [ 861.444996][ T7478] bridge_slave_0: left promiscuous mode [ 861.451267][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.878880][ T7478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.889868][ T7478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.900262][ T7478] bond0 (unregistering): Released all slaves [ 862.091445][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.107925][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.160852][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.169245][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.316976][ T7478] hsr_slave_0: left promiscuous mode [ 862.324996][ T7478] hsr_slave_1: left promiscuous mode [ 862.331494][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.339411][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.348190][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.368267][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.393972][ T7478] veth1_macvtap: left promiscuous mode [ 862.399833][ T7478] veth0_macvtap: left promiscuous mode [ 862.405966][ T7478] veth1_vlan: left promiscuous mode [ 862.411331][ T7478] veth0_vlan: left promiscuous mode [ 862.799970][T14809] fuse: Bad value for 'fd' [ 864.823678][T13783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 864.886029][T13783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 864.912514][T13783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 864.944581][T13783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 864.973734][T13783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 865.275436][T14836] FAULT_INJECTION: forcing a failure. [ 865.275436][T14836] name failslab, interval 1, probability 0, space 0, times 0 [ 865.288302][T14836] CPU: 1 UID: 0 PID: 14836 Comm: syz.4.1876 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 865.288326][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 865.288338][T14836] Call Trace: [ 865.288347][T14836] [ 865.288356][T14836] dump_stack_lvl+0x189/0x250 [ 865.288387][T14836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.288410][T14836] ? __pfx__printk+0x10/0x10 [ 865.288441][T14836] ? __pfx___might_resched+0x10/0x10 [ 865.288461][T14836] ? fs_reclaim_acquire+0x7d/0x100 [ 865.288491][T14836] should_fail_ex+0x414/0x560 [ 865.288517][T14836] should_failslab+0xa8/0x100 [ 865.288542][T14836] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 865.288564][T14836] ? __d_alloc+0x31/0x6f0 [ 865.288585][T14836] __d_alloc+0x31/0x6f0 [ 865.288608][T14836] d_alloc_pseudo+0x1f/0xb0 [ 865.288626][T14836] alloc_file_pseudo+0xcc/0x210 [ 865.288646][T14836] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 865.288661][T14836] ? __local_bh_enable_ip+0x12d/0x1c0 [ 865.288702][T14836] anon_inode_getfile+0xc5/0x1a0 [ 865.288730][T14836] bpf_link_prime+0xfc/0x220 [ 865.288757][T14836] bpf_raw_tp_link_attach+0x4a5/0x6b0 [ 865.288783][T14836] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 865.288816][T14836] ? __fget_files+0x2a/0x420 [ 865.288848][T14836] bpf_raw_tracepoint_open+0x19b/0x1f0 [ 865.288869][T14836] __sys_bpf+0x3cd/0x860 [ 865.288888][T14836] ? __pfx___sys_bpf+0x10/0x10 [ 865.288933][T14836] __x64_sys_bpf+0x7c/0x90 [ 865.288957][T14836] do_syscall_64+0xf6/0x220 [ 865.288977][T14836] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 865.288994][T14836] ? clear_bhb_loop+0x60/0xb0 [ 865.289015][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.289032][T14836] RIP: 0033:0x7f5466b8e969 [ 865.289048][T14836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.289062][T14836] RSP: 002b:00007f54649b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 865.289081][T14836] RAX: ffffffffffffffda RBX: 00007f5466db6160 RCX: 00007f5466b8e969 [ 865.289094][T14836] RDX: 0000000000000018 RSI: 0000200000000000 RDI: 0000000000000011 [ 865.289105][T14836] RBP: 00007f54649b4090 R08: 0000000000000000 R09: 0000000000000000 [ 865.289119][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.289130][T14836] R13: 0000000000000000 R14: 00007f5466db6160 R15: 00007ffe3483a238 [ 865.289159][T14836] [ 865.616339][T14838] sctp: [Deprecated]: syz.5.1877 (pid 14838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 865.616339][T14838] Use struct sctp_sack_info instead [ 866.373383][T14842] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 866.487602][T14842] qnx6: wrong signature (magic) in superblock #1. [ 866.651878][T14842] qnx6: unable to read the first superblock [ 866.975354][ T5895] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 867.030187][ T7478] team0 (unregistering): Port device team_slave_1 removed [ 867.238921][T13783] Bluetooth: hci2: command tx timeout [ 867.694048][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 867.712358][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.742420][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.757532][ T7478] team0 (unregistering): Port device team_slave_0 removed [ 867.760409][ T5895] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 867.774580][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.813904][ T5895] usb 6-1: config 0 descriptor?? [ 868.711949][ T5895] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 869.335541][T13783] Bluetooth: hci2: command tx timeout [ 870.285694][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.045327][ T5871] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 871.245005][T14886] sctp: [Deprecated]: syz.5.1889 (pid 14886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.245005][T14886] Use struct sctp_sack_info instead [ 871.976476][ T5895] usb 6-1: USB disconnect, device number 12 [ 871.985780][ T5871] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.005300][ T5871] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 872.022344][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 872.035548][ T5871] usb 1-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 872.044654][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.047508][T13783] Bluetooth: hci2: command tx timeout [ 872.058717][ T5871] usb 1-1: config 0 descriptor?? [ 872.393186][ T5871] usb 1-1: string descriptor 0 read error: -71 [ 872.421771][ T5871] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input41 [ 872.477473][T14826] chnl_net:caif_netlink_parms(): no params data found [ 872.489861][ T5172] bcm5974 1-1:0.0: could not read from device [ 872.781784][ T5172] bcm5974 1-1:0.0: could not read from device [ 872.863990][T14503] bcm5974 1-1:0.0: could not read from device [ 872.875531][ T5871] usb 1-1: USB disconnect, device number 35 [ 873.011525][ T5172] bcm5974 1-1:0.0: could not read from device [ 873.268313][T14503] udevd[14503]: Error opening device "/dev/input/event4": No such file or directory [ 873.278024][T14503] udevd[14503]: Unable to EVIOCGABS device "/dev/input/event4" [ 873.355389][T14503] udevd[14503]: Unable to EVIOCGABS device "/dev/input/event4" [ 873.363243][T14503] udevd[14503]: Unable to EVIOCGABS device "/dev/input/event4" [ 873.418519][T14503] udevd[14503]: Unable to EVIOCGABS device "/dev/input/event4" [ 873.789332][T14826] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.839981][T14826] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.894005][T14826] bridge_slave_0: entered allmulticast mode [ 874.127728][T13783] Bluetooth: hci2: command tx timeout [ 874.583662][T14826] bridge_slave_0: entered promiscuous mode [ 874.608295][T14826] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.620276][T14826] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.627653][T14826] bridge_slave_1: entered allmulticast mode [ 874.635529][T14826] bridge_slave_1: entered promiscuous mode [ 874.780221][T14826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.883192][T14826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.086995][T14826] team0: Port device team_slave_0 added [ 876.232290][T14826] team0: Port device team_slave_1 added [ 876.476799][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1896'. [ 876.485793][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1896'. [ 877.457601][T14826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.488585][T14826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.514597][ C0] vkms_vblank_simulate: vblank timer overrun [ 878.143819][T14826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.267290][T14826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.312667][T14826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.370019][T14826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.098361][T14972] netlink: 'syz.0.1900': attribute type 10 has an invalid length. [ 879.140604][T14972] team0: Device ipvlan1 failed to register rx_handler [ 879.292180][T14970] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 879.725605][T14970] qnx6: wrong signature (magic) in superblock #1. [ 879.733313][T14970] qnx6: unable to read the first superblock [ 879.813464][T14826] hsr_slave_0: entered promiscuous mode [ 879.836956][T14826] hsr_slave_1: entered promiscuous mode [ 880.028564][T14980] netlink: 'syz.0.1902': attribute type 2 has an invalid length. [ 881.201748][T14976] syz.0.1902 (14976): drop_caches: 2 [ 882.984205][T15016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1909'. [ 883.090176][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1909'. [ 883.099240][T15016] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1909'. [ 884.114557][T15016] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 884.114557][T15016] program syz.5.1909 not setting count and/or reply_len properly [ 884.920054][T15025] netlink: 'syz.4.1911': attribute type 1 has an invalid length. [ 886.131047][T14826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 886.172386][T14826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 886.202814][T14826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 886.231115][T14826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 886.290985][T15050] syz.0.1916 (15050): drop_caches: 2 [ 886.535226][T14730] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 887.221929][T15052] netlink: 'syz.0.1916': attribute type 2 has an invalid length. [ 887.349304][T14730] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=62.70 [ 887.365254][T14730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.373469][T14730] usb 3-1: Product: syz [ 887.406596][T14730] usb 3-1: Manufacturer: syz [ 887.466792][T14730] usb 3-1: SerialNumber: syz [ 887.582510][T14826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.616691][T14730] usb 3-1: config 0 descriptor?? [ 887.706017][T14826] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.743150][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.750324][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.920404][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.927792][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.139113][T15076] 9pnet: Could not find request transport: uniž±x [ 890.250450][ T5903] usb 3-1: USB disconnect, device number 33 [ 890.486205][T15093] netlink: 'syz.2.1923': attribute type 1 has an invalid length. [ 891.066981][T15109] netlink: 'syz.2.1927': attribute type 3 has an invalid length. [ 891.087255][T14826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.314281][T14826] veth0_vlan: entered promiscuous mode [ 891.630473][T14826] veth1_vlan: entered promiscuous mode [ 891.769788][T14826] veth0_macvtap: entered promiscuous mode [ 891.818909][T14826] veth1_macvtap: entered promiscuous mode [ 891.883864][T14826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.954859][T14826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.987803][T14826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.011076][T14826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.038068][T14826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.069708][T14826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.379795][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.417204][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.541029][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.575526][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.529616][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.696044][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.098430][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.202803][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.457310][ T36] bridge_slave_1: left allmulticast mode [ 895.463012][ T36] bridge_slave_1: left promiscuous mode [ 895.474457][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.486611][ T36] bridge_slave_0: left allmulticast mode [ 895.492322][ T36] bridge_slave_0: left promiscuous mode [ 895.498680][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.894099][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.905025][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.920504][ T36] bond0 (unregistering): Released all slaves [ 896.248953][ T36] hsr_slave_0: left promiscuous mode [ 896.259465][ T36] hsr_slave_1: left promiscuous mode [ 896.271331][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.281671][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.292567][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.302690][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.341704][ T36] veth1_macvtap: left promiscuous mode [ 896.350462][ T36] veth0_macvtap: left promiscuous mode [ 896.360585][ T36] veth1_vlan: left promiscuous mode [ 896.368271][ T36] veth0_vlan: left promiscuous mode [ 897.030668][T15203] netlink: 'syz.2.1933': attribute type 10 has an invalid length. [ 897.813296][T15213] 9pnet_fd: Insufficient options for proto=fd [ 897.884618][T15216] netlink: 'syz.4.1937': attribute type 1 has an invalid length. [ 897.942923][T15218] FAULT_INJECTION: forcing a failure. [ 897.942923][T15218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.958797][T15218] CPU: 0 UID: 0 PID: 15218 Comm: syz.0.1938 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 897.958831][T15218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 897.958841][T15218] Call Trace: [ 897.958848][T15218] [ 897.958855][T15218] dump_stack_lvl+0x189/0x250 [ 897.958883][T15218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 897.958903][T15218] ? __pfx__printk+0x10/0x10 [ 897.958926][T15218] ? __might_fault+0xb0/0x130 [ 897.958959][T15218] should_fail_ex+0x414/0x560 [ 897.958985][T15218] _copy_from_user+0x2d/0xb0 [ 897.959003][T15218] memdup_user+0x5e/0xd0 [ 897.959022][T15218] strndup_user+0x68/0xd0 [ 897.959040][T15218] bpf_uprobe_multi_link_attach+0x2af/0xda0 [ 897.959078][T15218] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 897.959100][T15218] ? __fget_files+0x2a/0x420 [ 897.959124][T15218] ? __fget_files+0x2a/0x420 [ 897.959148][T15218] ? __fget_files+0x3a0/0x420 [ 897.959167][T15218] ? __fget_files+0x2a/0x420 [ 897.959190][T15218] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 897.959214][T15218] link_create+0x70a/0x8a0 [ 897.959237][T15218] __sys_bpf+0x599/0x860 [ 897.959256][T15218] ? __pfx___sys_bpf+0x10/0x10 [ 897.959286][T15218] ? ksys_write+0x22a/0x250 [ 897.959304][T15218] ? rcu_is_watching+0x15/0xb0 [ 897.959334][T15218] __x64_sys_bpf+0x7c/0x90 [ 897.959358][T15218] do_syscall_64+0xf6/0x220 [ 897.959379][T15218] ? clear_bhb_loop+0x60/0xb0 [ 897.959400][T15218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.959416][T15218] RIP: 0033:0x7f55f8d8e969 [ 897.959432][T15218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.959446][T15218] RSP: 002b:00007f55f9c76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 897.959465][T15218] RAX: ffffffffffffffda RBX: 00007f55f8fb5fa0 RCX: 00007f55f8d8e969 [ 897.959477][T15218] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 897.959489][T15218] RBP: 00007f55f9c76090 R08: 0000000000000000 R09: 0000000000000000 [ 897.959499][T15218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.959509][T15218] R13: 0000000000000000 R14: 00007f55f8fb5fa0 R15: 00007fff0b14e748 [ 897.959538][T15218] [ 897.960924][T15218] 9pnet_fd: Insufficient options for proto=fd [ 898.171814][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 898.213984][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 898.240281][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 898.248691][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 898.257971][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 898.771152][ T36] team0 (unregistering): Port device team_slave_1 removed [ 898.824702][ T36] team0 (unregistering): Port device team_slave_0 removed [ 899.321854][T15203] team0: Device ipvlan1 failed to register rx_handler [ 899.613918][T15227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1940'. [ 899.806876][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1940'. [ 900.630743][T13783] Bluetooth: hci2: command tx timeout [ 900.946184][T15234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1940'. [ 901.152438][T15240] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 901.152438][T15240] program syz.2.1940 not setting count and/or reply_len properly [ 901.700286][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 902.191698][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 902.200822][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 902.995404][ T5826] Bluetooth: hci2: command tx timeout [ 903.423964][T15220] chnl_net:caif_netlink_parms(): no params data found [ 903.482799][T15273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.164791][T15279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1950'. [ 904.222107][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'. [ 904.283239][T15284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1950'. [ 904.335998][T15220] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.362125][T15220] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.439195][T15220] bridge_slave_0: entered allmulticast mode [ 904.583157][T15220] bridge_slave_0: entered promiscuous mode [ 904.950847][T15288] FAULT_INJECTION: forcing a failure. [ 904.950847][T15288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.037748][T15288] CPU: 0 UID: 0 PID: 15288 Comm: syz.4.1951 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 905.037775][T15288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 905.037786][T15288] Call Trace: [ 905.037793][T15288] [ 905.037801][T15288] dump_stack_lvl+0x189/0x250 [ 905.037832][T15288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 905.037854][T15288] ? __pfx__printk+0x10/0x10 [ 905.037879][T15288] ? __might_fault+0xb0/0x130 [ 905.037912][T15288] should_fail_ex+0x414/0x560 [ 905.037938][T15288] _copy_from_user+0x2d/0xb0 [ 905.037956][T15288] ___sys_sendmsg+0x158/0x2a0 [ 905.037980][T15288] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.038038][T15288] ? __fget_files+0x2a/0x420 [ 905.038059][T15288] ? __fget_files+0x3a0/0x420 [ 905.038092][T15288] __x64_sys_sendmsg+0x19b/0x260 [ 905.038115][T15288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 905.038152][T15288] ? do_syscall_64+0xba/0x220 [ 905.038183][T15288] do_syscall_64+0xf6/0x220 [ 905.038203][T15288] ? clear_bhb_loop+0x60/0xb0 [ 905.038224][T15288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.038240][T15288] RIP: 0033:0x7f5466b8e969 [ 905.038255][T15288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.038269][T15288] RSP: 002b:00007f54649f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.038289][T15288] RAX: ffffffffffffffda RBX: 00007f5466db5fa0 RCX: 00007f5466b8e969 [ 905.038302][T15288] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 905.038313][T15288] RBP: 00007f54649f6090 R08: 0000000000000000 R09: 0000000000000000 [ 905.038323][T15288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.038334][T15288] R13: 0000000000000000 R14: 00007f5466db5fa0 R15: 00007ffe3483a238 [ 905.038363][T15288] [ 905.075311][ T5826] Bluetooth: hci2: command tx timeout [ 905.332365][T15220] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.384513][T15220] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.415392][T15220] bridge_slave_1: entered allmulticast mode [ 905.555485][T15220] bridge_slave_1: entered promiscuous mode [ 906.208241][T15220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.342898][T15220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.046961][T15220] team0: Port device team_slave_0 added [ 907.147873][T15220] team0: Port device team_slave_1 added [ 907.364077][ T5826] Bluetooth: hci2: command tx timeout [ 908.136359][T15220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.143319][T15220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.309728][T15220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.353744][T15220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.375964][T15220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.589023][T15220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.706552][T14730] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 908.747838][T15220] hsr_slave_0: entered promiscuous mode [ 908.768378][T15220] hsr_slave_1: entered promiscuous mode [ 908.895537][T14730] usb 3-1: Using ep0 maxpacket: 8 [ 908.917241][T14730] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 908.955346][T14730] usb 3-1: config 179 has no interface number 0 [ 908.988251][T14730] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 909.015279][T14730] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 909.068454][T14730] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 909.119720][T14730] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 909.174347][T14730] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 909.222592][T14730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.266555][T15328] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 911.314398][T15355] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1964'. [ 911.377661][T14730] usb 3-1: USB disconnect, device number 34 [ 911.377743][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 911.377792][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 912.819100][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 912.828305][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 913.639144][T15384] fuse: Bad value for 'fd' [ 914.145653][T14730] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 914.160872][T15220] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 914.177918][T15220] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 914.607250][T15220] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 914.650623][T15220] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 914.676954][T14730] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 914.693299][T14730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.740881][T14730] usb 1-1: config 0 descriptor?? [ 914.757175][T15396] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request [ 914.784986][T14730] cp210x 1-1:0.0: cp210x converter detected [ 915.054253][ T5826] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 915.356781][T15408] netlink: 'syz.2.1973': attribute type 10 has an invalid length. [ 915.669711][T14730] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 915.717597][T15408] team0: Device ipvlan1 failed to register rx_handler [ 915.791132][T15220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.869532][T14730] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 915.895713][T15220] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.895953][T14730] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 915.915539][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.922717][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.952919][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.960149][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.098071][T14730] usb 1-1: cp210x converter now attached to ttyUSB0 [ 916.109498][T14730] usb 1-1: USB disconnect, device number 36 [ 916.127267][T14730] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 916.136904][T14730] cp210x 1-1:0.0: device disconnected [ 917.241281][T15424] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 917.496020][T15424] qnx6: wrong signature (magic) in superblock #1. [ 917.540570][T15422] netlink: 'syz.5.1977': attribute type 7 has an invalid length. [ 917.553510][T15422] : entered promiscuous mode [ 917.565038][T15424] qnx6: unable to read the first superblock [ 917.637267][T15432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1978'. [ 917.673577][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1978'. [ 917.695677][T15432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1978'. [ 917.881239][T15439] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 917.881239][T15439] program syz.0.1978 not setting count and/or reply_len properly [ 918.635275][T15444] netlink: 'syz.4.1983': attribute type 1 has an invalid length. [ 919.026937][T15220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.075322][ T5826] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 919.109203][ T5826] Bluetooth: hci4: Injecting HCI hardware error event [ 920.048641][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 920.097768][T15220] veth0_vlan: entered promiscuous mode [ 920.140212][ T5826] Bluetooth: hci4: hardware error 0x00 [ 920.191628][T15220] veth1_vlan: entered promiscuous mode [ 921.421943][T15220] veth0_macvtap: entered promiscuous mode [ 921.433776][T15220] veth1_macvtap: entered promiscuous mode [ 921.484681][T15220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 921.577467][T15220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.670401][T15220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.700490][T15220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.848128][T15220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.860665][T15220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.357391][ T5826] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 922.510812][ T43] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 922.676896][ T43] usb 3-1: device descriptor read/64, error -71 [ 922.837850][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.935200][ T43] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 923.082082][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.696103][ T43] usb 3-1: device descriptor read/64, error -71 [ 923.771953][T13850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.804419][T13850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.842359][ T43] usb usb3-port1: attempt power cycle [ 924.007471][T15495] netlink: 'syz.5.1991': attribute type 3 has an invalid length. [ 924.115391][ T5925] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 924.255662][ T43] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 924.297457][ T43] usb 3-1: device descriptor read/8, error -71 [ 924.476733][ T5925] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 924.555626][ T43] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 924.971231][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.013553][ T5925] usb 1-1: config 0 descriptor?? [ 925.025749][ T5925] cp210x 1-1:0.0: cp210x converter detected [ 925.026082][T13528] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.085263][ T43] usb 3-1: device descriptor read/8, error -71 [ 925.215638][ T43] usb usb3-port1: unable to enumerate USB device [ 925.363612][T13528] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.449681][T13528] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.540288][T13528] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.782150][T13528] bridge_slave_1: left allmulticast mode [ 925.788579][T13528] bridge_slave_1: left promiscuous mode [ 925.796179][T13528] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.807933][ T5925] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 925.823722][ T5925] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 925.832674][T13528] bridge_slave_0: left allmulticast mode [ 925.844339][T13528] bridge_slave_0: left promiscuous mode [ 925.851651][ T5925] usb 1-1: cp210x converter now attached to ttyUSB0 [ 925.866384][T13528] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.887190][ T5925] usb 1-1: USB disconnect, device number 37 [ 925.905596][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 925.938686][ T5925] cp210x 1-1:0.0: device disconnected [ 926.499187][T13528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.512510][T13528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.525930][T13528] bond0 (unregistering): Released all slaves [ 926.836806][T13528] hsr_slave_0: left promiscuous mode [ 926.852442][T13528] hsr_slave_1: left promiscuous mode [ 926.860444][T13528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.873183][T13528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.881682][T13528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.889438][T13528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.912598][T13528] veth1_macvtap: left promiscuous mode [ 926.918413][T13528] veth0_macvtap: left promiscuous mode [ 926.924076][T13528] veth1_vlan: left promiscuous mode [ 926.931752][T13528] veth0_vlan: left promiscuous mode [ 927.370238][ T30] audit: type=1326 audit(1748371830.175:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.4.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5466b8e969 code=0x7ffc0000 [ 927.612009][ T30] audit: type=1326 audit(1748371830.175:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.4.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5466b8e969 code=0x7ffc0000 [ 927.643873][ T30] audit: type=1326 audit(1748371830.215:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.4.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5466b8e969 code=0x7ffc0000 [ 928.259725][ T3555] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 928.292528][ T30] audit: type=1326 audit(1748371830.215:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.4.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5466b8e969 code=0x7ffc0000 [ 928.435613][ T30] audit: type=1326 audit(1748371830.215:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.4.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5466b8e969 code=0x7ffc0000 [ 928.457364][ T30] audit: type=1326 audit(1748371830.215:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.4.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5466b8e969 code=0x7ffc0000 [ 928.480585][ T30] audit: type=1326 audit(1748371830.215:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.4.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5466b8e969 code=0x7ffc0000 [ 928.534429][ T3555] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.568412][ T3555] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.576907][ T30] audit: type=1326 audit(1748371830.215:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.4.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5466b8e969 code=0x7ffc0000 [ 928.595180][ T3555] usb 6-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 928.639554][ T3555] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.663008][ T30] audit: type=1326 audit(1748371830.215:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.4.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5466b8e969 code=0x7ffc0000 [ 928.679136][ T3555] usb 6-1: config 0 descriptor?? [ 928.741245][ T30] audit: type=1326 audit(1748371830.215:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15549 comm="syz.4.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5466b8e969 code=0x7ffc0000 [ 929.066938][T15568] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 929.205567][T15568] qnx6: wrong signature (magic) in superblock #1. [ 929.252491][T15568] qnx6: unable to read the first superblock [ 929.604413][T10950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 929.689118][T10950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 929.735506][T10950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 929.776722][T10950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 929.798304][T10950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 929.996602][T15567] netlink: 'syz.0.1999': attribute type 7 has an invalid length. [ 930.238719][ T3555] usbhid 6-1:0.0: can't add hid device: -71 [ 930.258273][ T3555] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 930.291161][ T3555] usb 6-1: USB disconnect, device number 13 [ 930.388879][T13528] team0 (unregistering): Port device team_slave_1 removed [ 930.498092][T13528] team0 (unregistering): Port device team_slave_0 removed [ 931.803276][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.889477][T10950] Bluetooth: hci2: command tx timeout [ 931.920077][T15585] netlink: 'syz.5.2001': attribute type 2 has an invalid length. [ 932.609241][T15594] netlink: 'syz.4.2003': attribute type 10 has an invalid length. [ 933.461662][T15597] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 933.475701][T15597] qnx6: wrong signature (magic) in superblock #1. [ 933.503189][T15597] qnx6: unable to read the first superblock [ 933.818323][T15594] team0: Device ipvlan1 failed to register rx_handler [ 933.957995][T10950] Bluetooth: hci2: command tx timeout [ 934.056731][T15604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 934.073653][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 934.073671][ T30] audit: type=1326 audit(1748371836.885:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3a78e969 code=0x7ffc0000 [ 934.132288][ T30] audit: type=1326 audit(1748371836.885:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3a78e969 code=0x7ffc0000 [ 934.154564][ T30] audit: type=1326 audit(1748371836.885:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f1b3a78e969 code=0x7ffc0000 [ 934.176617][ T30] audit: type=1326 audit(1748371836.885:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3a78e969 code=0x7ffc0000 [ 934.198742][ T30] audit: type=1326 audit(1748371836.885:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3a78e969 code=0x7ffc0000 [ 934.223047][ T30] audit: type=1326 audit(1748371836.895:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f1b3a78e969 code=0x7ffc0000 [ 934.245153][ T30] audit: type=1326 audit(1748371836.895:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3a78e969 code=0x7ffc0000 [ 934.398985][ T30] audit: type=1326 audit(1748371836.895:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15600 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3a78e969 code=0x7ffc0000 [ 934.420840][ T5895] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 934.454898][T15615] netlink: 'syz.2.2009': attribute type 1 has an invalid length. [ 935.135317][ T5895] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 935.155049][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 935.205691][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.250986][ T5895] usb 1-1: config 0 descriptor?? [ 935.296746][ T5895] cp210x 1-1:0.0: cp210x converter detected [ 935.464403][T15627] netlink: 'syz.2.2011': attribute type 3 has an invalid length. [ 935.500334][T15572] chnl_net:caif_netlink_parms(): no params data found [ 936.057154][T10950] Bluetooth: hci2: command tx timeout [ 937.345005][ T5895] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 937.395637][ T5895] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 937.528965][ T5895] usb 1-1: cp210x converter now attached to ttyUSB0 [ 937.583255][ T5895] usb 1-1: USB disconnect, device number 38 [ 937.616009][T15572] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.652940][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 937.656493][T15572] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.699188][T15572] bridge_slave_0: entered allmulticast mode [ 937.701406][ T5895] cp210x 1-1:0.0: device disconnected [ 937.769012][T15572] bridge_slave_0: entered promiscuous mode [ 937.794156][T15572] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.838303][T15572] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.868379][T15572] bridge_slave_1: entered allmulticast mode [ 937.879531][T15572] bridge_slave_1: entered promiscuous mode [ 937.996763][T15661] netlink: 'syz.2.2018': attribute type 2 has an invalid length. [ 938.151321][T10950] Bluetooth: hci2: command tx timeout [ 938.446753][T15659] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 938.457508][T15659] qnx6: wrong signature (magic) in superblock #1. [ 938.463945][T15659] qnx6: unable to read the first superblock [ 938.574364][T15572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.639302][T15572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.742882][T15670] netlink: 'syz.5.2021': attribute type 1 has an invalid length. [ 939.141747][T15676] netlink: 'syz.0.2020': attribute type 2 has an invalid length. [ 939.181382][T15572] team0: Port device team_slave_0 added [ 939.217275][T15671] syz.0.2020 (15671): drop_caches: 2 [ 939.238538][T15572] team0: Port device team_slave_1 added [ 939.319590][T15691] netlink: 'syz.5.2024': attribute type 3 has an invalid length. [ 939.529414][T15572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.562076][T15572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.097439][T15572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.117493][T15572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.131496][T15572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.245893][T15572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.533936][T15705] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 940.628230][T15705] qnx6: wrong signature (magic) in superblock #1. [ 940.746768][T15705] qnx6: unable to read the first superblock [ 940.792135][ T5925] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 940.952951][T15705] netlink: 'syz.0.2027': attribute type 7 has an invalid length. [ 940.962753][T15572] hsr_slave_0: entered promiscuous mode [ 940.990282][T15572] hsr_slave_1: entered promiscuous mode [ 941.057199][ T5925] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 941.121968][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.348471][T15717] netlink: 'syz.5.2030': attribute type 10 has an invalid length. [ 941.792971][T15717] team0: Device ipvlan1 failed to register rx_handler [ 941.811214][ T5925] usb 3-1: config 0 descriptor?? [ 942.645371][T15726] netlink: 'syz.0.2033': attribute type 2 has an invalid length. [ 942.690938][T15721] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 942.702947][T15721] qnx6: wrong signature (magic) in superblock #1. [ 942.710492][T15721] qnx6: unable to read the first superblock [ 942.744474][T15728] pim6reg: entered allmulticast mode [ 942.916965][T15718] pim6reg: left allmulticast mode [ 942.971172][ T5925] [drm:udl_init] *ERROR* Selecting channel failed [ 942.991855][ T5925] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 942.998757][ T5925] [drm] Initialized udl on minor 2 [ 943.015466][ T5925] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 943.027446][ T5925] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 943.047241][T14727] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 943.084682][T14727] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 943.113135][ T5925] usb 3-1: USB disconnect, device number 39 [ 943.123806][T14727] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 945.737323][T15746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2039'. [ 946.287454][T15755] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2041'. [ 946.747964][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2039'. [ 946.766309][T15746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2039'. [ 947.523968][T15746] ip6gretap0: entered promiscuous mode [ 947.597262][T15751] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 947.597262][T15751] program syz.4.2039 not setting count and/or reply_len properly [ 947.598575][T15746] syz_tun: entered promiscuous mode [ 947.687334][T15746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 947.704647][T15746] Cannot create hsr debugfs directory [ 947.813651][T13850] bridge_slave_1: left allmulticast mode [ 947.822609][T13850] bridge_slave_1: left promiscuous mode [ 947.841791][T13850] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.871229][T15761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2042'. [ 947.881999][T13850] bridge_slave_0: left allmulticast mode [ 947.888268][T13850] bridge_slave_0: left promiscuous mode [ 947.904909][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.990287][T15766] Cannot find del_set index 2 as target [ 948.145352][ T43] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 948.251929][T15769] netlink: 'syz.2.2045': attribute type 2 has an invalid length. [ 948.324549][T13850] bridge0 (unregistering): left allmulticast mode [ 948.386039][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 948.393512][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 948.405287][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 948.415393][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 948.425377][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 948.444053][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 948.454572][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 948.463875][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.487669][ T43] usb 5-1: config 0 descriptor?? [ 948.501264][T15763] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1053.825142][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1053.832154][ C0] rcu: (detected by 0, t=10502 jiffies, g=80961, q=139 ncpus=2) [ 1053.839870][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295042483-4295031981), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1053.853242][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g80961 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1053.864455][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1053.874535][ C0] rcu: RCU grace-period kthread stack dump: [ 1053.880429][ C0] task:rcu_preempt state:R running task stack:26280 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1053.894098][ C0] Call Trace: [ 1053.897383][ C0] [ 1053.900409][ C0] __schedule+0x16a2/0x4cb0 [ 1053.904942][ C0] ? schedule+0x165/0x360 [ 1053.909289][ C0] ? __pfx___schedule+0x10/0x10 [ 1053.914174][ C0] ? schedule+0x91/0x360 [ 1053.918438][ C0] schedule+0x165/0x360 [ 1053.922610][ C0] schedule_timeout+0x12b/0x270 [ 1053.927472][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1053.932858][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1053.938158][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1053.943722][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1053.948596][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1053.953819][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1053.958762][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1053.964049][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1053.969266][ C0] ? finish_swait+0xcd/0x1f0 [ 1053.973867][ C0] rcu_gp_kthread+0x99/0x390 [ 1053.978461][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1053.983664][ C0] ? __kthread_parkme+0x7b/0x200 [ 1053.988608][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1053.993648][ C0] kthread+0x70e/0x8a0 [ 1053.997731][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1054.002942][ C0] ? __pfx_kthread+0x10/0x10 [ 1054.007542][ C0] ? __pfx_kthread+0x10/0x10 [ 1054.012168][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1054.017388][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1054.022605][ C0] ? __pfx_kthread+0x10/0x10 [ 1054.027380][ C0] ret_from_fork+0x4e/0x80 [ 1054.031809][ C0] ? __pfx_kthread+0x10/0x10 [ 1054.036410][ C0] ret_from_fork_asm+0x1a/0x30 [ 1054.041192][ C0] [ 1054.044212][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1054.050541][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1054.055764][ C1] NMI backtrace for cpu 1 [ 1054.055779][ C1] CPU: 1 UID: 0 PID: 15763 Comm: syz.4.2044 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 1054.055797][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1054.055812][ C1] RIP: 0010:lock_is_held_type+0x64/0x190 [ 1054.055831][ C1] Code: 0f 85 ef 00 00 00 65 4c 8b 2c 25 08 90 75 92 41 83 bd ec 0a 00 00 00 0f 85 d8 00 00 00 89 f5 49 89 fe 48 c7 04 24 00 00 00 00 <9c> 8f 04 24 4c 8b 24 24 fa 48 c7 c7 df a9 75 8d e8 17 18 00 00 65 [ 1054.055844][ C1] RSP: 0018:ffffc90000a08cf8 EFLAGS: 00000046 [ 1054.055857][ C1] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000000010000 [ 1054.055867][ C1] RDX: ffff88805afd0000 RSI: 00000000ffffffff RDI: ffff8880b8927ad8 [ 1054.055878][ C1] RBP: 00000000ffffffff R08: ffff888031ea5357 R09: 0000000000000000 [ 1054.055888][ C1] R10: ffff888031ea5340 R11: ffffed10063d4a6b R12: ffff888031ea5340 [ 1054.055899][ C1] R13: ffff88805afd0000 R14: ffff8880b8927ad8 R15: ffff8880b8927cc0 [ 1054.055910][ C1] FS: 00007f54649f66c0(0000) GS:ffff8881261c7000(0000) knlGS:0000000000000000 [ 1054.055923][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1054.055933][ C1] CR2: 0000001b2f606ff8 CR3: 00000000345e0000 CR4: 00000000003526f0 [ 1054.055946][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1054.055955][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1054.055964][ C1] Call Trace: [ 1054.055971][ C1] [ 1054.055981][ C1] __hrtimer_run_queues+0x284/0xc60 [ 1054.056035][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1054.056066][ C1] ? read_tsc+0x9/0x20 [ 1054.056101][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1054.056162][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 1054.056202][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1054.056231][ C1] [ 1054.056241][ C1] [ 1054.056253][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1054.056282][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1054.056312][ C1] Code: 74 05 e8 ab 06 6e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 93 30 37 f6 65 8b 05 ac 42 1c 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1054.056337][ C1] RSP: 0018:ffffc9000586fb80 EFLAGS: 00000206 [ 1054.056360][ C1] RAX: 4583c59edc124700 RBX: 0000000000000a02 RCX: 4583c59edc124700 [ 1054.056381][ C1] RDX: 0000000000000007 RSI: ffffffff8d747175 RDI: 0000000000000001 [ 1054.056400][ C1] RBP: ffffc9000586fc10 R08: ffffffff8f7e98b7 R09: 1ffffffff1efd316 [ 1054.056423][ C1] R10: dffffc0000000000 R11: fffffbfff1efd317 R12: dffffc0000000000 [ 1054.056445][ C1] R13: ffff8880b8827ac0 R14: ffff8880b8827ac0 R15: 1ffff92000b0df70 [ 1054.056486][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1054.056514][ C1] ? read_tsc+0x9/0x20 [ 1054.056549][ C1] clock_was_set+0x63b/0x7c0 [ 1054.056571][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1054.056588][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 1054.056600][ C1] ? do_settimeofday64+0x2d1/0x5e0 [ 1054.056620][ C1] ? timekeeping_update_from_shadow+0x2b1/0x350 [ 1054.056640][ C1] do_settimeofday64+0x2ec/0x5e0 [ 1054.056657][ C1] ? safesetid_security_capable+0xa9/0x1a0 [ 1054.056678][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 1054.056695][ C1] ? vringh_iov_push_user+0x314/0x420 [ 1054.056713][ C1] ? bpf_lsm_settime+0x9/0x20 [ 1054.056728][ C1] ? security_settime64+0x76/0x290 [ 1054.056747][ C1] ? do_sys_settimeofday64+0x163/0x260 [ 1054.056768][ C1] __x64_sys_clock_settime+0x229/0x280 [ 1054.056787][ C1] ? rcu_is_watching+0x15/0xb0 [ 1054.056804][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 1054.056831][ C1] ? do_syscall_64+0xba/0x220 [ 1054.056848][ C1] do_syscall_64+0xf6/0x220 [ 1054.056864][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1054.056880][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.056893][ C1] RIP: 0033:0x7f5466b8e969 [ 1054.056908][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.056920][ C1] RSP: 002b:00007f54649f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 1054.056934][ C1] RAX: ffffffffffffffda RBX: 00007f5466db5fa0 RCX: 00007f5466b8e969 [ 1054.056945][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 1054.056954][ C1] RBP: 00007f5466c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1054.056962][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.056971][ C1] R13: 0000000000000000 R14: 00007f5466db5fa0 R15: 00007ffe3483a238 [ 1054.056989][ C1]