last executing test programs: 9m4.440273665s ago: executing program 3 (id=5602): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x1}, 0x5}}}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r7}}, 0x20) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r8, 0x40045431, &(0x7f0000000000)) r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0x9) write(r9, &(0x7f0000000180)="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", 0xdda) 9m3.363090356s ago: executing program 3 (id=5603): io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 9m2.625727811s ago: executing program 3 (id=5607): socket(0x25, 0x80801, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x1}, 0x63) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r3, 0x0, &(0x7f0000000ac0)=""/68}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x26c0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4050) 8m59.422984819s ago: executing program 3 (id=5612): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x1}, 0x5}}}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r7}}, 0x20) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r8, 0x40045431, &(0x7f0000000000)) r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0x9) write(r9, &(0x7f0000000180)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df665381440690afc4854f4a19db6357a3e57802de79c221ae7c5171faa19b3dc84934b452b1c81e98bf2eaeedca4e6cce792c6e01c592688acaefe150f0ffd163d3d54d4318b5df03be5916dd0fc3cbb297cc1cda81fbc3cc8c552216b48289eb4065a84e76d035c469ed7f879f1d522715f615d3d9b4e7b270b25837894d7609819a02fd202762975b2bf49910e57aea28e3632353f29711d460d5e85c5881f265e2372722654532bfb30b7ee54d40cafe09c96e65a6304a570ea8069fa0649f1bd6cbe5b2d8e42fa0ab835b4eae46e983df2fefa0b5e5bec1594ba024b6acef03fc561a86959e3b928c552b39845621b549746ea4157b0d4b72855c0d7f7578474c456a888a7b60a6e73a57bbccc733319619c140728332ae5d4c3a2c949741dd9950774fddd896ad9ca2d190176537eccee02958a68c4eb26384721bf0f3902387902a0e1fc7ce3d1b92291a1da43f29ac9ccccc5224909627819dae861ad9a80bb145e161851017f6967c4d6786df994c99cfd14eeec8a906f919196bf4fe42ba78c1e7c9559a32104562180e23b6bd02556d324d210c05d4c11b375b9a496f245670f1390341c533ed70b927ac87b14dded63dec46c80949c44b344e897deda9c96485a6fdcbfb6a81fa1f06548b62d6e4726d6c7c724c860cc0a3ae911692255cac73c6bd24332f763b7ee4411ac4c7bdfb4dc5243111e80e1275adbec72259dfd7bdbfe8b16ee19f73b444b094b64d33558116e37404b83ccf56fd3002880b44f9f0e46d8549bf061274812047665f83f82f71d0e8260668e026b7914f89a66342c38337e372efb345d4eb5273613a69fd5318cbc21788825895cffd0a93aaf0a25c7c17aadfe0415d00062aff52abea2b080310026189f137188a2fcf134e9f4b98f0e7adf657f3c368853a6d2ab1bb3e534f54208913613561e971f78c0b466d231251e0661bb2d1df030e31168bfed86bb5059096e74aa1f24213edec5a9c55a773b1b0b588d0646887759f73037da3196c596d7d54a10a47950fd52665d4059acf03d89d41201ca51d98baf9f549b09f0bd891850917d294ffd7a6fcfbefdf6192f7e3e51c67f45fb578bcd0ebc8447ded0a40bf17e73f1419e3cb6a8232e52d6646831f87148b7d9de7b4e1b7fae5afd5a22edf95602ac820712343bd79098dcdac62747c32a2657dd94799fe1407573f918355f84cc1c44a6499c0a7a5f188cf7971a952e03e245c022ea1ac6b3115dfaec5072c1a6ef298470899a2223908e099bd9f045a824f7ec21b9ef478f7f1253e99117bc90fb35b155ef4badcc95d1a1e913c1b3d7b5305289ba328d813bf47a2e808e8b96058faddb63dc7d0e039f1c51c872d6497097822ac3a86296ea3963c5bb6aea2ead05d85b859ecc4646c6f078b7ec3b6b9186b4ccdd87bd30653bcdc09ad5f5c5778406708de50653be9a34d9dc57279d1fa418788f4dbd22dcca75a012ca9689c42e93265669a504deb7bb906aa4012074668a546a24ff49f51aad8920a2c48b7390fb479d93e646eac6cfad65d55d1de0f0a3a35ea00b9c6ceb1febe4b838ea74f2444fba078d5d2c740f00064f56b000575de1be6f4fd26086b437d2ae622373b555f8a3ae5a65b158265f8840d3e8ef012e0ae671c9b51abd9c8c0c407e5813ae0ce4bc101363b7b2908b189c4c09efb06cf77985eb82fe229dd3619bf74d24a5010bb4594cb358fd6f182c94a45ba6782f92f6227f3d9e449f327a578647c21384836fbd9d1c25e8b4433b2aa720a6f0acbb069142a18b4c18f909fdff818a28a62d8d91ee8f618a49d42255f303c5b86727e93dd28d0f1ee33e3840f146b130d2e74e291307aa07d581089fc0ed123b788a668e33d69ba44e9375a4c4b5a9c563dcbac76548f6f558376d42a48eed5d2c9ae6e23ee037984fe7fdf752765dee6b03731dae01a59c694e4dbb378ee5cc7e115e768bd53c0d280b0174c357f19e941499d19d92b8c4eef63053e72a0d52309404235cb5531b8b1448de43807af6135236be025281e583b3d3cf7aa4afe1327674ad6098e7a0dac5ea9d58685e960a0901e3d5040fe5c9b8788fafd982f4d7fb168b1c5e1143d9bf9aee4b83852ae8b93d28561fcb97e07932b00fbb3fae454e72a73d1c2e79d2455ae7cba25668568c06b45de8833d252cbabdd5b4b1dcb250601b131a73eba8da52adec08836383db04664bd62c2b60bba11e8a71de436ba68fa0cffd411dcd90fbf2be6de2fa96fe1932d48aad8c1d067fa110563c5e9231646807da74b4b5f31d53082c12f3ddaa7fed45ed7a6c722c4f2584622a6666ea5130307acc2b4c7c18e434fbad78f2d47b037b6a8cf79d82af02a537be7be30e39891b82bd565e1f98f4ef6acaf899ce37ea6a477c22b8e0f995ec34711e997202424a7f4da1d1787c1ca9ef96f430ec8df1fa9d0ce6b0d105415d58cfac87b87841b6359ac42dac56daa3139ee8ed7b9970e0ddb647a352006ec73a94a335df2b06ed70dd5823ecc9b10813594c83016e960af4cecf04ead1a6f1ab62c35fc011e2475c1b110086c8b20b0a69c2d866a9acde6c07e2f3c56f07099270b3068a0d8393da1abb6deb0327565c9562d6cb641ccce5d5f550f8bb9313656e9fa5ad9f6bd45fc6b68527047f229a8ed28c1fc342f77954ce88d8490066ddd48a1bb6e8526a54fc6d9aba6d407c45a2fd4da5136437ea72a1ac451bd9c1573726036962beea071edb8b033773b84f0d1258add5aec21288159dbb524d83ccc7e79380b066da91efcc0ab6d84c1c3a12dc221c8fb043f01bb6f01f23a39b8fbc15059f5309d7369a24e1b255c8994ef763b1118a05d46f0a79ca5df04e04a065cf7cf19ef62643e9315bec3053ff4220a8056c8d3d597f66611bf7ac3455b7f48bb2f7aedf3ef2a59984ef783a1f40417ccc61b3e6f65731d4c97906688b9dff31bdfef1c5faefbfe1a29eb3aa9a8ecd696c33a253935f61fb34909b12d295fadab159729128fb6fa84abbe0774579ddb52bac51ed54678cebe34fe4da23e4773132ec3ae66d7b550d98eb863518fa315855102d242886706d193bc8f7b25a990ea3dd55e35188f840329837da47b441de242c9c474997933be20aa447d9f49d9f43bd05dd8946c73e18ab1e6a6996b09592036df65444fe51e849ec6cbe36a079c6734cc02b101b5833090358af4908bef98092de74642e27b790c4fb0047caea61fa9aa58891c558995352dfb8cfa90f9da4ebf93da266a21245721c986050ca2a17bed7bca71137d988044623fcbc357840f9996c3bd9667a9a20c582defcc92534a37a2c811b5f712053b98c1a76ecad576fe293b1375343a30d8ad52f31f338973a9fc470a785e80e41a3263bd28ddc1fff8d95f7ba64932c52d222b83d3d853d8ea9496f789d62abf1efe48da75fa7ec890952755e58d307e29fd789bd37d25293b10e4341de482c631f5447cd7fda07ea12c9378e4938ee3b4b3fb653e77bb3887097004e2852e679d6e258d729bf17000d46de15501661bb75384e20dc5c8a55d84b50a2990c558a58a25133fe2ee9e784aaadb1b79d4ee2c4bfe66f0c186c4f8ce5933fa93aef148d3a0d6a238847a96cb810b76313eba0d6ac70b73c804e1bb69b1d7e7168fa919e56ab4c82d6a9c802c7c85e0156fd3bafd5d001b1c4db5ac0dff660cb28c062ba148a32bddabf3a87d9370ad5bd717e6859e1d9f3ee4c4d86268ce2834f7406fccd05d7476fc5c4940f2ad1b38d8442976b1ac795758aef2e704b914f440b5662226425099f392484f08b44420679147d7de3cf654e99a283f91256f0e786a28d1e94f3196b84b63710704e866ee33f45b54f227ec95ca9130e28efc905296570c50d6b7f83dda0ecd823fc316837c0adcb599a0a05ea0d6d78abdbbe3bac96d46f69a675ec79be8e6ebbbdcbc4c55d4cb33b6fd7cb74cd491d92ede45fd5192a88f1b48328b4a3891478cf11b3ef36ee71d79cbde09e1522b38f4ec01e22561a7d6d16594fee44600b996f66cb45574fd4f72513062369e312d310811a5a55eae8de8f0b3267a9cf24fe2e186bedbb7301ef64a4b87564c319ae8f943900512727f2e16798ca457b389d2f04d8b1909f6d2dcff15f2e9d713b1062ab4b91da668417503fd66f245b5a59a20be974d0e9412f2d5a3e32a341160bdab5726a229097e4c07cbcae8c46352075aaa3e50187ac50883bb0a6147aa7b8062694a096557187dd0e9eb8da3f1ac89d72f567fb9838f23af0bd1276ea4c50b15edd6a27a53b72b941e68ef36fd2d6f4beb62e3c6e6e1ca188d8803abcd1b09a05e837e4b18470ab49dfb59796709bec26d28b2058e0dcd93046b1354a8962a122083db6294759015bc4e09b6c00c8df6521c9978e589e3972d395c68fb0ae226bcc55ae09a108e553fceda80490d49abddffd2f05c157daa76771f48f5254a768f7707af5706c02fcfc51d22cd3d101a38fd9e6fd97ef2f61b5a480d098a70e980f6a5fe74aa9a0a69b272165399921c9987731b04695c9151b213ff451cb14cacc5c3ee56383dd081978ba8c7820e19826e0c28c8261d8aeb8fa34a2c327b3b52ebad1de8d8397e7f1753a23a5897b83bad737f170392d42898dd74a7aac07e18e4bda1dfc5dfbca29d197776580a2c7d7f1e79588fad7f7eb9912fc7239c7dc3568ab5b0351361d0d9eb74b2d1046f8f9177d99f0a6ef749678c895bf5064e140480be5565c5c6d1de79e1d6e75941969c8db7182d1530745d24e0407ec771b01c8ae06f7ff1425fc8224254b7e69e7311992514500e0a0d", 0xdda) 8m57.872514305s ago: executing program 3 (id=5617): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x8, 0x2007, @fd, 0x8, &(0x7f0000002680)=[{0x0}], 0x1, 0xd, 0x1, {0x2}}) socket$inet6_sctp(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x80, 0x100, 0x2, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000ac0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe0, 0x0, 0x6, 0x0, @remote, @local, {[@generic={0x7, 0x2}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000084) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x48, 0x0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0x579, 0x6, 0x60a, 0x745]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r8, 0x1, 0x9, 0x0, 0x0) connect$nfc_raw(r3, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x6}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 8m56.851813413s ago: executing program 3 (id=5621): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x4008031, 0xffffffffffffffff, 0xbc05e000) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xb, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) connect$llc(r0, &(0x7f00000003c0)={0x1a, 0xf, 0x1, 0x0, 0x4, 0x10, @multicast}, 0x10) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x84000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x12a13, 0x1a001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 8m41.406562324s ago: executing program 32 (id=5621): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x4008031, 0xffffffffffffffff, 0xbc05e000) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xb, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) connect$llc(r0, &(0x7f00000003c0)={0x1a, 0xf, 0x1, 0x0, 0x4, 0x10, @multicast}, 0x10) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x84000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x12a13, 0x1a001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 37.487180998s ago: executing program 2 (id=6768): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x56d7ffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) timer_getoverrun(0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = syz_open_dev$loop(&(0x7f00000003c0), 0x8001, 0x81) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r4, 0x0, {0x0, 0x0, 0x0, 0x71b58802, 0x400, 0x0, 0x6, 0x6, 0x9, "d55230628dd71e01181174225df4eab9201e6d80425e749aa1f350f58f2703d9d6d25c9dbe455cc4b7e85381e90778d139b2d0d433f433ea6b06cf594fbb41f6", "8c1788059e2a3b2acde910b541b58a335d7d94636f957d7ba1881435a0f5ea99a0e57584d643e24b79e891eaa815fdbd09503cac8d945af98103bf69f46ba0c0", "a6b894cec10f62f35cbf4157a40096e187641f6418dfd5e4de9634302012a8df", [0x7, 0x9]}}) syz_io_uring_setup(0x60c7, &(0x7f0000000240)={0x0, 0x99b, 0x2, 0x3, 0x304, 0x0, r4}, &(0x7f0000000180), &(0x7f00000002c0)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect(r7, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x3, 0x4, 0x4, 0x4, {0xa, 0x4e22, 0x8d, @mcast1, 0xfffffffe}}}, 0x80) r9 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 36.193198094s ago: executing program 2 (id=6771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x6) remap_file_pages(&(0x7f0000456000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xf0ffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r4) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='!\x00', @ANYRES16=r7, @ANYBLOB="000426bd7000fedbdf25040000000900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000}, 0x8000) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x3e}}, &(0x7f0000000140)='GPL\x00', 0xe, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0xea, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x61, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) syz_fuse_handle_req(r5, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000013000100000000000000000002a88042"], 0x14}], 0x1}, 0x0) io_submit(r9, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r8, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r8, r5, 0x80000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003c8000/0x4000)=nil, 0x4000, 0x0) 31.16894812s ago: executing program 1 (id=6774): r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) request_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, r0) 30.909011773s ago: executing program 5 (id=6776): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(0x0, 0x0, 0xc4) mkdirat(r0, &(0x7f0000000180)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)='./file1/file0\x00') 30.89849061s ago: executing program 2 (id=6777): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="91102fa8fea14bf800000000fdbfb2e533f85e0fd537269f8b5ff9480c982485d324921e939764f304283e607fb5f895d6c0cc8ad6dc344ebfce592fbbd908e65f07ebe44824bc53cbeaf5dbebf9"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xe, &(0x7f0000000600)={&(0x7f00000000c0)={0xfffffffffffffdae, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x10040090) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000580)={0x0, 0x2c0, 0x80, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x1, 0x10000, 0x100, 0x9004, 0x40000000000000, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0x7, 0x1c1, 0x1, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x9, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x1, 0x5, 0xfffffffffffffffa, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x5, 0xa31, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x2, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd7, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30.738876329s ago: executing program 5 (id=6778): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$audion(0x0, 0x526, 0x200102) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f00000005c0)=""/4096, 0x0, 0x1000, 0x0, 0xb}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) tkill(0x0, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) 30.726886335s ago: executing program 1 (id=6779): socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000400)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x4000, 0x0, r5}) 28.437000155s ago: executing program 1 (id=6781): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x80, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7b, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000080)=0x8) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040844) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1000000011140200ffff7000fbdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000040)=0x7, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05000100060e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 28.151131959s ago: executing program 4 (id=6782): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000000}) (fail_nth: 10) 28.014182092s ago: executing program 2 (id=6783): mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000080), 0x80) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000240)={0x0, "ed5f144ac560d1852bdab5a0d0e5a57156a27cc3531219ad4bd0f6219595d7ccb0f9a44208ba2d599b8664556c55d96ecb778156557a766870050ad8d4e4b396", 0x33}, 0x48, 0xfffffffffffffffc) r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="c3080000000100006110500000000000a6000000000000009500000000000000", @ANYRES16, @ANYRESHEX=r0, @ANYRESOCT], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4000}, 0x18) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x49) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x6a000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0xffffffff, 0x1f, 0x7, 0xfffffffa, 0x3, "a4c82192e6aed8e8950470331d04006c9957ed"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r1, @ANYRES64=r5, @ANYRESHEX=r7, @ANYRESHEX=r3, @ANYRESHEX], 0x0) 27.399505607s ago: executing program 1 (id=6784): socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x80, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) 27.002770364s ago: executing program 4 (id=6785): syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x3, 0xc0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x9}, [@feature_unit={0xf, 0x24, 0x6, 0x1, 0x5, 0x4, [0x7, 0x6, 0xa, 0x1], 0x3}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x4, 0x2, "1ad60383"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x4d, "d6"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x0, "5274d3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x9, 0x3, "76920e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xc, 0xb, 0x1a, {0x7, 0x25, 0x1, 0x3, 0x7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x0, 0x4, {0x7, 0x25, 0x1, 0x3, 0x9, 0x6}}}}}}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x3, 0x8, 0x2, 0x40, 0xff}, 0x3e, &(0x7f0000000780)={0x5, 0xf, 0x3e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x0, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xbb, "e971f683d11001d8e53e3c3080a6c28d"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "9128ab3c0310fd2fc57e26b8b1ab0f65"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x9, 0x8}]}, 0x4, [{0xc5, &(0x7f0000001300)=@string={0xc5, 0x3, "7d014e526ce301547261909bb35afd1a809538351ebafa0a698d1c46c53b2d8b5e6b14a9ac052bbf93ce5a1c5894d2ce89d2e22a113027eeac29fc7b7e3ea3a87e14468e90aab9c7dd1d53780438455dd37fe71cf702a89e2a442672ecc97f37b259fea9dc27af22d154882a6a8ebabf3690f13592d8253bd75b00309656762c46bc8d4efc7f6360150ca14448e4c5c33c586b71e58be6720e308cb877b8ef81b8df9153786d4429d255c6fe739c1101842be78c2912f7ee5e26052e6862fa5c207ee6"}}, {0x86, &(0x7f0000001400)=@string={0x86, 0x3, "a2b68cf593028c683d52437178ac073982771af0be672e1586f66af08a38cc219c3e8526d65af9bac3988b6c7693dae84bd253734ef99118eb5bec81dfab36f73e808c1061a676e88ba65a4cbfc0fc3aaa5cc56758da9be8c19e394bf43330dfe3ecdf901a5bfea1932c4316e81b3899ad16a06de69909ee44903adc21d185aa4b61550f"}}, {0xa8, &(0x7f00000014c0)=@string={0xa8, 0x3, "fff0616e9772202731973ddeb30db9ce7439cad4f428c3f881a0cea8fb7ff1db8586ccadc0f5fe088a8e0d38608f61bc559aba29c5bbe13df6930361fac503145cc2cd9841e998f76d628bd86d43979e5cb9312144919c4f2627d4de9a07bed5749a2be8b8bef07f108a94422e9a8ad93e40564e0c9fe13ec084afb7cc2b321126abf6763aa8e4c31d9ec26848de8640898ecd34cddb51d28f0f3e5c871e13941713173c06f7"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0xf0ff}}]}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000080)={0x28, 0x3, r5, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r3, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) io_uring_setup(0x85a, &(0x7f0000000180)={0x0, 0x58b9, 0x1, 0x2, 0x383}) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sync_file_range(r2, 0x8a93, 0x4, 0x4) r9 = dup3(r7, r8, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000800)={0x0, 0x0, @start={0x0, 0x2, "04a0b3e0226f512c3ae9c77572233f86cb4aad3a1bcf2a00310de1a734d8f7e434cba1b05faa3d070e03bb990d84554dce01415b03ab05b231e56e60c2554bde91bee7ab64076577ce1f739a3cc01c9e5c7ca1b34add86cd6174e09f99e509e1fc4e6e48d03fa60cc5dd59f42acf7f7ecef344ea8eec80afe642481c63e5f465be3e8f8fad7a958995623c106b77380e7514382cc5f61aa33cfc2baba1a521daab152208ded34dca3e5593e893c3c10f5bf4c56ac38efa77c71fcec0b6989b73131e98e1f4503e3953c92ed2f248af490b069977df8f385b285160a4d4a5b1503468934704010a552e5e610ae80cd797f785a1a74022d168ae5830ad4658769f09d97c8599d73ff1da799d294ffa0a5f612904cb07b6310e562c3ebdd6d25ac8f5b711988f167ea8218557b6ebae99410ad1fe06157f80d47e180b34cda84fd8de95332d2ba6e171cab0d1b720e2356d4872099931c1e1e9f8e2cd5915fabdd25ef658667b73226387f89832a3dfcf2b968494fc0e6e0a2c7730522c09680c9301cf72c718f85770d38aaddf92c7155940a0f3b963231d79719fb9d9770bd0d28d75d2b06a6d422ad46a8867f2266e369d460e9715a34db4dddbd3176c4589c17e50e3dc894e3855f45a972ec4ff79a765a397d0a2492b6ab97bdbb23fce425592e6aa801c4bd66d75196438c46cbdfae6794bd141b0a17b131f4418d679fdf4be6f70c0b0544728b96eb076f2cfe9074f768ea116c36573eeb8aac4ac317880fa202933a22c5044ac8d2d36bc442a2ac4ebad356f0ac255ed2420735ec26362194c06129f96f331368568b062278cebd3e24a384da89dc4a984fd4aa0fc9f390dfb522c0882ed1bd2c057407c5480891c0b317336a6735370699fcc0a9bc403f63734f3a74c75182f33c95fb05fb6da94422a75721eab895641ea6f34dda6a718274b57c1c89beb99e439f59993aa2d4f2e281d8df03aa49fb40a214dfb086a840c8edfd7bbaf139137d0fee7ecc357b5c23b71c90afd1e983c76fa13b96437e6f433444b38d2c0ccf68c472978dcb86aca126f7637ef136aa0c506dde6466810088229a48f7ae0d1a708d8db978859e883da334faacc0e48872e660e8e43fc25e85882f154fcb83c1c8b9c0d5c7b8386939709c3da8878960d3101db6d945e925832b136795ff1b44e2f0880365a5ae7bbf3463571ffa2896733af08d8c696c54f68e40f8c9a773e47ad4c45aa5b006212c65ae23a914448107e2e12d71d75412ea3c08ab44e95d8c81f8b7ba4dcced4f53d4a732720f4313a6897070037946fc86f561c548f753927f90b526a4bee1922c17d18a2b193cd673e4ff057660823a795a491b053c29c37e7ad011c279eef19089d4de2e82744e463da67f37fc5272789536a217bd1a8461c08c22812a5d8d9ad966868b2446086cf0352fa4a692d", "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"}, [0x78, 0x15e, 0x8, 0x2, 0x8, 0x2, 0x9, 0xc448, 0x8, 0x3, 0x8000000000000000, 0x10001, 0x3, 0x0, 0x100, 0x2, 0x3, 0x6, 0x7ff, 0x7fff, 0x485b, 0x3, 0x7a, 0x100, 0x40, 0x9, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x1, 0x6, 0x1, 0x7, 0x9c1, 0x5, 0xd, 0x6, 0x4, 0x80, 0xc6be, 0x3, 0x1, 0x3, 0x215f79a4, 0xa64e, 0x0, 0x1, 0xfffffffffffffffd, 0x2, 0x9, 0x4, 0x1, 0xc, 0x5, 0xbcf, 0x0, 0x800, 0x5, 0x2, 0x4, 0x0, 0x6, 0xaf]}) ioctl$MON_IOCG_STATS(r9, 0xc0109207, &(0x7f0000000180)) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x10) 26.678265361s ago: executing program 5 (id=6788): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(0x0, 0x0, 0xc4) mkdirat(r0, &(0x7f0000000180)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)='./file1/file0\x00') 26.30198893s ago: executing program 5 (id=6791): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x80) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e400000001820300000000000000000000000008080004400000000608000540000004e4a000018006000340000300002c0001801400030000000000000000000000ffff0a0101001400040000000000000000000000ffffe0000001060003400004000006000340000100002c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa2c000180140003000000000000000000000000000000000014000400fe8800000000000000000000000001010c000180060003400000000013000b0063616c6c666f7277617264696e670000"], 0xe4}, 0x1, 0x0, 0x0, 0xc4}, 0x4001) add_key$user(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x6, 0x3, 0x0, 0x0, 0x2, 0xdf, 0x6, 0x4, 0x2e, 0x4d, 0x0, 0x33, 0x0, 0x40, 0x8, 0x2, 0x7f, 0x0, 0xbb, '\x00', 0x4, 0x403}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r4, 0x4068aea3, &(0x7f0000000000)) 23.119674345s ago: executing program 4 (id=6794): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x80, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7b, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000080)=0x8) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040844) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1000000011140200ffff7000fbdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000040)=0x7, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05000100060e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 21.59300298s ago: executing program 4 (id=6797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x90, r2, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x69a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) 21.580982937s ago: executing program 1 (id=6798): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$audion(0x0, 0x526, 0x200102) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f00000005c0)=""/4096, 0x0, 0x1000, 0x0, 0xb}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) tkill(0x0, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) 21.392293752s ago: executing program 4 (id=6799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f00000002c0)=[@release={0x40046306, 0x1}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@fda={0x66646185, 0x5, 0x1, 0x26}, @flat=@handle={0x73682a85, 0x1002, 0x3}, @fd={0x66642a85, 0x0, r0}}}, 0x400}, @acquire={0x40046305, 0x2}, @free_buffer={0x40086303, r1}], 0xfffffffffffffd89, 0x1000000, 0x0}) 21.010599521s ago: executing program 5 (id=6800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f00000022c0)="70d55fd10ff92f68f063cdd4325d3e550a2c70637d34137aa8c2ca59272330188186c57eeadd69cd9ed802185d2f0393c50804960aac1cb0f20e533fe5fb667aff4a0c36f321a7834f822ae44244f8fb0c1edefb66cbedf1d4db331363be39f0bfbd1b23800e5dd800cf253d019379235775281c219a3ded157c57c768a6d117378d2d55e50e9192be73acacc66c22a7545ef97c147ca9f2744b7307d6c99921a4078539c64eac8bfe6eb65102d74dcdd34a4e12373216423935b464230df6462101d78024a6ca73449ca3cacc65bcbb58477c69b6af27f347d8f10ce52d89b39cbc18d84bb5aaa05de20c439e3cccad5f23c14af930d9c70a10c60c84566645243da5ed84cbf3c4fdeddaa89fc8d5b2dc16dc83add1c09115af94bac2ba3f6a2feff602435cc7b6f5c76dec4ff00b5bbd99eb7b855d33ca8c28d605552b65a76e71f5b9149e7835b42cb04f97d28e108f6b905dc187ab8007c5a6c7c44eccb0e005cd590e028214b78c4e6484353024e6dafafbe83b19896b31bb55a89645c7b90c1d074cb4579f34fa86b4d13eeb524cd0ec58178b6b73c485ceccf680c8a278f4eb0fea50c7820dd4d15f97d0fe524343ca48365651e3311d815807c4140ad15b1416cb363566e8292cad8c07aebeda81f6b057a7b8c0bfbe5848efaca8e0108733d44ce5f3a33b9a0d4debcf95ded0e9a74a2af484df9625d7763cda48aab554fa5b8919a8d28ec25847603180610ad5343d67ead2e3b44f4ad5222a23e1582d2b395865621b6cc9f7229755a665aab95e5597866d620421a92ace90f523dda08e0c3140d653ae0380f3e8a0bf0d7f9e45a988bd821cfe90495c1834cfffe5ef3c9f57f0ef9ce3d49ad82403a4d7dc50694b8d227d2ad682e67687b44db2aaab59e4d95108b8626e4a1984ab290bd0bea228b469654aae873a6baf38b9ea9d5907e07abe0fbbf6ef691111ee7bd5c156f052dbd7429c5e40e8351dd1c1bd105f664a57942f51b2565a82ec81e76b7ff97836b008234be23ff094535d1ee54b08d7dcbee83a76346b6b1eb41153fc3f09034751f6d768eeafa2e41785f13ae656236d99d780824e4c76da4e8aa71cf40367328ea05be10742277c555778a162e25559e3325e17805719173bdee67b28d596e1e98059aaf45dd6dd4f20094321c291aa0a4227ca45106547679b3e54479eea873c0b08e0637410054a4ee6e34a248cc9757b817f0ad839e825eee6ac15c272ea711882054c788f5c92636ed3c6d352aca755d873f2446e3666920f0a4c9627de420c1c95e13973a045ea53977dc678b6c62c9f19775fd6d13e3e4849562eb6c967263e16819cb62e5fdd9f5bdb8faffe555eecfa29ada46d6a4ef6a7980b5b4e86711d9b836eac02193249a1779d01c5eb08a8574668f4c2d33fb06bb63861ee68295cfefb0338629f7db3ccf12b19ee981879e53dc00e3ab415d8357db09e5ac4eabab1a0cfa57e9e6294797709193268c406430a34efb383041552235892ad009bf31dd5d89f09c3e3bff6025caae3c6dd23954402aac1ade5ffd92cc80dbc9e8e22beef1d87a221af46f3a942fa74a1e4de96a3bbbc7136caaff0b87e61f4b4475f36ce55ae5b1248cf3fd940fccb50d433eecf449a26b239c9188c2528ea3315b7dc949c6e3cc65bb6edabdaa2591e185fcb99612c5c4004f7d236c270007349499daac0bcef060e3e2e3893cd0eb957c222ea1c75da3104b57cac44da3d21d289c37c10232c21b701a053f1ef34a08f298009cd8730ae423d1a601ac5b52f505256de80d4a4fa8c294ec4be19dbac77e552ed651449511b527422e17df4c5dab5d82626f52c0b75d3e894e4fbf6eef33c6c07fa52910086cd1473f040ca3b8c10e883fbc94311a2ea615bfa3550963b11288840f7541a17e0feff06a3fbd99e451244e7e6c2479e1fe52f5036a7931f11700b66f7d52cc9cb3bf710748814fcc6e5d8cb3711c8af6c11d20ed84426125edf8de86ce93af9c4f8157022e64ba97e284ba522ea46bb7cebdb1dcf322c5bdffdedfae4d5d805b0fd8b9662df6526f9c33faa6677aa26e841f6c38ce57cf5c85376e4a8e1ddecba53f1ab7d3f263c5c0f9a7979083e9fd77c4ffef18292f9457b07ea4689be31c24d377bd03141bd250bb97d6ecc1b01dabbe0d8d18ce2ce6acab6b55212e243d67f7c7b878101eb8d66efa3937427f0762d04d2e0d253b2d5de85cb935f7b021d6bf3f03282670c8ebfdab3fc6bc44a2845b174b62bd2e3e3565177be9c82c10da09abce89d7af2390d2bc0a296d2cee3d12a19f43c14528382d253219ad71fd39d95ceaafa924ed0b13fb0e49637c14243451043dd4c1a40d11ac87ebb16de028f6a65bcd9e01a2f33b82df130cdfaefc654c053e9c36e3fc32af667cfcf4695a9b4e9da6ec04f19cf1a749c06841ef85940850a03c443bd9c7efb1b9d415a17a1c058b7402cdb2c97a9243fbb29ad2c9494ee76cd13592a2c5335a02b4107b863a177e825974ad6da1875270de5741f6d27d9d5ef4aa188bf6ce6d9aed013d3107d50d945d52c6b148a72a4582120720e124a8941d9c40e7882647ec578dc6c2372de0f01a5dc7551efa8f7b5177da2715de325d311918c988d62e4abad02648960762ae57b2539c2d6261cb929ac10d25fb39795145f4527724009f3b2254306b2a70dba16ca2aa9a9c8802d0faa08688291c499eecebad8ab9242e51d05d5b63385da7e695c03c3cde30c905d003f5d8a9fb65314f142b874af820c48adf8efcdf8bb2d87088183ab10b8ae6def2bc5f9ea906e8dd2bf24351249c9cf5059ef6ab50e1eff8a299668b60de34cae6beaaf999cde538bbbb980150e7ab4eda54104b7d4c277928276d17520e7e7bdf2938171a915807647c3d4fc4bff129572aa038ab83b154365c769d35d84d5b855cad40a36553b9d80e1f833538245db7464ba9089af7d35d3a8f2fb6cbc655058bb216461a2fbea577c3c3532b5e7d9cad9ec2d156790379c4516fb2e00ac88bd456132030db3e5eff0772938fefcff2b8c4ee6359881a2c634cb06b531e4295247d8937a616ceba9af743c28fb2f2c16fc58b4132ca57d8e958ca8fd062f464a862beab0ad614db3543b8b808f526aa1d919733d30454eff6e78174654da2c7f2208c134d07f0b8b53d7ccab90ce418dc194a4e522bc5e83ffd41aa8808b12939e00ae925b383f5c445fe77124c24e3ed64f6c727df883be73e77246dc74a4b4fa0258a19731b655ac6d3945ef2d7d67a77d5be06a64994562377002d01e0befb2300e8d7d7fd3e0e3c384719fdeed5916228b4a63316735290638ee7d30726f0952315d9d09a76227de9227aec41eb3fa320a89f8edd2c470f26343172a0647f2b3c21c600919f6092bf0aaff1380983a963a78d83a1ffa79621c815a1f6f0e3ed6d7270e5c8f1a48984acc2e0d504cc526e8941f3de23d98586cf13f79d29d73e07e8824bd31151bf77153ab0894cfabfd55cf2cd29b0f8a7a5744a93b623d008db00951908b7572af820bf8791e3232ca167b4b9aaab5341c57faba3bd6a90f52583dd3f177372f9117ffc68660c8c724db2cfcb73c0329276b77ce2401abc87506bf876f3b3b33236a7e8e8a6d9381f2be8529a0b23a00bd25e7b2df594361910dc96e3c23be7b74813ad12077fb5a683f2c8c08a8694899d168bd4d4ad709afbf6a9eeeec21b53f15b3a36bd6b374c027f3d52f8b1d339cfe790f6bb7b2356cdc1f096f3595986c3d6355ad9db14b7c6cfd32a36ee15fdc88747fb7684b6c44cc90b376ba01f3acb59ec73594d4c9ce6087a4442f380c440507327e660b6d29878b900a955f79ce8a21d81944ac8aa0f5e5195b59762b1726710033c5d930dd00638212c28b86b3b35641a867ee8be6c2488af357bf417965b3ef21cc650bc54577e837445a2971445329e751d302c46585e3507f0cc3d88f1d2f0cd1e7f3b1d4888e496a903eb4a7fbc939c5dac53cb23605d56eaab34b6abe59ba09909b43268e05342c0612cd68b6b6f46d1ad705772f86ccc02393951d02c5e4b416fc08fa9a65cc64ecc8300af52a0c8b202775213c6321ad60092785f228471fd0b6cc61bf258c85388a6ce2eea78cd35e2f904c4783a3b597cd096e0d81619d4fe15909e97d058451a4e44d28536d117e6df88f2fc11babe4072c9b33cf39a59d26fa2cfd914ca657169e6bb3cb5032613e77b2807862ce0551dc11a24cdf61365f4dbd55ee325262a21bc1258481cc00706b55d99da10d3beda3340d75b0b7a5c5630dd0a5190ea0588b4594c13f6d918bf35a65b4ca74dcb2956283ccfc85c5b3804c8a4214669a04352c3a26c3db7ce54981015b2958f40b96f950372c76c568754504c7904be0593656633877ed3c5bb2bf7129b0e9602269c723f18c9e7c6c30434b20fd04f0b5aa95e38826ad7c3ad735f651a1d08d1434a7d81a2bb854962d35a8ab9e5ce08473a6147c96daa1c374528a5fd7c786f5b05494ce00d034f03c5aba84a761310b4f43402ef95cf8b7218696f1256fcceb764c0b759e451b2d2d622e1ead3d61231de03e9ea5ed195e4eee012d1c6ad9f415187a1f830267cd1b96bcf0aef867718f3f6750e990acb3cb4beff95c13b13f2b9041ddedcc39453dfb094f57a200e8a341fc430a84807325eab214d5521ae45d927713274bdbbb137feb6f4a29eeaa3db73b9c10a81065a96666e69c8b92b12ba62c6eec9d0c5ae6ad03141db5dfa8beec3af99e1a01ac2abecff81f4f8c59bfea468404ddf802a029a8a86d0a13d166bdf10b4360a041d2b5269c9f0ac8c844c8c4ef590da02e0f60c33fbc320e42bc2f7112df067d9049643a7e1a48102bee32ffce862676e5e90258bf8cded9535e670a893b1aa73a676ce18744caf4c628510824e3105801b2bbec63561238fcf66c771701bf6d904f69c54fcb0e4689a80f0885bd75a3e5bf0d148db255f546d603bf07f2e231f81a621a5fa545c671e09dc1c8ee397206bdb5c8f57daeb8968d53e4aeee6b3932d56cbd24fb3baa2d84d71035e8a7ab7b9f237bfeba2c68b94f105ec845898a536e93f84d3e4f7bcabce0041afd47085d23ff549838ff2eae73502aad3aed0d78afbf4aa52159a382ddcc62ebb143e064bafa63e906bfa7189f53ab86f29669ec5c06de721d4abda934ea8aee900813218e5df73b023a0ffdf47eee87cbd5f3eaaf11bbed98b13da53c0d679d88a56ef3d54e2ccac9faa24682516a77bcc28228a45b2c08a8ec00431b81589727b887d77db28dde8c357f9e5b0cd92ed25f4a3037a90d8d33e4276ca4cf86a3d055559bc5f81564abac92ba2fbc8b9e605f3817384a6deb54384aa69a6bd1c0d726d26e53d4e6c1c0d65115b520ccba25e7f1938c54a7ee644a9a2ee298c982f409996794038b6b625c5fc70dc275b6220206fa69a150986994207ed2ca30e2caad56a5ea2a83a646a6c10b0a2331edabaafbd4a912f8b1abea3e593eb52d177a73324a74b80ea248224247c4d9106c7032b7064f6c0e393b21a305ab1766d3d1ce527c6c4775289c0bf5fb6070869b97a16ebd88f44394c794ec3aa321ecdb25d82fd997b325d9a2775afc91760705b88a5299b1a5464b1956546130c8d66e54b5c423524c049a13bcbe67000d8c9bf7c8f95a8da44f2de854fdc46720fc323c738d5a90fbe9cac04226e39c16e166aa4ee59f0000762fadbcd881ec2f8b11c5d644221a9009f9ca2e8ca90da5f40dda7f603ada345c2b8cb49d7a66be45afca7ee8a4", 0x1000}, {&(0x7f00000003c0)="fd019c47909b5ab0ca41619ae8d05a535679a8e608d71648332bc5e7c6077d2e03ed5edaf68192d222c4fca67008048929ec0c17a1a9cceb1f271db0b98a710776606480cbac23631c83b4a608b731dd09def34fc61ed50ef9141cad5629cb6bc965a4dbf31509dfac5c5c21c00f6495b47818d6b1dc658b84e29ffe91bcdc8c7c93f543608acecf27c83250df98e259473346f937c9f361b84999ef0c93158e4d0bc16ef4b4dc4ec905bda1212931bf22e4d0", 0xb3}, {&(0x7f0000000480)="ea87b785e05167f751f243", 0xb}, {0x0}, {&(0x7f0000000880)="4e8215b8e6499bfb7dc598a685a169758dbd10d960d2ea009f3e79a24eca6eaec6190b1baf209757390e699f5a5c2dd9ccc663d82693be12c8727cfa19a7e65432f5132f31cda03809f5f091268bf8d5fa78d9f7086cf45eb2f3603378e4967fb13423aac5fafd996b523682e1ab6ea43272b6b70134e4bebce4833c95fc3c5ed0ba198272298a9c703e1b3625c72e080ca5024088a8cf0536fc6057156cbbda8d4f4551747b7fd787f6b01a6d34b2c8e1111b56602c28aad0452ea11a53ff9db7888a0725518fefbcffb6c62e6108088b2e", 0xd2}, {&(0x7f00000032c0)="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", 0xfec}], 0x7, 0x0, 0x0, 0x800}], 0x1, 0x6004081) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180f0000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000003c0)=ANY=[], 0xfc46}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 20.750947337s ago: executing program 4 (id=6801): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(0x0, 0x0, 0xc4) mkdirat(r0, &(0x7f0000000180)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)='./file1/file0\x00') 20.699593091s ago: executing program 5 (id=6802): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi3\x00', 0x1, 0x0) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f00000002c0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "9a"}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0xc010}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x5, 0xffffffff, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6c48f8d04544"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x402c000}, 0x200408c0) 19.727649565s ago: executing program 33 (id=6801): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(0x0, 0x0, 0xc4) mkdirat(r0, &(0x7f0000000180)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)='./file1/file0\x00') 19.712671806s ago: executing program 2 (id=6804): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x6, 0x3, 0x1) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x37a2, 0x3010, 0x0, 0xfffffffc}, &(0x7f0000000040), &(0x7f00000002c0)) ppoll(&(0x7f0000000240)=[{r1, 0x50da}], 0x1, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000001c0)={0x20000014}) socket$inet6_udp(0xa, 0x2, 0x0) epoll_wait(r10, &(0x7f0000000280)=[{}], 0x1, 0x4000005) close_range(r6, 0xffffffffffffffff, 0x0) 19.712055785s ago: executing program 34 (id=6802): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi3\x00', 0x1, 0x0) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f00000002c0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "9a"}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0xc010}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x5, 0xffffffff, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6c48f8d04544"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x402c000}, 0x200408c0) 19.193712414s ago: executing program 2 (id=6806): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="91102fa8fea14bf800000000fdbfb2e533f85e0fd537269f8b5ff9480c982485d324921e939764f304283e607fb5f895d6c0cc8ad6dc344ebfce592fbbd908e65f07ebe44824bc53cbeaf5dbebf9"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xe, &(0x7f0000000600)={&(0x7f00000000c0)={0xfffffffffffffdae, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x10040090) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.973979617s ago: executing program 35 (id=6806): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="91102fa8fea14bf800000000fdbfb2e533f85e0fd537269f8b5ff9480c982485d324921e939764f304283e607fb5f895d6c0cc8ad6dc344ebfce592fbbd908e65f07ebe44824bc53cbeaf5dbebf9"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xe, &(0x7f0000000600)={&(0x7f00000000c0)={0xfffffffffffffdae, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x10040090) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.262657459s ago: executing program 1 (id=6807): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x3c, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x136}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 18.262353424s ago: executing program 36 (id=6807): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x3c, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x136}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2.982924024s ago: executing program 0 (id=6827): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x29, 0x2, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000100)={0x0, 0xf786, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12f, 0x0) 1.457886883s ago: executing program 0 (id=6828): socket$kcm(0x2, 0x3, 0x2) (async) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00e6ff000008070000000000000000", @ANYRES32=0x0, @ANYRESHEX=r0], 0x50}, 0x0) 1.272450756s ago: executing program 0 (id=6829): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x80, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7b, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000080)=0x8) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') preadv(r8, &(0x7f0000003580)=[{&(0x7f0000000040)=""/21, 0x15}], 0x1, 0x33, 0x8) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040844) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1000000011140200ffff7000fbdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) setsockopt$llc_int(r8, 0x10c, 0x7, &(0x7f0000000040)=0x7, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05000100060e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 346.563004ms ago: executing program 0 (id=6830): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 158.827318ms ago: executing program 0 (id=6831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x1480, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000002c40)=[&(0x7f0000000000)={0x180a, 0x30000000, 0x3, 0x1, 0x0, r0, 0x0}]) 0s ago: executing program 0 (id=6832): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r1}, 0x4) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @value=0x2}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00') r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) kernel console output (not intermixed with test programs): valid length. [ 2737.252593][T29341] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 2737.886723][T29353] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6353'. [ 2738.794848][T29359] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6356'. [ 2739.391641][T29373] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2739.439124][T29373] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2739.468770][T29373] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2739.516280][T29373] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2739.525836][T29373] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2741.629496][T26756] Bluetooth: hci3: command tx timeout [ 2741.652125][T29359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2741.667493][T29359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2741.695565][T29359] bond0 (unregistering): Released all slaves [ 2741.751510][T29362] veth1_macvtap: left promiscuous mode [ 2741.757105][T29362] macsec0: entered promiscuous mode [ 2742.098466][T16353] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2742.220874][T16353] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2742.339108][T26396] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2742.375740][T16353] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2742.477582][T16353] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2742.660034][T26396] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2742.682287][T26396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2743.690057][T26396] usb 1-1: config 0 descriptor?? [ 2743.711113][T26756] Bluetooth: hci3: command tx timeout [ 2743.992633][T29398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6363'. [ 2744.996418][T29370] chnl_net:caif_netlink_parms(): no params data found [ 2745.803367][T26756] Bluetooth: hci3: command tx timeout [ 2746.381860][T29424] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6368'. [ 2746.404204][T29424] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6368'. [ 2746.530812][T26396] usb 1-1: Cannot read MAC address [ 2746.546194][T26396] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2746.582723][T26396] usb 1-1: USB disconnect, device number 15 [ 2746.610072][T16353] bridge_slave_1: left allmulticast mode [ 2746.616192][T16353] bridge_slave_1: left promiscuous mode [ 2746.623305][T16353] bridge0: port 2(bridge_slave_1) entered disabled state [ 2746.730212][T16353] bridge_slave_0: left allmulticast mode [ 2746.763204][T16353] bridge_slave_0: left promiscuous mode [ 2746.776353][T16353] bridge0: port 1(bridge_slave_0) entered disabled state [ 2746.990871][T29437] FAULT_INJECTION: forcing a failure. [ 2746.990871][T29437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2747.044921][T29437] CPU: 1 UID: 0 PID: 29437 Comm: syz.0.6372 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2747.044953][T29437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2747.044974][T29437] Call Trace: [ 2747.044983][T29437] [ 2747.044993][T29437] dump_stack_lvl+0x189/0x250 [ 2747.045024][T29437] ? __pfx____ratelimit+0x10/0x10 [ 2747.045048][T29437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2747.045071][T29437] ? __pfx__printk+0x10/0x10 [ 2747.045099][T29437] ? __might_fault+0xb0/0x130 [ 2747.045135][T29437] should_fail_ex+0x414/0x560 [ 2747.045163][T29437] _copy_from_user+0x2d/0xb0 [ 2747.045193][T29437] ___sys_sendmsg+0x158/0x2a0 [ 2747.045228][T29437] ? __pfx____sys_sendmsg+0x10/0x10 [ 2747.045303][T29437] ? __fget_files+0x2a/0x420 [ 2747.045325][T29437] ? __fget_files+0x3a0/0x420 [ 2747.045361][T29437] __sys_sendmmsg+0x227/0x430 [ 2747.045400][T29437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2747.045429][T29437] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 2747.045484][T29437] ? ksys_write+0x22a/0x250 [ 2747.045508][T29437] ? __pfx_ksys_write+0x10/0x10 [ 2747.045524][T29437] ? rcu_is_watching+0x15/0xb0 [ 2747.045556][T29437] __x64_sys_sendmmsg+0xa0/0xc0 [ 2747.045590][T29437] do_syscall_64+0xfa/0x3b0 [ 2747.045612][T29437] ? lockdep_hardirqs_on+0x9c/0x150 [ 2747.045634][T29437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2747.045655][T29437] ? clear_bhb_loop+0x60/0xb0 [ 2747.045681][T29437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2747.045701][T29437] RIP: 0033:0x7f8e29f8ebe9 [ 2747.045720][T29437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2747.045738][T29437] RSP: 002b:00007f8e2ae3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2747.045761][T29437] RAX: ffffffffffffffda RBX: 00007f8e2a1b5fa0 RCX: 00007f8e29f8ebe9 [ 2747.045775][T29437] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000004 [ 2747.045789][T29437] RBP: 00007f8e2ae3b090 R08: 0000000000000000 R09: 0000000000000000 [ 2747.045802][T29437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2747.045815][T29437] R13: 00007f8e2a1b6038 R14: 00007f8e2a1b5fa0 R15: 00007fff9e2f04b8 [ 2747.045851][T29437] [ 2747.388568][T22396] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2747.548304][T22396] usb 3-1: Using ep0 maxpacket: 8 [ 2747.583277][T22396] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2747.599875][T22396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2747.619180][T22396] usb 3-1: Product: syz [ 2747.635312][T22396] usb 3-1: Manufacturer: syz [ 2747.657434][T22396] usb 3-1: SerialNumber: syz [ 2747.690376][T22396] usb 3-1: config 0 descriptor?? [ 2747.890868][T26756] Bluetooth: hci3: command tx timeout [ 2748.214350][T22396] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2749.401126][T22396] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 2749.812655][T22396] usb 3-1: USB disconnect, device number 10 [ 2749.946648][T29448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6374'. [ 2750.476539][T29458] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6377'. [ 2750.774767][T29452] input: syz0 as /devices/virtual/input/input49 [ 2750.865923][T16353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2750.895678][T16353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2750.917217][T16353] bond0 (unregistering): Released all slaves [ 2750.949422][T16353] bond1 (unregistering): Released all slaves [ 2751.326175][T29452] netlink: 'syz.5.6376': attribute type 7 has an invalid length. [ 2751.379723][T16353] : left promiscuous mode [ 2751.477090][T29453] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 2751.478243][T29370] bridge0: port 1(bridge_slave_0) entered blocking state [ 2751.486009][T29453] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 2751.500848][T29453] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 2751.508791][T29453] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 2751.516707][T29453] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 2751.524661][T29453] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 2751.532618][T29453] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 2751.540568][T29453] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 2751.548524][T29453] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 2751.549100][T29370] bridge0: port 1(bridge_slave_0) entered disabled state [ 2751.556381][T29453] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 2751.608502][T29464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6380'. [ 2751.624676][T29370] bridge_slave_0: entered allmulticast mode [ 2751.660287][T29370] bridge_slave_0: entered promiscuous mode [ 2751.721937][T16353] tipc: Disabling bearer [ 2751.760156][T29370] bridge0: port 2(bridge_slave_1) entered blocking state [ 2751.760243][T16353] tipc: Left network mode [ 2751.767325][T29370] bridge0: port 2(bridge_slave_1) entered disabled state [ 2751.780651][T29370] bridge_slave_1: entered allmulticast mode [ 2751.792039][T29370] bridge_slave_1: entered promiscuous mode [ 2751.859209][ T5920] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2751.973985][T29370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2752.011778][T29370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2752.039402][ T5920] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2752.059786][ T5920] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2752.098195][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2752.116647][ T5920] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2752.136429][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2752.145162][ T5920] usb 5-1: Product: syz [ 2752.161782][ T5920] usb 5-1: Manufacturer: syz [ 2752.166526][ T5920] usb 5-1: SerialNumber: syz [ 2752.188215][ T5927] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2752.358189][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 2752.367831][ T5927] usb 3-1: config 254 has an invalid interface number: 240 but max is 0 [ 2752.414355][ T5927] usb 3-1: config 254 has an invalid descriptor of length 121, skipping remainder of the config [ 2752.432638][ T5920] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2752.447262][ T5927] usb 3-1: config 254 has no interface number 0 [ 2752.456759][T29370] team0: Port device team_slave_0 added [ 2752.466130][ T5927] usb 3-1: config 254 interface 240 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2752.487022][T29370] team0: Port device team_slave_1 added [ 2752.526602][ T5927] usb 3-1: New USB device found, idVendor=17ef, idProduct=3069, bcdDevice=3e.9b [ 2752.554709][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2752.577938][ T5927] usb 3-1: Product: syz [ 2752.596419][ T5927] usb 3-1: Manufacturer: syz [ 2752.602471][T16353] mac80211_hwsim hwsim24 wlan0 (unregistering): left allmulticast mode [ 2752.603090][ T5927] usb 3-1: SerialNumber: syz [ 2752.617985][T29480] FAULT_INJECTION: forcing a failure. [ 2752.617985][T29480] name failslab, interval 1, probability 0, space 0, times 0 [ 2752.633894][T29480] CPU: 0 UID: 0 PID: 29480 Comm: syz.5.6384 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2752.633931][T29480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2752.633944][T29480] Call Trace: [ 2752.633952][T29480] [ 2752.633963][T29480] dump_stack_lvl+0x189/0x250 [ 2752.633999][T29480] ? __pfx____ratelimit+0x10/0x10 [ 2752.634022][T29480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2752.634045][T29480] ? __pfx__printk+0x10/0x10 [ 2752.634079][T29480] ? __pfx___might_resched+0x10/0x10 [ 2752.634099][T29480] ? fs_reclaim_acquire+0x7d/0x100 [ 2752.634128][T29480] should_fail_ex+0x414/0x560 [ 2752.634155][T29480] should_failslab+0xa8/0x100 [ 2752.634180][T29480] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2752.634199][T29480] ? alloc_empty_file+0x55/0x1d0 [ 2752.634228][T29480] alloc_empty_file+0x55/0x1d0 [ 2752.634254][T29480] alloc_file_pseudo+0x13d/0x210 [ 2752.634283][T29480] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2752.634306][T29480] ? evm_inode_alloc_security+0x40/0xb0 [ 2752.634331][T29480] ? security_inode_alloc+0xd5/0x330 [ 2752.634371][T29480] sock_alloc_file+0xb8/0x2e0 [ 2752.634398][T29480] do_accept+0x34b/0x680 [ 2752.634432][T29480] ? __pfx_do_accept+0x10/0x10 [ 2752.634489][T29480] __sys_accept4+0x11c/0x1c0 [ 2752.634519][T29480] ? __pfx___sys_accept4+0x10/0x10 [ 2752.634550][T29480] ? rcu_is_watching+0x15/0xb0 [ 2752.634578][T29480] __x64_sys_accept4+0x9a/0xb0 [ 2752.634606][T29480] do_syscall_64+0xfa/0x3b0 [ 2752.634627][T29480] ? lockdep_hardirqs_on+0x9c/0x150 [ 2752.634648][T29480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2752.634668][T29480] ? clear_bhb_loop+0x60/0xb0 [ 2752.634694][T29480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2752.634712][T29480] RIP: 0033:0x7f49b278ebe9 [ 2752.634732][T29480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2752.634751][T29480] RSP: 002b:00007f49b35c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 2752.634773][T29480] RAX: ffffffffffffffda RBX: 00007f49b29b5fa0 RCX: 00007f49b278ebe9 [ 2752.634788][T29480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2752.634801][T29480] RBP: 00007f49b35c0090 R08: 0000000000000000 R09: 0000000000000000 [ 2752.634814][T29480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2752.634826][T29480] R13: 00007f49b29b6038 R14: 00007f49b29b5fa0 R15: 00007ffeaf72c468 [ 2752.634861][T29480] [ 2752.636719][ T5927] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2752.658701][T29466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2752.920435][T22396] r8152-cfgselector 3-1: USB disconnect, device number 11 [ 2752.944036][T29466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2752.969161][ T6000] usb 5-1: USB disconnect, device number 70 [ 2752.980560][ T6000] usblp0: removed [ 2753.205685][T16353] hsr_slave_0: left promiscuous mode [ 2753.232175][T16353] hsr_slave_1: left promiscuous mode [ 2753.239420][T16353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2753.247015][T16353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2753.257659][T16353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2753.265497][T16353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2753.309358][T16353] veth1_macvtap: left promiscuous mode [ 2753.315187][T16353] veth0_macvtap: left promiscuous mode [ 2753.321168][T16353] veth1_vlan: left promiscuous mode [ 2753.326705][T16353] veth0_vlan: left promiscuous mode [ 2753.705324][T16353] team0 (unregistering): Port device batadv1 removed [ 2753.780617][T29491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6388'. [ 2754.107774][T22396] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2754.299654][T22396] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 2754.327512][T22396] usb 3-1: config 0 has no interface number 0 [ 2754.337335][T22396] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2754.347279][T22396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2754.355558][T22396] usb 3-1: Product: syz [ 2754.360596][T22396] usb 3-1: Manufacturer: syz [ 2754.365801][T22396] usb 3-1: SerialNumber: syz [ 2754.421081][T22396] usb 3-1: config 0 descriptor?? [ 2756.000296][T22396] usb 3-1: Firmware version (0.0) predates our first public release. [ 2756.009754][T22396] usb 3-1: Please update to version 0.2 or newer [ 2756.212620][T16353] team0 (unregistering): Port device team_slave_1 removed [ 2756.321612][T16353] team0 (unregistering): Port device team_slave_0 removed [ 2757.874254][T29370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2757.881594][T29370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2757.907963][T29370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2757.919993][T29502] netlink: 'syz.2.6387': attribute type 3 has an invalid length. [ 2757.932493][T29502] netlink: 'syz.2.6387': attribute type 3 has an invalid length. [ 2758.141697][T29370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2758.157158][T29370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2758.196555][T22396] usb 3-1: USB disconnect, device number 12 [ 2758.283482][T29370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2759.789590][T29370] hsr_slave_0: entered promiscuous mode [ 2759.796346][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6398'. [ 2759.801405][T29370] hsr_slave_1: entered promiscuous mode [ 2759.805821][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6398'. [ 2759.818555][T29370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2759.879536][T29370] Cannot create hsr debugfs directory [ 2760.068888][T26756] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 2760.870840][T29549] overlayfs: failed to resolve './file0': -2 [ 2762.141101][T16353] IPVS: stop unused estimator thread 0... [ 2762.231437][T29561] blktrace: Concurrent blktraces are not allowed on nullb0 [ 2762.612845][T22396] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2763.029605][T22396] usb 6-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 2763.042271][T22396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2763.087352][T22396] usb 6-1: config 0 descriptor?? [ 2763.121087][T22396] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2763.302445][T22396] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2763.337403][ T5927] usb 6-1: USB disconnect, device number 15 [ 2763.370550][T27654] udevd[27654]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2763.733211][T29370] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2763.751541][T29370] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2763.803736][T29370] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2764.327104][T29370] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2764.747630][T29590] 9pnet_fd: Insufficient options for proto=fd [ 2764.803466][T29593] syz.5.6413: attempt to access beyond end of device [ 2764.803466][T29593] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 2764.816807][T29593] EXT4-fs (nbd5): unable to read superblock [ 2764.870328][T29594] sp0: Synchronizing with TNC [ 2764.914788][T29370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2765.193666][T29370] 8021q: adding VLAN 0 to HW filter on device team0 [ 2765.290731][T16738] bridge0: port 1(bridge_slave_0) entered blocking state [ 2765.298013][T16738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2765.358607][T16738] bridge0: port 2(bridge_slave_1) entered blocking state [ 2765.365763][T16738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2765.588705][T14807] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2765.779788][T14807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2765.801837][T14807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2765.819467][T14807] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2765.845601][T14807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2765.901785][T14807] usb 1-1: config 0 descriptor?? [ 2766.121135][T29370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2766.288807][T29370] veth0_vlan: entered promiscuous mode [ 2766.313345][T29370] veth1_vlan: entered promiscuous mode [ 2766.422308][T29370] veth0_macvtap: entered promiscuous mode [ 2766.441107][T29370] veth1_macvtap: entered promiscuous mode [ 2766.515304][T29370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2766.600159][T29370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2766.658798][T29370] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2766.686198][T29370] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2766.705470][T29370] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2766.736078][T29370] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2766.746973][T29600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2766.765023][T29600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2766.952383][T29622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6420'. [ 2767.729825][T29624] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2767.973928][T29629] overlay: filesystem on ./file0 not supported as upperdir [ 2768.210035][T16353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2768.246664][T14807] uclogic 0003:256C:006D.004A: v1 frame probing failed: -71 [ 2768.254139][T14807] uclogic 0003:256C:006D.004A: failed probing parameters: -71 [ 2768.266992][T14807] uclogic 0003:256C:006D.004A: probe with driver uclogic failed with error -71 [ 2768.276360][T16353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2768.293213][T14807] usb 1-1: USB disconnect, device number 16 [ 2768.425638][T16738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2768.464233][T16738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2768.491822][T29637] 9pnet_fd: Insufficient options for proto=fd [ 2768.784497][T29641] 9pnet_fd: Insufficient options for proto=fd [ 2770.723855][T22396] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2771.802108][T22396] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2772.645416][T22396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2772.664424][T29672] net_ratelimit: 44 callbacks suppressed [ 2772.664445][T29672] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 2772.724332][T22396] usb 1-1: config 0 descriptor?? [ 2774.830257][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.836750][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.990523][T29691] 9pnet_fd: Insufficient options for proto=fd [ 2775.166387][T22396] usb 1-1: Cannot read MAC address [ 2775.180196][T22396] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2775.252941][T22396] usb 1-1: USB disconnect, device number 17 [ 2776.022024][T29702] overlayfs: failed to resolve './file0': -2 [ 2777.696627][T29719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2777.707475][T29719] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2778.318360][T29730] netlink: 'syz.5.6447': attribute type 1 has an invalid length. [ 2779.495255][T29741] bridge0: port 3(gretap0) entered blocking state [ 2779.510740][T29741] bridge0: port 3(gretap0) entered disabled state [ 2779.544271][T29741] gretap0: entered allmulticast mode [ 2779.617920][T29741] gretap0: entered promiscuous mode [ 2779.642905][T29741] bridge0: port 3(gretap0) entered blocking state [ 2779.649657][T29741] bridge0: port 3(gretap0) entered forwarding state [ 2779.716216][T29743] gretap0: left allmulticast mode [ 2779.721335][T29743] gretap0: left promiscuous mode [ 2779.735259][T29743] bridge0: port 3(gretap0) entered disabled state [ 2779.990693][T29752] overlayfs: failed to resolve './file0': -2 [ 2781.867880][T29767] team_slave_0: entered promiscuous mode [ 2781.874719][T29767] team_slave_1: entered promiscuous mode [ 2781.914289][T29767] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2782.383391][ T5894] IPVS: starting estimator thread 0... [ 2782.484431][T29775] IPVS: using max 46 ests per chain, 110400 per kthread [ 2782.748545][T29782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6460'. [ 2782.771929][T29782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6460'. [ 2784.480328][T26756] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 2784.622364][T29796] overlayfs: failed to resolve './file0': -2 [ 2786.676333][T29814] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2787.152973][T29826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6472'. [ 2787.493647][ T5927] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2787.764015][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 2787.881746][ T5927] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 2788.116968][ T5927] usb 6-1: config 0 has no interface number 0 [ 2788.311626][ T5927] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2788.404704][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2788.448366][ T5927] usb 6-1: Product: syz [ 2788.466841][ T5927] usb 6-1: Manufacturer: syz [ 2788.471515][ T5927] usb 6-1: SerialNumber: syz [ 2788.540246][ T5927] usb 6-1: config 0 descriptor?? [ 2788.573035][ T5927] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2788.707224][T29837] sp0: Synchronizing with TNC [ 2788.795740][T29827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2788.829456][T29827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2789.023737][ T5894] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2789.149467][T29845] 9pnet_fd: Insufficient options for proto=fd [ 2789.213486][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 2789.239454][ T5894] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 2789.302062][ T5894] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2789.343483][ T5894] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2789.373705][ T5894] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2789.381992][ T5894] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2789.425057][ T5894] usb 1-1: config 0 has no interface number 0 [ 2789.462226][ T5894] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2789.506808][ T5894] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2789.552481][ T5894] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2789.564941][ T5894] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2789.578663][ T5894] usb 1-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 2789.590354][ T5894] usb 1-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 2789.604844][ T5894] usb 1-1: config 0 interface 125 has no altsetting 0 [ 2789.611667][ T5894] usb 1-1: config 0 interface 125 has no altsetting 2 [ 2789.621830][ T5894] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2789.632091][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2789.641929][ T5894] usb 1-1: Product: syz [ 2789.646265][ T5894] usb 1-1: Manufacturer: syz [ 2789.650925][ T5894] usb 1-1: SerialNumber: syz [ 2789.659169][ T5894] usb 1-1: config 0 descriptor?? [ 2789.686948][ T5894] usb 1-1: selecting invalid altsetting 2 [ 2789.743809][T22396] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2789.926483][T22396] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2789.946410][T22396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2790.132380][T22396] usb 2-1: config 0 descriptor?? [ 2790.285359][ T5927] gspca_topro: reg_r err -71 [ 2790.290206][ T5927] gspca_topro: Sensor soi763a [ 2790.321253][ T5927] usb 6-1: USB disconnect, device number 16 [ 2791.690466][ T5894] get_1284_register timeout [ 2791.703562][ T5894] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 2791.711573][ C1] usb 1-1: async_complete: urb error -104 [ 2791.711753][ C1] usb 1-1: async_complete: urb error -104 [ 2791.711906][ C1] usb 1-1: async_complete: urb error -104 [ 2791.712055][ C1] usb 1-1: async_complete: urb error -104 [ 2793.555488][T22396] usb 2-1: Cannot read MAC address [ 2793.561314][T22396] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2793.579397][T22396] usb 2-1: USB disconnect, device number 28 [ 2793.822949][ T43] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2794.014280][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 2794.296816][ T43] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 2794.339724][ T43] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2794.390224][ T43] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2794.420696][ T43] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2794.681828][T29873] gfs2: not a GFS2 filesystem [ 2795.326592][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2795.384464][T14807] usb 1-1: USB disconnect, device number 18 [ 2795.394678][ T43] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2795.458049][ T43] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2795.492956][ T43] usb 5-1: Product: syz [ 2795.510650][ T43] usb 5-1: Manufacturer: syz [ 2795.532937][ T43] usb 5-1: SerialNumber: syz [ 2795.581580][ T43] usb 5-1: config 0 descriptor?? [ 2795.615741][ T43] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2795.662388][ T43] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2796.158299][ T5927] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2796.201512][ T43] usb 5-1: USB disconnect, device number 71 [ 2796.273628][ T43] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 2796.335027][ T5927] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 2796.361720][ T5927] usb 3-1: config 0 has no interface number 0 [ 2796.385568][ T5927] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2796.407612][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2796.441395][ T5927] usb 3-1: Product: syz [ 2796.538385][ T5927] usb 3-1: Manufacturer: syz [ 2796.574601][ T5927] usb 3-1: SerialNumber: syz [ 2796.592691][T14807] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2796.613910][ T5927] usb 3-1: config 0 descriptor?? [ 2796.752843][T14807] usb 6-1: Using ep0 maxpacket: 16 [ 2796.766197][T14807] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 2796.783690][T14807] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2796.793956][T29317] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 2796.814566][T14807] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2796.845717][T14807] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2796.869921][T14807] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2796.901538][T14807] usb 6-1: config 0 has no interface number 0 [ 2796.929412][T14807] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2796.944030][T14807] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2796.955208][T14807] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2796.967207][T14807] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2796.982305][T14807] usb 6-1: config 0 interface 125 has no altsetting 0 [ 2796.991045][T14807] usb 6-1: config 0 interface 125 has no altsetting 2 [ 2797.003810][T14807] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2797.014980][T14807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2797.027555][T14807] usb 6-1: Product: syz [ 2797.031845][T14807] usb 6-1: Manufacturer: syz [ 2797.038770][T29317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2797.283337][T29317] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2797.292719][T14807] usb 6-1: SerialNumber: syz [ 2797.329891][T14807] usb 6-1: config 0 descriptor?? [ 2797.338523][T29317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2797.426621][T29896] netlink: 'syz.2.6487': attribute type 3 has an invalid length. [ 2797.435783][T29896] netlink: 'syz.2.6487': attribute type 3 has an invalid length. [ 2798.309919][ T5927] usb 3-1: Firmware version (0.0) predates our first public release. [ 2798.318794][T14807] usb 6-1: selecting invalid altsetting 2 [ 2798.327699][ T5927] usb 3-1: Please update to version 0.2 or newer [ 2798.344125][T29317] usb 2-1: config 0 descriptor?? [ 2798.364581][T29892] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2799.040140][T29317] elan 0003:04F3:0755.004B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 2799.076686][T29884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2799.109073][T29884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2799.167483][T29884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2799.175557][T22396] usb 2-1: USB disconnect, device number 29 [ 2799.229014][T29884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2799.383806][T14807] get_1284_register timeout [ 2799.404960][ T6000] usb 3-1: USB disconnect, device number 13 [ 2799.529839][T29892] kAFS: Can only specify source 'none' with -o dyn [ 2799.575436][T14807] uss720 6-1:0.125: probe with driver uss720 failed with error -5 [ 2799.583510][ C0] usb 6-1: async_complete: urb error -104 [ 2799.583599][ C0] usb 6-1: async_complete: urb error -104 [ 2799.583674][ C0] usb 6-1: async_complete: urb error -104 [ 2799.983047][T29904] fido_id[29904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2800.288907][T29907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2801.177864][ T6000] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2801.657577][ T6000] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2801.669515][T14807] usb 6-1: USB disconnect, device number 17 [ 2801.698261][ T6000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2801.970840][ T6000] usb 1-1: config 0 descriptor?? [ 2802.837770][ T5927] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2802.999040][ T5927] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 2803.008410][ T5927] usb 5-1: config 0 has no interface number 0 [ 2803.576667][ T5927] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2803.598767][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2803.650329][ T5927] usb 5-1: Product: syz [ 2803.665905][ T5927] usb 5-1: Manufacturer: syz [ 2803.685078][ T5927] usb 5-1: SerialNumber: syz [ 2803.708490][ T5927] usb 5-1: config 0 descriptor?? [ 2804.701068][ T6000] usb 1-1: Cannot read MAC address [ 2804.722057][ T6000] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2804.779669][ T6000] usb 1-1: USB disconnect, device number 19 [ 2805.126092][T29942] netlink: 'syz.4.6499': attribute type 3 has an invalid length. [ 2805.139021][T29942] netlink: 'syz.4.6499': attribute type 3 has an invalid length. [ 2805.383283][ T5927] usb 5-1: Firmware version (0.0) predates our first public release. [ 2806.267989][ T5927] usb 5-1: Please update to version 0.2 or newer [ 2806.370625][T29950] random: crng reseeded on system resumption [ 2806.785122][T17390] usb 5-1: USB disconnect, device number 72 [ 2807.041822][ T5927] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2807.053905][T29945] Restarting kernel threads ... [ 2807.060309][T29945] Done restarting kernel threads. [ 2807.092787][ T6000] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2807.223486][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 2807.250360][ T5927] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 2807.271671][ T5927] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2807.279929][ T5927] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2807.290989][ T6000] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2807.309112][ T6000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2807.309836][ T5927] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2807.324575][ T6000] usb 2-1: Product: syz [ 2807.330798][ T6000] usb 2-1: Manufacturer: syz [ 2807.340381][ T6000] usb 2-1: SerialNumber: syz [ 2807.345468][ T5927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2807.356871][ T6000] usb 2-1: config 0 descriptor?? [ 2807.366032][ T5927] usb 3-1: config 0 has no interface number 0 [ 2807.382184][ T5927] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2807.401430][ T5927] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2807.421638][T17390] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2807.449819][ T5927] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2807.479680][ T5927] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2807.511500][ T5927] usb 3-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 2807.522791][T14807] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2807.540357][ T5927] usb 3-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 2807.736504][T29966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6505'. [ 2807.751385][T29966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2807.760705][T29966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2807.837800][T29966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2807.881172][T29966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2808.039870][ T5927] usb 3-1: config 0 interface 125 has no altsetting 0 [ 2808.046914][ T5927] usb 3-1: config 0 interface 125 has no altsetting 2 [ 2808.059091][T17390] usb 5-1: Using ep0 maxpacket: 8 [ 2808.067185][T17390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2808.078599][T17390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2808.088514][ T5927] usb 3-1: string descriptor 0 read error: -71 [ 2808.110968][ T5927] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2808.122034][T17390] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2808.132183][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2808.140960][T14807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2808.156245][T14807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2808.175398][T17390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 2808.189181][T14807] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2808.199662][ T5927] usb 3-1: config 0 descriptor?? [ 2808.211337][T17390] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2808.222070][T14807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2808.230349][ T5927] usb 3-1: can't set config #0, error -71 [ 2808.237103][T17390] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2808.250018][ T5894] usb 2-1: USB disconnect, device number 30 [ 2808.267116][ T5927] usb 3-1: USB disconnect, device number 14 [ 2808.275307][T14807] usb 6-1: config 0 descriptor?? [ 2808.291238][T17390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2808.334321][T17390] usb 5-1: config 0 descriptor?? [ 2808.340609][T29961] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2808.494188][T29973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6510'. [ 2808.602619][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.613264][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.620263][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.627476][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.635299][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.642449][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.649423][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.656488][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.663710][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.673482][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.681616][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.688540][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.695776][T29373] Bluetooth: hci5: unexpected event 0x01 length: 0 < 1 [ 2808.703140][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.710044][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.721218][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.728100][T29373] Bluetooth: hci5: unexpected event 0x04 length: 0 < 10 [ 2808.735297][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.742343][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.749229][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.756578][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.763590][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.770490][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.778046][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.785259][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2808.792255][T29373] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2809.608394][ T6000] usb 5-1: USB disconnect, device number 73 [ 2809.678953][T26756] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 2810.189942][T14807] uclogic 0003:256C:006D.004C: interface is invalid, ignoring [ 2811.327259][T16838] bridge_slave_1: left allmulticast mode [ 2811.457010][T16838] bridge_slave_1: left promiscuous mode [ 2811.574103][T16838] bridge0: port 2(bridge_slave_1) entered disabled state [ 2811.629868][T14807] usb 6-1: USB disconnect, device number 18 [ 2812.120520][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2812.120543][ T30] audit: type=1326 audit(1755733230.024:11006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29998 comm="syz.2.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2812.164633][T16838] bridge_slave_0: left allmulticast mode [ 2812.212649][T16838] bridge_slave_0: left promiscuous mode [ 2812.296784][T16838] bridge0: port 1(bridge_slave_0) entered disabled state [ 2813.398443][ T30] audit: type=1326 audit(1755733230.024:11007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29998 comm="syz.2.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2813.421025][ T30] audit: type=1326 audit(1755733230.074:11008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29998 comm="syz.2.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2813.449285][ T30] audit: type=1326 audit(1755733230.074:11009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29998 comm="syz.2.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2813.706861][ T30] audit: type=1326 audit(1755733230.074:11010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29998 comm="syz.2.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2813.850375][ T30] audit: type=1326 audit(1755733230.104:11011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29998 comm="syz.2.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efd8758d69f code=0x7ffc0000 [ 2814.095580][ T30] audit: type=1326 audit(1755733230.104:11012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29998 comm="syz.2.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2814.225061][ T30] audit: type=1326 audit(1755733230.104:11013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29998 comm="syz.2.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2814.430232][ T30] audit: type=1326 audit(1755733230.104:11014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29998 comm="syz.2.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2814.452298][ T30] audit: type=1326 audit(1755733230.104:11015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29998 comm="syz.2.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2815.210956][T22396] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2815.395727][T22396] usb 6-1: Using ep0 maxpacket: 16 [ 2815.405423][T22396] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 2815.426440][T22396] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2815.435203][T22396] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2815.449354][T22396] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2815.466522][T22396] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2815.487738][T22396] usb 6-1: config 0 has no interface number 0 [ 2815.494396][T22396] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2815.500685][T29317] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2815.510213][T22396] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2815.523740][T22396] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2815.535745][T22396] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2815.549920][T22396] usb 6-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 2815.567093][T22396] usb 6-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 2815.581212][T22396] usb 6-1: config 0 interface 125 has no altsetting 0 [ 2815.588011][T22396] usb 6-1: config 0 interface 125 has no altsetting 2 [ 2815.597531][T22396] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2815.606755][T22396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2815.617604][T22396] usb 6-1: Product: syz [ 2815.622457][T22396] usb 6-1: Manufacturer: syz [ 2815.627087][T22396] usb 6-1: SerialNumber: syz [ 2815.640112][T22396] usb 6-1: config 0 descriptor?? [ 2815.658974][T22396] usb 6-1: selecting invalid altsetting 2 [ 2815.688144][T29317] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2815.698154][T29317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2815.718702][T29317] usb 5-1: Product: syz [ 2815.723417][T29317] usb 5-1: Manufacturer: syz [ 2815.728254][T29317] usb 5-1: SerialNumber: syz [ 2815.751251][T29317] usb 5-1: config 0 descriptor?? [ 2815.971336][T29317] usb 5-1: USB disconnect, device number 74 [ 2816.116350][T16838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2816.133030][T16838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2816.144465][T16838] bond0 (unregistering): Released all slaves [ 2816.749440][T22396] get_1284_register timeout [ 2816.759617][T22396] uss720 6-1:0.125: probe with driver uss720 failed with error -5 [ 2816.759720][ C1] usb 6-1: async_complete: urb error -104 [ 2816.759889][ C1] usb 6-1: async_complete: urb error -104 [ 2816.760063][ C1] usb 6-1: async_complete: urb error -104 [ 2816.760236][ C1] usb 6-1: async_complete: urb error -104 [ 2817.862610][T29373] Bluetooth: hci0: command 0x0406 tx timeout [ 2818.021307][T22396] usb 6-1: USB disconnect, device number 19 [ 2818.223304][T30049] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6529'. [ 2819.830007][T22396] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2820.011369][T16838] hsr_slave_0: left promiscuous mode [ 2820.056331][T22396] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2820.069625][T22396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2820.327601][T16838] hsr_slave_1: left promiscuous mode [ 2820.366858][T22396] usb 6-1: config 0 descriptor?? [ 2820.392519][T16838] veth1_macvtap: left promiscuous mode [ 2820.399961][T16838] veth0_macvtap: left promiscuous mode [ 2820.405791][T16838] veth1_vlan: left promiscuous mode [ 2820.415026][T16838] veth0_vlan: left promiscuous mode [ 2822.059925][T29868] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2822.219827][T29868] usb 2-1: Using ep0 maxpacket: 16 [ 2822.427815][T29868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2823.209953][T29868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2823.338615][T29868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2823.357954][T22396] usb 6-1: Cannot read MAC address [ 2823.364145][T22396] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2823.375623][T29868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2823.399558][T29868] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2823.419902][T22396] usb 6-1: USB disconnect, device number 20 [ 2823.494612][T29868] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2823.522607][T29868] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2823.534533][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 2823.534552][ T30] audit: type=1326 audit(1755733241.445:11031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30098 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2823.595999][T29868] usb 2-1: Manufacturer: syz [ 2823.617917][T29868] usb 2-1: config 0 descriptor?? [ 2823.668679][ T30] audit: type=1326 audit(1755733241.495:11032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30098 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2823.907536][ T30] audit: type=1326 audit(1755733241.495:11033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30098 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2824.304067][ T30] audit: type=1326 audit(1755733241.495:11034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30098 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2824.610678][ T30] audit: type=1326 audit(1755733241.495:11035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30098 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2824.632485][ C1] vkms_vblank_simulate: vblank timer overrun [ 2824.639485][ T30] audit: type=1326 audit(1755733241.495:11036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30098 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efd8758d69f code=0x7ffc0000 [ 2824.662200][T29868] usb 2-1: can't set config #0, error -71 [ 2824.670115][T29868] usb 2-1: USB disconnect, device number 31 [ 2824.686684][ T30] audit: type=1326 audit(1755733241.495:11037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30098 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2824.736806][ T30] audit: type=1326 audit(1755733241.495:11038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30098 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2824.794991][ T30] audit: type=1326 audit(1755733241.505:11039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30098 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2824.816769][ C1] vkms_vblank_simulate: vblank timer overrun [ 2824.867023][ T30] audit: type=1326 audit(1755733241.515:11040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30098 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8758ebe9 code=0x7ffc0000 [ 2825.859342][T29317] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2826.029504][T29317] usb 6-1: Using ep0 maxpacket: 16 [ 2826.052047][T29317] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 2826.060930][T29317] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2826.075968][T29317] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2826.088757][T29317] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2826.099445][T29317] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2826.123610][T29317] usb 6-1: config 0 has no interface number 0 [ 2826.130219][T29317] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2826.155905][T29317] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2826.156083][T16838] team0 (unregistering): Port device team_slave_1 removed [ 2826.168476][T29317] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2826.211586][T29317] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2826.231118][T29317] usb 6-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 2826.242814][T29317] usb 6-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 2826.256610][T29317] usb 6-1: config 0 interface 125 has no altsetting 0 [ 2826.263867][T29317] usb 6-1: config 0 interface 125 has no altsetting 2 [ 2826.290749][T29317] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2826.316245][T16838] team0 (unregistering): Port device team_slave_0 removed [ 2826.326180][T29317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2826.350756][T29317] usb 6-1: Product: syz [ 2826.359433][T29317] usb 6-1: Manufacturer: syz [ 2826.369255][T29317] usb 6-1: SerialNumber: syz [ 2826.397049][T29317] usb 6-1: config 0 descriptor?? [ 2826.413687][T29317] usb 6-1: selecting invalid altsetting 2 [ 2827.596115][T29317] get_1284_register timeout [ 2827.601439][T29317] uss720 6-1:0.125: probe with driver uss720 failed with error -5 [ 2827.609453][ C0] usb 6-1: async_complete: urb error -104 [ 2827.609543][ C0] usb 6-1: async_complete: urb error -104 [ 2827.609619][ C0] usb 6-1: async_complete: urb error -104 [ 2827.609693][ C0] usb 6-1: async_complete: urb error -104 [ 2828.956500][ T5927] usb 6-1: USB disconnect, device number 21 [ 2829.038882][T14807] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2829.252654][T14807] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 2829.266485][T14807] usb 3-1: config 0 has no interface number 0 [ 2829.281454][T14807] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2829.298863][T14807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2829.349920][T14807] usb 3-1: Product: syz [ 2829.354173][T14807] usb 3-1: Manufacturer: syz [ 2829.410996][T14807] usb 3-1: SerialNumber: syz [ 2829.430239][T14807] usb 3-1: config 0 descriptor?? [ 2831.024991][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2831.025011][ T30] audit: type=1326 audit(1755733248.936:11057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30150 comm="syz.5.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b278ebe9 code=0x7ffc0000 [ 2831.053006][ C1] vkms_vblank_simulate: vblank timer overrun [ 2831.095761][ T30] audit: type=1326 audit(1755733248.976:11058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30150 comm="syz.5.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b278ebe9 code=0x7ffc0000 [ 2831.117634][ C1] vkms_vblank_simulate: vblank timer overrun [ 2831.385043][ T30] audit: type=1326 audit(1755733248.976:11059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30150 comm="syz.5.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f49b278ebe9 code=0x7ffc0000 [ 2831.423604][ T30] audit: type=1326 audit(1755733248.986:11060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30150 comm="syz.5.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b278ebe9 code=0x7ffc0000 [ 2832.411121][T14807] usb 3-1: Firmware version (0.0) predates our first public release. [ 2832.453153][T14807] usb 3-1: Please update to version 0.2 or newer [ 2832.518089][ T30] audit: type=1326 audit(1755733248.986:11061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30150 comm="syz.5.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b278ebe9 code=0x7ffc0000 [ 2832.558950][ T30] audit: type=1326 audit(1755733248.986:11062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30150 comm="syz.5.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f49b278ebe9 code=0x7ffc0000 [ 2832.681690][ T30] audit: type=1326 audit(1755733248.986:11063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30150 comm="syz.5.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b278ebe9 code=0x7ffc0000 [ 2832.704646][ T30] audit: type=1326 audit(1755733248.986:11064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30150 comm="syz.5.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b278ebe9 code=0x7ffc0000 [ 2832.727018][ T30] audit: type=1326 audit(1755733248.986:11065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30150 comm="syz.5.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49b278ebe9 code=0x7ffc0000 [ 2832.837158][ T30] audit: type=1326 audit(1755733248.986:11066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30150 comm="syz.5.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b278ebe9 code=0x7ffc0000 [ 2832.933627][T27654] udevd[27654]: failed to send result of seq 35633 to main daemon: Connection refused [ 2836.001471][T30195] sp0: Synchronizing with TNC [ 2836.711333][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.728943][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2838.278262][ T5920] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2838.340623][T29317] usb 3-1: USB disconnect, device number 15 [ 2838.461089][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 2838.536043][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2838.574088][ T5920] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2838.604227][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2838.618875][ T5920] usb 6-1: config 0 descriptor?? [ 2838.629699][ T5920] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2839.046840][T30206] mkiss: ax0: crc mode is auto. [ 2839.128150][T29317] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2840.219808][T29317] usb 5-1: Using ep0 maxpacket: 8 [ 2840.225179][ T5920] gspca_vc032x: reg_r err -110 [ 2840.235553][ T5920] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 2840.440282][T29317] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2840.468015][ T5920] usb 6-1: USB disconnect, device number 22 [ 2840.506597][T29317] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2840.514872][T26756] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 2840.819480][T29317] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2840.845037][T29317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2840.855225][T29317] usb 5-1: Product: syz [ 2840.862316][T29317] usb 5-1: Manufacturer: syz [ 2840.991547][T30239] sp0: Synchronizing with TNC [ 2841.683703][T29317] usb 5-1: SerialNumber: syz [ 2842.909178][T30252] sp0: Synchronizing with TNC [ 2844.067416][ T5920] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2844.343238][T30257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6581'. [ 2844.432622][T30258] FAULT_INJECTION: forcing a failure. [ 2844.432622][T30258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2844.446176][T30258] CPU: 0 UID: 0 PID: 30258 Comm: syz.0.6581 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2844.446205][T30258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2844.446223][T30258] Call Trace: [ 2844.446233][T30258] [ 2844.446242][T30258] dump_stack_lvl+0x189/0x250 [ 2844.446273][T30258] ? __pfx____ratelimit+0x10/0x10 [ 2844.446297][T30258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2844.446330][T30258] ? __pfx__printk+0x10/0x10 [ 2844.446358][T30258] ? __might_fault+0xb0/0x130 [ 2844.446394][T30258] should_fail_ex+0x414/0x560 [ 2844.446422][T30258] _copy_from_user+0x2d/0xb0 [ 2844.446453][T30258] __sys_bpf+0x1ed/0x860 [ 2844.446487][T30258] ? __pfx___sys_bpf+0x10/0x10 [ 2844.446552][T30258] __x64_sys_bpf+0x7c/0x90 [ 2844.446581][T30258] do_syscall_64+0xfa/0x3b0 [ 2844.446607][T30258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2844.446628][T30258] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2844.446650][T30258] ? clear_bhb_loop+0x60/0xb0 [ 2844.446676][T30258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2844.446697][T30258] RIP: 0033:0x7f8e29f8ebe9 [ 2844.446717][T30258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2844.446736][T30258] RSP: 002b:00007f8e2ae1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2844.446760][T30258] RAX: ffffffffffffffda RBX: 00007f8e2a1b6090 RCX: 00007f8e29f8ebe9 [ 2844.446777][T30258] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 2844.446791][T30258] RBP: 00007f8e2ae1a090 R08: 0000000000000000 R09: 0000000000000000 [ 2844.446805][T30258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2844.446818][T30258] R13: 00007f8e2a1b6128 R14: 00007f8e2a1b6090 R15: 00007fff9e2f04b8 [ 2844.446852][T30258] [ 2844.997547][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 2845.033954][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2846.748916][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2846.759006][ T5920] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2846.768560][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2846.855817][ T5920] usb 6-1: config 0 descriptor?? [ 2846.999141][ T5920] usb 6-1: can't set config #0, error -71 [ 2847.033240][ T5920] usb 6-1: USB disconnect, device number 23 [ 2847.231701][T29317] usb 5-1: can't set config #1, error -110 [ 2847.500614][T30266] n (unregistering): Released all slaves [ 2847.812327][T17390] usb 5-1: USB disconnect, device number 75 [ 2847.818028][T30271] netlink: 79 bytes leftover after parsing attributes in process `syz.0.6584'. [ 2847.827698][T30271] netlink: 79 bytes leftover after parsing attributes in process `syz.0.6584'. [ 2848.260571][T26756] Bluetooth: hci4: unexpected event for opcode 0x080f [ 2848.267722][T17390] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2848.428632][T17390] usb 2-1: Using ep0 maxpacket: 16 [ 2848.529633][T17390] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 2848.717306][T17390] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 2848.725550][T17390] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 2848.816260][T17390] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 2848.871369][T17390] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2848.936945][T17390] usb 2-1: config 0 has no interface number 0 [ 2848.963546][T17390] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2849.015455][T17390] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2849.147067][T17390] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2849.476428][T17390] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2849.676561][T17390] usb 2-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 2849.710319][T17390] usb 2-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 2849.765396][T17390] usb 2-1: config 0 interface 125 has no altsetting 0 [ 2849.787520][T17390] usb 2-1: config 0 interface 125 has no altsetting 2 [ 2849.815354][ T43] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 2849.824414][T17390] usb 2-1: string descriptor 0 read error: -71 [ 2849.836947][T17390] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2849.881478][T17390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2849.921188][T17390] usb 2-1: config 0 descriptor?? [ 2849.946910][T17390] usb 2-1: can't set config #0, error -71 [ 2849.968606][T17390] usb 2-1: USB disconnect, device number 32 [ 2850.148843][ T43] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 2850.157512][ T43] usb 6-1: config 0 has no interface number 0 [ 2850.163662][ T43] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2850.194301][ T43] usb 6-1: config 0 interface 200 has no altsetting 0 [ 2850.720995][ T43] usb 6-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 2851.171025][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2851.179363][ T43] usb 6-1: Product: syz [ 2851.183633][ T43] usb 6-1: Manufacturer: syz [ 2851.188368][ T43] usb 6-1: SerialNumber: syz [ 2851.209212][ T43] usb 6-1: config 0 descriptor?? [ 2851.251241][T30303] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input51 [ 2851.697248][T30287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2851.755064][T30287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2851.805723][T30287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2851.875970][T30287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2851.971407][ T43] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input52 [ 2852.060007][ T43] usb 6-1: USB disconnect, device number 24 [ 2853.586613][T30324] sp0: Synchronizing with TNC [ 2854.266050][T30330] FAULT_INJECTION: forcing a failure. [ 2854.266050][T30330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2854.316083][T30330] CPU: 1 UID: 0 PID: 30330 Comm: syz.1.6600 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2854.316115][T30330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2854.316128][T30330] Call Trace: [ 2854.316138][T30330] [ 2854.316147][T30330] dump_stack_lvl+0x189/0x250 [ 2854.316177][T30330] ? __pfx____ratelimit+0x10/0x10 [ 2854.316201][T30330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2854.316224][T30330] ? __pfx__printk+0x10/0x10 [ 2854.316253][T30330] ? fs_reclaim_acquire+0x7d/0x100 [ 2854.316288][T30330] should_fail_ex+0x414/0x560 [ 2854.316317][T30330] prepare_alloc_pages+0x213/0x610 [ 2854.316351][T30330] __alloc_frozen_pages_noprof+0x123/0x370 [ 2854.316383][T30330] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2854.316431][T30330] alloc_pages_bulk_noprof+0x560/0x710 [ 2854.316466][T30330] ? alloc_pages_noprof+0xbe/0x190 [ 2854.316493][T30330] kasan_populate_vmalloc+0xba/0x1a0 [ 2854.316529][T30330] alloc_vmap_area+0xd51/0x1490 [ 2854.316570][T30330] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2854.316590][T30330] ? __kasan_kmalloc+0x93/0xb0 [ 2854.316612][T30330] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 2854.316633][T30330] ? __sys_bpf+0x67e/0x860 [ 2854.316659][T30330] ? __get_vm_area_node+0x13f/0x300 [ 2854.316680][T30330] ? sock_hash_alloc+0x266/0x4e0 [ 2854.316701][T30330] __get_vm_area_node+0x1f8/0x300 [ 2854.316732][T30330] __vmalloc_node_range_noprof+0x301/0x12f0 [ 2854.316756][T30330] ? sock_hash_alloc+0x266/0x4e0 [ 2854.316810][T30330] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2854.316833][T30330] ? rcu_is_watching+0x15/0xb0 [ 2854.316857][T30330] ? trace_kmalloc+0x1f/0xd0 [ 2854.316874][T30330] ? __kmalloc_node_noprof+0x293/0x4e0 [ 2854.316894][T30330] ? bpf_map_area_alloc+0x64/0x180 [ 2854.316918][T30330] bpf_map_area_alloc+0x12d/0x180 [ 2854.316938][T30330] ? sock_hash_alloc+0x266/0x4e0 [ 2854.316962][T30330] sock_hash_alloc+0x266/0x4e0 [ 2854.316989][T30330] map_create+0xaa0/0x1310 [ 2854.317033][T30330] ? security_bpf+0x7e/0x300 [ 2854.317062][T30330] __sys_bpf+0x67e/0x860 [ 2854.317094][T30330] ? __pfx___sys_bpf+0x10/0x10 [ 2854.317139][T30330] ? ksys_write+0x22a/0x250 [ 2854.317163][T30330] ? __pfx_ksys_write+0x10/0x10 [ 2854.317192][T30330] __x64_sys_bpf+0x7c/0x90 [ 2854.317220][T30330] do_syscall_64+0xfa/0x3b0 [ 2854.317242][T30330] ? lockdep_hardirqs_on+0x9c/0x150 [ 2854.317263][T30330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2854.317283][T30330] ? clear_bhb_loop+0x60/0xb0 [ 2854.317309][T30330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2854.317330][T30330] RIP: 0033:0x7f03cb98ebe9 [ 2854.317349][T30330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2854.317367][T30330] RSP: 002b:00007f03cc73f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2854.317390][T30330] RAX: ffffffffffffffda RBX: 00007f03cbbb5fa0 RCX: 00007f03cb98ebe9 [ 2854.317406][T30330] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 2854.317420][T30330] RBP: 00007f03cc73f090 R08: 0000000000000000 R09: 0000000000000000 [ 2854.317433][T30330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2854.317447][T30330] R13: 00007f03cbbb6038 R14: 00007f03cbbb5fa0 R15: 00007ffc685b3028 [ 2854.317481][T30330] [ 2857.628587][ T43] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2857.870197][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 2857.921587][ T43] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 2857.984006][ T43] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2858.099655][ T43] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2858.212648][ T43] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2858.299490][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2858.393359][ T43] usb 3-1: config 0 has no interface number 0 [ 2858.457829][ T43] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2858.504803][ T43] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2858.544353][ T43] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2858.572771][ T43] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2858.612170][ T43] usb 3-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 2858.676707][ T43] usb 3-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 2858.740608][ T43] usb 3-1: config 0 interface 125 has no altsetting 0 [ 2858.773010][ T43] usb 3-1: config 0 interface 125 has no altsetting 2 [ 2859.843147][T30385] sp0: Synchronizing with TNC [ 2861.245309][T30183] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2862.755286][ T5920] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2863.008081][T30183] usb 6-1: Using ep0 maxpacket: 32 [ 2863.027284][T30183] usb 6-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 2863.074529][T30183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2863.104833][T30183] usb 6-1: config 0 descriptor?? [ 2863.127160][ T5920] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2863.140749][T30183] usb 6-1: dvb_usb_v2: found a 'Anysee' in warm state [ 2863.152267][ T5920] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2863.177919][ T5920] usb 5-1: config 220 interface 0 has no altsetting 0 [ 2863.198576][ T5920] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2863.214605][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2863.245807][T30183] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2863.247622][ T5920] usb 5-1: Product: syz [ 2863.254661][ T43] usb 3-1: string descriptor 0 read error: -71 [ 2863.282064][T30183] dvb_usb_anysee 6-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 2863.291986][ T43] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2863.332093][ T5920] usb 5-1: Manufacturer: syz [ 2863.342154][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2863.352368][ T5920] usb 5-1: SerialNumber: syz [ 2863.375056][T30387] 9pnet_fd: p9_fd_create_unix (30387): problem connecting socket: ./bus: -111 [ 2863.419218][ T43] usb 3-1: config 0 descriptor?? [ 2863.598281][T30387] overlayfs: failed to resolve './file1': -2 [ 2863.609488][ T43] usb 3-1: can't set config #0, error -71 [ 2863.628538][ T43] usb 3-1: USB disconnect, device number 16 [ 2863.645043][T30183] usb 6-1: USB disconnect, device number 25 [ 2864.355280][T30402] kexec: Could not allocate control_code_buffer [ 2865.701607][ T5920] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 2865.951667][T30424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6627'. [ 2865.960873][ T5920] usb 5-1: No valid video chain found. [ 2866.623260][ T5920] usb 5-1: USB disconnect, device number 76 [ 2867.435982][T30444] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6630'. [ 2869.861360][ T43] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2870.294903][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 2870.296784][T30486] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2870.310610][T30486] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2870.319517][T30486] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2870.737430][T30486] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 2870.754790][T30486] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 2870.770507][T30486] comedi comedi3: 8255: I/O port conflict (0xffffffff80000005,4) [ 2870.779616][T30486] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 2870.791054][T30486] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2870.799724][T30486] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2870.810990][T30486] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2871.057180][ T43] usb 5-1: device descriptor read/all, error -71 [ 2872.247049][T30503] netlink: 79 bytes leftover after parsing attributes in process `syz.0.6646'. [ 2872.256440][T30503] netlink: 79 bytes leftover after parsing attributes in process `syz.0.6646'. [ 2875.137516][T30525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2875.703877][T29317] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2876.153616][T29317] usb 5-1: device descriptor read/64, error -71 [ 2876.507370][T29317] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2877.086342][T29317] usb 5-1: device descriptor read/64, error -71 [ 2877.103569][T30556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2877.249313][T29317] usb usb5-port1: attempt power cycle [ 2877.533806][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2877.593606][T29317] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2877.678405][T29317] usb 5-1: device descriptor read/8, error -71 [ 2877.713478][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 2877.726634][T30568] trusted_key: encrypted_key: insufficient parameters specified [ 2877.955373][ T43] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 2877.969708][ T43] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2877.978266][ T43] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2877.991379][ T43] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2878.001365][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2878.018684][ T43] usb 1-1: config 0 has no interface number 0 [ 2878.041289][ T43] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2878.077705][ T43] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2878.106637][ T43] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2878.136389][ T43] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2878.158836][ T43] usb 1-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 2878.159437][T30574] overlay: Unknown parameter 'appraise_type' [ 2878.162641][T30573] netlink: 79 bytes leftover after parsing attributes in process `syz.2.6667'. [ 2878.198406][T30575] FAULT_INJECTION: forcing a failure. [ 2878.198406][T30575] name failslab, interval 1, probability 0, space 0, times 0 [ 2878.220149][ T43] usb 1-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 2878.239124][T30575] CPU: 1 UID: 0 PID: 30575 Comm: syz.1.6663 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2878.239156][T30575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2878.239169][T30575] Call Trace: [ 2878.239179][T30575] [ 2878.239188][T30575] dump_stack_lvl+0x189/0x250 [ 2878.239226][T30575] ? __pfx____ratelimit+0x10/0x10 [ 2878.239249][T30575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2878.239274][T30575] ? __pfx__printk+0x10/0x10 [ 2878.239307][T30575] ? __pfx___might_resched+0x10/0x10 [ 2878.239336][T30575] should_fail_ex+0x414/0x560 [ 2878.239365][T30575] should_failslab+0xa8/0x100 [ 2878.239391][T30575] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2878.239413][T30575] ? getname_flags+0xb8/0x540 [ 2878.239443][T30575] getname_flags+0xb8/0x540 [ 2878.239473][T30575] user_path_at+0x24/0x60 [ 2878.239503][T30575] do_sys_truncate+0xa3/0x190 [ 2878.239525][T30575] ? __pfx_do_sys_truncate+0x10/0x10 [ 2878.239547][T30575] ? __pfx_ksys_write+0x10/0x10 [ 2878.239565][T30575] ? rcu_is_watching+0x15/0xb0 [ 2878.239598][T30575] __x64_sys_truncate+0x5b/0x70 [ 2878.239621][T30575] do_syscall_64+0xfa/0x3b0 [ 2878.239643][T30575] ? lockdep_hardirqs_on+0x9c/0x150 [ 2878.239665][T30575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2878.239686][T30575] ? clear_bhb_loop+0x60/0xb0 [ 2878.239712][T30575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2878.239732][T30575] RIP: 0033:0x7f03cb98ebe9 [ 2878.239752][T30575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2878.239771][T30575] RSP: 002b:00007f03cc71e038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 2878.239794][T30575] RAX: ffffffffffffffda RBX: 00007f03cbbb6090 RCX: 00007f03cb98ebe9 [ 2878.239810][T30575] RDX: 0000000000000000 RSI: 000000000000706d RDI: 00002000000001c0 [ 2878.239835][T30575] RBP: 00007f03cc71e090 R08: 0000000000000000 R09: 0000000000000000 [ 2878.239849][T30575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2878.239862][T30575] R13: 00007f03cbbb6128 R14: 00007f03cbbb6090 R15: 00007ffc685b3028 [ 2878.239897][T30575] [ 2878.253571][T30573] netlink: 79 bytes leftover after parsing attributes in process `syz.2.6667'. [ 2878.278601][ T43] usb 1-1: config 0 interface 125 has no altsetting 0 [ 2878.673966][ T43] usb 1-1: config 0 interface 125 has no altsetting 2 [ 2878.772484][T30580] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6669'. [ 2879.063401][T29317] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 2879.789146][T29317] usb 5-1: config 0 has no interfaces? [ 2879.795295][T29317] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2879.804520][T29317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2879.825796][T29317] usb 5-1: config 0 descriptor?? [ 2880.080203][T30578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2880.132801][ T43] usb 1-1: string descriptor 0 read error: -71 [ 2880.142916][ T43] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2880.153249][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2880.164118][T30578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2880.174039][ T43] usb 1-1: config 0 descriptor?? [ 2880.183266][ T43] usb 1-1: can't set config #0, error -71 [ 2880.195563][T30578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2881.014620][T30578] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2881.052279][ T43] usb 1-1: USB disconnect, device number 21 [ 2881.109269][T29317] usb 5-1: USB disconnect, device number 82 [ 2881.397801][T30600] tipc: Enabling of bearer rejected, failed to enable media [ 2881.643969][T30604] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2881.696556][ T43] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2881.945434][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2881.983096][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2882.018330][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2882.052848][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2882.072382][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2882.115431][ T43] usb 1-1: config 0 descriptor?? [ 2882.370956][T30598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2882.415724][T30598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2882.443953][ T5920] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2882.488564][T30616] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6680'. [ 2882.617129][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 2882.626764][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 2882.642484][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2882.664564][ T5920] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2882.686791][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2882.701059][ T5920] usb 2-1: Product: syz [ 2882.715689][ T5920] usb 2-1: Manufacturer: syz [ 2882.720668][ T5920] usb 2-1: SerialNumber: syz [ 2882.734507][ T5920] usb 2-1: config 0 descriptor?? [ 2882.770440][ T43] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2883.672789][ T5920] rc_core: IR keymap rc-streamzap not found [ 2883.689080][ T5920] Registered IR keymap rc-empty [ 2883.705144][ T5920] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2883.978758][ T5920] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input53 [ 2884.002913][T29625] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2884.004208][ T5920] usb 2-1: USB disconnect, device number 33 [ 2884.804332][T29317] usb 1-1: USB disconnect, device number 22 [ 2884.924679][T29625] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 2884.942880][T29625] usb 6-1: config 0 has no interface number 0 [ 2884.952843][T29625] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2884.972488][T29625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2884.979195][T30639] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2884.980513][T29625] usb 6-1: Product: syz [ 2885.005208][T30639] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2885.034399][T29625] usb 6-1: Manufacturer: syz [ 2885.039455][T29625] usb 6-1: SerialNumber: syz [ 2885.064274][T29625] usb 6-1: config 0 descriptor?? [ 2885.282821][T17390] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 2885.327435][T29317] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2885.464843][T17390] usb 3-1: config 0 has no interfaces? [ 2885.471226][T17390] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2885.482085][T17390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2885.501197][T17390] usb 3-1: config 0 descriptor?? [ 2885.512855][T29317] usb 1-1: Using ep0 maxpacket: 8 [ 2885.529196][T29317] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 2885.547966][T29317] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 2885.565653][T29317] usb 1-1: config 0 has no interface number 0 [ 2885.577839][T29317] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2885.593516][T29317] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2885.608431][T29317] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 2885.617224][T29317] usb 1-1: Product: syz [ 2885.625965][T29317] usb 1-1: config 0 descriptor?? [ 2885.861096][T30651] netlink: 'syz.5.6685': attribute type 3 has an invalid length. [ 2885.869270][T30651] netlink: 'syz.5.6685': attribute type 3 has an invalid length. [ 2886.225347][T30643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2886.235024][T30643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2886.265899][T30643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2886.279295][T30643] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2886.319002][T14807] usb 3-1: USB disconnect, device number 17 [ 2886.368451][T30653] netlink: 79 bytes leftover after parsing attributes in process `syz.4.6690'. [ 2886.379988][T30653] netlink: 79 bytes leftover after parsing attributes in process `syz.4.6690'. [ 2886.735080][T29625] usb 6-1: Firmware version (0.0) predates our first public release. [ 2886.781738][T29625] usb 6-1: Please update to version 0.2 or newer [ 2887.435199][T29625] usb 6-1: USB disconnect, device number 26 [ 2887.537166][T30660] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6691'. [ 2888.158043][T29317] usb 1-1: USB disconnect, device number 23 [ 2889.776842][T30689] overlayfs: missing 'lowerdir' [ 2889.895802][T30693] netlink: 79 bytes leftover after parsing attributes in process `syz.5.6702'. [ 2889.905270][T30693] netlink: 79 bytes leftover after parsing attributes in process `syz.5.6702'. [ 2890.087950][T29317] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 2891.037719][T29317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2891.161838][T29317] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2891.217914][T30703] trusted_key: encrypted_key: insufficient parameters specified [ 2891.226365][T29317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2891.305188][T29317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2891.351913][T29317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2891.403453][T29625] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 2891.428364][T29317] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2891.462328][T29317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2891.481739][T29317] usb 2-1: Product: syz [ 2891.485958][T29317] usb 2-1: Manufacturer: syz [ 2891.490591][T29317] usb 2-1: SerialNumber: syz [ 2891.520223][T29317] usb 2-1: config 0 descriptor?? [ 2891.755489][T29625] usb 1-1: config 0 has no interfaces? [ 2891.761093][T29625] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2891.819285][T29625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2891.866214][T29625] usb 1-1: config 0 descriptor?? [ 2892.052531][T29317] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 2892.073617][T29317] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 2892.105670][T30701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2892.145082][T30701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2892.169104][T30701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2892.198893][T30701] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2892.455576][T29317] usb 1-1: USB disconnect, device number 24 [ 2893.280061][T30723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2893.316003][T30723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2893.722428][T30734] overlayfs: missing 'lowerdir' [ 2893.927222][T30737] netlink: 79 bytes leftover after parsing attributes in process `syz.2.6714'. [ 2893.937264][T30737] netlink: 79 bytes leftover after parsing attributes in process `syz.2.6714'. [ 2894.946970][T17390] usb 2-1: USB disconnect, device number 34 [ 2894.966404][T30743] trusted_key: encrypted_key: insufficient parameters specified [ 2897.700557][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.707101][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2899.801016][ T43] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 2900.631754][T30771] overlayfs: missing 'lowerdir' [ 2900.932966][ T43] usb 1-1: config 0 has no interfaces? [ 2900.938530][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2901.005989][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2901.077491][T30776] sp0: Synchronizing with TNC [ 2901.445691][ T43] usb 1-1: config 0 descriptor?? [ 2901.766882][T30758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2901.841096][T30758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2901.882126][T30758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2901.910122][T30758] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2901.938075][ T43] usb 1-1: USB disconnect, device number 25 [ 2901.996167][T30785] trusted_key: encrypted_key: insufficient parameters specified [ 2902.030616][T30183] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2902.197637][T30183] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 2902.415621][T30183] usb 2-1: config 0 has no interface number 0 [ 2902.426173][T30183] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2902.440532][T30183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2902.448907][T30183] usb 2-1: Product: syz [ 2902.470553][T30183] usb 2-1: Manufacturer: syz [ 2902.475227][T30183] usb 2-1: SerialNumber: syz [ 2902.483234][T30183] usb 2-1: config 0 descriptor?? [ 2903.037149][T30806] netlink: 79 bytes leftover after parsing attributes in process `syz.0.6734'. [ 2903.046431][T30806] netlink: 79 bytes leftover after parsing attributes in process `syz.0.6734'. [ 2904.004632][T30816] overlayfs: missing 'workdir' [ 2904.196557][T30821] netlink: 'syz.1.6726': attribute type 3 has an invalid length. [ 2904.206213][T30821] netlink: 'syz.1.6726': attribute type 3 has an invalid length. [ 2904.228378][T29317] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2904.519078][T29317] usb 5-1: Using ep0 maxpacket: 16 [ 2904.598752][T29317] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 2904.702266][T29317] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 2904.824613][T29317] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 2904.925488][T29317] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 2904.956834][T30183] usb 2-1: Firmware version (0.0) predates our first public release. [ 2904.968906][T30183] usb 2-1: Please update to version 0.2 or newer [ 2905.010137][T29317] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2905.044048][T29317] usb 5-1: config 0 has no interface number 0 [ 2905.050891][T29317] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2905.063144][T29317] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2905.073381][T29317] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2905.083579][T29317] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2905.097060][T29317] usb 5-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 2905.108470][T29317] usb 5-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 2905.128257][T29317] usb 5-1: config 0 interface 125 has no altsetting 0 [ 2905.135744][T30828] trusted_key: encrypted_key: insufficient parameters specified [ 2905.136296][T29317] usb 5-1: config 0 interface 125 has no altsetting 2 [ 2905.153715][T29317] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2905.170188][T29317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2905.187135][T29317] usb 5-1: Product: syz [ 2905.196738][T29317] usb 5-1: Manufacturer: syz [ 2905.205791][T29317] usb 5-1: SerialNumber: syz [ 2905.221216][T29317] usb 5-1: config 0 descriptor?? [ 2905.236939][T29317] usb 5-1: selecting invalid altsetting 2 [ 2905.400291][ T43] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2905.565175][ T43] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2905.642890][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2905.731117][ T43] usb 1-1: Product: syz [ 2905.739109][ T43] usb 1-1: Manufacturer: syz [ 2905.753273][ T43] usb 1-1: SerialNumber: syz [ 2905.883858][T30841] netlink: 512 bytes leftover after parsing attributes in process `syz.4.6735'. [ 2906.380411][T22396] usb 2-1: USB disconnect, device number 35 [ 2906.386067][T29317] get_1284_register timeout [ 2906.399827][ T43] usb 1-1: config 0 descriptor?? [ 2906.450635][ C0] usb 5-1: async_complete: urb error -104 [ 2906.456601][ C0] usb 5-1: async_complete: urb error -104 [ 2906.462522][ C0] usb 5-1: async_complete: urb error -104 [ 2906.468434][ C0] usb 5-1: async_complete: urb error -104 [ 2906.497692][T29317] uss720 5-1:0.125: probe with driver uss720 failed with error -5 [ 2906.694004][T30829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6740'. [ 2906.718191][T30829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2906.755288][T30829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2906.885760][T30829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2906.898417][T30829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2907.106127][T29317] usb 1-1: USB disconnect, device number 26 [ 2907.331597][T14807] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 2908.140459][ T43] usb 5-1: USB disconnect, device number 83 [ 2908.515844][T14807] usb 2-1: config 0 has no interfaces? [ 2908.521616][T14807] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2908.530842][T14807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2908.560753][T14807] usb 2-1: config 0 descriptor?? [ 2909.380525][T30850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2909.389277][T30850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2909.409811][T22396] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2909.481769][T30870] trusted_key: encrypted_key: insufficient parameters specified [ 2909.506291][T30869] overlayfs: missing 'workdir' [ 2909.525593][T30850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2909.566486][T30850] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2909.599860][T22396] usb 6-1: Using ep0 maxpacket: 16 [ 2909.625582][T22396] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 2909.648101][T22396] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 2909.654854][T14807] usb 2-1: USB disconnect, device number 36 [ 2909.698849][T22396] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 2909.739118][T22396] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2909.742898][T30872] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2909.778912][T22396] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 2909.793957][T22396] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2909.828613][T22396] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 2909.845827][T30874] geneve2: entered promiscuous mode [ 2909.853702][T22396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2909.906044][T22396] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 2909.948537][T30875] netlink: 'syz.2.6752': attribute type 9 has an invalid length. [ 2909.996162][T30872] geneve2: entered promiscuous mode [ 2910.345459][T30884] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6757'. [ 2910.360313][T22396] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 2910.386042][T22396] usb 6-1: USB disconnect, device number 27 [ 2910.575460][T30887] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6757'. [ 2911.155515][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2911.155536][ T30] audit: type=1326 audit(1755733329.075:11124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30891 comm="syz.2.6758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd8758ebe9 code=0x0 [ 2911.460231][T30904] trusted_key: encrypted_key: insufficient parameters specified [ 2912.394834][T29625] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 2912.619514][T29625] usb 1-1: device descriptor read/64, error -71 [ 2912.956484][T30914] fuse: Bad value for 'fd' [ 2912.979814][T29625] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 2912.987058][T30914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6764'. [ 2913.310783][T30913] overlayfs: missing 'workdir' [ 2913.439656][T29625] usb 1-1: device descriptor read/64, error -71 [ 2913.559987][T29625] usb usb1-port1: attempt power cycle [ 2913.814776][T30925] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6767'. [ 2914.363245][T30927] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 2914.372718][T30927] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2914.420281][T22396] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 2914.469554][T29625] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 2914.639166][T29625] usb 1-1: device descriptor read/8, error -71 [ 2914.761623][T22396] usb 6-1: config 0 has no interfaces? [ 2914.767177][T22396] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2917.138892][T22396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2918.880370][T22396] usb 6-1: config 0 descriptor?? [ 2919.879202][T22396] usb 6-1: can't set config #0, error -71 [ 2919.887741][T30946] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2919.903795][T22396] usb 6-1: USB disconnect, device number 28 [ 2919.957511][T30949] trusted_key: encrypted_key: insufficient parameters specified [ 2922.867080][T30976] sp0: Synchronizing with TNC [ 2922.886167][T30977] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6781'. [ 2922.946489][T30979] FAULT_INJECTION: forcing a failure. [ 2922.946489][T30979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2922.997643][T30979] CPU: 0 UID: 0 PID: 30979 Comm: syz.4.6782 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2922.997675][T30979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2922.997688][T30979] Call Trace: [ 2922.997697][T30979] [ 2922.997706][T30979] dump_stack_lvl+0x189/0x250 [ 2922.997739][T30979] ? __pfx____ratelimit+0x10/0x10 [ 2922.997763][T30979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2922.997783][T30979] ? __pfx__printk+0x10/0x10 [ 2922.997810][T30979] ? __might_fault+0xb0/0x130 [ 2922.997843][T30979] should_fail_ex+0x414/0x560 [ 2922.997871][T30979] _copy_from_user+0x2d/0xb0 [ 2922.997900][T30979] kstrtouint_from_user+0xc4/0x170 [ 2922.997927][T30979] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2922.997970][T30979] proc_fail_nth_write+0x88/0x240 [ 2922.997994][T30979] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2922.998027][T30979] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2922.998054][T30979] vfs_write+0x27e/0xa90 [ 2922.998087][T30979] ? __pfx_vfs_write+0x10/0x10 [ 2922.998111][T30979] ? __fget_files+0x2a/0x420 [ 2922.998139][T30979] ? __fget_files+0x3a0/0x420 [ 2922.998159][T30979] ? __fget_files+0x2a/0x420 [ 2922.998193][T30979] ksys_write+0x145/0x250 [ 2922.998217][T30979] ? __pfx_ksys_write+0x10/0x10 [ 2922.998234][T30979] ? rcu_is_watching+0x15/0xb0 [ 2922.998263][T30979] ? do_syscall_64+0xbe/0x3b0 [ 2922.998290][T30979] do_syscall_64+0xfa/0x3b0 [ 2922.998311][T30979] ? lockdep_hardirqs_on+0x9c/0x150 [ 2922.998333][T30979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2922.998354][T30979] ? clear_bhb_loop+0x60/0xb0 [ 2922.998389][T30979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2922.998410][T30979] RIP: 0033:0x7fbf35f8d69f [ 2922.998429][T30979] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2922.998446][T30979] RSP: 002b:00007fbf36d37030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2922.998470][T30979] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbf35f8d69f [ 2922.998485][T30979] RDX: 0000000000000001 RSI: 00007fbf36d370a0 RDI: 0000000000000005 [ 2922.998499][T30979] RBP: 00007fbf36d37090 R08: 0000000000000000 R09: 0000000000000000 [ 2922.998511][T30979] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000002 [ 2922.998525][T30979] R13: 00007fbf361b6038 R14: 00007fbf361b5fa0 R15: 00007ffe6c2f8478 [ 2922.998561][T30979] [ 2923.814637][T30987] vivid-000: disconnect [ 2924.088526][T14807] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2924.230485][T14807] usb 3-1: device descriptor read/64, error -71 [ 2924.348512][T29317] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 2924.488632][T14807] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2924.547133][T29317] usb 5-1: config 0 has no interfaces? [ 2924.574918][T29317] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2924.596963][T30997] trusted_key: encrypted_key: insufficient parameters specified [ 2924.621198][T29317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2924.657103][T29317] usb 5-1: config 0 descriptor?? [ 2924.678168][T14807] usb 3-1: device descriptor read/64, error -71 [ 2924.816520][T14807] usb usb3-port1: attempt power cycle [ 2924.980220][T30990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2925.773333][T30990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2925.800189][T14807] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2925.852126][T30990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2925.861588][T14807] usb 3-1: device descriptor read/8, error -71 [ 2925.895468][T30990] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2926.898622][T29625] usb 5-1: USB disconnect, device number 84 [ 2926.929647][T14807] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2926.987671][T31010] netlink: 79 bytes leftover after parsing attributes in process `syz.0.6793'. [ 2926.997146][T31010] netlink: 79 bytes leftover after parsing attributes in process `syz.0.6793'. [ 2927.363383][T26756] Bluetooth: hci4: unexpected event for opcode 0x080f [ 2928.036842][T31016] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6794'. [ 2930.007712][T17390] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2930.145075][T31034] sp0: Synchronizing with TNC [ 2930.235330][T17390] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2930.262792][T17390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2930.273793][T17390] usb 1-1: Product: syz [ 2930.279183][T17390] usb 1-1: Manufacturer: syz [ 2930.283919][T17390] usb 1-1: SerialNumber: syz [ 2930.323324][T17390] usb 1-1: config 0 descriptor?? [ 2930.390342][T17390] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2930.475442][T29647] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2930.744052][T29647] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2930.932510][T29647] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2931.010989][T14807] usb 3-1: device descriptor read/8, error -71 [ 2931.026795][T30983] vivid-000: reconnect [ 2931.168404][T14807] usb usb3-port1: unable to enumerate USB device [ 2931.185107][T29647] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2931.508440][T29647] bridge_slave_1: left allmulticast mode [ 2931.514215][T29647] bridge_slave_1: left promiscuous mode [ 2931.520805][T29647] bridge0: port 2(bridge_slave_1) entered disabled state [ 2931.534088][T29647] bridge_slave_0: left allmulticast mode [ 2931.541198][T29647] bridge_slave_0: left promiscuous mode [ 2931.547851][T29647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2932.596307][T29647] hsr_slave_0: left promiscuous mode [ 2932.602766][T29647] hsr_slave_1: left promiscuous mode [ 2932.613467][T29647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2932.621493][T29647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2932.635271][T29647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2932.643366][T29647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2932.683118][T29647] team_slave_0: left promiscuous mode [ 2932.689509][T29647] team_slave_1: left promiscuous mode [ 2932.702177][T29647] veth0_macvtap: left promiscuous mode [ 2932.709524][T29647] veth1_vlan: left promiscuous mode [ 2932.714983][T29647] veth0_vlan: left promiscuous mode [ 2932.954309][ T5920] usb 1-1: USB disconnect, device number 31 [ 2934.103584][T29647] team0 (unregistering): Port device team_slave_1 removed [ 2934.505643][T29373] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2934.525209][T21497] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2934.539143][T31066] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2934.548278][T31066] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2934.555757][T31069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2934.557313][T31066] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2934.567122][T31069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2934.571560][T31066] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2934.585827][T31066] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2934.588831][T31069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2934.594968][T31066] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2934.605819][T31069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2934.615618][T31069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2934.617248][T29373] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2934.652987][T29647] team0 (unregistering): Port device team_slave_0 removed [ 2934.657392][T29373] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2935.097895][T26756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2935.111768][T26756] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2935.121473][T26756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2935.131892][T26756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2935.141431][T26756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2936.651944][T29373] Bluetooth: hci1: command tx timeout [ 2936.727374][T29373] Bluetooth: hci0: command tx timeout [ 2936.727938][T26756] Bluetooth: hci2: command tx timeout [ 2937.210765][T26756] Bluetooth: hci3: command tx timeout [ 2937.594260][T31098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6816'. [ 2937.965629][T31061] chnl_net:caif_netlink_parms(): no params data found [ 2938.174160][T31067] chnl_net:caif_netlink_parms(): no params data found [ 2938.477881][T31062] chnl_net:caif_netlink_parms(): no params data found [ 2938.726925][T26756] Bluetooth: hci1: command tx timeout [ 2938.810731][T26756] Bluetooth: hci2: command tx timeout [ 2938.817074][T26756] Bluetooth: hci0: command tx timeout [ 2938.998552][T29647] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2939.029906][T31061] bridge0: port 1(bridge_slave_0) entered blocking state [ 2939.042290][T31061] bridge0: port 1(bridge_slave_0) entered disabled state [ 2939.052713][T31061] bridge_slave_0: entered allmulticast mode [ 2939.113048][T31061] bridge_slave_0: entered promiscuous mode [ 2939.286889][T26756] Bluetooth: hci3: command tx timeout [ 2939.688549][T29647] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2939.709216][T31061] bridge0: port 2(bridge_slave_1) entered blocking state [ 2939.719891][T31061] bridge0: port 2(bridge_slave_1) entered disabled state [ 2939.727250][T31061] bridge_slave_1: entered allmulticast mode [ 2939.734413][T31061] bridge_slave_1: entered promiscuous mode [ 2939.772741][T31075] chnl_net:caif_netlink_parms(): no params data found [ 2939.915324][T29647] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2939.947916][T31067] bridge0: port 1(bridge_slave_0) entered blocking state [ 2939.961944][T31067] bridge0: port 1(bridge_slave_0) entered disabled state [ 2939.972155][T31067] bridge_slave_0: entered allmulticast mode [ 2939.980682][T31067] bridge_slave_0: entered promiscuous mode [ 2940.040988][T31061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2940.051037][T31067] bridge0: port 2(bridge_slave_1) entered blocking state [ 2940.058458][T31067] bridge0: port 2(bridge_slave_1) entered disabled state [ 2940.067154][T31067] bridge_slave_1: entered allmulticast mode [ 2940.075607][T31067] bridge_slave_1: entered promiscuous mode [ 2940.284127][T31061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2940.365372][T31062] bridge0: port 1(bridge_slave_0) entered blocking state [ 2940.375501][T31062] bridge0: port 1(bridge_slave_0) entered disabled state [ 2940.383534][T31062] bridge_slave_0: entered allmulticast mode [ 2940.392603][T31062] bridge_slave_0: entered promiscuous mode [ 2940.423694][T29647] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2940.461199][T31067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2940.490672][T31062] bridge0: port 2(bridge_slave_1) entered blocking state [ 2940.502098][T31062] bridge0: port 2(bridge_slave_1) entered disabled state [ 2940.510352][T31062] bridge_slave_1: entered allmulticast mode [ 2940.518818][T31062] bridge_slave_1: entered promiscuous mode [ 2940.547699][T31067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2940.628126][T31061] team0: Port device team_slave_0 added [ 2940.641390][T31061] team0: Port device team_slave_1 added [ 2940.710664][T31067] team0: Port device team_slave_0 added [ 2940.816377][T26756] Bluetooth: hci1: command tx timeout [ 2940.886988][T26756] Bluetooth: hci2: command tx timeout [ 2940.892462][T26756] Bluetooth: hci0: command tx timeout [ 2941.367233][T26756] Bluetooth: hci3: command tx timeout [ 2941.383265][T31067] team0: Port device team_slave_1 added [ 2941.501059][T31062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2941.556512][T31061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2941.583746][T31061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2941.662823][T31061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2941.676568][T31075] bridge0: port 1(bridge_slave_0) entered blocking state [ 2941.685775][T31075] bridge0: port 1(bridge_slave_0) entered disabled state [ 2941.696447][T31075] bridge_slave_0: entered allmulticast mode [ 2941.703628][T31075] bridge_slave_0: entered promiscuous mode [ 2941.730443][T31062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2941.743508][T31061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2941.750666][T31061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2941.780094][T31061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2941.803762][T31075] bridge0: port 2(bridge_slave_1) entered blocking state [ 2941.811090][T31075] bridge0: port 2(bridge_slave_1) entered disabled state [ 2941.818466][T31075] bridge_slave_1: entered allmulticast mode [ 2941.825624][T31075] bridge_slave_1: entered promiscuous mode [ 2941.924426][T31075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2941.961000][T31067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2941.976132][T31067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2942.012727][T31067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2942.036598][T31067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2942.043596][T31067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2942.070038][T31067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2942.175378][T31067] hsr_slave_0: entered promiscuous mode [ 2942.190485][T31067] hsr_slave_1: entered promiscuous mode [ 2942.201324][T31067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2942.213121][T31067] Cannot create hsr debugfs directory [ 2942.273434][T31075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2942.305853][T31062] team0: Port device team_slave_0 added [ 2942.315854][T31062] team0: Port device team_slave_1 added [ 2942.411853][T31061] hsr_slave_0: entered promiscuous mode [ 2942.418363][T31061] hsr_slave_1: entered promiscuous mode [ 2942.424525][T31061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2942.432330][T31061] Cannot create hsr debugfs directory [ 2942.489591][T31062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2942.496955][T31062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2942.524089][T31062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2942.542457][T31062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2942.549823][T31062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2942.576881][T31062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2942.594803][T31075] team0: Port device team_slave_0 added [ 2942.659686][T29647] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2942.696989][T31075] team0: Port device team_slave_1 added [ 2942.811372][T29647] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2942.886225][T26756] Bluetooth: hci1: command tx timeout [ 2942.966371][T29373] Bluetooth: hci2: command tx timeout [ 2942.971859][T26756] Bluetooth: hci0: command tx timeout [ 2942.979293][T31075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2942.992567][T31075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2943.024490][T31075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2943.131635][T29647] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2943.185562][T31075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2943.193837][T31075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2943.231550][T31075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2943.259348][T31062] hsr_slave_0: entered promiscuous mode [ 2943.271714][T31062] hsr_slave_1: entered promiscuous mode [ 2943.283260][T31062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2943.291794][T31062] Cannot create hsr debugfs directory [ 2943.345662][T29647] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2943.392990][T31144] tipc: Started in network mode [ 2943.399506][T31144] tipc: Node identity ee2f6fffe68, cluster identity 4711 [ 2943.431134][T31144] tipc: Enabled bearer , priority 0 [ 2943.446696][T26756] Bluetooth: hci3: command tx timeout [ 2943.460116][T31142] syzkaller0: entered promiscuous mode [ 2943.468736][T31142] syzkaller0: entered allmulticast mode [ 2943.703424][T31142] tipc: Resetting bearer [ 2943.813163][T31075] hsr_slave_0: entered promiscuous mode [ 2943.824844][T31075] hsr_slave_1: entered promiscuous mode [ 2943.836286][T31075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2943.843990][T31075] Cannot create hsr debugfs directory [ 2943.901170][T31140] tipc: Resetting bearer [ 2943.924489][T31140] tipc: Disabling bearer [ 2944.121431][T31067] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2944.134793][T31067] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2944.230860][T31067] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2944.243377][T31067] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2944.325102][T29647] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2944.527571][T29647] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2944.567200][T31061] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2944.607343][T31061] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2944.666667][T29647] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2944.702314][T31061] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2944.721756][T31061] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2944.832138][T29647] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2945.093909][T31062] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2945.111278][T31062] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2945.185489][T31062] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2945.205264][T31062] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2945.373942][T29647] bridge_slave_1: left allmulticast mode [ 2945.379843][T29647] bridge_slave_1: left promiscuous mode [ 2945.385897][T29647] bridge0: port 2(bridge_slave_1) entered disabled state [ 2945.404842][T29647] bridge_slave_0: left allmulticast mode [ 2945.410775][T29647] bridge_slave_0: left promiscuous mode [ 2945.417926][T29647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2945.435494][T29647] bridge_slave_1: left allmulticast mode [ 2945.442336][T29647] bridge_slave_1: left promiscuous mode [ 2945.450235][T29647] bridge0: port 2(bridge_slave_1) entered disabled state [ 2945.462338][T29647] bridge_slave_0: left allmulticast mode [ 2945.470451][T29647] bridge_slave_0: left promiscuous mode [ 2945.479114][T29647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2945.499192][T29647] bridge_slave_1: left allmulticast mode [ 2945.504904][T29647] bridge_slave_1: left promiscuous mode [ 2945.511724][T29647] bridge0: port 2(bridge_slave_1) entered disabled state [ 2945.523116][T29647] bridge_slave_0: left allmulticast mode [ 2945.531205][T29647] bridge_slave_0: left promiscuous mode [ 2945.539317][T29647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2946.447950][T29647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2946.462272][T29647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2946.475120][T29647] bond0 (unregistering): Released all slaves [ 2947.556732][T29647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2947.766246][T29647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2947.834116][T29647] bond0 (unregistering): Released all slaves [ 2947.871686][T29647] bond1 (unregistering): Released all slaves [ 2949.246862][T29647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2949.259167][T29647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2949.270816][T29647] bond0 (unregistering): Released all slaves [ 2949.292333][T31075] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2949.307055][T31075] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2949.355437][T31075] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2949.382630][T31075] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2949.492910][T29647] tipc: Left network mode [ 2949.520541][T31067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2949.535380][T29647] tipc: Disabling bearer [ 2949.542087][T29647] tipc: Left network mode [ 2949.648440][T31067] 8021q: adding VLAN 0 to HW filter on device team0 [ 2949.805210][T15070] bridge0: port 1(bridge_slave_0) entered blocking state [ 2949.812466][T15070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2949.873966][T31061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2949.899412][T31194] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6829'. [ 2949.920284][T31061] 8021q: adding VLAN 0 to HW filter on device team0 [ 2949.971584][T15070] bridge0: port 2(bridge_slave_1) entered blocking state [ 2949.978845][T15070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2950.224036][T15070] bridge0: port 1(bridge_slave_0) entered blocking state [ 2950.231352][T15070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2950.273719][T15070] bridge0: port 2(bridge_slave_1) entered blocking state [ 2950.281040][T15070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2950.462177][T31062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2950.540376][T31067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2950.559498][T31067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2950.909008][T31075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2950.921658][T31062] 8021q: adding VLAN 0 to HW filter on device team0 [ 2951.467173][T29647] [ 2951.469564][T29647] ====================================================== [ 2951.476613][T29647] WARNING: possible circular locking dependency detected [ 2951.483662][T29647] 6.16.0-syzkaller #0 Not tainted [ 2951.488698][T29647] ------------------------------------------------------ [ 2951.495709][T29647] kworker/u8:7/29647 is trying to acquire lock: [ 2951.501945][T29647] ffff888079b74e00 (team->team_lock_key#13){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 2951.511612][T29647] [ 2951.511612][T29647] but task is already holding lock: [ 2951.518978][T29647] ffff8880342f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 2951.529347][T29647] [ 2951.529347][T29647] which lock already depends on the new lock. [ 2951.529347][T29647] [ 2951.539755][T29647] [ 2951.539755][T29647] the existing dependency chain (in reverse order) is: [ 2951.548779][T29647] [ 2951.548779][T29647] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 2951.556537][T29647] lock_acquire+0x120/0x360 [ 2951.561568][T29647] __mutex_lock+0x182/0xe80 [ 2951.566587][T29647] ieee80211_open+0xed/0x1f0 [ 2951.571695][T29647] __dev_open+0x470/0x880 [ 2951.576544][T29647] netif_open+0xaa/0x170 [ 2951.581303][T29647] dev_open+0x125/0x260 [ 2951.585981][T29647] team_add_slave+0xb36/0x2840 [ 2951.591270][T29647] do_set_master+0x530/0x6d0 [ 2951.596383][T29647] do_setlink+0xcf0/0x41c0 [ 2951.601337][T29647] rtnl_newlink+0x160b/0x1c70 [ 2951.606544][T29647] rtnetlink_rcv_msg+0x7cc/0xb70 [ 2951.612007][T29647] netlink_rcv_skb+0x205/0x470 [ 2951.617297][T29647] netlink_unicast+0x75c/0x8e0 [ 2951.622610][T29647] netlink_sendmsg+0x805/0xb30 [ 2951.627896][T29647] __sock_sendmsg+0x21c/0x270 [ 2951.633094][T29647] ____sys_sendmsg+0x505/0x830 [ 2951.638395][T29647] ___sys_sendmsg+0x21f/0x2a0 [ 2951.643596][T29647] __x64_sys_sendmsg+0x19b/0x260 [ 2951.649055][T29647] do_syscall_64+0xfa/0x3b0 [ 2951.654092][T29647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2951.660504][T29647] [ 2951.660504][T29647] -> #0 (team->team_lock_key#13){+.+.}-{4:4}: [ 2951.668761][T29647] validate_chain+0xb9b/0x2140 [ 2951.674046][T29647] __lock_acquire+0xab9/0xd20 [ 2951.679237][T29647] lock_acquire+0x120/0x360 [ 2951.684256][T29647] __mutex_lock+0x182/0xe80 [ 2951.689280][T29647] team_del_slave+0x32/0x1c0 [ 2951.694389][T29647] team_device_event+0x285/0xa20 [ 2951.699843][T29647] notifier_call_chain+0x1b3/0x3e0 [ 2951.705472][T29647] unregister_netdevice_many_notify+0x15d8/0x2320 [ 2951.712422][T29647] unregister_netdevice_queue+0x33c/0x380 [ 2951.718676][T29647] _cfg80211_unregister_wdev+0x165/0x590 [ 2951.724831][T29647] ieee80211_remove_interfaces+0x49a/0x6d0 [ 2951.731163][T29647] ieee80211_unregister_hw+0x5d/0x2c0 [ 2951.737071][T29647] mac80211_hwsim_del_radio+0x275/0x460 [ 2951.743145][T29647] hwsim_exit_net+0x584/0x640 [ 2951.748338][T29647] ops_undo_list+0x497/0x990 [ 2951.753447][T29647] cleanup_net+0x4c5/0x800 [ 2951.758394][T29647] process_scheduled_works+0xade/0x17b0 [ 2951.764457][T29647] worker_thread+0x8a0/0xda0 [ 2951.769561][T29647] kthread+0x70e/0x8a0 [ 2951.774150][T29647] ret_from_fork+0x3fc/0x770 [ 2951.779261][T29647] ret_from_fork_asm+0x1a/0x30 [ 2951.784560][T29647] [ 2951.784560][T29647] other info that might help us debug this: [ 2951.784560][T29647] [ 2951.794784][T29647] Possible unsafe locking scenario: [ 2951.794784][T29647] [ 2951.802236][T29647] CPU0 CPU1 [ 2951.807608][T29647] ---- ---- [ 2951.812965][T29647] lock(&rdev->wiphy.mtx); [ 2951.817466][T29647] lock(team->team_lock_key#13); [ 2951.825974][T29647] lock(&rdev->wiphy.mtx); [ 2951.833001][T29647] lock(team->team_lock_key#13); [ 2951.838044][T29647] [ 2951.838044][T29647] *** DEADLOCK *** [ 2951.838044][T29647] [ 2951.846184][T29647] 5 locks held by kworker/u8:7/29647: [ 2951.851553][T29647] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2951.862431][T29647] #1: ffffc90003a6fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2951.872955][T29647] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 2951.882287][T29647] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 2951.892174][T29647] #4: ffff8880342f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 2951.902977][T29647] [ 2951.902977][T29647] stack backtrace: [ 2951.908876][T29647] CPU: 1 UID: 0 PID: 29647 Comm: kworker/u8:7 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2951.908893][T29647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2951.908903][T29647] Workqueue: netns cleanup_net [ 2951.908921][T29647] Call Trace: [ 2951.908928][T29647] [ 2951.908933][T29647] dump_stack_lvl+0x189/0x250 [ 2951.908949][T29647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2951.908962][T29647] ? __pfx__printk+0x10/0x10 [ 2951.908978][T29647] ? print_lock_name+0xde/0x100 [ 2951.908992][T29647] print_circular_bug+0x2ee/0x310 [ 2951.909008][T29647] check_noncircular+0x134/0x160 [ 2951.909023][T29647] validate_chain+0xb9b/0x2140 [ 2951.909037][T29647] ? finish_task_switch+0x266/0x950 [ 2951.909053][T29647] ? lockdep_hardirqs_on+0x9c/0x150 [ 2951.909070][T29647] __lock_acquire+0xab9/0xd20 [ 2951.909082][T29647] ? team_del_slave+0x32/0x1c0 [ 2951.909098][T29647] lock_acquire+0x120/0x360 [ 2951.909108][T29647] ? team_del_slave+0x32/0x1c0 [ 2951.909126][T29647] __mutex_lock+0x182/0xe80 [ 2951.909139][T29647] ? team_del_slave+0x32/0x1c0 [ 2951.909153][T29647] ? rcu_is_watching+0x15/0xb0 [ 2951.909168][T29647] ? team_del_slave+0x32/0x1c0 [ 2951.909182][T29647] ? rcu_is_watching+0x15/0xb0 [ 2951.909194][T29647] ? __pfx___mutex_lock+0x10/0x10 [ 2951.909206][T29647] ? preempt_schedule_irq+0xde/0x150 [ 2951.909218][T29647] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2951.909229][T29647] ? bond_netdev_event+0xd9/0xe80 [ 2951.909252][T29647] ? irqentry_exit+0x74/0x90 [ 2951.909264][T29647] ? lockdep_hardirqs_on+0x9c/0x150 [ 2951.909277][T29647] team_del_slave+0x32/0x1c0 [ 2951.909293][T29647] team_device_event+0x285/0xa20 [ 2951.909305][T29647] notifier_call_chain+0x1b3/0x3e0 [ 2951.909320][T29647] unregister_netdevice_many_notify+0x15d8/0x2320 [ 2951.909337][T29647] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2951.909352][T29647] ? rcu_is_watching+0x15/0xb0 [ 2951.909364][T29647] ? trace_irq_disable+0x37/0x110 [ 2951.909379][T29647] ? preempt_schedule_irq+0xde/0x150 [ 2951.909390][T29647] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2951.909408][T29647] ? preempt_schedule+0xae/0xc0 [ 2951.909423][T29647] unregister_netdevice_queue+0x33c/0x380 [ 2951.909436][T29647] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2951.909450][T29647] _cfg80211_unregister_wdev+0x165/0x590 [ 2951.909467][T29647] ieee80211_remove_interfaces+0x49a/0x6d0 [ 2951.909482][T29647] ? __pfx_synchronize_rcu+0x10/0x10 [ 2951.909495][T29647] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 2951.909509][T29647] ? rcu_is_watching+0x15/0xb0 [ 2951.909523][T29647] ieee80211_unregister_hw+0x5d/0x2c0 [ 2951.909542][T29647] mac80211_hwsim_del_radio+0x275/0x460 [ 2951.909561][T29647] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 2951.909580][T29647] hwsim_exit_net+0x584/0x640 [ 2951.909595][T29647] ? __pfx_hwsim_exit_net+0x10/0x10 [ 2951.909611][T29647] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 2951.909628][T29647] ops_undo_list+0x497/0x990 [ 2951.909646][T29647] ? __pfx_ops_undo_list+0x10/0x10 [ 2951.909664][T29647] cleanup_net+0x4c5/0x800 [ 2951.909679][T29647] ? __pfx_cleanup_net+0x10/0x10 [ 2951.909695][T29647] ? _raw_spin_unlock_irq+0x23/0x50 [ 2951.909706][T29647] ? process_scheduled_works+0x9ef/0x17b0 [ 2951.909718][T29647] ? process_scheduled_works+0x9ef/0x17b0 [ 2951.909731][T29647] process_scheduled_works+0xade/0x17b0 [ 2951.909749][T29647] ? __pfx_process_scheduled_works+0x10/0x10 [ 2951.909765][T29647] worker_thread+0x8a0/0xda0 [ 2951.909778][T29647] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2951.909798][T29647] ? __kthread_parkme+0x7b/0x200 [ 2951.909813][T29647] kthread+0x70e/0x8a0 [ 2951.909828][T29647] ? __pfx_worker_thread+0x10/0x10 [ 2951.909840][T29647] ? __pfx_kthread+0x10/0x10 [ 2951.909855][T29647] ? _raw_spin_unlock_irq+0x23/0x50 [ 2951.909865][T29647] ? lockdep_hardirqs_on+0x9c/0x150 [ 2951.909876][T29647] ? __pfx_kthread+0x10/0x10 [ 2951.909891][T29647] ret_from_fork+0x3fc/0x770 [ 2951.909903][T29647] ? __pfx_ret_from_fork+0x10/0x10 [ 2951.909915][T29647] ? __switch_to_asm+0x39/0x70 [ 2951.909929][T29647] ? __switch_to_asm+0x33/0x70 [ 2951.909942][T29647] ? __pfx_kthread+0x10/0x10 [ 2951.909957][T29647] ret_from_fork_asm+0x1a/0x30 [ 2951.909975][T29647] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2952.511244][T29647] team0: Port device wlan1 removed [ 2953.037393][T29647] hsr_slave_0: left promiscuous mode [ 2953.049856][T29647] hsr_slave_1: left promiscuous mode [ 2953.097729][T29647] hsr_slave_0: left promiscuous mode [ 2953.103558][T29647] hsr_slave_1: left promiscuous mode [ 2953.109640][T29647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2953.117243][T29647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2953.125383][T29647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2953.132856][T29647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2953.176027][T29647] hsr_slave_0: left promiscuous mode [ 2953.181787][T29647] hsr_slave_1: left promiscuous mode [ 2953.187788][T29647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2953.195989][T29647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2953.203532][T29647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2953.211093][T29647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2953.227067][T29647] veth1_macvtap: left promiscuous mode [ 2953.232607][T29647] veth0_macvtap: left promiscuous mode [ 2953.238265][T29647] veth1_vlan: left promiscuous mode [ 2953.243558][T29647] veth0_vlan: left promiscuous mode [ 2953.250519][T29647] veth1_macvtap: left promiscuous mode [ 2953.256445][T29647] veth0_macvtap: left promiscuous mode [ 2953.261972][T29647] veth1_vlan: left promiscuous mode [ 2953.267312][T29647] veth0_vlan: left promiscuous mode [ 2953.273182][T29647] veth1_macvtap: left promiscuous mode [ 2953.278866][T29647] veth0_macvtap: left promiscuous mode [ 2953.284383][T29647] veth1_vlan: left promiscuous mode [ 2953.289747][T29647] veth0_vlan: left promiscuous mode [ 2953.483236][T29647] team0 (unregistering): Port device team_slave_1 removed [ 2953.501228][T29647] team0 (unregistering): Port device team_slave_0 removed [ 2954.098796][T29647] team0 (unregistering): Port device team_slave_1 removed [ 2954.111127][T29647] team0 (unregistering): Port device team_slave_0 removed [ 2954.995531][T29647] IPVS: stop unused estimator thread 0... [ 2955.942819][T29647] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2955.998109][T29647] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2956.049199][T29647] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2956.108839][T29647] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2956.152239][T29647] bridge_slave_1: left allmulticast mode [ 2956.158103][T29647] bridge_slave_1: left promiscuous mode [ 2956.163745][T29647] bridge0: port 2(bridge_slave_1) entered disabled state [ 2956.171831][T29647] bridge_slave_0: left allmulticast mode [ 2956.177735][T29647] bridge_slave_0: left promiscuous mode [ 2956.183434][T29647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2956.192638][T29647] bridge_slave_1: left allmulticast mode [ 2956.198467][T29647] bridge_slave_1: left promiscuous mode [ 2956.204229][T29647] bridge0: port 2(bridge_slave_1) entered disabled state [ 2956.212627][T29647] bridge_slave_0: left allmulticast mode [ 2956.218496][T29647] bridge_slave_0: left promiscuous mode [ 2956.224138][T29647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2956.233038][T29647] bridge_slave_1: left allmulticast mode [ 2956.239371][T29647] bridge_slave_1: left promiscuous mode [ 2956.245265][T29647] bridge0: port 2(bridge_slave_1) entered disabled state [ 2956.253225][T29647] bridge_slave_0: left allmulticast mode [ 2956.259357][T29647] bridge_slave_0: left promiscuous mode [ 2956.265137][T29647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2956.273631][T29647] bridge_slave_1: left allmulticast mode [ 2956.279891][T29647] bridge_slave_1: left promiscuous mode [ 2956.285631][T29647] bridge0: port 2(bridge_slave_1) entered disabled state [ 2956.293828][T29647] bridge_slave_0: left allmulticast mode [ 2956.299944][T29647] bridge_slave_0: left promiscuous mode [ 2956.305657][T29647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2956.314288][T29647] bridge_slave_1: left allmulticast mode [ 2956.321012][T29647] bridge_slave_1: left promiscuous mode [ 2956.326826][T29647] bridge0: port 2(bridge_slave_1) entered disabled state [ 2956.336151][T29647] bridge_slave_0: left allmulticast mode [ 2956.341786][T29647] bridge_slave_0: left promiscuous mode [ 2956.348061][T29647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2956.499548][T29647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2956.509542][T29647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2956.519383][T29647] bond0 (unregistering): Released all slaves [ 2956.584685][T29647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2956.595134][T29647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2956.604607][T29647] bond0 (unregistering): Released all slaves [ 2956.674371][T29647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2956.684472][T29647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2956.693892][T29647] bond0 (unregistering): Released all slaves [ 2956.758724][T29647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2956.769154][T29647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2956.778582][T29647] bond0 (unregistering): Released all slaves [ 2956.989975][T29647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2956.999867][T29647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2957.009346][T29647] bond0 (unregistering): Released all slaves [ 2957.138568][T29647] tipc: Left network mode [ 2957.271924][T29647] hsr_slave_0: left promiscuous mode [ 2957.277670][T29647] hsr_slave_1: left promiscuous mode [ 2957.283301][T29647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2957.290913][T29647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2957.300677][T29647] hsr_slave_0: left promiscuous mode [ 2957.306395][T29647] hsr_slave_1: left promiscuous mode [ 2957.312000][T29647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2957.320687][T29647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2957.331265][T29647] hsr_slave_0: left promiscuous mode [ 2957.337446][T29647] hsr_slave_1: left promiscuous mode [ 2957.343044][T29647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2957.350813][T29647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2957.360742][T29647] hsr_slave_0: left promiscuous mode [ 2957.366556][T29647] hsr_slave_1: left promiscuous mode [ 2957.372165][T29647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2957.379980][T29647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2957.389860][T29647] hsr_slave_0: left promiscuous mode [ 2957.396388][T29647] hsr_slave_1: left promiscuous mode [ 2957.408626][T29647] veth1_macvtap: left promiscuous mode [ 2957.414159][T29647] veth0_macvtap: left promiscuous mode [ 2957.419831][T29647] veth1_vlan: left promiscuous mode [ 2957.425237][T29647] veth0_vlan: left promiscuous mode [ 2957.627356][T29647] team0 (unregistering): Port device team_slave_1 removed [ 2957.661122][T29647] team0 (unregistering): Port device team_slave_0 removed [ 2957.809792][T29647] team0 (unregistering): Port device team_slave_1 removed [ 2957.845286][T29647] team0 (unregistering): Port device team_slave_0 removed [ 2958.018229][T29647] team0 (unregistering): Port device team_slave_1 removed [ 2958.029950][T29647] team0 (unregistering): Port device team_slave_0 removed [ 2958.206409][T29647] team0 (unregistering): Port device team_slave_1 removed [ 2958.240280][T29647] team0 (unregistering): Port device team_slave_0 removed [ 2958.429739][T29647] team0 (unregistering): Port device team_slave_1 removed [ 2958.463283][T29647] team0 (unregistering): Port device team_slave_0 removed [ 2959.128397][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.134965][ T1302] ieee802154 phy1 wpan1: encryption failed: -22