last executing test programs: 11.27863259s ago: executing program 2 (id=205): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000040ac051f0200000000000109022400010000000009040000020300020009210000000122050009058103000000fc00cd5ea2302d35406d2c1776f368e563e5c518dbdddab8bfc7875bc8129c6c57eecab91739b05fd96208d927"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) execve(0x0, &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0xb4}}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x44, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) 10.267742468s ago: executing program 3 (id=212): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) chdir(&(0x7f0000000000)='./cgroup\x00') syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.287151171s ago: executing program 2 (id=215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}, @cond=[{0x1ff, 0x5388, 0x3, 0x800, 0xca, 0x7}, {0xffff, 0x5, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x84000) 9.285718854s ago: executing program 3 (id=216): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'dummy0\x00'}) r1 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) getpeername$llc(r1, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f00000001c0)="756a03d7d223180dd3cf51a5d191d4b694d57f271173c2b5d53df8290ed6b2b8a1852548fd30ec15c653876d277598143c2c6c599555a73769ed5ede572489ae437a4d6216432b04f1be585b471eef0a44d56e16d98dbb4a09c1603cc3eaa9501e55f135f6a3cab2d6ffd6dd35deea417e8ae70d334bafa532146de97f748a9a1f8f989cabdee573385dada03135f013332f766b628bdbf09a4bf6ff0378360c6e77fb2a4ebcf78cd10e5a6038cb06e6ad5146bbe9a535720ebfca97") r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWFLOWTABLE={0x1a8, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x946a}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x23c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x6c, 0x7, 0x1, 0x0, "aff656e5a43f4d3a2bc080bc8ecd6853bfb25346e8945da0a7e91162eacdc8814abae1a4bf7bcf7399da70c6cb78ef2993af0c06bad3b079d07f68a873a7214b80e5fad03d11025cd050664e9d8257ab9dce9c274924f98d885effc99fa015ec93bbb35cca2efcc9"}, @NFTA_RULE_USERDATA={0xd9, 0x7, 0x1, 0x0, "cebbb0512e4c0fd3bcd9ca84910962319d9630b91a95a3cdb47f18f26d18f792f4b461a3edc86b28b01af2fad4b21de43d4a24946c1eecd623263d32b65a7367207274e2c9235cf65ea8d7c062d76560ec98d52cfec5e98c02798325e3fde05cbc133d57b6cd104b3ffa1a77dde123c1472ae437cce559036e024e865d2a269217ed4b7862db927fac0b1aa8daa733af42c192e38a12058c47f1d6c9756514c2dda646a1a865cf710256fa7c137960fb0272cd8fb3eb12abb1bc6d35faa45f7ba65745be0cf0f172916b929d414d4b9f2ff85e1366"}, @NFTA_RULE_USERDATA={0xa6, 0x7, 0x1, 0x0, "a1d7427e138675f7de27fa49f7cd7b59188a609ce8b78c77798244a2cfe0244535bef48ea9f25d418817c703ef03c921b6be9c74164423706d4dfa45da67474ca056c8283bdeb63b447c7bedfb6856d5ae6c01f8aee91f355ee27d216497d6becb99fadf0f1cf05aede8c041a0c76577c00a002041bee81f6c77963890f6241acf0c06d31b0d9e2da35f21d3504eaf322e16133e99d652c148911a13fa0ecadbd669"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xfbfb}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWRULE={0x2b8, 0x6, 0xa, 0x401, 0x0, 0x0, {0xb, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x9c, 0x7, 0x1, 0x0, "72aed042b968c29630d4650b9cc2c7acfcfc9df6acc267991d732e0add5a9c1e753474b84e37e7e6f2b45b9a0ad2600ddfe54ab8f28730038776d863d4020104e73b9dc97390ec2eaec508c551292a41fe73165ad0f0bf487814a821d98679557fd8be4ccea47331c3ad967d86477e82dc0baac397a05d6baee773cacf4d251be589a7de2d5a868b56cedcf210166b7b4a53115b7ab62431"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xe8, 0x7, 0x1, 0x0, "401c4b26a907f3fb794089b3bacb2dec099f8df34e0170ed81f8dc3b0b16cdef1725faaccc2d4690323073dc5f63ed8b621df174c4a22f7bb07c9f2cba09c648e2139d76c0f5bbc80178c132a64719c80c9d8566e967848f80f86613445db4bce388283629d4369a610f8f6c0f1ebaebeb9310f6467295f7ef26d4cd3944ed73bf22277b5bfa1975ab85c06c90778a6f3461b048e2f427292abebe72b991a2b7eeed2b8f7e2ecd1e22e0f2f27678a72f66b4de38ceddbd66d9b7991fad601d816d71c702c78b9b1d19b8ae739f77a539a6e72ed4ceac6422f500c9c325abebce08cd5e51"}, @NFTA_RULE_EXPRESSIONS={0xe4, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffe1f}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x19}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x25}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8}]}}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x96}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x754}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000b40)) r3 = accept4$bt_l2cap(r2, &(0x7f0000000b80)={0x1f, 0x0, @fixed}, &(0x7f0000000bc0)=0xe, 0x800) connect$bt_l2cap(r3, &(0x7f0000000c00)={0x1f, 0x0, @any, 0x9}, 0xe) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, 0x7, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x66cc}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) close_range(r2, r3, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000d80)={0x0, 0x1}) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x810, r4, 0x111fc000) getpid() syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000e80)={@dev, 0x0}, &(0x7f0000000ec0)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xf4, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9e}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x72c}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xeaa}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7b, r7}) ioctl$sock_ifreq(r2, 0x8993, &(0x7f0000001140)={'dvmrp1\x00', @ifru_names='nicvf0\x00'}) openat$nullb(0xffffffffffffff9c, &(0x7f0000001180), 0x100, 0x0) sendmsg(r1, &(0x7f0000002840)={&(0x7f00000011c0)=@phonet={0x23, 0x2, 0x80, 0x4}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001240)="916965310fa7d96ae620446f67e7c067e4c055833ab81f54fc2cc0ff11661051adbe6530b8522a9f5a124f0d4b726cc7d5f76cb987fb25b081a397234380adfe4e24242b4d916fd3406680981b1f31d07531ab06136ed7708ae813d18b52154f98bf04be7f73b3c06db1fc81e84e06661660a724eee7fdb5fdd886b144762452513e67759be3139fdd335d919ba6d0510b859fdcc37c6b56df338fce27e39b7cefc0d9c5ec98626be3ca9a39a8f81a2d9eb2cf1f99ade0", 0xb7}, {&(0x7f0000001300)="9d21b0794b9f40fb49ef4dfaf2f8e72ac770", 0x12}, {&(0x7f0000001340)="dd7c03134d767708ac3a7812cd2767a4a1ab425e049b8457c5e67d83ad69be06bb34eff7c6977cf796c4ada7295b1f9927f171d9bde94ac2c6134f30ee16eb9f3e6786c02321c642f3f5f71cb0a2c402fdbda7b5afe5bc584041361c1e07589075d958b953132278b7d6c59fca76fbaeb9c316e4adcdc8ee075cd2fd99195cc4", 0x80}, {&(0x7f00000013c0)="c50f9afb10e7883d6f5773a2bc0df5479e1dd187bc5ddc5ef9f2d238f8bccd309be3b1f7b107c46b052ae3d53e2d7df3b2f68d8f0229c3bfb286dbe691a282d46c6763cdf7a09f77e0dde9625dea12a748a7d4a49c126b789e7a4844f7f62c8c689c63fcb2a239b1ea2106c3e7280a41d76808babadb69f655408133df8552d6734b5d46671839", 0x87}, {&(0x7f0000001480)}, {&(0x7f00000014c0)="1880475d65a82f378727b32cf53de82b4984f4a7076da88f58e7fcb3fb1d970fcdc2502f6b68c16ed4edd10377da48ca0a8039ae6ebb04898912d9f14156dce6b163e0457a49af2f08840674b3236c7492d3a62fe3dc00e74fa67d830a41b7144639e5368b9841883e1a165a377d4f33d26109ad98a8435bb740d68114710614565b36b8d4b67465f607cdacd73e340aa0cd4bcad8d5f1dcb8899c5e0a59e3", 0x9f}, {&(0x7f0000001580)="32605436db970b191478519c4f9d1425e9ad3af2b24084cc5be3f50688e5e0c7a600baf9d2a03706200ffbfd1a32d31cbdad5b16ac1426fb7f4a29cd5e9490b5304be70f17bd1f533532d3700c2afe89b265c54f066fb7b3f0a79ab7a58531c3ba4c0f2e70e6454b9649b5a74ed0aa9e202420e1138617bbb68254", 0x7b}, {&(0x7f0000001600)="1a095eba94a0cf14732282365bf438c5ad809270c819493478e68bf2b4f025e80a06ca28fb69aefd70b4d94a142dd6b963b5762dbbf2525b698197d39b1bc70d20d432aacb6734c5cdcc2a2becc94873483631abce0890d84cecc240b656177724433ac697", 0x65}, {&(0x7f0000001680)}, {&(0x7f00000016c0)="c4980011447cdc1b59da9bf9675bed237d4f9b4132c84783fbaf952e311deea6bb6562e95963fe35867476af936dd0b9deef4d4b09612a09977a02e0b99c56c9f4fc52ca7ab5678cb59bb50aba28757677839eb927281abadb7ee3d209f184f4711d62c51a61c05114fcdfc11f828a59", 0x70}], 0xa, &(0x7f0000001800)=[{0x10, 0x108, 0x5}, {0x1010, 0x11, 0xf, "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"}], 0x1020}, 0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000002880)={0x0, 0xe8, "df7839d5107183dd4d05c7dcb5863268417b15bca6e5ffc6e2c1f9f3ca15452277228cab1e9a21b320caa4a570951a7e6c65e2286f69be19bdde1dfd0556dfc2f521b1dcef60f585db137588faa50ae7f6533f89834401d9c47c4cc97382a60473312b8b3952f50a8fbac642ed24f40a325cdfe6fb6f3b26b936e95751a036d2ca014e92c09aa961905a463dfe0aac9d9e614cc0b63481e3b6c62e57aa3ac0970ceed2233abf12e19c979ac3c9695611e9156c9645547c1e459ce28215ecc494ccd9d9279853932fbb838c431da9b53f0bcd886ddcd2956bf75f4ef0e9bc339ad5a60103015f0d0a"}, &(0x7f0000002980)=0xf0) 6.663318421s ago: executing program 2 (id=226): ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000040)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333400003738393a3b3c3d3e3f40b3ca6f012da69b6c0dd2c2df72fa50bf23324ca7ea1d3f9a7dffc081ed7fbe2d298f5dc535fe63af5b328adbb2a2d78a1ca759e4205e7c"], 0x48, 0xfffffffffffffffa) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'gretap0\x00', {0x2, 0x4e23, @rand_addr=0x64010102}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = dup(r5) ioctl$BLKRRPART(r6, 0x125f, 0x0) 5.990965439s ago: executing program 3 (id=227): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xd}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044001}, 0x20044010) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="100028bd7000fddbdf2507000000080001003900000008000300", @ANYRES32=r9, @ANYBLOB="0c009900fcffffff4e0000001400040073797a6b616c6c6572300000000000000800050000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x10}}, 0x24, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xd}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044001}, 0x20044010) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="100028bd7000fddbdf2507000000080001003900000008000300", @ANYRES32=r9, @ANYBLOB="0c009900fcffffff4e0000001400040073797a6b616c6c6572300000000000000800050000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x10}}, 0x24, 0x0) (async) 5.988160608s ago: executing program 0 (id=228): syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000140)=0x72e92df1) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0xff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0) 5.370425464s ago: executing program 3 (id=229): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) r1 = epoll_create(0xb6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) flock(r2, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) open_by_handle_at(r1, &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x40, 0x4, 0x1}, 0x3, 0x7fffffff}}, 0x40000) setsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000100)="c3689d445713e88acaf3d06ec7b2567bcd8728f572553e54211162fba430e10e28f130f2024b50bb4d63d21eb476e83b85bc27fea4b86c6d050be391f4a1992dfb4497a1219df03206f8332e8ee449f283e536aa21e17193095075fe4f69cb6ed3bc07f521ec2466e43f4e8db68f25b97bb612062218cc114d851e67832648de82f1cfd439df86f77681d7cc63da98b92f5e2ec87d27b7f7b0d59c011c9dd6ea9eff8fb039ed41e334bd2d5364e9e2435e627cc560c9b0fd0f19e47c3fc1a9c8c41cb3cc332c7046c9cb9ee8d9ef36e9af4b02d84410752a6d56df4219e6b89a1d21bdb1777fc50e76c10f1b79faf10188b238e511cbe69d4325b6fbdd102dd37fb3840a5487f720c414bb1d748bbc07bd688cebe8fbbfbbaeb447c51bba4765dbd21d1a7d3044bf3fdf0e1dabb24512e6f7b5bbcbfe0e4182810f234e80667248abd9b21422090006ce2690ca5e6d68d036b2cc10d119f67e546bd6a4e4a4099437559fccf05fabf6159cb9f5ef86d3b23d16aa9666aaa528765d1fbb72f5b941a48c7dc7bab29eb693d089b5261823c9b8574b7871eda009ef6707d58c4325464f02e976b4e70714903278b753ef18dc58710dcf8703b7d7c632440c7328e920029f690cf2b22a228d519b6b60a4bd0a8f4883dd399646517b3894e61c24372e7c13679da37afa51dc072ab950f1d4e6f5e4cf21694224dc13e955a423287d467bb7d0932c1dd8128cb2d84c7db8a5dab111344df35de311213deb8b90b3e3ecd322ed3bdcadb54c736a2a12f95d64fd6e7bc1ea81cb5240fbc6b2811431099b49d773fa8d7afee4d8f1816ac3f626d372ada994aa9d9e9299423f13552531d16e7b0ae0f95be3e94ec33289fa5f7291bc2cc7f40a4580bc581140ead6fdafc4e22f18f6e722f709fa951295a3ae7b7569a330353327b7a99a25c42a4f531368615978e968a4f3993d1df5ec1f7ec70a7df923cbe848f0578a8f82e182c2c2d5e34d93f9f3eee8f72653e9d4322ca3a03208c281d80300af40f5d5c1b43e26afd964826263310dc828489b6e7ed554955c45918f559b2bd0eedd24c78f3a90d476a61dbc624d76e20a674d3e866787e0c240189a43292cf1f709f299f6457cc28e7d4460bd3a26afb00916dbc17a632fefac67fdb0061a0c2cb58310ca937b85bb20f241af90411450173fac7315b9bbd32ee83ee02abe249ad3ce91989676da587d01318cca62b24db7b7cbcf5ce2995d596406a0b40a983013deedd0603b44aed7a9f838ca8560ca76bcf32fe8e4a7799efb170429a479181ee392fb15f6264f1cb8533f332e86cf2af02398b7244a1b2e6949025e22480413c1da912912fe5f1cc5142a933e05f3438471685574ffeb8ee4faa499165e54450e5bc9eb6e482db0cf7c3376b99480caaafbd9d808de0624ddf350043afc2f2f1d27b2a41ca39746bb46765cafbc03669477b6a816e8468375a5c01a243c154f73c0667087897f2c4c0a4d6d4cba429274523eb34f0c0b115b7ef7048ba2e744ef3200f9a8e04356490a78aa58f613566fd4029f7a716a8b415c83d46d55fda5bb63d5f15c3572a4c1145bb93d4ad773204b4a3e7128eb8ccaf58e70dc83ef3943487eb348b6bc4a9440b355007d035b26d84b355ea9bf6fc12bc38b0b81277df8d12438842d7eed998891030d7d6a9989a78922e969d3f8b063f1dec6c7c90f3e4549c98893c5250e62a5e648700b379cbc3a03bace2a2710d059ab4f9716342d5a6e181a572f0484cb1d9ca211f367dab2094461d8eb5ee602a4eb2054ba45f5f94fed406a377e0d4697439d7819251c3da579af999dbb11a38e66b3394b8548173a797efa35d97d6993a8114a90fe23a6ec0a11ba9242ad250d4d1d8daf17542890646228708d74beaf04ccb3ea82b26e08548e0525d4e59ea6a37b47d4381dff0f9274f0188748a3a9f9b777bc4ae442ca5cd11f768a3e043e88aa3453c90c1691c700ffa530ed8830b41f8d8c061404c2e2e2376323484447cd612c33876bf16cc7ba19c9b2b071bb059f5b98662a6ce7def4585b672b7ab34f27a851392b213e00fc41e6d5293c2e5390147e81da0ea12c63e6ec292baf17b07e7983ea246c1c754868a6d41f499bdf0c1a0ed3275d4352bf94f52b1b89f4c115ba2fd7f9d5c8006ab0f4a3b12536d272ef7faa688eb174385c98a1c810a5b98ba28bdbffad66b8770fb662cf3c36cd6ca67dcff6b16dae796a8819d32102aa07668f9f5aec915b523e6a61bfe19cc7e29d575a132e009943684d4e81c4c3ea01fce308a9651224f7264ce01a5bfa55607eae68b0d4a7267aba748d2d08becd36ccc6300b4bb252e5514bc3958c718a42edc7c81b4bc9e0d30c1100aee58dbb5706d17c3814fe6bc2258ead2ec1efa0c37582a35b6e91e63924a40b0e3345285a9d0053caff5d441367fc1c7c8733f199ff1b7185755faf28e8ceb0cbb7ac0bd7804dc1c959c1eae31f31816adf04172d82d4aac270a17a1f07d767ffe3d4a660339706a54b96c7803d828fb3ac8d023f8054b97e83f8b1693ea9a507a303fc9a3cfebdf0b2573a07fe81a7046ef6ed2a97d9279839b02087a236c73329e8866582dbab2a65c98805a86f0de5f0bea5bbfbcd6a516430f2333e9c506463ccbd1b9ce24d53631b41037be75b94190860621b21ff454fdec1be94e15e84a9c2ae8fab04f680ea4d2620b094f2f7c0b1cf18c7cae9d6f855c40d7893f9e9a3d98f17f2051bf1acaf2b09449a86bf5ee95a6f418884ea41688c71e7fa734bd4646ae897ada0a26b0005d751acedafb72dfca017e7e596955c2e638af23b21ba0fde26edc82888163d60afcd19bc39fb6ccc98638762c68c3ba42246437ac5b2ac65446109409b2f375c94e9b988d9bae97401f99ac2738c298a1fdba5ae0967fcb4aa90b97fdabc83f5f34f14d2e135f7941119bdd9cc91debb21f427ad561b1e7566ae81fe94b4aff8882d765610ce08f4a0735602086db8891cfbd48a96dab2d360ebd2c73f1a649aa227e24e769b363fac9a464bdb05d7539d9b1daf6c39d39402eef621acab0756d074f7b09abb772f550d7bfaa8ed98c790a9ca6813fa6ab835a76625d66753a80278da52da866abb2c6f4c1949f245f39457921b4a8249eb56524932e9fc6560b3bdc815cf462ac5e996005d754a917bc04cdfd9f66d8464c96647f33048e84280af4d87c7934552cbedb6e47352f7106cc1cec7a1c6b7c3d269dfc076c4f8fdcab0f3713bb45370dbc70465ae2c16708139f4c8bb1fe34411024d64c2d0d13df21cf821353c5996b4c5023ef53a6cabddc200df8a8e40ce155edb86328e7cc1da5275928d5b334cf73a58446e362fce006094753ae5746927387afb4d9f3538c79f8a883723dcf153b4a4514a38cccdd94bcce9f17a98d17bab5836fd333fde511f43211e6326fd2bdc158e5b5dcb8ef8073c2bda8241dcb230b8a66071769e70ffb6b059d29f26b30311b889065a86e79ec93fb6a74386570fbc9f7c6533496e7bb3263452e3ac0678528e82c7be24f5941b4cbf92f5b970ed8d8148c370b22b543ed69aa73d9c2b94501deb850cf5ba13a8362aa1225d44d109a791227e015506478e268b2126055bedc901df5169e5c5243f46a01f3b088868a7d0af32edc22e26a47fe91c835bf9e7e3fa1eff34c8e45819dc451b7f837ced8a55329a1c79f67e3adbf75ad8329cc0a1126d329e081dcc3a4539c178ad017bf473a693c3b8bae86d30245a7663c1faed88772a54136c4d94ef33d886820d347f0ecd2dc01ded1eae1ee80ea9ea388524c8dcee60d379cd9a3d3cd88cabacdaaa430a5654bc6e5e4dfae277e24f0832c11318fa9399448a4c8a0ba5ff1186ca51d3eea1fdaec9ed3fdaede6f0219e5b98a553b9d1e58b2b1f6007e7e69afc99fe398a1d8e99ed45b60736c14ac6ece8356fe08a015bf6bc52d0045f724492b926843e2e0f6d946683bc955d4fcd90ea5299d7161259e8229210707677794e8ed7c6673f0427addaf486706508d209e6ddf2622af23aa1081c11044de5eaa3ec172ce2607fe4156c20ac2197e76c3a6061dc4c4307dd48be200092bb2d42115c37660a6bfd4ffb8f07ef99aa9c3fb2662920891715fdad82a48c13686c78b026bcbd59b51c710c8d82d148c98c4c844b2aba7b790b821dcca93d5eb72408c5bfb7b3459dc9b3480c5af57188d0c703f149e173d956b450e399336f4c9e1aca037f604950c13224ccc27067fdf9b4b6d814899fbc7a487ab3deba72be629c7ad559cbe5320af128ad4983860512c2b08bf55c05191596d5181f394812737a7f9248a6e57efa0112a615246f2a1375564b432cdfc515ae37d31d2a001cb55e893067b7cd20848e0c0f57e5f41c7df0cbdd119f848b359942f99a867b29d5f65f8a2fa1621456467978a2c34ea178793ac0d89d38d71b938d4c97c1cf7fdcb875e1f2845b4e990e24d6e5ab22b9c08830db5e16b87450c2743bd5a70fd5b225a75a37d85277d9432351018da896c465609320dbbd8e7d01c92569c8ecc84d093a0fa15d5497f3020157a8a19837e9c0c967d125e6e4a5e780835194b6e936d242f764ef743791119dbe13bd8de5af5f15b78cf78a9d642e7fb8bbf648ee8006e936e7e2b75fda676729d2c7c81ca99a219e9e35b9460584bec3eb855b13b0bf9d5bceffb259d584f5221302b02b627bad40a561a178183e8b5f3021ca6f3c9a40a81e32cedc73df9b77ae0a11f03e53ba21d5bb709e0510b92c6f5fccdab7798aca179bbd132422def901d048c6f0c1de94f90f2b64704c02cb48a623c1e60b32614516cc4845aff910092d1e1e4c6da3c87bc99a6da78131b6e7552299320f1707a2c556bc9bfe9d68c1450c18a7bb0c844c990244b17a4b406306db8d80675278bf023b3c72936ee9d28b60d33487699beceea05c743cc022583a5dc579fb1d00cddc91e333a1768772eb3e5328e9386c18ee0789343e93414b2626f95e5f85d275e5aca70f70bb028a04c0d53a055213f0625cc2e2f7341167317fed246e59d952e3d382f94e9019b85c0e2cdbb4b0e73c41d9090e26678e55824e4f452c7f2da0efb263ab3c0a4dcf981fc323f2735432bdee4825ee927a3121c9738cb82913edbbed7b8f2dbe03aff664df9d68057f261cb5d3aafa3bfd324ae3bb406f54263bdf8e266582f218f0b8d137373c56768e24dce1f67c83173b0949d47cd69d0a8048e91efbb391889cdb729f8afdec28a626508b56def738ef3d6fe20e07463b25afae588b2af3ee04b2a75407bb272a15f8da56d0ffe005aba10a3c8caa695c1f473c396a9913a6cd7af41e4ea9d77b178650e1a6a8dc4c2f82c0f178cf446f456b65e0cc589095cff3bdea5fbff3a6ae32732aa8d99625ca76cc0ede7514f37044fa50c4e34fdcb3ff6868aeedd62bfe38c779697ad1e2ad6f4545fe1eab15d6b0796a1aace47b4be368feaf5be40b242b8d17912af5c64418869fca0d295a37e91cc8af8c176542fa3d720ead57c749a601f3004ef0a9890b09149e3ac3d47fd8768a579f1d4effe3754537edb0fa88dd58a764f0e22339ba280dd277e574a85c004fc192f431214cfa872837f873c5f0e7ee2fb5df00e768b62a1914c804c3633a75ae34d7f908370360a4ec9c404a51131ea58ef63b9528738d5f3a1d6d41e1401f06ca10e932cabf56a93073e425b9b4e3bb9b50fafcf014262d65b179416d43ece044109e913c9a67ad8454900947b0175b1898f39caa813e52b137b2a8ea6fe5bd16", 0x1000) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001100)={0x0, 0x85, 0x51}, 0x0, &(0x7f0000001140)="05a81710c5e263cbeea408901bfb1be00143cdecc26d2e378ac403de39ada9aeee2fa172dcc65d342e59f1d1d29c874d2c7fcb04eec1a41c2019bd93abfec0e49e7f96c1e762e16886a9ab1c29fb419168a9059737e4c84f21ff1658e185b1be2d73d04d32bb72b71a51e93a4103e36f3eb2bb597e4c0045cc173297a4253d540c2553ebc0", &(0x7f0000001200)="4ae52eb36c771cedb88ef74b4753921e94ee207937e470e9310943ebf344d0f813d820d97778a197a7e6f4665fabcab5b0ab911dc3379c8ae14bf37c9e3c2c473af32c0ed8b0974d24ecd66f8f9f241a8d") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001280)={'ip6_vti0\x00'}) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000012c0)=0x7, 0x4) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80000001, 0x2b}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x42010}, 0x2400c0c1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000001440)=0x10) r4 = socket$inet6(0xa, 0x1, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001880)={0x0, &(0x7f0000001480)=[@wrmsr={0x1e, 0x20, {0x33a, 0x5}}, @uexit={0x0, 0x18, 0xba8}, @wrmsr={0x1e, 0x20, {0x3aa, 0xfff}}, @wr_crn={0x46, 0x20, {0x8, 0x9}}, @rdmsr={0x32, 0x18, {0x2d4}}, @code={0xa, 0x51, {"f342da28b9800000c00f3235000100000f30c4a1d1f81d0a000000c4c1e9e9e20fc75811450f787800c481945da66e000000f20f306647807c7d00f8450fc731"}}, @wrmsr={0x1e, 0x20, {0x2df, 0x7f}}, @wrmsr={0x1e, 0x20, {0x244, 0xffffffff}}, @code={0xa, 0x5c, {"c4614ddf31450fc79b4476b597c42151f24f02c483054839033626460fc773d166baf80cb8744c5489ef66bafc0cb800800000ef0f01c9440f20c03504000000440f22c0400f30f00fc02f"}}, @wr_crn={0x46, 0x20, {0x0, 0x100000000}}, @code={0xa, 0x49, {"460f06f3420f09f019041f66b8fe000f00d0c744240033000000c7442402acc1c4a0ff1c2466b824018ec89dc421401613dbcbf3480f1ec9"}}, @rdmsr={0x32, 0x18, {0xb6e}}, @uexit={0x0, 0x18, 0x10}, @wrmsr={0x1e, 0x20, {0x306}}, @cpuid={0x14, 0x18, {0x5, 0x1f3d}}, @code={0xa, 0x5a, {"66420f0641d9c90f01c866baf80cb8766e5581ef66bafc0c66ed0f01c9b805000000b92efa00000f01d9b904030000b800000000ba008000000f30670fc5f8d041f466ba2000b000ee"}}, @cpuid={0x14, 0x18, {0x4, 0x4}}, @uexit={0x0, 0x18, 0xffffffffffffe08b}, @wrmsr={0x1e, 0x20, {0x949, 0xe}}, @wr_crn={0x46, 0x20, {0x8, 0x9c6}}, @rdmsr={0x32, 0x18, {0xb74}}, @rdmsr={0x32, 0x18, {0xa62}}, @rdmsr={0x32, 0x18, {0xc0010894}}, @wr_crn={0x46, 0x20, {0x6, 0x200}}, @wrmsr={0x1e, 0x20, {0x8cc, 0x10000}}, @cpuid={0x14, 0x18, {0x800, 0x1f4b}}, @cpuid={0x14, 0x18, {0x1, 0x7}}, @uexit={0x0, 0x18, 0x49c6}], 0x3e8}) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f00000018c0)) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001a00)={@mcast1, 0x1d}) r6 = fcntl$getown(r5, 0x9) prlimit64(r6, 0xc, &(0x7f0000001a40)={0x2, 0x4}, &(0x7f0000001a80)) connect$netrom(r0, &(0x7f0000001ac0)={{0x3, @null, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001b40), 0x2000, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x7ff) bind$alg(r7, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001d00)={&(0x7f0000001c00)=[0x0, 0x0], &(0x7f0000001c40)=[0x0, 0x0], &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001cc0)=[0x0, 0x0], 0x2, 0x2, 0x9, 0x2}) keyctl$set_timeout(0xf, 0x0, 0x83) openat$cgroup_int(r0, &(0x7f0000001d40)='pids.max\x00', 0x2, 0x0) 5.189468652s ago: executing program 1 (id=231): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r0, 0x2, &(0x7f0000000080)={0x6, 0xb9e2}, &(0x7f00000000c0)) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x6, 0x100) pwrite64(r1, &(0x7f0000000140)="9efb5685d88993a09494d6bb4ae0ecea1f8cea3c8f63968d80284e584d7984b10e442e6ae7470caf56c8a4a4d885d075c4c7338e878e5f96faf9f36d378b46ec0aaa180a323e1c7966af85ef293b98e48968912a752ae42d929ed821b51bf9e0accc8c1628f48fbef88a481e78e45c40246e0c59c5c928d971c0c3933086501b585384082faf64785ddc2c0c7e11769fe82968c6d85897ac4316274055bb2bc0aea2a7cfe70c545dad33b5a7787a61d0", 0xb0, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000200)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000340)=0xe8) r5 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x240c0, 0x82) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x268, 0x1, 0x5, 0x5, 0x0, 0x0, {0x7}, [{{0x254, 0x1, {{0x2, 0xfff}, 0x6, 0x7, 0x5, 0x70bc, 0x6, 'syz0\x00', "edbba4661272cf7cc71c81d3c2f1ba60a21388498da0c4d88f880498d866de76", "62f96402931f077a3c484a2b79aab7bb61f7fb9ca7f591701284b69dd822ea62", [{0x8, 0x1, {0x2, 0x1}}, {0x3, 0xa801, {0x0, 0xfffffff7}}, {0x8, 0xe4, {0x2, 0x100}}, {0x8, 0xff, {0x3, 0x800}}, {0xdb78, 0x3, {0x3, 0x6}}, {0x0, 0xffff, {0x3, 0x10000}}, {0x8000, 0x7, {0x2, 0x6}}, {0x81, 0x6, {0x3, 0x7}}, {0x101, 0x6, {0x2, 0x8}}, {0xff, 0x6, {0x3, 0x5}}, {0x7, 0x4, {0x2, 0xf}}, {0xd, 0x1, {0x2, 0x9}}, {0xb0, 0x7, {0x0, 0x514f7c4b}}, {0x6, 0x2, {0x1, 0x80000001}}, {0x2, 0x6, {0x2, 0xf1}}, {0x3, 0x40, {0x3, 0x5b524b1f}}, {0x8, 0x80, {0x1, 0x9}}, {0x0, 0x3, {0x1, 0x8ee}}, {0xb, 0x3, {0x0, 0xb696}}, {0x7, 0xfff7, {0x2, 0x2}}, {0x7ff, 0x2, {0x3, 0x4}}, {0x7f, 0x1, {0x1, 0xf}}, {0xcc1, 0x401, {0x1, 0x5}}, {0xc, 0x8, {0x2, 0x8}}, {0x45c7, 0x38fb, {0x0, 0xea63}}, {0x8, 0x10, {0x0, 0x4}}, {0x800, 0x5, {0x0, 0x5751}}, {0x0, 0x2, {0x2}}, {0xf4f8, 0x4, {0x0, 0xfff}}, {0xd, 0x1, {0x1, 0x2a0dfc35}}, {0x800, 0x3a6, {0x3, 0x101}}, {0xd, 0x60, {0x0, 0x2490}}, {0x8, 0x400, {0x0, 0x9}}, {0x3, 0x0, {0x1, 0x1}}, {0x1, 0x7f, {0x3, 0x91c7}}, {0x9, 0x0, {0x2, 0x7fff}}, {0x6, 0x4, {0x3}}, {0x1, 0x7, {0x2, 0x8}}, {0x401, 0x7, {0x3, 0x80}}, {0x4, 0x8445, {0x2, 0x3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount(&(0x7f0000000700)=@nullb, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='ntfs3\x00', 0x1104008, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x400000, 0x0) r6 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000800)={r2, r5}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r7, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x11, r5, 0x8000000) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x401) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000700, r4, &(0x7f00000009c0)) fsetxattr$security_capability(r1, &(0x7f0000000a40), &(0x7f0000000a80)=@v1={0x1000000, [{0x8000, 0xc}]}, 0xc, 0x2) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000c40)={0x0, @local, @multicast2}, &(0x7f0000000c80)=0xc) sendmsg$inet(r2, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b00)="dbddb01348336ca59347f02707279ed3cb59a6f1f23d409f26b227c487fe9af272611d9a74f13218117e46661d969925aada43e0d6e2cb50445c405e5b33e992673bbc2bf0d5a876766912a4b003e0a8c85cf43606f9e739899ab015ea265cd11cb8a2233db2d1978f254b290b35e8576c4dbf94942ba194f24c87bf818f09b74d3a6699cdd1dfa9c0f7d5edaaf02ce2a8ce425088d9235ff4f76a147d427d57abb9c27a4ee324f01c71330cc40a4be749f2bf391d2d33e5f4f51ec5933ab325f81e8d02599c11c2bd6e4e409cf243e8fe24a08087", 0xd5}], 0x1, &(0x7f0000000cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}}}}], 0x90}, 0x0) r10 = creat(&(0x7f0000000dc0)='./file0\x00', 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000e00)={0x7, 0x9, 0x0, 0x62e, 0xe01, 0x3c7, 0x0, 0x172, 0x0}, &(0x7f0000000e40)=0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000e80)={r11}, &(0x7f0000000ec0)=0x8) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r5) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0x9c, r12, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) sendmsg$AUDIT_ADD_RULE(r10, &(0x7f00000015c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001100)={0x454, 0x3f3, 0x10, 0x70bd2b, 0x25dfdbff, {0x5, 0x2, 0x3a, [0xfffffffe, 0x5, 0x7ff, 0x0, 0x7f, 0xf30d, 0x8001, 0x5, 0x1, 0x2a51, 0xd, 0x5, 0x2, 0xffff, 0x0, 0x6, 0x7, 0x1, 0x9, 0x8, 0x3, 0x4, 0x6b, 0x0, 0x4, 0x0, 0x8, 0x7, 0x7, 0x7000, 0x4, 0x9, 0x7, 0x100, 0x9, 0x5, 0x0, 0x4, 0x10001, 0x7ff, 0xc36, 0x6, 0x101, 0xe, 0x2, 0xf, 0x3, 0x9, 0x81, 0xe, 0x5, 0x1, 0x8, 0xd, 0x0, 0xfffffffc, 0xa175, 0x7, 0x8, 0x0, 0x8, 0x8, 0x40], [0x9afd, 0x7, 0x2, 0x4fd40, 0x17, 0x7ff, 0x5, 0x4eac, 0x5, 0x6, 0x10, 0xb0, 0x2, 0x6, 0x5, 0xdd00, 0x7, 0xa2, 0x9, 0x7, 0xf, 0x8, 0x8, 0x80, 0x1d, 0x9, 0x9, 0x5, 0xfffffff8, 0x0, 0xe6451324, 0x7, 0x7, 0x8001, 0x10, 0x7, 0x5, 0x9, 0x2, 0x2461, 0x8, 0x9fe, 0x3, 0x1, 0x30, 0xf7dd, 0x9, 0xfbc, 0x0, 0x9, 0x9, 0x6, 0x8, 0x7, 0x5, 0x1, 0x1, 0x8, 0x1ff, 0x10, 0xffffff81, 0x400, 0x1ff, 0x3], [0x0, 0x1, 0x80000000, 0x1, 0x2cb9, 0x1, 0x5, 0x8, 0x2, 0xffffff7f, 0x80000001, 0x2, 0x0, 0x8000, 0xb22a, 0x8, 0x40, 0x8e08, 0x3, 0x8, 0x5, 0xd82, 0x3, 0x5, 0x3, 0x10000, 0x5, 0x4, 0x4, 0xffff7fff, 0x2, 0x9, 0x1, 0x4, 0x3, 0x8, 0x8, 0x9, 0x6, 0x68c7, 0xffffa304, 0x0, 0x10, 0x9, 0x7c0, 0x19e, 0x5, 0x5, 0x0, 0x195, 0xc, 0x4d92adfd, 0x84, 0x0, 0x4, 0x8, 0xabf6, 0xba, 0x0, 0x3, 0x1, 0x8000, 0x6, 0x7], [0x390, 0x9, 0xd, 0x1, 0x5, 0x4, 0x3, 0x3, 0xa2, 0x5, 0x1, 0x3, 0xfb19, 0x3, 0x2, 0xffffffff, 0x3, 0x7fff, 0x7, 0x7, 0x5, 0xffff, 0x9, 0x5, 0x2, 0x7, 0x1ff, 0x5, 0xfff, 0x6, 0x0, 0xb499, 0x5, 0x8000, 0x2, 0x6a8, 0x1000, 0xe6, 0x582, 0x3, 0x486d5339, 0x4, 0x0, 0xf6d, 0x5, 0x200, 0x8, 0x7f, 0x6, 0x7fffffff, 0x3f, 0x10000, 0x0, 0xe, 0x4, 0x5, 0x800, 0xc35f, 0x3b, 0x1, 0x2, 0x7, 0x1, 0x4], 0x33, ['veth1_to_bridge\x00', 'veth1_to_bridge\x00', '}!\x00', 'veth1_to_bridge\x00']}, ["", "", "", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x40408c1}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b8, 0x0, 0x418, 0x0, 0x348, 0x208, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, &(0x7f0000001600), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xfe}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, [0xffffffff, 0xff000000, 0xffffff00, 0xff], [0x0, 0xff, 0xff, 0xffffff00], 'team_slave_1\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x2c, 0x5, 0x2, 0x44}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x16, "b1a79499e5aefdb1133d23a5924d0c3f9ece927a474952e90caeb4771da5"}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0x0, 0x0, 0xffffffff], [0xffffff00, 0x0, 0xffffffff], 'dummy0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x0, 0xd, 0x0, 0x1e}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@hl={{0x28}, {0x3, 0x6}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@remote, 0x3c, 0x4, 0x9}}}, {{@ipv6={@mcast1, @local, [0xffffffff, 0x0, 0x0, 0xff], [0x0, 0xff, 0xff000000, 0xff000000], 'team_slave_0\x00', 'vlan1\x00', {0xff}, {}, 0x1, 0x5, 0x5, 0x9}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @remote, [0x0, 0xffffff00, 0xff000000], [0xff000000, 0xffffffff, 0xff, 0xffffff00], 'veth1_to_batadv\x00', 'nicvf0\x00', {0xff}, {}, 0x87, 0x40, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) openat$dir(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x88000, 0x5) 5.139488889s ago: executing program 0 (id=232): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, 0xffffffffffffffff) mprotect(&(0x7f0000155000/0x1000)=nil, 0x1000, 0x6) 5.016345377s ago: executing program 4 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) lchown(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000006c0)={{r0}, 0x0, 0x4, @unused=[0x8, 0x4, 0x9, 0x7fffffff], @subvolid=0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffc, 0x0, r2}, &(0x7f0000000600)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x20, 0x0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r6, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 4.918231308s ago: executing program 1 (id=234): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006400002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x100) (async) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711807000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x70bd27, 0x0, {0x8}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x1000000}]}, 0x24}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x94) 4.53912436s ago: executing program 3 (id=235): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10160, 0x2, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x0, 0x3500) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x34c, 0x0, 0xfc, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000011c0)=ANY=[@ANYBLOB="010000000000000008010040"]) (async) fanotify_mark(r4, 0x1, 0x40000032, r3, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) (async) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r6, 0x0, r3, 0x0, 0x7ffff000, 0x1) (async) r7 = socket(0x21, 0x2, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) (async) r8 = syz_io_uring_setup(0x3fa9, &(0x7f0000000640)={0x0, 0xac86, 0x8, 0x1, 0x2fb}, &(0x7f00000006c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x8, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}) (async) io_uring_enter(r8, 0x847b9, 0xfffffffd, 0x10, 0x0, 0x0) 4.30261975s ago: executing program 0 (id=236): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000009640), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000098c0)={0x4, {0x6, 0x80000000, 0x9, 0x905, 0x6, 0x1}}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0, 0xf000}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000240)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b00)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) 3.751714062s ago: executing program 4 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESOCT, @ANYBLOB="3ea65cdff5e297317c9034c86213c21bab36edebcaacef07476feb0a11efed722efb106f87981bfecd1fc7fe1bfb0a89a1ca07db13fb619b46f064d436d7930a4865a386a7f3dd755a376b3740e77e9d189cf908860d8cb1ddba52e8c1cb99d52b693962320f54fd2a7628a41d1287068fbb3559cb9f1e0806eb7637c2a847921c4cf93a2b835309899ab3d8036a57a4efaefddc6656e1b1077835b9ab"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20011814) (async) r7 = syz_io_uring_setup(0x5683, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x22}, &(0x7f00000001c0), &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) r8 = syz_io_uring_setup(0x3734, &(0x7f0000000580)={0x0, 0x139b, 0x4, 0x1, 0x16a, 0x0, r7}, &(0x7f0000000600), &(0x7f0000000900)) syz_io_uring_setup(0x7dc0, &(0x7f0000000880)={0x0, 0x5, 0x20000, 0x2, 0x2000000, 0x0, r8}, &(0x7f0000000780), 0x0) (async) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x40001, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r10, 0x58, &(0x7f0000000500)}, 0x10) syz_io_uring_setup(0x4ccc, &(0x7f0000000940)={0x0, 0x0, 0x400, 0x0, 0x10}, &(0x7f0000000280)=0x0, 0x0) syz_io_uring_submit(r11, 0x0, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) gettid() 3.587119459s ago: executing program 1 (id=238): pipe(0xfffffffffffffffd) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000880)="9f384658", 0x4}, {&(0x7f0000000740)="626c5d9212637be1cdff5c4f7fa8fb88539289df34c5ed46242792c1433e3df83cdbe7cd0c3ec0f6dcf782d71135043dbe97b6e2c32d5b48fc7ac00a6853dc", 0x3f}, {&(0x7f0000000780)="2aea7c915482e36a2a733741820bd73df7f05a6e3937733b0e622e7005ea15ff7cf45ef54a6fa80e455be16b18b2b0ef18828c128ebc66d971f7ea36ab7c5b1b4cb6eaa99807257ed757d56f30414bd7b65de0d5e0922477a1564e96174f01820f62fb", 0x63}, {&(0x7f00000008c0)="633904dcf7ca7da6428c062e943fee18723b29b20b0756b52140fe6a3dd5e1cb64fdc5bb6458ea2ee0b5fddf82d079820720e4a843269a7271d3c3d29dcce88e033294116211771a6ba16f6725667f4ce64582e39a1c470103fa59843a34e7ce7aa13f7e966dc66a83439e733dceda92178184551dcd6898c884d222a46d61ee44185c6e51a7b3ff68c5e5d99dab5a78f93ab9a653c66b0a2b3bf9e8378f2e80545c2a87ebe4dbb7887a5d71c0752e7a80879c9be18f4d7a156210d80f5dc84a8bd7", 0xc2}, {&(0x7f00000009c0)="241a54281b990fca6e4743dc67c918f938c56896cf8146efcb55b045a0049806a26a5b0107a4185e445efbb484c4db07dda54857202da831b9aba9d2d945bee9e516fb5a1891f43fcedeae6a2009042650294f976564e8960c63cb45eac012453a0485c57b9e6f719b421d555f7f14452283b3b323e909fd5aaa0d47e42bf8e6232d6976ce326ec29282c930579846f7a203db1d51eb48c46c1de78d", 0x9c}, {&(0x7f0000000a80)="9665c15496391f18b064d1dfab8a2d795f6c744b915d44c9c644991080ecab03ed3f96969a8ccf509db9eee149d49057f72714ac5f2c11571d87b6d08a66974cb8b7414cd82b984967e08ab7d4e6e609bcb1d121dbb00c1eb4ffb326b75b6f6aa8205044570de5e7e944610508228e57b3ca806250a2dca3771d4bc1e4fc2c022a5912873906011d3800861caebb8c6818b4328ebf2bf120aab3c64165dff8fc1d8ae87d86", 0xa5}], 0x7, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) (async) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) unshare(0x26020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000005, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000005, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x50, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.585780402s ago: executing program 0 (id=239): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000792000/0x2000)=nil, 0x2000, 0x100000a, 0x13, r0, 0xffffd000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.471405512s ago: executing program 3 (id=240): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) setuid(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="3242703ecf43aa3a432bab0edab7", 0x0, 0x3, 0x0, 0x1, 0x0, &(0x7f00000001c0)='\x00', 0x0}, 0x50) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x92, 0x3e, 0xac, 0x10, 0xb48, 0x1009, 0x44bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf9, 0x2, 0x1e0, 0x2, [{{0x9, 0x4, 0x75, 0x7, 0x0, 0x3a, 0x4b, 0x58, 0x2}}]}}]}}, 0x0) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0xf}, @feature_unit={0x7, 0x24, 0x6, 0x2, 0x5, 0x0, [], 0x4}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x1, "0050d81500"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x2, 0x1, [0x1]}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x101, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x60, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2dc, 0x4}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @random="98d4cbca808b"}, @NL80211_ATTR_SSID={0x11, 0x34, @random="396245836ef73a522b1f74a476"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x60}, 0x1, 0x0, 0x0, 0x2090}, 0x80) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x64}}, 0x0) bind$bt_hci(r6, &(0x7f00000004c0)={0x1f, 0x2, 0x3}, 0x6) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r10, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) 3.427023226s ago: executing program 2 (id=241): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000040ac051f0200000000000109022400010000000009040000020300020009210000000122050009058103000000fc00cd5ea2302d35406d2c1776f368e563e5c518dbdddab8bfc7875bc8129c6c57eecab91739b05fd96208d927"], 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) execve(0x0, &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) bind$inet(r0, &(0x7f0000000340)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0xb4}}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x44, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) 3.426034703s ago: executing program 4 (id=242): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x2) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20) recvmmsg(r6, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)=""/158, 0x9e}], 0x1}, 0x2}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r8, 0x107, 0xd, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x4) socket$alg(0x26, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000001300), r9) 3.075065728s ago: executing program 1 (id=243): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) read$qrtrtun(r0, 0x0, 0x0) syz_io_uring_setup(0x25d3, &(0x7f0000000840)={0x0, 0xca66, 0x0, 0x0, 0x16d, 0x0, r0}, &(0x7f00000008c0), &(0x7f0000000900)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="998d7f83874d33e5", 0x8) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0xfffffffffffffe58, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x10001}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000940)=@fd={0x4e, 0x0, 0x4, 0x100000, 0x4, {}, {0x1, 0x0, 0x0, 0x6, 0x8, 0x6, "358ff655"}, 0xffffffff, 0x4, {}, 0x8}) ioctl$NBD_DO_IT(r5, 0x127e) sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000020c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="eb6e4563"], 0xfe0d) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x40081, 0x0) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000700)={0x1, &(0x7f00000006c0)=[{0x9, 0x10, 0x7, 0x2}]}) pwritev2(r1, &(0x7f0000000600)=[{&(0x7f0000000340)="a049e875fcd6b2b9df45b48d1e97ff7d036107f3bab377f1a8b125205a3a139fb54f502bd275b5066b05000000000000004f6eb338d0ea2a59d2abbe834a1dd70c838505bebcd94934143629726bf70354e8e215a1f80ca5b31b1b6ebe8319f135139e8f0caf19e61c10b86d3ea1593e36c2225ac9c46f208257525f43d76fdd7b84989d1bf1244a79a6676117173a1c55e6320e7b31416a1e9e86ff648e6caa85a12c0268766d3394f684b2f38e0f80ba184f627c841585326ee7ec956f16e2f03833fec07c611b5f863fae21dc102795a4605bfeed62c0480cc79a6309ff198121", 0xe2}, {&(0x7f0000000000)="80af82c4e1d99b1d3b1eedd5611c1f116aa3854f7aa7c9f02429661c6ab60631b82683dcb06deb4b61777bbc63f40b46ea", 0x31}, {&(0x7f0000000200)="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", 0xfe}, {&(0x7f0000000300)="fb6735e415e522c9f8cd306627cda753748e66035a2792ad2ed6ca6c92b43e052c3b4a09abebe69846d280905a1989a282bf4de279", 0x35}, {&(0x7f0000000740)="1d2460d9fc2a7207096311940b850942637ab61e6de10572118ce7f0cc66eeb0cc7cdaef83768183a9bb88058a6b543377647b07d2f892b16544b2054e61eb7452d04ec9df931f05dd8f283f9acc3efee4bd4b19c5d1782534021c150030ecbc3d6092a3943d229b28e17507c325faec46268c719a741b7f12199c0ac416bdc2509dca81bea57e292e24ef8fe82974ddd54ad75b8e409ac1415579edb38698ec73b0652fdb0da7f3c1b4a0a14ba16ec828b37e124c0ade479c645f26136d65e31c43d9be22365487c991b4428bd59bd354ab154a941ba0e31ac7b90e2c2499d097e737932225fe8b7ce0dca9d4ef989a72e6d12185853706", 0xf8}, {&(0x7f0000000440)="898324f6bb92276fda6eeed898651ddb48b91360567aef569518a04a7668f6804d03b8583c2416a993316c72e47648951f8ee14edc865cd8dbdff354c58810c8e9fe4daa65baf76b9248298b5481ec8cebf0fbcc98aac8f1b3cfcc64c4bab34242712c798293c40424aefe9dad4954e5d77f48471b168a2ba33dadd80dc0f7819af799084f10755a622b39d39468fcbb5eb6590d6e7e1d3c82752ea517ab88589951bfe21912cdc93fc116", 0xab}, {&(0x7f0000000500)="db04aac549c19c4cbd93bce2be9186b9473922082b266d47e98f0000001fb0990000000000", 0x25}, {&(0x7f0000000540)="e974aa58ad0144a75aaa5db2cfaaacac8c673cc573ddd80ee0301b6cc4f8a8f56e49bca4bee6bbd26e962e0006be5bb0cf7c74a6eb7381ac0356c63b77d21c851e154d4c325989a0048a9a22971e1a750a028f163bf6f9975d4f109233427455579d862574d4a24047f2defb76df59906e830dd6472839db6e3391e1cb7d108c889fbf06d78f8fafa97e391ac6", 0x8d}], 0x8, 0x7, 0x8000, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r2, 0x8b1a, &(0x7f0000000040)) 2.28315184s ago: executing program 4 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1) close(0x3) getsockopt$inet6_int(r1, 0x29, 0x19, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000206010100000000000000000000000305000500"], 0x30}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r6 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="15000000", 0x4, 0x40040c5, &(0x7f0000000080)={0x11, 0x8100, r7, 0x1, 0xfb}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl1\x00', r7, 0x0, 0x1, 0x40, 0x8, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x10, 0x0, 0x4, 0x6}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESOCT=r3, @ANYBLOB="274391825f6446e765a3403db138bef327a238ed1c1d766e9504eb4e5bae8a6abcf8aceb8072f95d0b1de0ae40eaa01ea06e1a2960685ef26ca95b8e847ea0aca5aa365afdc9a3ee2796a75ebce4e85ce19030ed6a3dc2111510e6d154a1583689df2dbff19fea514900cce7d4b048e1c50d501b899c4080e7ba9535108f3103d1ec9f49b489b508e6babdaaa356f5ed71d089ef6096e785c0fbd0a0782c43eaf5d9b38eddc1dd354e38ecc1cb1336b28cf93994cf5a97704795103746d661a928b622724bde75caa64c3921be373c13dd22280638b907882911030e2dce97f0b7c85306d57e98f0417c91a14a87687636fc19e9ff5b3aac0bb65fd7a743c2", @ANYRESDEC=r3, @ANYBLOB="bae80c5f611b485b3db813ecc1df87abea211f534a222a074f8265a2dd5849ba0e388baa6964e4e5ee7a3a841d2dd5043d3ce2bcce5360df29e63ee071453cb7ca88d7344fa0da5ffe7bde382b916fd38e66b11c528ed8edbee96c6ad2f624af24efe443b683deb11af676387cfa4dde85a7ba2680e4df056587ef13555ea40f289ba7cacb97dcc98af5996736c08d1f3716d706e5fedc17805416e15afd3977fac9f30cca99f554b4a6b747009a66456e09142519ec793f83fd9d0c72256dcad44d41e6530e3b633e2933a00f91ac1aa16554255660f68e79", @ANYRES64=r5], 0x40}}, 0x0) 2.239857914s ago: executing program 0 (id=245): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r1, 0x0, 0x50, 0x0, &(0x7f0000000040)) bind$inet6(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000aa8d00000000000000000000000000000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) renameat(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="eaa9a5c43208", @remote, @link_local, @broadcast}}}}, 0x0) 1.442735385s ago: executing program 1 (id=246): r0 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x4e20, @multicast1}}) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x810, 0xffffffffffffffff, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x1c, 0x0, r0, 0x80, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711}, 0x0, 0x0, 0x0, {0x0, r2}}) 907.664286ms ago: executing program 2 (id=247): creat(&(0x7f0000000340)='./file0\x00', 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x182d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040040}, 0x20008004) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x1) (async) pipe(&(0x7f0000000040)) (async) write(r1, &(0x7f0000000340), 0x11000) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x182d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040040}, 0x20008004) (async) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async) 870.357484ms ago: executing program 4 (id=248): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r0, 0x4068aea3, &(0x7f0000000040)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000001c0)=0x422, 0x4) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) r4 = eventfd2(0xe5, 0x80001) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000200)={0x0, r4, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000240)={0x2000, 0x8000}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)='dvmrp0\x00', 0x8, 0x68, 0x6}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x81, 0x20) r6 = open_tree(r5, &(0x7f0000000380)='./file0\x00', 0x1000) socket$nl_crypto(0x10, 0x3, 0x15) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000440)={0x4, 0x8, 0xfa00, {r7, 0x4}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x1e, &(0x7f0000000480)=0xffffff4c, 0x4) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xd) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000004c0)={0x0, 0x104000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000500)={0xd000, 0x1000, 0x1}) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x121000, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@loose}, {@cachetag={'cachetag', 0x3d, '\x00'}}, {@cache_none}], [{@permit_directio}, {@audit}]}}) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000640)={0x53e40525, 0xb, 0x2, 0x0, 0x1}) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000680)={{0x3, 0x0, 0x80, {0xeeee0000, 0x1}}, "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", "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"}) syz_genetlink_get_family_id$devlink(&(0x7f0000002700), r6) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x810) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000002840), 0x1) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x6400140}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x34, 0x4, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000002980)) close_range(r6, r8, 0x7cd5da07a2379881) write(r0, &(0x7f0000002a00)="ae9b3058d0bbbe71b5d7f20186940d9f3e9ca66c63ec97fd5527d15f9e41a5564c8740638075f5f991ba5d45ccbaf36c87f5a1b39c23ff68658c6c6c54e186749edd000c259f4f1d2e0952b1520b8af5d3dc9b7fbd73448177459c4db8c23c4013b7cff253f4a10d1cc488f8b0843bec28b507a777c31b92e1b5335869a4cb65777d99e606b0c80bfefb50e12d4e5e70e9c11c1ac8e1076f735b8d6ad596f0d7b0af12f7b45649691c312a0aeb53bd015739570b5d5f8dd6df74a27a30a6b030a977c96c5b2be04932621a412a3e004c", 0xd0) 774.79608ms ago: executing program 0 (id=249): prlimit64(0x0, 0xa, &(0x7f0000000300)={0x9, 0x9}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707bd19279dea3a989ab3c0bcffcfba1b5cdd4eb33ba40f0198d12e4108f58d9942e2a7a2efac7ed3d4a8ba0211be34077582823b52cea03e", @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESDEC], 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x201, 0x3, 0x50, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000001773b07600"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000001e14508b21abf70d0000040000000000d7ec0462cded04926a0208413c084f2001a301f8be0433859b031e1609adc2fc70ebd6397daded7e2ac3304ce0b78d791eb70e20547c6b488c121fba9f7bb405e51badb9713d5b6fbef287117d43ddd7ff4526191e40a3571a03a600fc78e1a0f5961eb34c51208a3d7c388f55d327bb6387654d24711ca8df9cb16cd58a3ff560d883caf9693a0d68e5", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000040000000000000585e235418110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf09000000000000350901000000000080000000000056080000000000008500000007002869d0b6a4a35c197a11bd06"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) close(r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) 774.042806ms ago: executing program 1 (id=250): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000040), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@can={0x1d, 0x0}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000200)=""/39, 0x27}], 0x2, &(0x7f00000004c0)=""/109, 0x6d}, 0x40000000) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async, rerun: 32) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async, rerun: 32) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080), 0x8) (async, rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000000c0)=0x6, 0x4) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_CONNECT(r4, 0x0, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x0) (async) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_CMDTEST(r6, 0x8050640a, 0x0) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) 737.814134ms ago: executing program 4 (id=251): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x7, 0xffff, 0x1}, 0x5}, 0x20, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r5, 0xc01064c4, &(0x7f00000003c0)={0x0}) syz_emit_ethernet(0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa020011ad39b53c016e05aaaa53ee47e06558ff81"], 0x0) 0s ago: executing program 2 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000300)=@arm64) syz_emit_ethernet(0x76, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts]}}}}}}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103100) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="5dc5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000300)=@arm64) (async) syz_emit_ethernet(0x76, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts]}}}}}}}, 0x0) (async) getpid() (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9}) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103100) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="5dc5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 86.153083][ T5823] cgroup: Unknown subsys name 'net' [ 86.271208][ T5823] cgroup: Unknown subsys name 'cpuset' [ 86.280812][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.102391][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.670627][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.687294][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.695222][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.708404][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.737483][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.855349][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.863820][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.871666][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.880409][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.888895][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.947557][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.955826][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.964141][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.975446][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.993051][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.001616][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.022357][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.030773][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.043836][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.062001][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.105725][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.118512][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.136094][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.144682][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.159613][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.282986][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 91.521309][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.529484][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.537040][ T5833] bridge_slave_0: entered allmulticast mode [ 91.544491][ T5833] bridge_slave_0: entered promiscuous mode [ 91.553824][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.561097][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.569099][ T5833] bridge_slave_1: entered allmulticast mode [ 91.576406][ T5833] bridge_slave_1: entered promiscuous mode [ 91.695067][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.708183][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.801003][ T5833] team0: Port device team_slave_0 added [ 91.842905][ T5833] team0: Port device team_slave_1 added [ 91.876277][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 91.997536][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.004664][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.031347][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.047898][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.055001][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.084492][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.242087][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 92.260742][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 92.285364][ T5833] hsr_slave_0: entered promiscuous mode [ 92.292230][ T5833] hsr_slave_1: entered promiscuous mode [ 92.368497][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 92.459327][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.466735][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.475135][ T5838] bridge_slave_0: entered allmulticast mode [ 92.483153][ T5838] bridge_slave_0: entered promiscuous mode [ 92.537716][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.545397][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.553278][ T5838] bridge_slave_1: entered allmulticast mode [ 92.561594][ T5838] bridge_slave_1: entered promiscuous mode [ 92.701351][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.708863][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.716075][ T5840] bridge_slave_0: entered allmulticast mode [ 92.724801][ T5840] bridge_slave_0: entered promiscuous mode [ 92.732721][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.741103][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.748513][ T5842] bridge_slave_0: entered allmulticast mode [ 92.755893][ T5842] bridge_slave_0: entered promiscuous mode [ 92.800510][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.810331][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.818505][ T5836] Bluetooth: hci0: command tx timeout [ 92.818906][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.831598][ T5840] bridge_slave_1: entered allmulticast mode [ 92.840411][ T5840] bridge_slave_1: entered promiscuous mode [ 92.847268][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.854454][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.861990][ T5842] bridge_slave_1: entered allmulticast mode [ 92.869612][ T5842] bridge_slave_1: entered promiscuous mode [ 92.883288][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.890566][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.898002][ T5847] bridge_slave_0: entered allmulticast mode [ 92.905468][ T5847] bridge_slave_0: entered promiscuous mode [ 92.916180][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.966997][ T5836] Bluetooth: hci1: command tx timeout [ 92.995424][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.002920][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.011092][ T5847] bridge_slave_1: entered allmulticast mode [ 93.018951][ T5847] bridge_slave_1: entered promiscuous mode [ 93.046976][ T5836] Bluetooth: hci2: command tx timeout [ 93.059567][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.093481][ T5838] team0: Port device team_slave_0 added [ 93.105472][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.118015][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.131328][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.184709][ T5838] team0: Port device team_slave_1 added [ 93.217023][ T5846] Bluetooth: hci3: command tx timeout [ 93.222835][ T5836] Bluetooth: hci4: command tx timeout [ 93.255343][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.296191][ T5840] team0: Port device team_slave_0 added [ 93.306464][ T5840] team0: Port device team_slave_1 added [ 93.315484][ T5842] team0: Port device team_slave_0 added [ 93.331194][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.367292][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.374292][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.400611][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.429506][ T5842] team0: Port device team_slave_1 added [ 93.460592][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.467717][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.494308][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.564689][ T5847] team0: Port device team_slave_0 added [ 93.580926][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.588304][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.615529][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.628325][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.635329][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.661718][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.674789][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.682277][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.709239][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.723707][ T5847] team0: Port device team_slave_1 added [ 93.745680][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.752993][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.779815][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.848927][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.855947][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.885477][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.953320][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.961980][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.989274][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.064741][ T5838] hsr_slave_0: entered promiscuous mode [ 94.072207][ T5838] hsr_slave_1: entered promiscuous mode [ 94.078868][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.086685][ T5838] Cannot create hsr debugfs directory [ 94.102169][ T5842] hsr_slave_0: entered promiscuous mode [ 94.109171][ T5842] hsr_slave_1: entered promiscuous mode [ 94.115401][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.124004][ T5842] Cannot create hsr debugfs directory [ 94.165756][ T5840] hsr_slave_0: entered promiscuous mode [ 94.172554][ T5840] hsr_slave_1: entered promiscuous mode [ 94.179284][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.187801][ T5840] Cannot create hsr debugfs directory [ 94.193785][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.274796][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.292810][ T5847] hsr_slave_0: entered promiscuous mode [ 94.300715][ T5847] hsr_slave_1: entered promiscuous mode [ 94.307441][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.315043][ T5847] Cannot create hsr debugfs directory [ 94.370872][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.381919][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.886920][ T5836] Bluetooth: hci0: command tx timeout [ 94.902889][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.916630][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.931480][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.944444][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.045610][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.057831][ T5836] Bluetooth: hci1: command tx timeout [ 95.070743][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.084207][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.095819][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.127755][ T5836] Bluetooth: hci2: command tx timeout [ 95.182679][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.274586][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.282587][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.291129][ T5836] Bluetooth: hci4: command tx timeout [ 95.293245][ T5846] Bluetooth: hci3: command tx timeout [ 95.339002][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.351234][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.358663][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.394699][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.411004][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.418311][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.434990][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.460824][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.548351][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.566582][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.577944][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.593620][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.612133][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.624680][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.652787][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.660585][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.693497][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.700717][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.731998][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.814602][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.821923][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.861978][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.869210][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.111458][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.216298][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.244490][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.295305][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.345138][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.394331][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.424234][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.431480][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.463143][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.470428][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.523107][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.530391][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.579668][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.587060][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.694559][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.830388][ T5833] veth0_vlan: entered promiscuous mode [ 96.877880][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.909647][ T5833] veth1_vlan: entered promiscuous mode [ 96.967570][ T5846] Bluetooth: hci0: command tx timeout [ 96.972070][ T5842] veth0_vlan: entered promiscuous mode [ 97.017913][ T5842] veth1_vlan: entered promiscuous mode [ 97.085422][ T5833] veth0_macvtap: entered promiscuous mode [ 97.127033][ T5846] Bluetooth: hci1: command tx timeout [ 97.171139][ T5833] veth1_macvtap: entered promiscuous mode [ 97.207902][ T5846] Bluetooth: hci2: command tx timeout [ 97.220220][ T5838] veth0_vlan: entered promiscuous mode [ 97.222734][ T847] cfg80211: failed to load regulatory.db [ 97.315354][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.326421][ T5842] veth0_macvtap: entered promiscuous mode [ 97.344114][ T5838] veth1_vlan: entered promiscuous mode [ 97.366583][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.375606][ T5846] Bluetooth: hci4: command tx timeout [ 97.381779][ T5846] Bluetooth: hci3: command tx timeout [ 97.394674][ T5842] veth1_macvtap: entered promiscuous mode [ 97.431756][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.441425][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.455339][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.464455][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.503568][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.520568][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.545442][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.567238][ T5838] veth0_macvtap: entered promiscuous mode [ 97.579155][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.611994][ T5838] veth1_macvtap: entered promiscuous mode [ 97.634904][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.647141][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.655958][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.665925][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.675631][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.720969][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.759461][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.772956][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.783491][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.795770][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.868412][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.876477][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.983214][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.003594][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.014665][ T5840] veth0_vlan: entered promiscuous mode [ 98.024680][ T5847] veth0_vlan: entered promiscuous mode [ 98.069867][ T5847] veth1_vlan: entered promiscuous mode [ 98.122963][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.133085][ T5840] veth1_vlan: entered promiscuous mode [ 98.148629][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.161903][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.215139][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.234428][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.361078][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.363226][ T5950] 9pnet_fd: Insufficient options for proto=fd [ 98.373838][ T5840] veth0_macvtap: entered promiscuous mode [ 98.389015][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.401191][ T5847] veth0_macvtap: entered promiscuous mode [ 98.416215][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.429691][ T5847] veth1_macvtap: entered promiscuous mode [ 98.437634][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 98.448795][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.456712][ T5840] veth1_macvtap: entered promiscuous mode [ 98.538803][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.555647][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.584120][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.626152][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.659477][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.688109][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.713175][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.713237][ T5955] process 'syz.4.6' launched '/dev/fd/4' with NULL argv: empty string added [ 98.734542][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.879120][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.975831][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.048028][ T5846] Bluetooth: hci0: command tx timeout [ 99.060971][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.144566][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.217786][ T5846] Bluetooth: hci1: command tx timeout [ 99.309647][ T5846] Bluetooth: hci2: command tx timeout [ 99.403031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.453945][ T5846] Bluetooth: hci4: command tx timeout [ 99.453956][ T5836] Bluetooth: hci3: command tx timeout [ 99.607157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 99.615645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 99.625101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.811902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.221540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.501396][ T475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.536517][ T475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.590913][ T5945] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.717712][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.725633][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.820940][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 100.844743][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.862521][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 100.874864][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.882781][ T5945] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 100.941256][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.992086][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.003926][ T5945] usb 5-1: config 0 descriptor?? [ 101.020619][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.234832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 101.247952][ T5945] usb 5-1: USB disconnect, device number 2 [ 101.400344][ T5979] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.617296][ T5984] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 101.807009][ T5848] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.831389][ T5984] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 102.217422][ T5991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.417078][ T979] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 102.537532][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 102.550389][ T5848] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.572249][ T5848] usb 1-1: config 3 has an invalid interface number: 182 but max is 0 [ 102.588174][ T979] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 102.597203][ T5848] usb 1-1: config 3 has no interface number 0 [ 102.618116][ T5848] usb 1-1: config 3 interface 182 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 102.623722][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.642147][ T5848] usb 1-1: config 3 interface 182 altsetting 8 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 102.663019][ T979] usb 5-1: config 0 descriptor?? [ 102.680680][ T5848] usb 1-1: config 3 interface 182 altsetting 8 endpoint 0x3 has an invalid bInterval 92, changing to 10 [ 102.702107][ T5848] usb 1-1: config 3 interface 182 has no altsetting 0 [ 102.924158][ T5848] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 102.935039][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.945314][ T5848] usb 1-1: Product: syz [ 102.950980][ T5848] usb 1-1: Manufacturer: syz [ 102.955643][ T5848] usb 1-1: SerialNumber: syz [ 103.854288][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 104.764286][ T5848] usbtest 1-1:3.182: couldn't get endpoints, -71 [ 104.795327][ T5848] usbtest 1-1:3.182: probe with driver usbtest failed with error -71 [ 104.901903][ T5848] usb 1-1: USB disconnect, device number 2 [ 105.103270][ T6019] 9pnet_fd: Insufficient options for proto=fd [ 105.427896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 105.444370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.444837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.830262][ T979] usb 5-1: string descriptor 0 read error: -71 [ 106.070407][ T979] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 106.496925][ T979] dw2102: su3000_power_ctrl: 1, initialized 0 [ 106.520463][ T979] dvb-usb: bulk message failed: -22 (2/0) [ 106.560910][ T979] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 106.802889][ T979] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 106.834189][ T979] usb 5-1: USB disconnect, device number 3 [ 106.887897][ T5920] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.351056][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.363086][ T5920] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 107.389840][ T5920] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.415352][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.424559][ T5848] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.433086][ T5920] usb 4-1: Product: syz [ 107.567040][ T979] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 107.651895][ T5920] usb 4-1: Manufacturer: syz [ 107.658100][ T5920] usb 4-1: SerialNumber: syz [ 107.671329][ T5920] cdc_mbim 4-1:1.0: skipping garbage [ 107.885704][ T6060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.27'. [ 108.295313][ T6027] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.307135][ T5899] kernel read not supported for file /dsp (pid: 5899 comm: kworker/0:3) [ 108.325207][ T979] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 108.357877][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.365317][ T5846] Bluetooth: hci3: unknown advertising packet type: 0x70 [ 108.376583][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 108.383356][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.384337][ T979] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 108.395151][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 108.410859][ T979] usb 1-1: New USB device found, idVendor=046d, idProduct=c70a, bcdDevice= 0.00 [ 108.422774][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.449072][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.453377][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.473709][ T5848] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.483122][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.498755][ T979] usb 1-1: config 0 descriptor?? [ 108.502305][ T5848] usb 2-1: config 0 descriptor?? [ 108.510484][ T6047] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 108.530933][ T6052] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 109.054443][ T6027] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 109.068705][ T5920] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 109.082532][ T5920] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 109.106781][ T6073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.31'. [ 109.448601][ T5920] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 109.513436][ T5848] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x3 [ 109.578142][ T5920] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 109.588073][ T979] logitech-djreceiver 0003:046D:C70A.0002: hidraw0: USB HID v0.00 Device [HID 046d:c70a] on usb-dummy_hcd.0-1/input0 [ 109.643580][ T5848] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 109.665872][ T5920] wwan wwan0: port wwan0mbim0 attached [ 110.241535][ T5848] usb 2-1: USB disconnect, device number 2 [ 110.298774][ T5920] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, f6:ac:23:02:21:89 [ 110.350446][ T6082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32'. [ 110.544452][ T6084] fido_id[6084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 110.547446][ T5920] usb 4-1: USB disconnect, device number 2 [ 110.693541][ T5920] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 110.776975][ T5848] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.016910][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 111.024945][ T5920] wwan wwan0: port wwan0mbim0 disconnected [ 111.050574][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.106913][ T5848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.150525][ T5848] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.196986][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.225764][ T5848] usb 2-1: Product: 瘱䱢ⱓ侨꣑㒐頝ࣀ瘩উ쇺ꋰ恁멇̆旍䑬蜲鯰렡盉襅爗ㆲ쒀鼓鵱ᭊ브⒲葍멀쌣見郼췂舶㖢⾠蓯䫾멋薑솻짌纘ॴ蔯̘콏瓌㋢䤔㤀ꨇꙎ䎼썤⹠㳩ꖷ䡳隷ꃰ侻㑉ペ䐛텹ᅃ䑱햭댊絋舍쯥ೖﹷ壄അ⪈Ƭ⯤湀ꖴ㋁轭埸푑ꜥ諨羋彴㑑﷋૏筘ぇ [ 111.440750][ T5848] usb 2-1: Manufacturer: ခ [ 111.470922][ T5848] usb 2-1: SerialNumber:  [ 111.495912][ T5848] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 111.534006][ T5848] usb 2-1: no configuration chosen from 1 choice [ 111.851204][ T5945] usb 1-1: USB disconnect, device number 3 [ 112.190616][ T6115] /dev/nullb0: Can't open blockdev [ 112.369847][ T6126] No source specified [ 112.389095][ T6127] No source specified [ 112.744578][ T6138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.43'. [ 113.942437][ T24] usb 2-1: USB disconnect, device number 3 [ 114.107114][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 114.913071][ T10] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 115.467290][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.535374][ T10] usb 5-1: config 0 descriptor?? [ 115.659362][ T6155] erofs (device nbd1): cannot find valid erofs superblock [ 115.731025][ T10] usb 5-1: string descriptor 0 read error: -71 [ 115.757194][ T5945] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.782347][ T10] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 115.802106][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 115.816955][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 115.819013][ T6157] capability: warning: `syz.3.48' uses 32-bit capabilities (legacy support in use) [ 115.850092][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 115.958750][ T10] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 115.960358][ T5945] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 115.960394][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.960416][ T5945] usb 1-1: Product: syz [ 115.960431][ T5945] usb 1-1: Manufacturer: syz [ 115.960447][ T5945] usb 1-1: SerialNumber: syz [ 115.969633][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.48'. [ 116.007427][ T10] usb 5-1: USB disconnect, device number 4 [ 116.022456][ T5945] usb 1-1: config 0 descriptor?? [ 116.036213][ T5945] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 004 [ 116.375603][ T6161] tty tty4: ldisc open failed (-12), clearing slot 3 [ 116.515937][ T5945] (null): failure reading functionality [ 116.551829][ T5945] i2c i2c-1: connected i2c-tiny-usb device [ 116.747825][ T6182] binder: Binderfs stats mode cannot be changed during a remount [ 116.779349][ T6147] sctp: [Deprecated]: syz.0.46 (pid 6147) Use of int in max_burst socket option deprecated. [ 116.779349][ T6147] Use struct sctp_assoc_value instead [ 117.054684][ T10] usb 1-1: USB disconnect, device number 4 [ 117.557334][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.717152][ T10] usb 2-1: device descriptor read/64, error -71 [ 117.991410][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.114223][ T6212] netlink: 72 bytes leftover after parsing attributes in process `syz.0.58'. [ 118.187708][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 118.210298][ T5920] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.246326][ T5920] usb 3-1: config 0 has no interface number 0 [ 118.266931][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.275286][ T5920] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.357188][ T5920] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.374604][ T5920] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 118.384748][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.406633][ T5920] usb 3-1: config 0 descriptor?? [ 118.416928][ T10] usb 2-1: device descriptor read/64, error -71 [ 118.558178][ T10] usb usb2-port1: attempt power cycle [ 118.952426][ T5945] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 119.292876][ T5945] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 119.359147][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.392247][ T5945] usb 1-1: config 0 descriptor?? [ 119.467001][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.497066][ T5848] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.498044][ T10] usb 2-1: device descriptor read/8, error -71 [ 119.604839][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.622311][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.767108][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.808871][ T10] usb 2-1: device descriptor read/8, error -71 [ 119.842176][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.863230][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.889491][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.900781][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.908722][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 119.922537][ T5848] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 119.929164][ T10] usb usb2-port1: unable to enumerate USB device [ 119.931361][ T5848] usb 4-1: config 0 has no interface number 0 [ 119.944379][ T6200] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 119.954883][ T5920] uclogic 0003:28BD:0094.0003: failed retrieving string descriptor #100: -71 [ 119.966178][ T5848] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 119.994236][ T5920] uclogic 0003:28BD:0094.0003: failed retrieving pen parameters: -71 [ 120.004189][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.062632][ T5920] uclogic 0003:28BD:0094.0003: pen probing failed: -71 [ 120.074659][ T5848] usb 4-1: Product: syz [ 120.097539][ T5848] usb 4-1: Manufacturer: syz [ 120.133687][ T5920] uclogic 0003:28BD:0094.0003: failed probing parameters: -71 [ 120.157172][ T5848] usb 4-1: SerialNumber: syz [ 120.195562][ T5920] uclogic 0003:28BD:0094.0003: probe with driver uclogic failed with error -71 [ 120.361653][ T5848] usb 4-1: config 0 descriptor?? [ 120.401713][ T5920] usb 3-1: USB disconnect, device number 2 [ 120.733852][ T30] audit: type=1326 audit(1754931092.190:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6222 comm="syz.4.62" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f719c98ebe9 code=0x0 [ 120.765054][ T5848] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 120.794095][ T5848] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 120.834838][ T5848] usb 4-1: Failed to create links for entity 5 [ 120.863884][ T5848] usb 4-1: Failed to register entities (-22). [ 120.933137][ T5848] usb 4-1: USB disconnect, device number 3 [ 120.944924][ T6231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.206113][ T6235] netlink: 'syz.2.64': attribute type 7 has an invalid length. [ 121.441302][ T6235] : entered promiscuous mode [ 121.650149][ T6233] netlink: 'syz.2.64': attribute type 25 has an invalid length. [ 121.747039][ T5945] usb 1-1: string descriptor 0 read error: -71 [ 121.769538][ T5945] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 121.809275][ T5945] dw2102: su3000_power_ctrl: 1, initialized 0 [ 121.880147][ T5945] dvb-usb: bulk message failed: -22 (2/0) [ 121.926231][ T5945] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 121.998364][ T5945] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 122.006602][ T6242] fuse: Unknown parameter 'fl' [ 122.078522][ T5945] usb 1-1: USB disconnect, device number 5 [ 122.309277][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 122.386892][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.600747][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 122.746209][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.258632][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 123.275288][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.339172][ T10] usb 2-1: config 0 descriptor?? [ 123.599857][ T5945] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 123.777292][ T5945] usb 4-1: device descriptor read/64, error -71 [ 123.807529][ T10] hid (null): global environment stack underflow [ 123.814125][ T10] hid (null): global environment stack underflow [ 123.867391][ T10] hid (null): report_id 3899690137 is invalid [ 123.891807][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 123.896075][ T10] hid (null): report_id 1862125167 is invalid [ 123.906688][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 124.149730][ T10] usb 2-1: USB disconnect, device number 8 [ 124.287080][ T5848] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 124.589608][ T5848] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 124.741993][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.799770][ T5848] usb 3-1: config 0 descriptor?? [ 124.908954][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.79'. [ 124.956986][ T5945] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 125.106905][ T5945] usb 4-1: device descriptor read/64, error -71 [ 125.205759][ T6284] ======================================================= [ 125.205759][ T6284] WARNING: The mand mount option has been deprecated and [ 125.205759][ T6284] and is ignored by this kernel. Remove the mand [ 125.205759][ T6284] option from the mount to silence this warning. [ 125.205759][ T6284] ======================================================= [ 125.242268][ T6283] hugetlbfs: Bad value '%' for mount option 'size' [ 125.242268][ T6283] [ 125.251750][ T5945] usb usb4-port1: attempt power cycle [ 125.260677][ T6284] hugetlbfs: Bad value '%' for mount option 'size' [ 125.260677][ T6284] [ 126.018000][ T5945] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 126.050491][ T6289] 9pnet_fd: Insufficient options for proto=fd [ 126.078742][ T5945] usb 4-1: device descriptor read/8, error -71 [ 126.256435][ T6292] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 126.295648][ T6292] netlink: 224 bytes leftover after parsing attributes in process `syz.1.83'. [ 126.366916][ T5945] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 126.552601][ T6297] netlink: 116 bytes leftover after parsing attributes in process `syz.0.84'. [ 126.597055][ T5945] usb 4-1: device not accepting address 7, error -71 [ 126.620694][ T5945] usb usb4-port1: unable to enumerate USB device [ 126.628089][ T6299] syz.3.85 uses obsolete (PF_INET,SOCK_PACKET) [ 126.792083][ T6303] hugetlbfs: syz.3.85 (6303): Using mlock ulimits for SHM_HUGETLB is obsolete [ 127.478109][ T5848] usb 3-1: string descriptor 0 read error: -71 [ 127.587815][ T5848] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 127.610494][ T6309] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.630260][ T5848] dw2102: su3000_power_ctrl: 1, initialized 0 [ 127.636472][ T5848] dvb-usb: bulk message failed: -22 (2/0) [ 127.707952][ T5848] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 127.765809][ T5848] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 127.791198][ T6311] Bluetooth: MGMT ver 1.23 [ 127.840068][ T5848] usb 3-1: USB disconnect, device number 3 [ 127.956989][ T6314] netlink: 'syz.1.89': attribute type 2 has an invalid length. [ 128.063625][ T6314] : entered promiscuous mode [ 128.239352][ T6327] 9pnet_fd: Insufficient options for proto=fd [ 128.297598][ T6324] warning: `syz.4.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.319384][ T6331] 9pnet_fd: Insufficient options for proto=fd [ 128.867222][ T5848] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.316198][ T5848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.523397][ T6338] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 129.530370][ T6338] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.551192][ T6338] vhci_hcd vhci_hcd.0: Device attached [ 129.581042][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 129.592103][ T6346] 9pnet_fd: Insufficient options for proto=fd [ 129.639899][ T6344] vhci_hcd: connection closed [ 129.641737][ T12] vhci_hcd: stop threads [ 129.661453][ T5848] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 129.675604][ T6341] Zero length message leads to an empty skb [ 129.720849][ T12] vhci_hcd: release socket [ 129.736190][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.763461][ T12] vhci_hcd: disconnect device [ 129.792828][ T5848] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 129.797669][ T5899] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 129.832130][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.834576][ T5899] usb 35-1: enqueue for inactive port 0 [ 129.872474][ T5848] usb 1-1: Product: syz [ 129.876732][ T5848] usb 1-1: Manufacturer: syz [ 129.977283][ T5899] vhci_hcd: vhci_device speed not set [ 130.835223][ T5848] usb 1-1: SerialNumber: syz [ 130.843760][ T5848] usb 1-1: config 0 descriptor?? [ 130.857734][ T5848] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 131.176472][ T5945] usb 1-1: USB disconnect, device number 6 [ 131.434381][ T5892] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 132.368551][ T5892] usb 5-1: too many endpoints for config 0 interface 0 altsetting 68: 200, using maximum allowed: 30 [ 132.384667][ T5892] usb 5-1: config 0 interface 0 altsetting 68 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.400334][ T5892] usb 5-1: config 0 interface 0 altsetting 68 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.412956][ T5892] usb 5-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 200 [ 132.437032][ T5892] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.444277][ T5892] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 132.467722][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.476961][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.503608][ T5892] usb 5-1: config 0 descriptor?? [ 132.681819][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.702571][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.737333][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 132.765222][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.795000][ T10] usb 1-1: config 0 descriptor?? [ 132.984063][ T6395] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.007950][ T6376] sctp: [Deprecated]: syz.0.105 (pid 6376) Use of int in max_burst socket option deprecated. [ 133.007950][ T6376] Use struct sctp_assoc_value instead [ 133.287254][ T6401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.111'. [ 133.606982][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.624031][ T10] wacom 0003:056A:00F4.0005: ignoring exceeding usage max [ 133.648158][ T10] wacom 0003:056A:00F4.0005: item fetching failed at offset 8/11 [ 133.667700][ T10] wacom 0003:056A:00F4.0005: parse failed [ 133.673621][ T10] wacom 0003:056A:00F4.0005: probe with driver wacom failed with error -22 [ 133.825114][ T10] usb 1-1: USB disconnect, device number 7 [ 133.840391][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 133.880947][ T5892] usb 5-1: USB disconnect, device number 5 [ 134.245437][ T6417] syz_tun: entered allmulticast mode [ 134.587172][ T5913] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 134.782160][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 134.799016][ T6416] syz_tun: left allmulticast mode [ 134.818268][ T5913] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 134.872598][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.919805][ T5913] usb 3-1: Product: syz [ 134.924057][ T5913] usb 3-1: Manufacturer: syz [ 134.952438][ T5913] usb 3-1: SerialNumber: syz [ 135.203148][ T5913] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.220837][ T5892] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 135.244981][ T5913] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 135.257428][ T5913] usb 3-1: USB disconnect, device number 4 [ 135.379103][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.393088][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.404561][ T5892] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 135.413886][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.425719][ T5892] usb 4-1: config 0 descriptor?? [ 135.805574][ T6434] FAULT_INJECTION: forcing a failure. [ 135.805574][ T6434] name failslab, interval 1, probability 0, space 0, times 1 [ 135.818726][ T6434] CPU: 0 UID: 0 PID: 6434 Comm: syz.0.120 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 135.818755][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.818777][ T6434] Call Trace: [ 135.818793][ T6434] [ 135.818803][ T6434] dump_stack_lvl+0x189/0x250 [ 135.818843][ T6434] ? irqentry_exit+0x74/0x90 [ 135.818870][ T6434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.818918][ T6434] should_fail_ex+0x414/0x560 [ 135.818948][ T6434] should_failslab+0xa8/0x100 [ 135.818975][ T6434] __kmalloc_noprof+0xcb/0x4f0 [ 135.818997][ T6434] ? kfree+0x4d/0x440 [ 135.819028][ T6434] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 135.819064][ T6434] tomoyo_realpath_from_path+0xe3/0x5d0 [ 135.819096][ T6434] ? tomoyo_domain+0xda/0x130 [ 135.819134][ T6434] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 135.819158][ T6434] tomoyo_path_number_perm+0x1e8/0x5a0 [ 135.819187][ T6434] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 135.819231][ T6434] ? __lock_acquire+0xab9/0xd20 [ 135.819276][ T6434] ? __fget_files+0x2a/0x420 [ 135.819321][ T6434] ? __fget_files+0x2a/0x420 [ 135.819344][ T6434] ? __fget_files+0x3a0/0x420 [ 135.819369][ T6434] ? __fget_files+0x2a/0x420 [ 135.819399][ T6434] security_file_ioctl+0xcb/0x2d0 [ 135.819428][ T6434] __se_sys_ioctl+0x47/0x170 [ 135.819465][ T6434] do_syscall_64+0xfa/0x3b0 [ 135.819490][ T6434] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.819513][ T6434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.819535][ T6434] ? clear_bhb_loop+0x60/0xb0 [ 135.819564][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.819586][ T6434] RIP: 0033:0x7f2c7c58ebe9 [ 135.819612][ T6434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.819635][ T6434] RSP: 002b:00007f2c7d353038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.819658][ T6434] RAX: ffffffffffffffda RBX: 00007f2c7c7b6090 RCX: 00007f2c7c58ebe9 [ 135.819675][ T6434] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000008 [ 135.819690][ T6434] RBP: 00007f2c7d353090 R08: 0000000000000000 R09: 0000000000000000 [ 135.819704][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.819716][ T6434] R13: 00007f2c7c7b6128 R14: 00007f2c7c7b6090 R15: 00007ffefa6638d8 [ 135.819750][ T6434] [ 135.819831][ T6434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 136.033218][ T5892] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 136.443379][ T6431] smb3: Unknown parameter 'rdma [ 136.443379][ T6431] 53ӱ \ bz>} \Lnz' [ 136.477932][ T6437] sp0: Synchronizing with TNC [ 136.515617][ T6431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.532855][ T24] usb 2-1: device descriptor read/all, error -71 [ 136.548011][ T6431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.550705][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.569107][ T5892] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 136.591020][ T5892] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 136.592136][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.679305][ T6442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.122'. [ 137.300299][ C1] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -71 [ 137.310791][ T5892] usb 4-1: USB disconnect, device number 8 [ 137.563619][ T24] libceph: connect (1)[c::]:6789 error -101 [ 137.593199][ T6446] ceph: No mds server is up or the cluster is laggy [ 138.272951][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.296573][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.346561][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 138.666102][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 139.305728][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 139.987201][ T6497] FAULT_INJECTION: forcing a failure. [ 139.987201][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 140.052450][ T6497] CPU: 0 UID: 0 PID: 6497 Comm: syz.0.134 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 140.052481][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.052495][ T6497] Call Trace: [ 140.052503][ T6497] [ 140.052512][ T6497] dump_stack_lvl+0x189/0x250 [ 140.052541][ T6497] ? __pfx____ratelimit+0x10/0x10 [ 140.052562][ T6497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.052587][ T6497] ? __pfx__printk+0x10/0x10 [ 140.052620][ T6497] ? __pfx___might_resched+0x10/0x10 [ 140.052649][ T6497] ? fs_reclaim_acquire+0x7d/0x100 [ 140.052684][ T6497] should_fail_ex+0x414/0x560 [ 140.052716][ T6497] should_failslab+0xa8/0x100 [ 140.052745][ T6497] __kmalloc_noprof+0xcb/0x4f0 [ 140.052767][ T6497] ? tomoyo_encode+0x28b/0x550 [ 140.052803][ T6497] tomoyo_encode+0x28b/0x550 [ 140.052841][ T6497] tomoyo_realpath_from_path+0x58d/0x5d0 [ 140.052957][ T6497] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 140.052982][ T6497] tomoyo_path_number_perm+0x1e8/0x5a0 [ 140.053011][ T6497] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.053058][ T6497] ? __lock_acquire+0xab9/0xd20 [ 140.053106][ T6497] ? __fget_files+0x2a/0x420 [ 140.053136][ T6497] ? __fget_files+0x2a/0x420 [ 140.053162][ T6497] ? __fget_files+0x3a0/0x420 [ 140.053186][ T6497] ? __fget_files+0x2a/0x420 [ 140.053217][ T6497] security_file_ioctl+0xcb/0x2d0 [ 140.053247][ T6497] __se_sys_ioctl+0x47/0x170 [ 140.053286][ T6497] do_syscall_64+0xfa/0x3b0 [ 140.053312][ T6497] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.053335][ T6497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.053360][ T6497] ? clear_bhb_loop+0x60/0xb0 [ 140.053388][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.053410][ T6497] RIP: 0033:0x7f2c7c58ebe9 [ 140.053431][ T6497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.053450][ T6497] RSP: 002b:00007f2c7d332038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.053475][ T6497] RAX: ffffffffffffffda RBX: 00007f2c7c7b6180 RCX: 00007f2c7c58ebe9 [ 140.053491][ T6497] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000008 [ 140.053507][ T6497] RBP: 00007f2c7d332090 R08: 0000000000000000 R09: 0000000000000000 [ 140.053521][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.053535][ T6497] R13: 00007f2c7c7b6218 R14: 00007f2c7c7b6180 R15: 00007ffefa6638d8 [ 140.053573][ T6497] [ 140.056053][ T6497] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.538471][ T6495] tty tty1: ldisc open failed (-12), clearing slot 0 [ 141.920637][ T6499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.135'. [ 142.606915][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.727285][ T5945] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 142.775694][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 142.981500][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 142.990357][ T5945] usb 2-1: Using ep0 maxpacket: 8 [ 144.739560][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.856868][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.953103][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.981396][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.002353][ T5945] usb 2-1: unable to read config index 0 descriptor/all [ 145.030468][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.047225][ T5945] usb 2-1: can't read configurations, error -71 [ 145.067957][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.393072][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 145.460888][ T10] usbtmc 1-1:16.0: can't read capabilities [ 145.813306][ T6559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.150'. [ 146.231144][ T10] usb 1-1: USB disconnect, device number 8 [ 146.361905][ T6562] netlink: 'syz.4.151': attribute type 10 has an invalid length. [ 146.397404][ T6562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.432732][ T6562] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 148.118255][ T6564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.408856][ T6562] syz.4.151 (6562) used greatest stack depth: 19608 bytes left [ 148.485957][ T6569] input: syz0 as /devices/virtual/input/input6 [ 148.934905][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.127092][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 149.592584][ T24] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 149.605299][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.614677][ T24] usb 4-1: Product: syz [ 149.622068][ T24] usb 4-1: Manufacturer: syz [ 149.631067][ T24] usb 4-1: SerialNumber: syz [ 149.651373][ T24] usb 4-1: config 0 descriptor?? [ 149.707220][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 150.017069][ T5899] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.067766][ T24] gspca_se401: Wrong descriptor type [ 150.196982][ T5945] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 150.216908][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 150.233636][ T5899] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 150.249722][ T5899] usb 1-1: config 0 has no interface number 0 [ 150.256190][ T5899] usb 1-1: config 0 interface 12 has no altsetting 0 [ 150.272007][ T5899] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 150.290220][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.411559][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 150.646144][ T5899] usb 1-1: Product: syz [ 150.747122][ T5899] usb 1-1: Manufacturer: syz [ 150.753224][ T5945] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.594027][ T5899] usb 1-1: SerialNumber: syz [ 151.598844][ T5945] usb 2-1: config 0 has no interface number 0 [ 151.609575][ T5899] usb 1-1: config 0 descriptor?? [ 151.718071][ T10] usb 4-1: USB disconnect, device number 9 [ 151.731858][ T5945] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 151.782897][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.801673][ T5945] usb 2-1: Product: syz [ 151.814358][ T5945] usb 2-1: Manufacturer: syz [ 151.828174][ T5945] usb 2-1: SerialNumber: syz [ 151.837980][ T5945] usb 2-1: config 0 descriptor?? [ 151.847556][ T5945] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 151.882963][ T5945] usb 2-1: selecting invalid altsetting 1 [ 151.898269][ T5945] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 151.927283][ T6598] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 151.947728][ T5945] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 151.997807][ T5945] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 152.029501][ T5945] usb 2-1: media controller created [ 152.065317][ T6592] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 152.175429][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.230716][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 152.286748][ T5899] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 152.305432][ T5899] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 152.435099][ T5899] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 152.513175][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 152.947533][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 153.567196][ T5945] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 153.628085][ T24] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 153.648752][ T5899] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 153.650653][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.665998][ T5945] zl10353_read_register: readreg error (reg=127, ret==-110) [ 153.712449][ T5899] usb 1-1: USB disconnect, device number 9 [ 153.718563][ T24] usb 3-1: Product: syz [ 153.747322][ T24] usb 3-1: Manufacturer: syz [ 153.752088][ T24] usb 3-1: SerialNumber: syz [ 153.821145][ T24] usb 3-1: config 0 descriptor?? [ 153.870042][ T6598] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 153.933110][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 154.004234][ T6614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.165'. [ 155.092810][ T6608] bridge_slave_1: left allmulticast mode [ 155.129147][ T6608] bridge_slave_1: left promiscuous mode [ 155.175512][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 155.177430][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.189683][ T24] usb 3-1: USB disconnect, device number 5 [ 155.263227][ T6608] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 155.419256][ T6618] netlink: 96 bytes leftover after parsing attributes in process `syz.2.167'. [ 155.755296][ T5945] usb 2-1: USB disconnect, device number 13 [ 155.757068][ T5892] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.927407][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 155.940647][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.008307][ T5892] usb 1-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 156.027616][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.074181][ T5892] usb 1-1: config 0 descriptor?? [ 156.102089][ T5892] usb 1-1: Found UVC 0.00 device (05a9:2630) [ 156.129820][ T5892] usb 1-1: No valid video chain found. [ 157.479161][ T6646] mmap: syz.0.168 (6646) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.711720][ T6662] fuse: Bad value for 'fd' [ 158.668406][ T6673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.180'. [ 158.996071][ T6677] pim6reg1: entered promiscuous mode [ 159.002562][ T6677] pim6reg1: entered allmulticast mode [ 159.268282][ T5892] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 159.389195][ T979] usb 1-1: USB disconnect, device number 10 [ 159.499917][ T5892] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 159.707790][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.101156][ T5892] usb 5-1: config 0 descriptor?? [ 160.348499][ T6694] veth1_to_bond: entered allmulticast mode [ 160.363268][ T6694] veth1_to_bond: left allmulticast mode [ 160.463737][ T6697] netlink: 'syz.1.187': attribute type 3 has an invalid length. [ 160.482557][ T30] audit: type=1326 audit(1754931131.940:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz.0.189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c7c58ebe9 code=0x0 [ 160.483124][ T6697] netlink: 666 bytes leftover after parsing attributes in process `syz.1.187'. [ 160.537333][ T5899] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 160.581457][ T6701] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 160.729970][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.747461][ T5899] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 160.765314][ T5899] usb 3-1: can't read configurations, error -71 [ 160.974677][ T5892] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 160.985589][ T5892] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 161.017885][ T5892] asix 5-1:0.0: probe with driver asix failed with error -71 [ 161.030431][ T5892] usb 5-1: USB disconnect, device number 6 [ 161.093075][ T6707] fuse: Bad value for 'rootmode' [ 161.117145][ T979] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 161.249550][ T6714] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 161.258457][ T6714] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 161.265098][ T6714] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 161.271926][ T6714] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 161.278714][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 161.284248][ T6714] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 161.293156][ T6714] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 161.302034][ T979] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 161.317403][ T6714] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 161.328361][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.340144][ T6714] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 161.356707][ T6714] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 161.377581][ T979] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.402694][ T6714] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 161.420729][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.433164][ T6714] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 161.450283][ T979] usb 4-1: Product: syz [ 161.454658][ T979] usb 4-1: Manufacturer: syz [ 161.464981][ T6714] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 161.478681][ T979] usb 4-1: SerialNumber: syz [ 161.971607][ T6714] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 161.990781][ T979] usb 4-1: config 0 descriptor?? [ 161.996270][ T6714] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 162.007532][ T979] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 162.017042][ T979] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 162.056923][ T5899] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 162.154255][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.197'. [ 162.219153][ T5899] usb 3-1: too many configurations: 79, using maximum allowed: 8 [ 162.230777][ T5899] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 162.238933][ T5899] usb 3-1: can't read configurations, error -61 [ 162.246633][ T5899] usb usb3-port1: attempt power cycle [ 162.397046][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 162.585454][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.596913][ T5899] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.609564][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.621066][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.630904][ T979] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 162.638952][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.641246][ T5899] usb 3-1: too many configurations: 79, using maximum allowed: 8 [ 162.660256][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.673860][ T24] usb 1-1: config 0 descriptor?? [ 162.880424][ T979] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 162.891639][ T5899] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 162.899875][ T5899] usb 3-1: can't read configurations, error -61 [ 163.501373][ T24] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 163.530581][ T24] plantronics 0003:047F:FFFF.0007: unbalanced collection at end of report description [ 163.557661][ T24] plantronics 0003:047F:FFFF.0007: parse failed [ 163.566978][ T24] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 163.729971][ T24] usb 1-1: USB disconnect, device number 11 [ 163.866671][ T5899] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.876901][ T979] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 163.885673][ T979] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 163.899586][ T5899] usb 3-1: too many configurations: 79, using maximum allowed: 8 [ 163.912293][ T5899] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 163.930528][ T5899] usb 3-1: can't read configurations, error -61 [ 163.937799][ T5899] usb usb3-port1: unable to enumerate USB device [ 164.719760][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 164.728112][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 164.737865][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 164.755504][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 164.765140][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 164.781653][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 164.791216][ T6738] loop2: detected capacity change from 0 to 7 [ 164.801127][ T6737] Non-string source [ 164.804258][ T979] usb 4-1: USB disconnect, device number 10 [ 164.824948][ T6738] loop2: [POWERTEC] p1 p2 p3 [ 164.832022][ T6738] loop2: p1 start 1768123251 is beyond EOD, truncated [ 164.848997][ T6738] loop2: p2 start 1700867426 is beyond EOD, truncated [ 164.855940][ T6738] loop2: p3 start 2735865856 is beyond EOD, truncated [ 164.880130][ T10] usb 2-1: device descriptor read/64, error -71 [ 165.071696][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 165.128293][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 165.210446][ T5899] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 165.259212][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 165.386052][ T24] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.413354][ T10] usb 2-1: device descriptor read/64, error -71 [ 165.439992][ T24] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.526432][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.561457][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 165.561899][ T10] usb usb2-port1: attempt power cycle [ 165.595241][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.693497][ T24] usb 5-1: config 0 descriptor?? [ 165.751325][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.765591][ T5899] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 165.786442][ T5899] usb 3-1: can't read configurations, error -71 [ 165.955986][ T24] lenovo 0003:17EF:6009.0008: unknown main item tag 0x0 [ 165.980721][ T24] lenovo 0003:17EF:6009.0008: unknown main item tag 0x0 [ 166.005460][ T24] lenovo 0003:17EF:6009.0008: unknown main item tag 0x0 [ 166.054319][ T24] lenovo 0003:17EF:6009.0008: unknown main item tag 0x0 [ 166.065126][ T6768] Cannot find add_set index 0 as target [ 166.066935][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 166.082186][ T6768] netlink: 'syz.0.211': attribute type 9 has an invalid length. [ 166.104021][ T6768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.224932][ T24] lenovo 0003:17EF:6009.0008: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0 [ 166.541019][ T24] usb 5-1: USB disconnect, device number 7 [ 166.908856][ T10] usb 2-1: device descriptor read/8, error -71 [ 167.216374][ T6788] trusted_key: syz.4.218 sent an empty control message without MSG_MORE. [ 167.238628][ T6788] overlayfs: conflicting lowerdir path [ 167.384798][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 167.392604][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 167.417217][ T5848] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.462862][ T5899] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 168.390699][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 168.398825][ T5848] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 168.408230][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.416549][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 168.428422][ T5848] usb 4-1: Product: syz [ 168.432656][ T5848] usb 4-1: Manufacturer: syz [ 168.447437][ T5848] usb 4-1: SerialNumber: syz [ 168.454763][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 168.455373][ T5899] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 168.475071][ T5848] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 168.501219][ T6790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.219'. [ 168.516074][ T5899] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 168.517312][ T24] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 168.563513][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.563830][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.586014][ T24] usb 1-1: Product: syz [ 168.591085][ T24] usb 1-1: Manufacturer: syz [ 168.591249][ T5920] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 168.597768][ T5899] usb 3-1: Product: syz [ 168.609661][ T24] usb 1-1: SerialNumber: syz [ 168.634647][ T5899] usb 3-1: Manufacturer: syz [ 168.640591][ T5899] usb 3-1: SerialNumber: syz [ 168.653896][ T24] usb 1-1: config 0 descriptor?? [ 168.662208][ T5899] usb 3-1: config 0 descriptor?? [ 168.666122][ T24] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 168.672880][ T6778] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 168.701645][ T5899] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 168.953679][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 168.960544][ T5848] usb 1-1: USB disconnect, device number 12 [ 168.962993][ T10] usb 3-1: USB disconnect, device number 12 [ 169.076577][ T24] usb 4-1: USB disconnect, device number 11 [ 169.146986][ T5899] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 169.296916][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 169.304590][ T5899] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 169.313809][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.330469][ T5899] usb 5-1: config 0 descriptor?? [ 169.344212][ T5899] gspca_main: sunplus-2.14.0 probing 041e:400b [ 169.688632][ T5920] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 169.865963][ T5920] ath9k_htc: Failed to initialize the device [ 169.954639][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 170.067929][ T5848] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 170.358695][ T5848] usb 2-1: unable to get BOS descriptor or descriptor too short [ 170.379258][ T5848] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 170.402023][ T5848] usb 2-1: can't read configurations, error -71 [ 170.414616][ T6822] kvm: user requested TSC rate below hardware speed [ 170.424509][ T6822] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 170.855348][ T5899] gspca_sunplus: reg_w_riv err -110 [ 170.930275][ T5899] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 170.998848][ T5899] usb 5-1: USB disconnect, device number 8 [ 171.174600][ T6840] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 172.703678][ T6865] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 173.167049][ T5848] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.260899][ T6882] syz.1.243 (6882): /proc/6881/oom_adj is deprecated, please use /proc/6881/oom_score_adj instead. [ 173.459416][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 173.688446][ T5848] usb 4-1: config 249 has an invalid interface number: 117 but max is 0 [ 173.830081][ T6882] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.243'. [ 173.846996][ T979] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 173.934994][ T5848] usb 4-1: config 249 has no interface number 0 [ 173.947216][ T5848] usb 4-1: config 249 interface 117 has no altsetting 0 [ 173.957166][ T5848] usb 4-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 173.966279][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.987046][ T5848] usb 4-1: Product: syz [ 173.991288][ T5848] usb 4-1: Manufacturer: syz [ 173.996017][ T5848] usb 4-1: SerialNumber: syz [ 174.184812][ T6888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.244'. [ 174.324025][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.515155][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.698983][ T979] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.000336][ T979] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 175.004103][ T5848] ttusb_dec_send_command: command bulk message failed: error -22 [ 175.023733][ T5848] ttusb-dec 4-1:249.117: probe with driver ttusb-dec failed with error -22 [ 175.120695][ T979] usb 3-1: can't read configurations, error -71 [ 175.260929][ T5848] usb 4-1: USB disconnect, device number 12 [ 175.867022][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 175.876106][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 176.107025][ T13] wlan1: Trigger new scan to find an IBSS to join [ 176.234635][ T13] ------------[ cut here ]------------ [ 176.240273][ T13] WARNING: CPU: 0 PID: 13 at net/mac80211/scan.c:1228 ieee80211_request_ibss_scan+0x701/0x790 [ 176.251049][ T13] Modules linked in: [ 176.255672][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 176.265665][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.276088][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 176.282525][ T13] RIP: 0010:ieee80211_request_ibss_scan+0x701/0x790 [ 176.289256][ T13] Code: e8 34 38 e7 f6 eb 05 e8 2d 38 e7 f6 b8 ea ff ff ff e9 2b fa ff ff e8 1e 38 e7 f6 90 0f 0b 90 e9 e6 f9 ff ff e8 10 38 e7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 30 e5 a0 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 176.309168][ T13] RSP: 0018:ffffc90000127810 EFLAGS: 00010293 [ 176.315344][ T13] RAX: ffffffff8ad8edb0 RBX: 0000000000000000 RCX: ffff88801ced0000 [ 176.323412][ T13] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.331604][ T13] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000004 [ 176.339644][ T13] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff88807b200e40 [ 176.347750][ T13] R13: ffff88807b204f78 R14: 0000000000000000 R15: ffff88807b200e80 [ 176.355737][ T13] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 176.365038][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.371785][ T13] CR2: 00007f81b0f812f8 CR3: 000000007ab4e000 CR4: 00000000003526f0 [ 176.379826][ T13] Call Trace: [ 176.383130][ T13] [ 176.386102][ T13] ieee80211_ibss_work+0xde7/0x1060 [ 176.391384][ T13] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 176.397123][ T13] ? ieee80211_iface_work+0xf39/0xfe0 [ 176.402511][ T13] ? rcu_is_watching+0x15/0xb0 [ 176.407388][ T13] cfg80211_wiphy_work+0x2dc/0x460 [ 176.412625][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 176.418472][ T13] process_scheduled_works+0xade/0x17b0 [ 176.424140][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 176.430978][ T13] worker_thread+0x8a0/0xda0 [ 176.435874][ T13] kthread+0x70e/0x8a0 [ 176.440122][ T13] ? __pfx_worker_thread+0x10/0x10 [ 176.445314][ T13] ? __pfx_kthread+0x10/0x10 [ 176.449998][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.455225][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.460479][ T13] ? __pfx_kthread+0x10/0x10 [ 176.465178][ T13] ret_from_fork+0x3fc/0x770 [ 176.469832][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 176.474962][ T13] ? __switch_to_asm+0x39/0x70 [ 176.479951][ T13] ? __switch_to_asm+0x33/0x70 [ 176.485097][ T13] ? __pfx_kthread+0x10/0x10 [ 176.489754][ T13] ret_from_fork_asm+0x1a/0x30 [ 176.494547][ T13] [ 176.497618][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 176.504912][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 176.514905][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.525064][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 176.531338][ T13] Call Trace: [ 176.534630][ T13] [ 176.537588][ T13] dump_stack_lvl+0x99/0x250 [ 176.542207][ T13] ? __asan_memcpy+0x40/0x70 [ 176.546861][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.552099][ T13] ? __pfx__printk+0x10/0x10 [ 176.556738][ T13] panic+0x2db/0x790 [ 176.560671][ T13] ? __pfx_panic+0x10/0x10 [ 176.565118][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 176.570347][ T13] __warn+0x31b/0x4b0 [ 176.574352][ T13] ? ieee80211_request_ibss_scan+0x701/0x790 [ 176.580380][ T13] ? ieee80211_request_ibss_scan+0x701/0x790 [ 176.586392][ T13] report_bug+0x2be/0x4f0 [ 176.590757][ T13] ? ieee80211_request_ibss_scan+0x701/0x790 [ 176.596775][ T13] ? ieee80211_request_ibss_scan+0x701/0x790 [ 176.602790][ T13] ? ieee80211_request_ibss_scan+0x703/0x790 [ 176.608919][ T13] handle_bug+0x84/0x160 [ 176.613188][ T13] exc_invalid_op+0x1a/0x50 [ 176.617731][ T13] asm_exc_invalid_op+0x1a/0x20 [ 176.622802][ T13] RIP: 0010:ieee80211_request_ibss_scan+0x701/0x790 [ 176.629551][ T13] Code: e8 34 38 e7 f6 eb 05 e8 2d 38 e7 f6 b8 ea ff ff ff e9 2b fa ff ff e8 1e 38 e7 f6 90 0f 0b 90 e9 e6 f9 ff ff e8 10 38 e7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 30 e5 a0 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 176.649212][ T13] RSP: 0018:ffffc90000127810 EFLAGS: 00010293 [ 176.655305][ T13] RAX: ffffffff8ad8edb0 RBX: 0000000000000000 RCX: ffff88801ced0000 [ 176.663320][ T13] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.671318][ T13] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000004 [ 176.679320][ T13] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff88807b200e40 [ 176.687424][ T13] R13: ffff88807b204f78 R14: 0000000000000000 R15: ffff88807b200e80 [ 176.695607][ T13] ? ieee80211_request_ibss_scan+0x700/0x790 [ 176.701669][ T13] ieee80211_ibss_work+0xde7/0x1060 [ 176.706996][ T13] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 176.712686][ T13] ? ieee80211_iface_work+0xf39/0xfe0 [ 176.718114][ T13] ? rcu_is_watching+0x15/0xb0 [ 176.722912][ T13] cfg80211_wiphy_work+0x2dc/0x460 [ 176.728046][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 176.733888][ T13] process_scheduled_works+0xade/0x17b0 [ 176.739525][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 176.745645][ T13] worker_thread+0x8a0/0xda0 [ 176.750286][ T13] kthread+0x70e/0x8a0 [ 176.754385][ T13] ? __pfx_worker_thread+0x10/0x10 [ 176.759605][ T13] ? __pfx_kthread+0x10/0x10 [ 176.764244][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.769468][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.774724][ T13] ? __pfx_kthread+0x10/0x10 [ 176.779355][ T13] ret_from_fork+0x3fc/0x770 [ 176.784073][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 176.789204][ T13] ? __switch_to_asm+0x39/0x70 [ 176.793988][ T13] ? __switch_to_asm+0x33/0x70 [ 176.798766][ T13] ? __pfx_kthread+0x10/0x10 [ 176.803376][ T13] ret_from_fork_asm+0x1a/0x30 [ 176.808195][ T13] [ 176.811653][ T13] Kernel Offset: disabled [ 176.816010][ T13] Rebooting in 86400 seconds..