last executing test programs: 8m1.515771901s ago: executing program 0 (id=47): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x0, 0x7d, 0x20f}) mkdir(0x0, 0x34) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9c020000160001000000000000000000fe880000000000000000000000000101fc0100000000000000000000000000010000000000000002000080200c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000008000000000000010002000032000000ffffffff0000000000000000000000000008000000000000000000000000000000000000080000000c000000000000000800000000000000000000000000000000000000000000000f00400000000000ffffffffffff"], 0x29c}}, 0x0) 8m0.38135639s ago: executing program 0 (id=48): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000005240)=[{{&(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000300)="d79e3acb2ac186cfa5325fcde5daa4cc246ee4c0ecbf1601b415cab289c97ef33562fb", 0x23}, {&(0x7f00000010c0)="164413b16a8fd51a0167620b3ac9416d9f4d08a4ada0279251f6efae0cfa42ef86f7f8dafcb272c037c0b622f673e2d431a64ea87440b86697d2b6d48d2f0b6635e3e1000399d93bccec64a9a7729a7f6217f6674e13ed1a5a2721d8273218f55cc38e9bef73000000000000", 0x6c}, {&(0x7f0000000440)="91e6d1478ce37fe132273496f23daf6a82e616281e2c8c5781add6dcaff940597f4291981bbd814336814eef9ecf1716bf8a5985f9c4e5b2e5e387e8ee6b65274d6954a3747505cc9e238e510b4f4e53da4fa4ef4d8e361316fdbf8735ff5bdba46d9ef685048deea52248fb11744fe22dc81241773b4877645622c25d6b7f2bf602fd9d6530fa82c6526b630846f0a9ce854cc737be26c4f260a1159c0933315253937bda56f061048ecd1d81daba393b9c1492312d9835add20748a23b3674b88f42fc353d1aeb8eec2f3b1e2733a89aeb9e0251f0d80e0f945b55aa2d24e2d9960cb02a180ff910119973215724e7dadbbd", 0xf3}, {&(0x7f0000000540)="37659da5c1f10883d29ce7907946ae1fd1ad8213bca8c6cc9e53aa4c094af3e7cf28b4753efbb763dea467651a6727ac210bddfc6ebcae7f43952e87eceed8f2a2fd65f46cc289305d8eb4762075ac1f513ba3a9f9ba42baaf5effacbf", 0x5d}, {&(0x7f00000005c0)="ab944dff1188d1147eb681960ee7e17f538129d9a46707afe9fcb58c3a1b77fb7160ffdc31cd274b5c5f2c9f182e10bb5ae676ebe9cc5dda59db172d8070d1d7826097b0f573e89cbe526c507bbfb0550b543a6698a6939653ec8caca538400f022e2dc04c63df40d7a60fba3a1f1eaf392a1cb195f6ec4caeb9b9839cdbe64010290e668a690749e9ba78", 0x8b}, {&(0x7f00000007c0)="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", 0xfd}, {&(0x7f00000008c0)='\f', 0x1}, {&(0x7f0000000900)="7c7aca93b0f7f2b83fc50755bcf6fbbddd7d4aa04949c83f8d7809852d5315e61cba64f66f291ef0d79881bf55cfa9260bd4485336f1bfa9022ced6b6401c0410ed3ade0f0d6b1560feaa578f6d574b79b1bdbd640adca48dae6159e63176aa115a454b89e1d624683fc7d98e4a5a0a73d26a510ddaf813f10e02157593db765f2933be43c885f588d4f1be7334d522153f97d4d67a424e666b7ffe7d93579b3d29dbc64d2a5dd37f12b35fd487bf6a39b4e105600facd16920bfcd130443012e9c3b81691e722015304067b80916bf02094aed31641ec", 0xd7}, {&(0x7f0000000a00)="f82147a26992fcf662f57e90eb278594461a25ae2efd858244e3a9348e4fa486500d6eb54e9d886a0bd1cdbb478fd23c27f2d88e415a8772edb2306e495f08bb84b8abc84b36247623dd369c3655ec32b04a95308242a6681e433647cf2eab11b89f6e8efac5d7a1ca34a0e5aa782c9e08d3ab742bcfa7983db529da9029962ee775afc15250eb9f5bf16d2ce8aed685bd795145a557e78939c39d5358e7341124b40c5cde6da8ef22605bce216b2f46", 0xb0}], 0x9, &(0x7f0000000b80)}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)="ddedf7acaafbb455184dda5313a77e0c0735d6e9fe4bda0207576a38859568e5b4df3e4d1c0debb1a33852135b57a3a8ed3a587a34f23b4468db132407a50633a3223f2868d2475084a5ed6f2672b798745495428909efdd0b901e77", 0x5c}, {&(0x7f0000000c40)="49c43c87f92a6daaeb1f136455114c5253e1220b5078d5c9984302ddf5179a5b414395cf628dfca3300dc97cafc47f8a74b0e82007eb704884d2a014ea9d301244cacca89590808f5ded1893d8d3b961c6f672594c3e50a7c41407942c7b044b942ca01889662f4ca014b46e4ca849712cedad1c93d0ee9e83a46cab7e30cd353fa43b366c7526df0bebcd672bc1114b7fa8ecbc443080b5d07984b582e942f04259511a7724981cb16c0aee4c6d2f85944cb4", 0xb3}, {&(0x7f0000000d00)="94a12d4ceec291ef2e83554cb4ff1fc4e46179661ec10b4d29e92084d14284d0198a839648d8f95182fcb4869cbb978a1414929ea59278179ae0ea6f2b8197b5b8ee2e83d1f80ec220f005ff19797ba94008d6b64009d249364e171c691abfea55a3a8339a0907f15f5ca854dcef21e283d29bc88733efdedb5371d32bb8d1b591021fb09e346cd0582e5e8af2d591379b686acc740aa6e7939207c35ab7cf1a25c7aa839c47915e56fd456f2b00a9f1c4a1b432c95532b4e5101d62", 0xbc}, {&(0x7f0000005440)="5ca2563f79a3f6c9d31a37245c5bf67b9c8c73562e6cb7e13f016b66365b4429ae7fa7a2a6f0127641718b58a8d629a01c50aad129308eb6efbcebef4238553e087e7b5a8a0d25e33efc92a4c2a0f05de135bef4066c3abe2745c8e4ea7c17dd0e41127c8f8a75c3799cadf649a1dbcbabc318f2d762acbed72929b9e13d3f90f22646a140a45d0f54be27c7d01c1cc0a904ed4fcbf6bed767afb77654efd82c936a0e04005d250bb6412df73a", 0xad}, {&(0x7f0000000e80)="02f75ab636ccd50746e085ae645f95084ae3ac5623131dc83a76dc", 0x1b}, {&(0x7f0000000ec0)="e50ef693125320a3fce286c59d0e5bdf88f1a3b21f345f9b267874faeaeca2399adc56444a53e13dc510e6bde7f258ddb0a9df677a7c797ebb5ce5b70fbf6dcc102753b3324975a400d36408f552ba495e8ee80c7c63e2ece51146f742575511b4eabbde1ed7020ce806c44233f4236333f026010f3bfa3c97064d5dd334f980a61f39c6fbc863c2f163b5a5cc2dde08653259e7", 0x94}, {&(0x7f0000000f80)="b7836e2184888c71dfb2cf2fb0fae512d4d5558da832", 0x16}, {&(0x7f0000001680)="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", 0x1000}], 0x8, &(0x7f0000001040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}, {{&(0x7f0000001080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001280)=[{&(0x7f00000055c0)="9d1362b6063bbd3dddcbab6936b74459a6b29521ce6fb8ee46ed39b7462a4ef4acfbe7afc6cc36ff6007118647eb0b864532edc1cfd1e5c66aaff5d56373bbe70b18567f3e0c4a3646c119a7daf438fd16d72158dcaa5ff351de925e12e14188366377ac57e4b5e3ae0cbebaa1c9fed6bb004fb29b5c4244c8c809a23b26385f974fc2c588e2bc8d7b87bfed1cca15bd6fad0afb0fc1ec687273b0e035d448a44193a2542a459889335de5a12b933baae00b06bf1cbbd92987cbea3277f8d603466bdcc6a13ccee026022519a5570b14c1783a656f02d3922c392814c43430f02d", 0xe1}, {&(0x7f00000011c0)="c7142eeb97995292b7feb2365f99b294b553cc3a6c75a92e064e054c71f2a3ad35771f81eac7ce13056686e2071932c3f009bb910755d3bac45fb39982da62fa24f816281b295f61683bc29291a2a090906956093aa8b569e48666e06b56f7da4577ba33332ef8f274aa5a5f39f811004d8db57a1212131e5eca15ef71b1ef81cc1d31584b891cc4743db9dbadeba602d26124bab4c1d626ab2363641bce3bc93de895dedd5df2f3b756b15d7fe8d9cfdd9c94", 0xb3}, {&(0x7f0000002680)="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", 0x1000}], 0x3, &(0x7f00000012c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_retopts={{0xf4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xc1, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@local}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2f, 0x0, [{0x0, 0xd, "decd754c4a02c86d076c71"}, {0x7, 0xa, "65a14e7f9929da0d"}, {0x7, 0x3, "99"}, {0x0, 0xf, "4b62d3e3fefbd21cb528d7babe"}]}, @timestamp_addr={0x44, 0x2c, 0x71, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0xcbc5}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x6}, {@broadcast, 0xffffffff}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0x96, 0x3, 0x0, [{@multicast1, 0x8001}, {@loopback}, {@multicast1, 0x1ff}, {@remote, 0xd}, {@loopback, 0x9}, {@multicast1, 0xc}, {@broadcast, 0xb9da}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3f}]}, @timestamp={0x44, 0x28, 0xeb, 0x0, 0xc, [0x1, 0x4, 0xe481, 0x7, 0x7d55, 0x4, 0x200, 0x0, 0x2d32853e]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4d}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x170}}, {{&(0x7f0000001440)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001480)="cb7559d0e539fb76a9b9d110439cd40b0ae6f68286f280283628077825fff30bc0a5c34daa6090f3ef168d929e02712b4cf8c12f2e9e2537ecb7b41f7dc8edb26d238d764954fb6609dd1a6d1de29837863f855e36de392d2364eb904b58f04b6ad67d59525cfb2e0da9b21189190ef0bcc1", 0x72}, {&(0x7f0000003680)="b11fb7beea7811bc3a39baa8770e8c9552d05b072191d205c71a0c7a6e661d552c7d06503f00c7061892410191ae4c2205edad1db93989e9d07ec50b20656e3d4488635aa8c32cdb4a764f69dea1730b2af21ab8d6a817b5fb5980b36f5ee4f963014b51c945df4b23536090e58c139bd7f603c4ba2906fa83a3eb4726ce7f75f6c79de30d95ab3c05809d884300080161e808eefe304af7e67d02a849a9c56cbc0fe573c2c4339a1727fd589bdad891af5a55ea3ea29d60359d8ffeaae87eb4d09900cbae8871706c77be764fc12e36", 0xd0}], 0x2, &(0x7f00000037c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x68}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003840)="8b01fab525c2406500c4c1fab3bb143e84631a7f93b891a09bd95ab33c123a7c2d9276490f3c8d3a1cd8900bbf94d916cbb1541797945761c1558b", 0x3b}], 0x1, &(0x7f00000038c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe90}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x100}}, {{&(0x7f00000039c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000004cc0)=[{&(0x7f0000003a00)="ae8f98a8356e415ba42d83b3efdff06916a9a637fdcfeb61a8960895e1cfcb26d548803cf98c899fdc501521207b51bfed47f0f855b05bae252dffae04054a56917f2639e14a5366e5f9035abea2f0", 0x4f}, {&(0x7f0000003a80)="c0480f40862ac21fffad353b5e39aa7734189a85bea00c416cc97682a9f0e1d31e79c4d98d7325021e846f", 0x2b}, {&(0x7f0000003ac0)="f8e76a7033bc4c51ccedb74608e9f0d5c0bc192da89a0f2aadd04ec2eb70fb11bd2f2480696224a19f816d12b1b41d51b9c517f2ea597195c7fe9640a7be7b137d60750c658ce30c8c7f3389508021c6dd1e1b86fe12503d999820dcea8110919056079d710485aa5a921319e1f4ce3a1cc04e74d6cec2b983a671fde80310467b477515e82c32292af52aaec4ad73146a666640c0ea6a9adc579de298e943f2b46873eb1649f33fc2397c94a87da6c22a9902aa43f4102d8b2376e3a19671185cd05485a392b5dc4cae7100b70566325e807d5783d830d0698e42ac1f2a5f003140ed857baa58ad27", 0xe9}, {&(0x7f0000003bc0)="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", 0x1000}, {&(0x7f0000004bc0)="c05492f1f11b1aa43f9a882ad5c5f298815b94e9edc47de73b906c35c7eb397ace51f12413660ed1ef81d0191d58a88266ac0e22d42190983ce052948cdd1b3b33a4c15c66399262a1aef5d86d40330aa04bbc0ddeaf52b612766a0fb19f169c37f695d81898235cc46c8f3eed1c8221034c29f663ad59758ca5dbcb63bc82ef7df1ce3318c1d37d1fa65d2c744e03da9ecae82c45f5176545bfe75ed5d515107ab6a591740eeab34524da8d695dbf101c52ee55460914a3da9ab69eed0f7e308fa988d28a1c2f2512a0112f1dcc0c7f7d", 0xd1}], 0x5, &(0x7f0000000e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2c}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf42}}], 0x50}}, {{&(0x7f0000004dc0)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000004f80)=[{&(0x7f0000004e00)="378636e15b5c8000ecdddd7bcf92387dedabdcd2a7933cd33b8fdd4f21e5551bda18961b4c03130bc8bdd0c853f0fbeddbf203a32e450d1489cad8a2497fefc8ecff9f67046ce91003cc16efc841da4d348a022e93dfe6bf4b6ef9b0", 0x5c}, {&(0x7f0000004e80)="7aa2ef9538c34bc038c1d73604b4ea2cdcbcd28c83088b748178e6387627c3974ae47f53a9c2369ae36e070d13a2708cdbdf6930c31c2fa5ef422ae04ca2a9f8744d7bbef937c2c40c04051b059412714c0c494f3e7e7d40ad0fe03654583b2571839b03ec5d036f253df99b236e1bb994832a55f465a58d14e811ee65ce62d52b44fc8414e00b29ac530d6c68e295d995494c754004e0563346ebe6c2a1bdb6030f64c85a13014cf2aa9705209d60e49db4592a5849ce5090e166de", 0xbc}, {&(0x7f0000004f40)="f0214778ae2987538541b391aab20255fa207d0821098b16200505f9086e6eb3dddb0f344b4cf100626977ccaed0e55fbdd50a20f83474604019fbbcec35d5", 0x3f}], 0x3, &(0x7f0000005500)=[@ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xf3, 0x3, 0x2, [{@multicast1, 0x9}, {@rand_addr=0x64010101, 0x6}]}, @ssrr={0x89, 0x17, 0x9, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast, @loopback]}, @ssrr={0x89, 0x13, 0xcd, [@broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @empty, @private=0xa010101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xa0}}, {{&(0x7f0000005080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000005100)=[{&(0x7f00000050c0)="00085c58a55d98ab63b74317c7e3c4337215853d69", 0x15}], 0x1, &(0x7f0000005140)=[@ip_retopts={{0xc8, 0x0, 0x7, {[@cipso={0x86, 0x63, 0x3, [{0x0, 0x11, "8f3bdac0832ab8267a0ed4554482b2"}, {0x5, 0x3, "dc"}, {0x1, 0x2}, {0x7, 0x4, "6ee1"}, {0x0, 0x12, "bd70caff421f5fd65d9a40bbfe7dee89"}, {0x6, 0xc, "d513a323596b651e56fe"}, {0x7, 0x3, "e8"}, {0x6, 0x12, "bcf45c41025490f5612df7d937bcc70d"}, {0x1, 0x7, "860c5a1126"}, {0x7, 0x9, "c0f2123a1c9371"}]}, @timestamp_addr={0x44, 0x34, 0xf, 0x1, 0x6, [{@remote, 0x7}, {@private=0xa010100, 0x6}, {@empty, 0x7f}, {@private=0xa010102, 0x80}, {@rand_addr=0x64010100, 0x5}, {@loopback, 0x5}]}, @lsrr={0x83, 0x17, 0xb3, [@local, @remote, @loopback, @local, @multicast1]}, @noop, @timestamp={0x44, 0x8, 0xa4, 0x0, 0xc, [0x5]}, @noop]}}}], 0xc8}}], 0x8, 0x4048000) 8m0.249287692s ago: executing program 0 (id=49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x1a) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000008009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7m58.56561582s ago: executing program 0 (id=52): syz_emit_ethernet(0x46, &(0x7f00000010c0)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x0, 0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x1d, 0x1, 0x70bd2b, 0x3, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x20000000, 0xffffffffffffffff, 0x0, 0x40000}, {0x0, 0xa00, 0x407ffffffffffe, 0x820000000000002}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f00000013c0)={0x50, 0x0, r3, {0x7, 0x2b, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x7, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_clone(0x220000, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000300)="e0e9ac8858bdf486ced3001ca3f9f64854cb678327ae5ae4bc624e15bf7a910444c7556d8c19078713599fbeb5789d7cbb067c970fa1206231101ed9b7dfbd96ff6ed053d6d9ca247ad30f1a155dd5dd6b60dd802e406c97d60b8e50af7fc271c33e6fb1b5adda0b0ef284ac51b26989803514e81dd066b2b831f7d858139bc4d3013a0a1b71a1f995078cb60e4427e70ebb38ed1b596d94a241beb70cfb4861e72c7f8ea1e058167abeeff3f76300ba68afa022f287acf01a7f486e3f2fd67150b2") socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000280)=ANY=[]) bind$alg(0xffffffffffffffff, 0x0, 0x0) 7m58.143489857s ago: executing program 0 (id=55): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0xd, 0x4, 0x12, 0x84}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000600)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000640)=r2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r4, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x13, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xdd, &(0x7f0000000380)=""/221, 0x41100, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x5, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x10, 0x1}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7c}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000040000000000000003000007"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 7m57.13693489s ago: executing program 0 (id=57): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x13, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x22d9, 0x0, 0x0, 0x0, 0xffff0000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x33}, @generic={0x4, 0x7, 0x1, 0x81, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7fffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[r1, r1, r1, r0, r1], &(0x7f00000003c0)=[{0x3, 0x5, 0x2, 0x6}, {0x4, 0x7, 0x1, 0x8}, {0x1, 0x5, 0xe, 0x7}, {0x5, 0x5, 0xf, 0x3}, {0x5, 0x5, 0xe, 0xa}]}, 0x94) r2 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x8) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/99, 0x63}], 0x1, 0x4, 0x1}) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7m56.243371614s ago: executing program 32 (id=57): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x13, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x22d9, 0x0, 0x0, 0x0, 0xffff0000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x33}, @generic={0x4, 0x7, 0x1, 0x81, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7fffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[r1, r1, r1, r0, r1], &(0x7f00000003c0)=[{0x3, 0x5, 0x2, 0x6}, {0x4, 0x7, 0x1, 0x8}, {0x1, 0x5, 0xe, 0x7}, {0x5, 0x5, 0xf, 0x3}, {0x5, 0x5, 0xe, 0xa}]}, 0x94) r2 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x8) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/99, 0x63}], 0x1, 0x4, 0x1}) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m51.131578842s ago: executing program 1 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') 4m49.378101965s ago: executing program 1 (id=549): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000000)) 4m48.805793893s ago: executing program 1 (id=552): socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) 4m48.212249263s ago: executing program 1 (id=555): openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000b80), 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xc0002009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x26da8e97, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x20000000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4m46.44640826s ago: executing program 1 (id=562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x1a) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100380000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4m45.573831922s ago: executing program 1 (id=567): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, r1, r1]}, 0x94) r2 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x8) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m45.363099293s ago: executing program 33 (id=567): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, r1, r1]}, 0x94) r2 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x8) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m9.685464417s ago: executing program 3 (id=1162): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1m8.734048911s ago: executing program 3 (id=1167): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = syz_io_uring_setup(0x45b6, &(0x7f00000035c0)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="03c90056ebc19cc05cea97b0c60a108a1dcc34ee301778decac0f3a180b6e8cd6af49ed744227ce1e7771e35cd55482273df92adf80609e2d03f68b18afec0012468a21d1360e3ee2f73351384bdd06d1962ee9771a386e326a7406a2ab272e5e14da02664a75bb8dd637e9a986183a3e095107699710605b5d9244d3d7775b2c7520fc155aa1356923d944305a5c304d99267c0c5c4858ce91c82d1030d7aefc32b6ee8ba27cdcec71ac16e6ae150bed61f5699ac806f27652684fb745133f19859e69cec15fe4276199d972f312a03be38c3eedabb00000000"], 0x5a) socket$kcm(0x10, 0x2, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r5, &(0x7f0000000000)={0x23, 0x4}, 0x10) close(0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01082cbd7000fedbdf250c00000020000580080001006574680014000280080003000c1800ed070004"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null]}}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)='x', 0x1}], 0x1) 1m5.953448243s ago: executing program 3 (id=1175): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x2000000, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000, 0x1000000}, {0x1000000, 0x0, 0x1}, 0x0, 0x3f0, 0x0, 0x4d613, 0x0, 0x0, 0x0, 0x40000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x1, 0x1, 0x1}) 1m4.223708237s ago: executing program 3 (id=1179): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x7, 0x10000010, 0x0, 0x0, 0xb49, 0x0, 0x3, 0xffffefff, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x81, 0x67, 0x6, 0x4}, {0xa, 0x9, 0x4, 0x3}]}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000001140), 0x7, 0x101081) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x300f, 0x2, 0x8d54, 0xfffeffff, 0x0, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) shutdown(r4, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5, 0xae1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000902, r8, &(0x7f0000000340)) r9 = socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m3.150700534s ago: executing program 3 (id=1184): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r0 = socket(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000201"], 0x114}], 0x1}, 0x0) 1m1.255054861s ago: executing program 3 (id=1188): syz_open_dev$vcsa(0x0, 0x1, 0x40002) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000037aeb28fbf4770d0c71b2206d900"/41], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0x9, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) io_setup(0x2004, &(0x7f0000000680)) 45.751306879s ago: executing program 34 (id=1188): syz_open_dev$vcsa(0x0, 0x1, 0x40002) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000037aeb28fbf4770d0c71b2206d900"/41], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0x9, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) io_setup(0x2004, &(0x7f0000000680)) 10.510116657s ago: executing program 6 (id=1258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x16, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xfb, 0x74, 0x10}}, @dsss={0x3, 0x1, 0x88}, @mesh_config={0x71, 0x7, {0xf7, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0xf}}]}]}, 0x40}, 0x1, 0x0, 0x1c, 0x800}, 0x44) 9.597741236s ago: executing program 5 (id=1262): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000021000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private0, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in=@remote}}, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000680), 0x1, 0x0) setreuid(0xee01, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000001a80)={0x0}) epoll_create(0x10000e9) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) 7.75385426s ago: executing program 4 (id=1265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6401013a, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}}, 0x0) 7.491607822s ago: executing program 6 (id=1266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x2, 0x5002) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) 6.585698731s ago: executing program 4 (id=1267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000f3030000000000000000000010000000f6030000000000000000000000000000000000000000000000000000000040000000000000000000"], 0x420}}, 0x0) 6.543762283s ago: executing program 2 (id=1268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000fffffff80000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0xea60}, 0x18, 0x8}, {{}, 0x3, 0x80, 0x1}, {{}, 0x2, 0x5, 0x2}, {{}, 0x14, 0x7ff, 0x5}], 0x60) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x40) 6.409369272s ago: executing program 6 (id=1269): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x80000001, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async, rerun: 64) add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, 0x0) (rerun: 64) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) (async) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008040) (rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="485c00405a3c49ee99ab6c602002529228d6b0ab4f7af1dec1486e4807d6e8000000000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fbdbdf2502000000080008000400000008000700", @ANYRES32, @ANYBLOB="080008000100000008000400ffffffff0c000300010000000000000008000500e0000002"], 0x48}, 0x1, 0x0, 0x0, 0x24000015}, 0x1) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000001c0)={0x18, 0x1, 0x0, 0x0, r6}) 5.621210383s ago: executing program 5 (id=1270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000ffffffef0000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c000140"], 0x118}}, 0x0) 5.301826545s ago: executing program 2 (id=1271): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) sched_setscheduler(r4, 0x5, &(0x7f0000000240)=0x8000) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) recvmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1}, 0x20000100) shutdown(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r7, r7, 0x2f, 0x0, 0x4, @void, @value=r7}, 0x20) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x101f}], 0x0, 0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000000)={@empty, @random="0335e924e347", @void, {@generic={0x8906}}}, 0x0) 4.600624157s ago: executing program 4 (id=1272): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x4, @remote, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8080fe0000000000000000000000aa", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x000\x00'], 0x58}}], 0x2, 0x4001c00) 4.431121311s ago: executing program 4 (id=1273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4.373644647s ago: executing program 5 (id=1274): socket$key(0xf, 0x3, 0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xb}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}], 0x1, 0x4000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 4.373146293s ago: executing program 6 (id=1275): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 4.3300611s ago: executing program 2 (id=1276): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x25, 0x1, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf2501000000050004000200000005f862fe00137ccd170002000a000000"], 0x24}, 0x1, 0x0, 0x1100, 0x4001}, 0x0) close(r6) r9 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r9) fcntl$getownex(r2, 0x10, 0x0) fcntl$lock(r3, 0x1, &(0x7f00000001c0)={0x2, 0x2, 0x1, 0x63}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x401, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 2.800273726s ago: executing program 4 (id=1277): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b0400000000fffffff5020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) 2.641488437s ago: executing program 5 (id=1278): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000a000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.588843425s ago: executing program 6 (id=1279): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x3, 0x0) (async) r1 = memfd_secret(0x80000) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x2, 0x46}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) (async, rerun: 64) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)) (async, rerun: 64) flock(r2, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x5, 0x4}) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000100)={0x7, 0x9, 0x1000, 0x10, 0x1, "aecc026ac471a706"}) (async) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x1}}, 0x10) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000180)="6382ca861b92ecde04507518d1e873c4b3af12161c5888571a3c72f91c45afff03f3aae3d728057cedde26f3", 0x2c}, {&(0x7f00000001c0)="0f00c1a1c3aaf1b510926c7dc604064f8a393e466b523de29499a6a6c058441c2284b1da94c23987d6d6083fea6d335d9b10ae231b8dcab226854f7632a7f2173ea0987d8c287e8615da6657a507ad05e31914a626bb703e80c8d531a835c0bad58040c2836a5113f41dcec9c6ffded23196956774bb5eb22bfad7f00ab36475cde440bb3776cabc44e2e79b65852655e1434f09c0686bb82c22b686d62c3f0e926248b8a60335653da24b0b8b6aab58f85a32e53e5ce81b9fe79340d1cb0c962753edc250f606cfc6e2e8c69b7593f883f2f0fb3bfe4d85b5176ecbc658696a07e0eb", 0xe3}, {&(0x7f00000002c0)="29e4061b22a9370c7b82e1caace621eaf36aa638669ca03b157684167b4ca20be64e4dbd29dfcfcced2d373061ce64d0021a8a2a5a22b94e98369b1e4d45b72a38315cf2d5ed429b458a4cf0cf7fd6dc1676559c8bb40d6e2c1f8249d503198ffa4cdca7f6a2b31a2b556695c473097fe91d2489239384fb33e0179595252bde39e859407514", 0x86}, {&(0x7f0000000380)="5251bab279ab4f91b7c56c11180e2464bd60d61f82f00346a5d94da9eec3231b211ccd49", 0x24}, {&(0x7f00000003c0)="e3c987b48f0a13fe10cd44b4da844b1ead32619710d19d25ae185e6ad07e80e4d8023773e7591845e654cbd1f67d79b6000b3649fdf86711ec735b8e89994053e7b21607f665355d05e6efe38c23e6aca97abff73b71c23178273370fbd59ea0c49093d21e8c6da9b4810f13a3a6fd16a3a0aa5b2e40d4063e6c6258fd5c00c798639bcd86b5a9c81d2ae3c8a9b59efbce427668d8f72b664ac4991de8d46049171635ad67edbf2b0f0a3e", 0xab}, {&(0x7f0000000480)="9b2f646e91910e84d1531d2c2275f3b9db4194763abacdea9cb1fd3b552837871efb34f9b09006e9988b4abe1956db017868c1cd81ffe7366cadd747d60394473be5d6688dcdabfb864281ffcd0ffa3a10bbb56d2b29c4dc95b53b5ac2b54bd54fb232f8a4ee0c3511c104f3e6585b003fbc5d2dfa36c9b8065de084999f2c54e8d1f7cd20053cad59f61818ea61396a38d7682c060e3a08accb86b9579c4ac00f0b0f2b94fda35bea5cb2e62a3eed4c8c5165d69d757e119e013f0b8a7c28a2d8d4050132dedea9f71901addb41f8e202e63243883d9bff0be19d66c04f1b4e5206965f45", 0xe5}], 0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x4000, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000640)={0x101, 0x8, 0x0, 0xe, 0x2, "2dafc0e6c9a2439dc295c4c18fe23464999db6"}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r4}, 0x4) (async) set_robust_list(&(0x7f0000000740)={&(0x7f0000000700)={&(0x7f00000006c0)}, 0x2}, 0x18) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) (async) ioctl$TCSBRK(r4, 0x5409, 0x2) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001300)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f00000007c0)={0xaf0, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3a}}}}, [@NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x3}, {0x2}, {0x2, 0x6}, {0x3, 0x5}, {0x1, 0x9}, {0x4, 0xa}, {0x7, 0x5}, {}, {0x6, 0x7}, {0x2, 0x3}, {0x1, 0x4}, {0x3, 0x2}, {0x4, 0x5}, {0x6, 0x6}, {0x3, 0x7}, {0x6, 0x2}, {0x6, 0x1}, {0x6, 0x8}, {0x3, 0x4}, {0x2, 0x2}, {0x1, 0x3}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x7}, {0x3, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x4, 0x2}, {0x6, 0x3}, {0x3, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x5, 0x4}, {0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x4, 0xa}, {}, {0x4}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x4, 0x6}, {}, {0x0, 0x4}, {0x7, 0x2}, {0x2, 0x1}, {0x1, 0xa}, {0x0, 0x7}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x401, 0x4, 0x2, 0x6, 0x40, 0x53d, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x0, 0x8000, 0x7, 0x9, 0x4, 0xffff]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x6, 0x8}, {0x6}, {0x6, 0x4}, {0x2, 0xa}, {0x5, 0xa}, {0x3, 0x8}, {0x6, 0x4}, {0x2, 0x3}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x3}, {0x7, 0x4}, {0x2, 0xa}, {0x1, 0x8}, {0x7, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x2, 0x4}, {0x4, 0x8}, {0x5, 0x9}, {0x7, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x1, 0x2}, {0x6, 0x5}, {0x5}, {0x7}, {}, {0x4, 0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x6, 0x7}, {}, {0x3, 0x6}, {0x6, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x2, 0x5}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x36, 0x3, 0x4, 0x24]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x0, 0xb, 0x5, 0x9, 0x36, 0x30, 0x60, 0x1b, 0x24, 0x3, 0x60, 0x60]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x48, 0x0, 0x48, 0x36, 0x18, 0x6, 0xa, 0x36, 0x36, 0x36, 0x3, 0x9, 0x2, 0x48, 0x24, 0xec, 0xc, 0x1, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0xc, 0xc, 0x16, 0x6, 0x16, 0x5, 0x9, 0x2, 0x5, 0x1, 0x1b, 0x1b]}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x6}, {0x5, 0x5}, {0x3, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x3}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x8}, {0x5, 0x9}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x3}, {0x1, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {0x0, 0xa}, {0x5, 0x8}, {0x3, 0xa}, {0x7, 0x6}, {0x4, 0x2}, {0x0, 0x4}, {0x5, 0x8}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x4}, {0x5, 0x1}, {0x6, 0x1}, {0x7, 0x3}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x4, 0x2}, {0x0, 0x4}, {0x6, 0x7}, {0x7, 0x3}, {0x6, 0x8}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x9}, {0x4, 0x3}, {0x4, 0xa}, {0x4, 0x8}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x2, 0xc, 0x6, 0xd5e, 0x1, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x7, 0x7, 0x3, 0xe1e8, 0x1e2, 0x0, 0xe44]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x6a, 0x2, 0x8, 0x5, 0x80, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4c74, 0x90, 0x4, 0x4, 0x3, 0x5]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x9, 0x6, 0xfffe, 0x1, 0x8, 0x0, 0x976]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x388, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5f5, 0x7fff, 0x9, 0x4, 0xe8ed, 0x5, 0x2, 0xf8]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x2, 0x36, 0x5, 0x30, 0x48, 0x30, 0x1b, 0x3, 0x4, 0x48, 0x36, 0x4, 0xb, 0x9, 0x2, 0x6c, 0x16, 0x24, 0x12, 0x18, 0x6c, 0x48, 0x30, 0x48, 0x1b, 0x5, 0xc, 0x6, 0x1, 0x12, 0x4]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb1b, 0x7, 0x3a34, 0xda0, 0x800, 0x6, 0x7, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x6, 0x23eb, 0x2, 0x4, 0xbbfc, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x380, 0x2, 0x7, 0x802, 0x56, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x3, 0x3, 0x7, 0x7, 0xe85e, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x95, 0x1b, 0x9, 0x2, 0x0, 0x7, 0x400, 0x9d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x8}, {0x1, 0x8}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x5}, {0x4, 0x1}, {0x2, 0x4}, {0x2, 0x9}, {0x2, 0x6}, {0x3, 0x3}, {0x5, 0xa}, {0x1, 0x4}, {0x3, 0x9}, {0x1, 0x7}, {0x5, 0x6}, {0x7, 0x3}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x2}, {0x0, 0x8}, {0x4}, {0x3, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x4}, {0x1, 0x4}, {0x7, 0xa}, {0x5}, {0x5, 0x8}, {0x7, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0xa}, {0x6, 0x2}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0xa}, {0x4, 0x9}]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xffa3, 0x4, 0x5, 0x8001, 0x800, 0x7, 0xcee]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x4, 0x4, 0x10, 0x8fe8, 0x0, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x7, 0x9}, {0x2, 0x7}, {0x0, 0x5}, {0x4, 0x6}, {0x5, 0x1}, {0x7, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0x8}, {0x6, 0x1}, {0x5, 0x1}, {0x7, 0x6}, {0x2, 0xa}, {0x4}, {0x0, 0x2}, {0x7, 0x2}, {0x4, 0x7}, {0x6, 0xa}, {0x3, 0x5}, {0x4}, {0x1, 0x1}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0x4}, {0x1}, {0x1, 0x9}, {0x6}, {0x4, 0x1}, {0x5}, {0x5, 0x5}, {0x4, 0x9}, {0x1, 0x1}, {0x3, 0x5}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x3}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x5}, {0x5, 0x9}, {0x2, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x2, 0x9}, {0x4, 0x3}, {0x7, 0x8}, {0x0, 0xa}, {0x2, 0x7}, {0x4}, {0x7, 0xa}, {0x2, 0x5}, {0x6, 0xa}, {0x5, 0x9}, {0x6, 0x6}, {0x7, 0x2}, {0x5, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x3}]}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x36, 0x9, 0x2, 0x24, 0x4, 0x30, 0x0, 0x0, 0xc, 0x2, 0x36, 0x3, 0x4, 0x60, 0x1, 0xe, 0x16]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x4, 0x3}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x6}, {0x5, 0x3}, {0x5}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x8}, {0x1, 0x9}, {0x2, 0x3}, {0x2, 0x6}, {0x1, 0x1}, {0x2}, {0x7, 0x6}, {0x6, 0x2}, {0x4}, {0x6, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x8}, {0x6, 0x9}, {0x4, 0x6}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0x6}, {0x0, 0x5}, {0x0, 0x9}, {0x4, 0x2}, {0x1, 0x9}, {0x7, 0x1}, {0x5, 0x2}, {0x3}, {0x1, 0x8}, {0x5, 0x1}, {0x6, 0x1}, {}, {0x6, 0xa}, {0x3, 0x5}, {0x4, 0x7}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x5}, {0x4, 0x6}, {0x7}, {0x7, 0x8}, {0x3, 0xa}, {0x7, 0x9}, {0x5, 0x4}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfff5, 0x6e04, 0x6, 0x2, 0x3, 0x5, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x1, 0x2, 0x30, 0x1, 0x1, 0x4, 0x3, 0x1b, 0x30, 0x48, 0x60, 0x0, 0x4, 0xb, 0x6, 0x60, 0x24, 0x12, 0x48, 0x60, 0x16, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x8}, {0x7, 0x8}, {0x4, 0x5}, {0x2, 0x5}, {0x5, 0x6}, {0x4, 0x1}, {0x7, 0x4}, {0x2, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x2}, {0x6, 0x6}, {0x3, 0x6}, {0x5, 0x9}, {0x1, 0x1}, {0x1, 0x4}, {0x2, 0x7}, {0x7}, {0x5, 0x4}, {0x0, 0x5}, {0x6, 0x3}, {0x7, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x7, 0x1}, {0x3, 0x4}, {0x6, 0x4}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x6}, {0x1}, {0x1}, {0x3, 0x2}]}]}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfffb, 0x0, 0x3, 0x2, 0x7ff, 0x9, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x2, 0xfffd, 0x5, 0x0, 0xc, 0x3, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9862, 0xeb, 0x9, 0x2, 0x1, 0x68, 0x7, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xdc0, 0x9, 0xe, 0x39c, 0x3, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x6}, {0x5, 0x5}, {0x4, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x4, 0x7}, {0x3, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x4, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x6, 0xa}, {0x4, 0x6}, {0x2, 0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x9}, {0x6, 0x3}, {0x3}, {0x4, 0x8}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x5}, {0x5, 0x8}, {0x2, 0x6}, {0x3, 0x2}, {0x4, 0x2}, {0x6, 0x6}, {0x7, 0x2}, {0x2, 0x7}, {0x6}, {0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x4, 0x16, 0xc, 0xb, 0x16, 0x1, 0x6c, 0x12, 0x36, 0x5, 0x12, 0x36, 0x12, 0x9, 0x60, 0x3, 0x3, 0x18, 0x30, 0x48, 0x30, 0x18, 0x9, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x8, 0x2, 0x1, 0x2, 0x9, 0x7, 0x200]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x8}, {0x4}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x2}, {0x6}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x6}, {0x7, 0x7}, {0x1}, {0x1}, {0x1, 0x4}, {}, {0x4, 0x7}, {0x7, 0x4}, {0x1, 0x3}, {0x5, 0x6}, {0x6, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x2, 0xa}, {0x3, 0x5}, {0x6}, {0x7, 0xa}, {0x6, 0x9}, {0x5, 0xa}, {0x3, 0x4}, {0x3, 0xa}, {0x0, 0x5}, {0x2, 0x1}, {0x5, 0x3}, {0x5}, {0x4, 0x9}, {0x4, 0x9}, {0x3, 0x3}, {0x1, 0xa}, {0x7, 0x1}, {0x5, 0x5}, {0x1}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0x8}, {0x1, 0x2}, {0x4, 0x8}, {0x5, 0x3}, {0x2, 0xa}, {0x2, 0x8}, {0x7, 0x8}, {0x0, 0xa}, {0x4, 0xa}, {0x5}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {}, {0x6}, {0x5, 0xa}, {0x4, 0x4}, {0x6, 0x6}, {0x0, 0x3}, {0x1, 0xa}, {0x2, 0x2}, {0x5, 0x2}, {}, {0x4, 0x6}, {0x1, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xca3a, 0x8001, 0x4, 0x8000, 0x59, 0x100, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x5}, {0x4, 0x9}, {0x6, 0x4}, {0x0, 0x9}, {0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x2, 0x8}, {0x1, 0xa}, {0x0, 0x7}, {0x4, 0xa}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x1a}, {0x7, 0x4}, {0x6, 0x2}, {0x6}, {0x1, 0x7}, {0x1, 0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0x4}, {0x7, 0x2}, {0x0, 0x6}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x6, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x36, 0xe321, 0x82, 0x7, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdd, 0x7, 0x7f, 0x8, 0x400, 0x1, 0x8001]}}]}]}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x2, 0x7}, {0x7, 0x5}, {0x6, 0x7}, {0x3, 0x2}, {0x4, 0x1}, {0x2, 0x7}, {0x6, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x7f, 0x3, 0x9, 0x31, 0x7, 0xfffc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x685c, 0x0, 0x1, 0x101, 0x400, 0x235c, 0x18a]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x3}, {0x6, 0x5}, {0x7, 0x4}, {0x4, 0xa}, {0x5, 0x9}, {0x1, 0x5}, {0x1, 0x8}, {0x4, 0x6}, {0x1}, {0x5, 0x9}, {0x2, 0xa}, {0x1, 0xa}, {0x3, 0x8}, {0x0, 0x7}, {0x4, 0x4}, {0x5, 0x5}, {0x3, 0x6}, {0x0, 0x8}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0x1}, {0x3, 0x7}, {0x4}, {0x2, 0x8}, {0x4, 0x3}, {0x2, 0xa}, {}, {0x0, 0xa}, {0x6, 0x4}, {0x4, 0x9}, {0x3, 0x7}, {0x5}, {0x1}, {0x6, 0x6}, {0x0, 0x8}, {0x0, 0x5}, {0x3, 0x4}, {0x2, 0x9}, {0x3}, {0x0, 0xa}, {0x4}, {0x2, 0x1}, {0x5, 0x8}, {0x3, 0x1}, {0x6, 0x3}, {0x0, 0x7}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x6}, {0x3, 0x6}, {0x6, 0x9}, {0x6, 0x9}, {0x0, 0x3}, {0x6, 0x3}, {0x6, 0x4}, {0x3, 0x7}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0xd, 0x18, 0x18, 0x36, 0x9, 0x16, 0x6, 0x12, 0xc, 0xb, 0x30, 0x9, 0x4, 0x60, 0x1]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x7}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0xa}, {0x1}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x4, 0x6}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x9}, {0x3, 0x4}, {0x4, 0x7}, {0x5, 0x1}, {0x2, 0xa}, {0x5, 0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x1, 0x1}, {0x6, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {}, {0x1, 0x3}, {0x5, 0x6}, {}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x3, 0x7}, {0x5, 0xa}, {0x3, 0x2}]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x8, 0x1, 0x4, 0xf88, 0x8, 0x7, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0xb, 0xb, 0x6c, 0x18, 0x3, 0x6c, 0x3, 0x12, 0x4, 0x16, 0xc, 0x16, 0x1b, 0x24, 0x1, 0x36, 0x24, 0x5, 0x2, 0xc, 0x9]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x4, 0xa}, {0x0, 0x6}, {0x7}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x7}, {0x1, 0x3}, {0x6, 0x2}, {0x7, 0x7}, {0x6, 0x7}, {0x3, 0x3}, {0x2, 0x1}, {0x6}, {0x6, 0x7}, {0x7, 0x7}, {0x3}, {0x7, 0x5}, {0x3, 0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1ff, 0xfffb, 0x9, 0x1, 0xb43b, 0xffff, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x1d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x50, 0x1, 0x30, 0x3, 0x42]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x6c, 0x9, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x753e, 0x800, 0x86b3, 0x5, 0x200, 0x8, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x4, 0x3, 0x0, 0x8, 0xeb1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xf, 0x3dc, 0x2, 0x2, 0xe9d2, 0x6, 0x9]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x81, 0x3, 0xfffc, 0x0, 0xa, 0x9, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x12, 0xa92ed5ebf00148b4, 0x2]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x3, 0x30, 0x16, 0x5, 0x6, 0x2, 0x60, 0x30, 0x5, 0x36, 0x36, 0x3, 0xb753f5818abbdfca, 0x4, 0x1b, 0x6c, 0x4, 0x18, 0x16, 0x4, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x9, 0xa, 0x7, 0x40, 0xfff, 0x49e, 0xe]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1800, 0x9, 0x1ff, 0xf10d, 0x7f, 0x3ff, 0x7ff]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x6}, {0x6, 0x6}, {0x2, 0x6}, {0x3, 0xa}, {0x0, 0x6}, {0x2, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x3, 0x9}, {0x1, 0x9}, {0x2, 0x8}, {0x4, 0x1}, {}, {0x6, 0x7}, {0x7, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0xa}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0xa}, {0x0, 0x5}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0x9}, {0x5}, {0x6, 0x3}, {0x1, 0x6}, {0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x9}, {0x3}, {0x7, 0x8}, {0x1}, {0x4, 0x9}, {0x0, 0x3}, {0x5}, {0x4}, {0x1, 0x5}, {0x2, 0x6}, {0x0, 0x1}, {0x2, 0x2}, {0x0, 0x7}, {0x4, 0x7}]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x6}, {0x4, 0x9}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x3}, {0x1, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x4}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x2}, {0x6, 0x4}, {0x7}, {}, {0x3}, {0x6, 0x8}, {0x5, 0x3}, {0x2, 0x6}, {0x4, 0xa}, {0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0x1}, {0x6, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x4, 0x7}, {0x5, 0xa}, {0x1, 0x8}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x2}, {0x6, 0x9}, {0x4, 0xa}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x9}, {0x6, 0x3}, {0x4, 0x3}, {0x6, 0x1}, {0x7, 0x6}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0x7}, {0x5, 0x15}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x7, 0x3}, {0x6, 0x2}, {0x5, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0xa}, {0x5, 0x8}, {0x0, 0x1}, {}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x4, 0x8}, {0x2, 0x6}, {0x3, 0x1}, {0x4, 0x3}, {0x2, 0x5}, {0x5, 0x2}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x6, 0x5, 0x12, 0xb, 0x2, 0x24, 0xc, 0x18, 0x1, 0x16, 0x1, 0x6, 0x6]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xd8, 0x2, 0x7f, 0x7ff, 0x0, 0x4, 0xc2]}}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0xf1eb, 0x8, 0x0, 0x3000, 0x7, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd1, 0xff5c, 0xa7a7, 0x0, 0x1000, 0xd, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x60, 0x8, 0x0, 0xf51, 0x0, 0xee, 0x5, 0x3]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x4, 0x4, 0x4, 0xfff8, 0x0, 0x4]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x2f1, 0xffff, 0x3ff, 0x1, 0x3d, 0x0, 0x67]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd72, 0x2, 0x0, 0x400, 0x4, 0x3, 0x0, 0xc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x1, 0x81, 0x8000, 0x7, 0x4, 0x9, 0xee60]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xffff, 0xcc4, 0x4, 0x2400, 0x6, 0xe5ca, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x8, 0x7, 0x4, 0x5, 0x1, 0x81, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x6, 0x4, 0x3, 0x0, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xffff, 0xffbf, 0x8001, 0x3ff, 0xfeff, 0x3, 0xfff9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x3ff, 0x7, 0x4, 0x7ff, 0x1, 0xfa53]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x2, 0x2}, {0x4, 0x3}, {0x6, 0x4}, {0x3, 0x5}, {0x5, 0xa}, {0x5, 0x9}, {0x2, 0x2}, {0x3, 0x6}, {0x0, 0x1}, {0x7, 0x8}, {0x1}, {0x5, 0x1}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0xa}, {0x5, 0x5}, {0x7, 0x6}, {0x0, 0x5}, {0x5, 0x8}, {0x4, 0x6}, {0x7, 0x4}, {0x7}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0x5}, {0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x7, 0x2}, {0x7, 0xa}, {0x4, 0x8}, {0x6, 0x3}, {0x3, 0x6}, {}, {0x7, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0x4}, {0x7, 0x2}, {0x2, 0x4}, {0x0, 0x2}, {0x2, 0x7}, {0x1}, {0x0, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0x2, 0x9}, {0x4, 0x8}, {0x4, 0xa}, {0x4, 0xa}, {0x3}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x4}, {0x5, 0x1}, {0x6, 0x4}, {0x4, 0x7}, {0x4, 0x2}, {0x2, 0x7}, {0x4, 0x9}, {0x4, 0x7}, {0x0, 0xa}, {0x5, 0x4}, {0x0, 0x4}, {0x5, 0x4}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x9}, {0x4, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x4, 0x8}, {0x3, 0xa}, {0x6}, {0x1, 0xa}, {0x3, 0x7}, {0x6, 0x9}, {0x1, 0x3}, {0x4, 0x9}, {0x5, 0x5}, {0x6, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {0x7, 0x4}, {0x5, 0x6}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0x2}, {0x4}, {0x6}, {0x6, 0x4}, {0x4, 0x8}, {0x4, 0xa}, {0x6, 0x2}, {0x5, 0x9}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8a12, 0x2, 0x40, 0x5, 0x1, 0x3, 0x8, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x2, 0x4, 0x7f, 0x1, 0x1a4, 0x10]}}]}]}]}, 0xaf0}, 0x1, 0x0, 0x0, 0x4010}, 0x8000094) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000001340)=0x3) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001440)={'ip6tnl0\x00', &(0x7f00000013c0)={'ip6_vti0\x00', 0x0, 0x4, 0x2d, 0xd2, 0x10, 0x6a6b9205c19e3f1c, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x20, 0x8, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001500)={'ip6tnl0\x00', &(0x7f0000001480)={'ip6_vti0\x00', 0x0, 0x0, 0x1c, 0x1, 0xfffffff5, 0x42, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x700, 0x8000, 0x9, 0x200000}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000001600)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) ioctl$TCSBRK(r4, 0x5409, 0x6) (async) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x100000000000) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001680), r4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r8, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4000800) (async, rerun: 32) r9 = openat$incfs(r4, &(0x7f0000001780)='.pending_reads\x00', 0x200000, 0x100) (rerun: 32) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000001800)={0xffff, 0x0, &(0x7f00000017c0)=[r1, r1, r9, r1, r0, r5, r1]}, 0x7) 2.563359435s ago: executing program 4 (id=1280): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4008040) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000063110c0000000000e310000002000000850000000500000095000000000000009500a5050000000058a43683634b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x1c, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r4, 0x8, 0x12}}, 0x1c}}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000340)={'c', ' *:* ', 'r\x00'}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2749baca85309be96d5a45bbb29ea06f9cbc7eea15bc1ee369d2707231280f0415df341ab76de90db5ff7ffffffd075b373f51be98db7efbbe8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c1f870adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eacb4389adbb47efb7b3f19046c7f1bd1bf56e58555d96137f95b3aacd74ed1c8a8676468cf2405e48723c6b1ff3698422f88ffed8617dd64330f4c38ba86e3b50da03f4b1e4808aa5c9e9546d7190747c6abc5beab28cec4ff7faa3fab48cdb3d64cfd5d698416752a16f32a54ccef577832e4cf684fce2cb0bab7f6a5821b26483322000000000000596c6e1ac996b8a0924948750b6e52c09d53950e5c8143db8669f8a5bf6511df822532e3c78d019149651255048aab0399e5d6e317b6f3fbc2600ffc3c66c7244b7bcf6b78b5e8c0ee04ce344ceb084b4f2ef09b59a36a92b3874edc559e5bf58a567d385ba92df9121dfa257e60655dcbff581c75107b01b5baaf29ebaf24861c538fefcaecb52a6b69fc450e10645df60a9d50131466113c6aac5abbcf9e9f2f0384da3f9892af413bd87f51f7f0cf61096fd79327fa66effe89a72d7a75d4"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000280)={{0x0, 0x0, 0xfff, 0x2, 0x2}}) 2.509898509s ago: executing program 2 (id=1281): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x783c5647, 0x4) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x8, 0x10, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x4, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x393, 0x80000086, 0x81, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffefb, 0x3]}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x2000) 2.456307214s ago: executing program 5 (id=1282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.34517208s ago: executing program 6 (id=1283): syz_open_dev$vcsa(0x0, 0x1, 0x40002) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000037aeb28fbf4770d0c71b2206d900"/41], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x2004, &(0x7f0000000680)) 1.197708016s ago: executing program 5 (id=1284): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003180)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xe4ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 1.196919862s ago: executing program 2 (id=1285): prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) prctl$PR_GET_SECCOMP(0x15) 0s ago: executing program 2 (id=1286): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}], 0x1c) r1 = signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'gre0\x00', @random="0f1d8d6540dd"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xa0b40, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x401, 0x0, 0xfd, "0062ba7d06000000000004000000f713000001"}) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x104, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000040, &(0x7f0000000040)={0x2, 0xe23, @multicast2}, 0x10) r6 = syz_open_pts(r2, 0x0) r7 = dup3(r2, r6, 0x80000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xd) syz_fuse_handle_req(r7, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): attributes in process `syz.4.236'. [ 180.474782][ T5904] qmi_wwan 3-1:0.207: probe with driver qmi_wwan failed with error -22 [ 180.837508][ T5904] usb 3-1: USB disconnect, device number 9 [ 180.900041][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.900561][ T6925] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 180.906862][ T5855] Bluetooth: hci3: command 0x0405 tx timeout [ 181.818286][ T6925] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 182.210253][ T6925] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 182.287992][ T6925] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.313881][ T6925] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 182.377560][ T6925] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 182.425569][ T6925] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 182.445540][ T6925] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 182.650416][ T6925] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 183.039473][ T6925] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.106178][ T6925] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.118956][ T6925] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.148951][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.169936][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 183.706513][ T6964] openvswitch: netlink: Flow actions attr not present in new flow. [ 184.355761][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.495667][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 185.057185][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 185.220438][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.619883][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.248'. [ 185.860790][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 186.338227][ T7007] No such timeout policy "syz0" [ 186.415586][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.575923][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 186.775925][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.251'. [ 186.984050][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.251'. [ 187.072510][ T7010] dummy0: entered promiscuous mode [ 187.136190][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 187.207600][ T7010] team0: entered promiscuous mode [ 187.245769][ T7010] team_slave_0: entered promiscuous mode [ 187.302591][ T7010] team_slave_1: entered promiscuous mode [ 187.947616][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 187.975768][ T7038] netlink: 28 bytes leftover after parsing attributes in process `syz.5.256'. [ 188.220047][ T7041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.230665][ T7041] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 188.353310][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 188.670823][ T5855] Bluetooth: hci4: command 0x0c1a tx timeout [ 188.677773][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.215598][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 190.345605][ T5904] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 191.263217][ T7064] netlink: 420 bytes leftover after parsing attributes in process `syz.1.261'. [ 191.753204][ T5904] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 191.768759][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.787125][ T5904] usb 3-1: config 0 descriptor?? [ 191.837560][ T5904] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 194.030755][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.037242][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.064750][ T5904] usb 3-1: USB disconnect, device number 10 [ 194.082529][ T7099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.272'. [ 194.321431][ T7099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.272'. [ 194.340371][ T7105] loop1: detected capacity change from 0 to 7 [ 194.378883][ T7105] buffer_io_error: 7 callbacks suppressed [ 194.378900][ T7105] Buffer I/O error on dev loop1, logical block 0, async page read [ 194.778244][ T7105] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.315757][ T7105] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.323728][ T7105] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.337651][ T7105] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.432531][ T7105] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.463838][ T7105] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.485820][ T7105] ldm_validate_partition_table(): Disk read failed. [ 195.493090][ T7105] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.550991][ T7105] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.591319][ T7105] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.611079][ T7105] Dev loop1: unable to read RDB block 0 [ 195.620983][ T7105] loop1: unable to read partition table [ 195.628651][ T7105] loop1: partition table beyond EOD, truncated [ 195.685651][ T7105] loop_reread_partitions: partition scan of loop1 (被xڬdGݡ [ 195.685651][ T7105] ) failed (rc=-5) [ 195.730514][ T5209] ldm_validate_partition_table(): Disk read failed. [ 195.799069][ T5209] Dev loop1: unable to read RDB block 0 [ 195.804984][ T5209] loop1: unable to read partition table [ 195.835785][ T5209] loop1: partition table beyond EOD, truncated [ 196.086029][ T7133] netlink: 92 bytes leftover after parsing attributes in process `syz.4.279'. [ 197.080403][ T7140] netlink: 'syz.4.283': attribute type 15 has an invalid length. [ 197.101026][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.283'. [ 200.949852][ T7183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.100959][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 202.614844][ T7200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.637360][ T7200] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 204.006569][ T7213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.041236][ T7213] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 207.533974][ T1110] Bluetooth: hci5: Frame reassembly failed (-84) [ 207.693402][ T61] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 208.251123][ T7266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.273897][ T7266] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 209.538242][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 209.547700][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 213.007078][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 215.525626][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.327'. [ 217.706125][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 217.861306][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 217.883080][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 217.935615][ T10] usb 3-1: config 3 has an invalid interface number: 153 but max is 0 [ 217.968896][ T10] usb 3-1: config 3 has no interface number 0 [ 217.995694][ T10] usb 3-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 218.046710][ T10] usb 3-1: config 3 interface 153 has no altsetting 0 [ 218.098408][ T10] usb 3-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 218.170887][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.829045][ T10] usb 3-1: Product: syz [ 218.833275][ T10] usb 3-1: Manufacturer: syz [ 218.861493][ T10] usb 3-1: SerialNumber: syz [ 218.888650][ T7359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 219.263567][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.316351][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.343298][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.400946][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.447588][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.491405][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.510335][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.565225][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.611102][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.677425][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.751263][ T10] sisusb 3-1:3.153: Invalid USB2VGA device [ 219.820255][ T10] sisusb 3-1:3.153: probe with driver sisusb failed with error -22 [ 220.231628][ T10] usb 3-1: USB disconnect, device number 11 [ 223.798536][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 226.905295][ T7452] netlink: 420 bytes leftover after parsing attributes in process `syz.1.354'. [ 228.905917][ T7462] trusted_key: syz.4.358 sent an empty control message without MSG_MORE. [ 229.517246][ T7473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.548902][ T7473] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 232.120080][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.360'. [ 232.179105][ T7465] openvswitch: netlink: Flow actions attr not present in new flow. [ 232.215140][ T7486] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 232.312206][ T7486] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 232.547052][ T7486] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 234.466259][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 235.211622][ T7518] netlink: 'syz.1.374': attribute type 1 has an invalid length. [ 236.848846][ T7526] netlink: 44 bytes leftover after parsing attributes in process `syz.5.378'. [ 237.110441][ T7538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.144890][ T7538] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 238.669012][ T7550] ubi31: attaching mtd0 [ 238.998088][ T7550] ubi31: scanning is finished [ 238.998107][ T7550] ubi31: empty MTD device detected [ 239.773544][ T7560] netlink: 48 bytes leftover after parsing attributes in process `syz.5.385'. [ 240.235346][ T7550] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 240.243284][ T7550] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 240.250674][ T7550] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 240.257970][ T7550] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 240.265438][ T7550] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 240.272326][ T7550] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 240.280423][ T7550] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 31522146 [ 240.290595][ T7550] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 240.467293][ T7562] ubi31: background thread "ubi_bgt31d" started, PID 7562 [ 241.282931][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 243.278058][ T7583] trusted_key: encrypted_key: master key parameter is missing [ 244.190517][ T120] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 244.208661][ T7598] input: syz1 as /devices/virtual/input/input9 [ 244.492946][ T7604] netlink: 56 bytes leftover after parsing attributes in process `syz.5.397'. [ 244.506436][ T7604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.515737][ T7604] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 244.611688][ T120] usb 3-1: Using ep0 maxpacket: 16 [ 244.672744][ T120] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.719717][ T7609] FAULT_INJECTION: forcing a failure. [ 244.719717][ T7609] name failslab, interval 1, probability 0, space 0, times 0 [ 244.732928][ T7609] CPU: 1 UID: 0 PID: 7609 Comm: syz.4.402 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 244.732965][ T7609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.732976][ T7609] Call Trace: [ 244.732983][ T7609] [ 244.732991][ T7609] dump_stack_lvl+0x189/0x250 [ 244.733026][ T7609] ? __pfx____ratelimit+0x10/0x10 [ 244.733046][ T7609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.733066][ T7609] ? __pfx__printk+0x10/0x10 [ 244.733095][ T7609] ? __pfx___might_resched+0x10/0x10 [ 244.733114][ T7609] ? fs_reclaim_acquire+0x7d/0x100 [ 244.733141][ T7609] should_fail_ex+0x414/0x560 [ 244.733165][ T7609] should_failslab+0xa8/0x100 [ 244.733187][ T7609] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 244.733205][ T7609] ? __alloc_skb+0x112/0x2d0 [ 244.733235][ T7609] __alloc_skb+0x112/0x2d0 [ 244.733263][ T7609] netlink_ack+0x146/0xa50 [ 244.733305][ T7609] netlink_rcv_skb+0x28c/0x470 [ 244.733332][ T7609] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 244.733355][ T7609] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.733391][ T7609] ? bpf_lsm_capable+0x9/0x20 [ 244.733414][ T7609] ? security_capable+0x7e/0x2e0 [ 244.733445][ T7609] nfnetlink_rcv+0x26a/0x2520 [ 244.733469][ T7609] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 244.733492][ T7609] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 244.733520][ T7609] ? __dev_queue_xmit+0x27e/0x3a70 [ 244.733539][ T7609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.733567][ T7609] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 244.733587][ T7609] ? __pfx___dev_queue_xmit+0x10/0x10 [ 244.733619][ T7609] ? ref_tracker_free+0x63a/0x7d0 [ 244.733637][ T7609] ? __copy_skb_header+0xa7/0x550 [ 244.733656][ T7609] ? __pfx_ref_tracker_free+0x10/0x10 [ 244.733680][ T7609] ? __skb_clone+0x63/0x7a0 [ 244.733702][ T7609] ? __skb_clone+0x483/0x7a0 [ 244.733726][ T7609] ? skb_clone+0x246/0x3a0 [ 244.733747][ T7609] ? __netlink_deliver_tap+0x807/0x850 [ 244.733772][ T7609] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.733804][ T7609] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.733828][ T7609] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.733859][ T7609] netlink_unicast+0x75c/0x8e0 [ 244.733892][ T7609] netlink_sendmsg+0x805/0xb30 [ 244.733927][ T7609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.733961][ T7609] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.733979][ T7609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.734006][ T7609] __sock_sendmsg+0x21c/0x270 [ 244.734030][ T7609] ____sys_sendmsg+0x505/0x830 [ 244.734063][ T7609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.734100][ T7609] ? import_iovec+0x74/0xa0 [ 244.734138][ T7609] ___sys_sendmsg+0x21f/0x2a0 [ 244.734169][ T7609] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.734255][ T7609] ? __fget_files+0x2a/0x420 [ 244.734277][ T7609] ? __fget_files+0x3a0/0x420 [ 244.734312][ T7609] __x64_sys_sendmsg+0x19b/0x260 [ 244.734347][ T7609] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.734391][ T7609] ? __pfx_ksys_write+0x10/0x10 [ 244.734408][ T7609] ? rcu_is_watching+0x15/0xb0 [ 244.734437][ T7609] ? do_syscall_64+0xbe/0x3b0 [ 244.734464][ T7609] do_syscall_64+0xfa/0x3b0 [ 244.734486][ T7609] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.734515][ T7609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.734535][ T7609] ? clear_bhb_loop+0x60/0xb0 [ 244.734561][ T7609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.734581][ T7609] RIP: 0033:0x7f562238ebe9 [ 244.734604][ T7609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.734621][ T7609] RSP: 002b:00007f5623246038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.734648][ T7609] RAX: ffffffffffffffda RBX: 00007f56225b5fa0 RCX: 00007f562238ebe9 [ 244.734663][ T7609] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 244.734676][ T7609] RBP: 00007f5623246090 R08: 0000000000000000 R09: 0000000000000000 [ 244.734689][ T7609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.734701][ T7609] R13: 00007f56225b6038 R14: 00007f56225b5fa0 R15: 00007fff5bb60d68 [ 244.734733][ T7609] [ 244.745703][ T120] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.152157][ T120] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 245.168786][ T120] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.175777][ T120] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 245.184935][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.221287][ T7615] netlink: 'syz.1.400': attribute type 10 has an invalid length. [ 245.233738][ T120] usb 3-1: config 0 descriptor?? [ 245.270188][ T7615] team0: Port device dummy0 added [ 245.386140][ T7615] 9pnet_fd: Insufficient options for proto=fd [ 246.126519][ T120] usb 3-1: USB disconnect, device number 12 [ 246.185787][ T7623] bridge1: entered promiscuous mode [ 246.212413][ T7623] bridge1: entered allmulticast mode [ 246.254486][ T7623] team0: Port device bridge1 added [ 246.690760][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.408'. [ 247.207496][ T7642] netlink: 72 bytes leftover after parsing attributes in process `syz.1.409'. [ 248.048118][ T6265] Bluetooth: hci5: Frame reassembly failed (-84) [ 248.061083][ T6264] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 249.200136][ T7665] ======================================================= [ 249.200136][ T7665] WARNING: The mand mount option has been deprecated and [ 249.200136][ T7665] and is ignored by this kernel. Remove the mand [ 249.200136][ T7665] option from the mount to silence this warning. [ 249.200136][ T7665] ======================================================= [ 250.096086][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 250.185704][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 250.440419][ T7676] syzkaller1: entered promiscuous mode [ 250.450105][ T7676] syzkaller1: entered allmulticast mode [ 251.100648][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 253.726839][ T5852] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 255.223074][ T7709] loop1: detected capacity change from 0 to 7 [ 255.234776][ T7709] buffer_io_error: 23 callbacks suppressed [ 255.234833][ T7709] Buffer I/O error on dev loop1, logical block 0, async page read [ 255.249742][ T7709] Buffer I/O error on dev loop1, logical block 0, async page read [ 255.258272][ T7709] Buffer I/O error on dev loop1, logical block 0, async page read [ 255.266790][ T7709] Buffer I/O error on dev loop1, logical block 0, async page read [ 255.275646][ T7709] Buffer I/O error on dev loop1, logical block 0, async page read [ 255.284264][ T7709] Buffer I/O error on dev loop1, logical block 0, async page read [ 255.292812][ T7709] Buffer I/O error on dev loop1, logical block 0, async page read [ 255.301507][ T7709] ldm_validate_partition_table(): Disk read failed. [ 255.308635][ T7709] Buffer I/O error on dev loop1, logical block 0, async page read [ 255.317325][ T7709] Buffer I/O error on dev loop1, logical block 0, async page read [ 255.325954][ T7709] Buffer I/O error on dev loop1, logical block 0, async page read [ 255.334768][ T7709] Dev loop1: unable to read RDB block 0 [ 255.342062][ T7709] loop1: unable to read partition table [ 255.349270][ T7709] loop1: partition table beyond EOD, truncated [ 255.355693][ T7709] loop_reread_partitions: partition scan of loop1 (被xڬdGݡ [ 255.355693][ T7709] ) failed (rc=-5) [ 255.506509][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.747188][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.296142][ T5852] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.456861][ T5852] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 256.470284][ T5852] usb 5-1: can't read configurations, error -71 [ 256.897611][ T6265] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 256.905832][ T6264] Bluetooth: hci5: Frame reassembly failed (-84) [ 256.912596][ T6264] Bluetooth: hci6: Frame reassembly failed (-84) [ 256.975143][ T1137] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 257.690257][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 258.384271][ T7731] all (unregistering): Released all slaves [ 258.405585][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 258.557956][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 258.574492][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.595574][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.621458][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 258.639628][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.656283][ T24] usb 3-1: config 0 descriptor?? [ 258.895960][ T5844] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 258.898759][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 258.903521][ T5844] Bluetooth: hci5: command 0x1003 tx timeout [ 259.385128][ T5954] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 259.449004][ T24] ft260 0003:0403:6030.0005: item fetching failed at offset 0/2 [ 259.470490][ T24] ft260 0003:0403:6030.0005: failed to parse HID [ 259.524183][ T24] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -22 [ 259.556870][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 259.591097][ T5954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.633796][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.254721][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 260.271176][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 260.295528][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.506302][ T5954] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 260.515395][ T5954] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 260.525627][ T5954] usb 2-1: Manufacturer: syz [ 260.909251][ T5954] usb 2-1: config 0 descriptor?? [ 260.972927][ T24] usb 3-1: USB disconnect, device number 13 [ 260.981264][ T30] audit: type=1326 audit(1755865569.158:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7760 comm="syz.3.446" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048ab8ebe9 code=0x0 [ 261.262943][ T7773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.355600][ T5954] rc_core: IR keymap rc-hauppauge not found [ 261.362686][ T5954] Registered IR keymap rc-empty [ 261.374637][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 261.959872][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 262.003404][ T5954] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 262.054813][ T5954] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 262.147430][ T7783] netlink: 5 bytes leftover after parsing attributes in process `syz.5.450'. [ 262.235932][ T7783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.254830][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 262.295622][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 262.494011][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 262.648886][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 262.777391][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 262.876051][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 262.929623][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 262.930298][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.5.451'. [ 262.956854][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 262.976824][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 262.995594][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 263.031625][ T5954] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 263.064737][ T5954] mceusb 2-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 263.098700][ T5954] usb 2-1: USB disconnect, device number 5 [ 263.234420][ T7795] bridge1: entered promiscuous mode [ 263.240112][ T7795] bridge1: entered allmulticast mode [ 263.304497][ T7795] team0: Port device bridge1 added [ 263.509346][ T6264] Bluetooth: Error in BCSP hdr checksum [ 263.783431][ T6264] Bluetooth: Error in BCSP hdr checksum [ 264.737164][ T6264] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 264.747026][ T6264] Bluetooth: hci6: Frame reassembly failed (-84) [ 264.875749][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'. [ 264.884765][ T7815] openvswitch: netlink: Flow actions attr not present in new flow. [ 265.332127][ T7818] loop1: detected capacity change from 0 to 7 [ 265.357988][ T7818] buffer_io_error: 4 callbacks suppressed [ 265.358004][ T7818] Buffer I/O error on dev loop1, logical block 0, async page read [ 265.377410][ T7818] Buffer I/O error on dev loop1, logical block 0, async page read [ 265.385410][ T7818] Buffer I/O error on dev loop1, logical block 0, async page read [ 265.396103][ T7818] Buffer I/O error on dev loop1, logical block 0, async page read [ 265.404091][ T7818] Buffer I/O error on dev loop1, logical block 0, async page read [ 265.414904][ T7818] Buffer I/O error on dev loop1, logical block 0, async page read [ 265.438894][ T7818] Buffer I/O error on dev loop1, logical block 0, async page read [ 265.455338][ T7818] ldm_validate_partition_table(): Disk read failed. [ 265.464137][ T7818] Buffer I/O error on dev loop1, logical block 0, async page read [ 265.472475][ T7818] Buffer I/O error on dev loop1, logical block 0, async page read [ 265.481535][ T7818] Buffer I/O error on dev loop1, logical block 0, async page read [ 265.492262][ T7818] Dev loop1: unable to read RDB block 0 [ 265.498998][ T7818] loop1: unable to read partition table [ 265.505110][ T7818] loop1: partition table beyond EOD, truncated [ 265.518661][ T7818] loop_reread_partitions: partition scan of loop1 (被xڬdGݡ [ 265.518661][ T7818] ) failed (rc=-5) [ 265.570785][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 265.577828][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 265.604410][ T7808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.617842][ T7808] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 266.253389][ T7830] netlink: 420 bytes leftover after parsing attributes in process `syz.2.464'. [ 266.780076][ T5855] Bluetooth: hci6: command 0x1003 tx timeout [ 266.790465][ T5844] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 267.236861][ T7835] netlink: 'syz.3.465': attribute type 1 has an invalid length. [ 267.891598][ T7831] xt_connbytes: Forcing CT accounting to be enabled [ 267.901006][ T7831] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 267.975851][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 268.114728][ T7844] netlink: 52 bytes leftover after parsing attributes in process `syz.2.467'. [ 268.585100][ T7864] No control pipe specified [ 268.747846][ T7861] netlink: 168 bytes leftover after parsing attributes in process `syz.4.473'. [ 268.845003][ T7866] netlink: 92 bytes leftover after parsing attributes in process `syz.1.472'. [ 269.535637][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 269.706951][ T10] usb 3-1: device descriptor read/64, error -71 [ 269.942714][ T7881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.965776][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 270.105622][ T10] usb 3-1: device descriptor read/64, error -71 [ 270.146829][ T7886] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 270.245991][ T10] usb usb3-port1: attempt power cycle [ 270.630328][ T7892] tmpfs: Bad value for 'mpol' [ 271.263709][ T7906] sp0: Synchronizing with TNC [ 272.748019][ T7919] netlink: 132 bytes leftover after parsing attributes in process `syz.4.489'. [ 273.326473][ T5904] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 273.510565][ T5904] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 273.717703][ T5904] usb 6-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 273.735314][ T5904] usb 6-1: Product: syz [ 273.745703][ T5904] usb 6-1: Manufacturer: syz [ 273.750331][ T5904] usb 6-1: SerialNumber: syz [ 273.768102][ T5904] usb 6-1: config 0 descriptor?? [ 274.528634][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 274.537265][ T5904] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 274.555693][ T5904] asix 6-1:0.0: probe with driver asix failed with error -32 [ 274.586819][ T5904] usb 6-1: USB disconnect, device number 3 [ 274.812196][ T7947] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.499'. [ 274.823418][ T7947] sysfs: cannot create duplicate filename '/class/ieee80211/`] Iq!>s*!' [ 274.847806][ T7947] CPU: 0 UID: 0 PID: 7947 Comm: syz.2.499 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 274.847832][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.847844][ T7947] Call Trace: [ 274.847852][ T7947] [ 274.847861][ T7947] dump_stack_lvl+0x189/0x250 [ 274.847892][ T7947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.847915][ T7947] ? __pfx__printk+0x10/0x10 [ 274.847941][ T7947] ? kernfs_path_from_node+0x2c/0x260 [ 274.847965][ T7947] ? kernfs_path_from_node+0x2c/0x260 [ 274.847987][ T7947] ? kernfs_path_from_node+0x2c/0x260 [ 274.848011][ T7947] ? kernfs_path_from_node+0x22c/0x260 [ 274.848033][ T7947] ? kernfs_path_from_node+0x2c/0x260 [ 274.848059][ T7947] sysfs_warn_dup+0x8e/0xa0 [ 274.848081][ T7947] sysfs_do_create_link_sd+0xc0/0x110 [ 274.848106][ T7947] device_add_class_symlinks+0x1cf/0x240 [ 274.848140][ T7947] device_add+0x475/0xb50 [ 274.848172][ T7947] wiphy_register+0x199a/0x26b0 [ 274.848214][ T7947] ? __pfx_wiphy_register+0x10/0x10 [ 274.848238][ T7947] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 274.848278][ T7947] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 274.848311][ T7947] ieee80211_register_hw+0x33e1/0x4120 [ 274.848359][ T7947] ? ieee80211_register_hw+0x1471/0x4120 [ 274.848398][ T7947] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 274.848432][ T7947] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 274.848470][ T7947] ? __hrtimer_setup+0x187/0x210 [ 274.848489][ T7947] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 274.848523][ T7947] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 274.848580][ T7947] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 274.848607][ T7947] ? trace_kmalloc+0x1f/0xd0 [ 274.848623][ T7947] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 274.848643][ T7947] ? kstrndup+0xbf/0x160 [ 274.848676][ T7947] hwsim_new_radio_nl+0xea4/0x1b10 [ 274.848707][ T7947] ? __pfx___nla_validate_parse+0x10/0x10 [ 274.848745][ T7947] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 274.848786][ T7947] ? __nla_parse+0x40/0x60 [ 274.848812][ T7947] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 274.848843][ T7947] genl_family_rcv_msg_doit+0x215/0x300 [ 274.848871][ T7947] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 274.848906][ T7947] ? bpf_lsm_capable+0x9/0x20 [ 274.848929][ T7947] ? security_capable+0x7e/0x2e0 [ 274.848961][ T7947] genl_rcv_msg+0x60e/0x790 [ 274.848988][ T7947] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.849006][ T7947] ? ref_tracker_free+0x63a/0x7d0 [ 274.849026][ T7947] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 274.849055][ T7947] ? __pfx_ref_tracker_free+0x10/0x10 [ 274.849087][ T7947] netlink_rcv_skb+0x205/0x470 [ 274.849114][ T7947] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.849136][ T7947] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.849180][ T7947] ? down_read+0x1ad/0x2e0 [ 274.849206][ T7947] genl_rcv+0x28/0x40 [ 274.849223][ T7947] netlink_unicast+0x75c/0x8e0 [ 274.849259][ T7947] netlink_sendmsg+0x805/0xb30 [ 274.849301][ T7947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.849337][ T7947] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.849356][ T7947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.849384][ T7947] __sock_sendmsg+0x21c/0x270 [ 274.849411][ T7947] ____sys_sendmsg+0x505/0x830 [ 274.849447][ T7947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.849486][ T7947] ? import_iovec+0x74/0xa0 [ 274.849518][ T7947] ___sys_sendmsg+0x21f/0x2a0 [ 274.849550][ T7947] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.849617][ T7947] ? __fget_files+0x2a/0x420 [ 274.849638][ T7947] ? __fget_files+0x3a0/0x420 [ 274.849670][ T7947] __x64_sys_sendmsg+0x19b/0x260 [ 274.849721][ T7947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.849765][ T7947] ? rcu_is_watching+0x15/0xb0 [ 274.849793][ T7947] ? do_syscall_64+0xbe/0x3b0 [ 274.849830][ T7947] do_syscall_64+0xfa/0x3b0 [ 274.849850][ T7947] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.849887][ T7947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.849908][ T7947] ? clear_bhb_loop+0x60/0xb0 [ 274.849933][ T7947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.849952][ T7947] RIP: 0033:0x7f7facd8ebe9 [ 274.849969][ T7947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.849986][ T7947] RSP: 002b:00007f7fadcc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.850007][ T7947] RAX: ffffffffffffffda RBX: 00007f7facfb5fa0 RCX: 00007f7facd8ebe9 [ 274.850022][ T7947] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 274.850035][ T7947] RBP: 00007f7face11e19 R08: 0000000000000000 R09: 0000000000000000 [ 274.850048][ T7947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.850060][ T7947] R13: 00007f7facfb6038 R14: 00007f7facfb5fa0 R15: 00007ffd300cc538 [ 274.850092][ T7947] [ 275.723350][ T7953] erofs (device loop3): cannot find valid erofs superblock [ 275.915035][ T30] audit: type=1326 audit(1755865583.988:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7956 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7facd8ebe9 code=0x7ffc0000 [ 276.184688][ T7960] netlink: 44 bytes leftover after parsing attributes in process `syz.5.501'. [ 276.193954][ T7960] netlink: 43 bytes leftover after parsing attributes in process `syz.5.501'. [ 276.202919][ T7960] netlink: 'syz.5.501': attribute type 5 has an invalid length. [ 276.210767][ T7960] netlink: 43 bytes leftover after parsing attributes in process `syz.5.501'. [ 276.603393][ T7959] netlink: 48 bytes leftover after parsing attributes in process `syz.1.504'. [ 276.778170][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 276.801203][ T30] audit: type=1326 audit(1755865583.988:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7956 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7facd8ebe9 code=0x7ffc0000 [ 276.873683][ T30] audit: type=1326 audit(1755865583.988:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7956 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7facd8ebe9 code=0x7ffc0000 [ 276.910836][ T30] audit: type=1326 audit(1755865583.988:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7956 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7facd8ebe9 code=0x7ffc0000 [ 276.975520][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 276.998354][ T30] audit: type=1326 audit(1755865583.988:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7956 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7facd8ebe9 code=0x7ffc0000 [ 277.020070][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 277.055118][ T9] usb 3-1: config 12 has an invalid interface number: 184 but max is 0 [ 277.088489][ T9] usb 3-1: config 12 has no interface number 0 [ 277.100598][ T30] audit: type=1326 audit(1755865583.988:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7956 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7facd8ebe9 code=0x7ffc0000 [ 277.125778][ T30] audit: type=1326 audit(1755865583.988:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7956 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7facd8ebe9 code=0x7ffc0000 [ 277.162231][ T30] audit: type=1326 audit(1755865583.988:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7956 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7facd8ebe9 code=0x7ffc0000 [ 277.197750][ T30] audit: type=1326 audit(1755865583.988:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7956 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7facd8ebe9 code=0x7ffc0000 [ 277.277938][ T30] audit: type=1326 audit(1755865583.988:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7956 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7facd8ebe9 code=0x7ffc0000 [ 277.290560][ T9] usb 3-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 277.650960][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 277.670756][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.789703][ T9] usb 3-1: Product: syz [ 277.794971][ T9] usb 3-1: Manufacturer: syz [ 277.800314][ T9] usb 3-1: SerialNumber: syz [ 277.979421][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 278.033137][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.601337][ T9] usb 3-1: USB disconnect, device number 17 [ 279.114319][ T7061] udevd[7061]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.828949][ T8008] netlink: 'syz.5.516': attribute type 11 has an invalid length. [ 281.863664][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'. [ 282.075757][ T8020] openvswitch: netlink: Flow actions attr not present in new flow. [ 285.952084][ T8062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.113412][ T8062] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 286.455644][ T8061] mkiss: ax0: crc mode is auto. [ 289.447968][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 291.104358][ T8113] netlink: 168 bytes leftover after parsing attributes in process `syz.5.544'. [ 291.646113][ T8117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.545'. [ 292.425895][ T5904] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 292.625773][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 292.627070][ T8138] netlink: 'syz.2.553': attribute type 1 has an invalid length. [ 292.686267][ T8138] netlink: 144 bytes leftover after parsing attributes in process `syz.2.553'. [ 292.706800][ T5904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.717614][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.553'. [ 292.729990][ T5904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.808558][ T5904] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.874369][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.941958][ T5904] usb 5-1: Product: syz [ 292.979318][ T5904] usb 5-1: Manufacturer: syz [ 293.007002][ T5904] usb 5-1: SerialNumber: syz [ 293.230768][ T8120] tmpfs: Bad value for 'mpol' [ 293.266058][ T5904] usb 5-1: 0:2 : does not exist [ 293.323785][ T5904] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 293.718032][ T8155] netlink: 292 bytes leftover after parsing attributes in process `syz.3.558'. [ 294.021911][ T5904] usb 5-1: USB disconnect, device number 5 [ 294.072765][ T8157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.559'. [ 294.099094][ T8157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.559'. [ 294.199335][ T7216] udevd[7216]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.218237][ T8157] dummy0: entered promiscuous mode [ 294.224192][ T8157] team0: entered promiscuous mode [ 294.413163][ T8157] team_slave_0: entered promiscuous mode [ 294.549031][ T8157] team_slave_1: entered promiscuous mode [ 294.981079][ T8157] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 295.013207][ T8157] Cannot create hsr debugfs directory [ 295.278196][ T8165] syzkaller1: entered promiscuous mode [ 295.290524][ T8165] syzkaller1: entered allmulticast mode [ 296.147971][ T8187] netlink: 420 bytes leftover after parsing attributes in process `syz.3.571'. [ 296.158409][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 297.082892][ T8196] netlink: 128 bytes leftover after parsing attributes in process `syz.4.573'. [ 297.195581][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 298.055321][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 298.085924][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.828053][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.837649][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.845303][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.853598][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.862801][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.956447][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 298.965950][ T5904] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 299.016646][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.135815][ T5904] usb 3-1: device descriptor read/64, error -71 [ 299.219600][ T10] usb 6-1: config 0 descriptor?? [ 299.225164][ T10] usb 6-1: can't set config #0, error -71 [ 299.289579][ T10] usb 6-1: USB disconnect, device number 4 [ 299.311923][ T8217] netlink: 420 bytes leftover after parsing attributes in process `syz.3.578'. [ 299.966504][ T5904] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 300.155755][ T5904] usb 3-1: device descriptor read/64, error -71 [ 300.306753][ T5904] usb usb3-port1: attempt power cycle [ 300.315099][ T8203] chnl_net:caif_netlink_parms(): no params data found [ 300.614073][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.621321][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.629732][ T8203] bridge_slave_0: entered allmulticast mode [ 300.639023][ T8203] bridge_slave_0: entered promiscuous mode [ 300.661989][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.669768][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.678246][ T8203] bridge_slave_1: entered allmulticast mode [ 300.692946][ T8239] FAULT_INJECTION: forcing a failure. [ 300.692946][ T8239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.706715][ T8239] CPU: 1 UID: 0 PID: 8239 Comm: syz.4.583 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 300.706740][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.706751][ T8239] Call Trace: [ 300.706776][ T8239] [ 300.706785][ T8239] dump_stack_lvl+0x189/0x250 [ 300.706813][ T8239] ? __pfx____ratelimit+0x10/0x10 [ 300.706836][ T8239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.706860][ T8239] ? __pfx__printk+0x10/0x10 [ 300.706887][ T8239] ? __might_fault+0xb0/0x130 [ 300.706920][ T8239] should_fail_ex+0x414/0x560 [ 300.706948][ T8239] _copy_from_iter+0x1db/0x16f0 [ 300.706978][ T8239] ? rcu_is_watching+0x15/0xb0 [ 300.707004][ T8239] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 300.707027][ T8239] ? __pfx__copy_from_iter+0x10/0x10 [ 300.707056][ T8239] ? __build_skb_around+0x257/0x3e0 [ 300.707090][ T8239] ? netlink_sendmsg+0x642/0xb30 [ 300.707119][ T8239] ? skb_put+0x11b/0x210 [ 300.707153][ T8239] netlink_sendmsg+0x6b2/0xb30 [ 300.707193][ T8239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.707232][ T8239] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.707253][ T8239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.707284][ T8239] __sock_sendmsg+0x21c/0x270 [ 300.707313][ T8239] sock_write_iter+0x258/0x330 [ 300.707344][ T8239] ? __pfx_sock_write_iter+0x10/0x10 [ 300.707380][ T8239] ? irqentry_exit+0x74/0x90 [ 300.707412][ T8239] do_iter_readv_writev+0x56b/0x7f0 [ 300.707438][ T8239] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 300.707465][ T8239] ? bpf_lsm_file_permission+0x9/0x20 [ 300.707488][ T8239] ? security_file_permission+0x75/0x290 [ 300.707514][ T8239] ? rw_verify_area+0x258/0x650 [ 300.707551][ T8239] vfs_writev+0x31a/0x960 [ 300.707581][ T8239] ? __lock_acquire+0xab9/0xd20 [ 300.707603][ T8239] ? __pfx_vfs_writev+0x10/0x10 [ 300.707644][ T8239] ? __fget_files+0x2a/0x420 [ 300.707673][ T8239] ? __fget_files+0x3a0/0x420 [ 300.707696][ T8239] ? __fget_files+0x2a/0x420 [ 300.707729][ T8239] do_writev+0x14d/0x2d0 [ 300.707757][ T8239] ? __pfx_do_writev+0x10/0x10 [ 300.707788][ T8239] ? do_syscall_64+0xbe/0x3b0 [ 300.707816][ T8239] do_syscall_64+0xfa/0x3b0 [ 300.707838][ T8239] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.707860][ T8239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.707881][ T8239] ? clear_bhb_loop+0x60/0xb0 [ 300.707906][ T8239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.707927][ T8239] RIP: 0033:0x7f562238ebe9 [ 300.707945][ T8239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.707963][ T8239] RSP: 002b:00007f5623204038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 300.707984][ T8239] RAX: ffffffffffffffda RBX: 00007f56225b6180 RCX: 00007f562238ebe9 [ 300.707999][ T8239] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000007 [ 300.708012][ T8239] RBP: 00007f5623204090 R08: 0000000000000000 R09: 0000000000000000 [ 300.708025][ T8239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.708037][ T8239] R13: 00007f56225b6218 R14: 00007f56225b6180 R15: 00007fff5bb60d68 [ 300.708070][ T8239] [ 300.709315][ T5904] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 301.022084][ T5844] Bluetooth: hci0: command tx timeout [ 301.031139][ T8203] bridge_slave_1: entered promiscuous mode [ 301.178619][ T8203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.324427][ T5904] usb 3-1: device descriptor read/8, error -71 [ 301.358670][ T8203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.575836][ T5904] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 301.668129][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.584'. [ 302.031876][ T8247] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 302.270010][ T5904] usb 3-1: device descriptor read/8, error -71 [ 302.532049][ T5904] usb usb3-port1: unable to enumerate USB device [ 302.551600][ T8203] team0: Port device team_slave_0 added [ 303.713644][ T5844] Bluetooth: hci0: command tx timeout [ 303.947169][ T8203] team0: Port device team_slave_1 added [ 304.001027][ T8264] netlink: 68 bytes leftover after parsing attributes in process `syz.5.589'. [ 304.296563][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.405840][ T5904] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 304.896439][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.928517][ T8203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.944533][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.954605][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.070912][ T8203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.085757][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 305.108921][ T5904] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.153659][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.163698][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 305.182751][ T5904] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.192135][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.205112][ T5904] usb 3-1: Product: syz [ 305.210587][ T5904] usb 3-1: Manufacturer: syz [ 305.222426][ T5904] usb 3-1: SerialNumber: syz [ 305.242760][ T8203] hsr_slave_0: entered promiscuous mode [ 305.276986][ T8203] hsr_slave_1: entered promiscuous mode [ 305.283391][ T8203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.461585][ T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 305.471369][ T5904] usb 3-1: 0:2 : does not exist [ 305.478388][ T8203] Cannot create hsr debugfs directory [ 305.488448][ T5904] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 305.532895][ T5904] usb 3-1: USB disconnect, device number 22 [ 305.622701][ T7216] udevd[7216]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.640190][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.681699][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.696980][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 305.718938][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.756277][ T24] usb 4-1: config 0 descriptor?? [ 305.770415][ T24] hub 4-1:0.0: USB hub found [ 305.775732][ T5855] Bluetooth: hci0: command tx timeout [ 305.967707][ T24] hub 4-1:0.0: 1 port detected [ 306.445332][ T8294] x_tables: ip_tables: osf match: only valid for protocol 6 [ 306.823188][ T5954] hub 4-1:0.0: activate --> -90 [ 306.990602][ T8298] Invalid ELF header magic: != ELF [ 307.108329][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 307.869461][ T5855] Bluetooth: hci0: command tx timeout [ 307.907129][ T8203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.978109][ T8203] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.051093][ T8304] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.600'. [ 308.112121][ T5954] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 308.119733][ T5954] hub_port_connect: 72 callbacks suppressed [ 308.119749][ T5954] usb 4-1-port1: connect-debounce failed [ 308.143438][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.150713][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.183420][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.190636][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.296290][ T8304] debugfs: Directory '`] Iq!>s*!' with parent 'ieee80211' already present! [ 308.625776][ T5852] usb 4-1: USB disconnect, device number 7 [ 308.794164][ T8203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.104771][ T5852] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 310.779859][ T5852] usb 3-1: unable to get BOS descriptor or descriptor too short [ 310.806586][ T5852] usb 3-1: not running at top speed; connect to a high speed hub [ 310.819902][ T5852] usb 3-1: config 3 has an invalid interface number: 153 but max is 0 [ 310.843083][ T5852] usb 3-1: config 3 has no interface number 0 [ 310.885575][ T5852] usb 3-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 310.911985][ T5852] usb 3-1: config 3 interface 153 has no altsetting 0 [ 310.952857][ T5852] usb 3-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 310.989732][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.004523][ T5852] usb 3-1: Product: syz [ 311.013590][ T5852] usb 3-1: Manufacturer: syz [ 311.026562][ T5852] usb 3-1: SerialNumber: syz [ 311.037117][ T8316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 311.354439][ T5852] sisusb 3-1:3.153: Invalid USB2VGA device [ 311.432547][ T5852] sisusb 3-1:3.153: probe with driver sisusb failed with error -22 [ 311.469328][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 311.532520][ T8339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.545962][ T5852] usb 3-1: USB disconnect, device number 23 [ 311.655523][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 311.900309][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.910782][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 311.928168][ T24] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 311.950327][ T8342] bond_slave_0: entered promiscuous mode [ 311.956051][ T8342] bond_slave_1: entered promiscuous mode [ 311.975558][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.980871][ T8342] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 311.997709][ T24] usb 5-1: config 0 descriptor?? [ 312.018638][ T24] usb 5-1: bad CDC descriptors [ 312.036027][ T8342] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 312.187424][ T8203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.312115][ T8350] netlink: 196 bytes leftover after parsing attributes in process `syz.3.612'. [ 312.330030][ T8351] FAULT_INJECTION: forcing a failure. [ 312.330030][ T8351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.372578][ T8351] CPU: 0 UID: 0 PID: 8351 Comm: syz.5.611 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 312.372611][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.372639][ T8351] Call Trace: [ 312.372649][ T8351] [ 312.372659][ T8351] dump_stack_lvl+0x189/0x250 [ 312.372695][ T8351] ? __pfx____ratelimit+0x10/0x10 [ 312.372727][ T8351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.372754][ T8351] ? __pfx__printk+0x10/0x10 [ 312.372793][ T8351] ? __might_fault+0xb0/0x130 [ 312.372835][ T8351] should_fail_ex+0x414/0x560 [ 312.372875][ T8351] _copy_from_user+0x2d/0xb0 [ 312.372912][ T8351] kstrtouint_from_user+0xc4/0x170 [ 312.372958][ T8351] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 312.373006][ T8351] proc_fail_nth_write+0x88/0x240 [ 312.373038][ T8351] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 312.373071][ T8351] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 312.373104][ T8351] vfs_write+0x27e/0xa90 [ 312.373137][ T8351] ? __pfx_vfs_write+0x10/0x10 [ 312.373163][ T8351] ? __fget_files+0x2a/0x420 [ 312.373199][ T8351] ? __fget_files+0x3a0/0x420 [ 312.373225][ T8351] ? __fget_files+0x2a/0x420 [ 312.373260][ T8351] ksys_write+0x145/0x250 [ 312.373284][ T8351] ? __pfx_ksys_write+0x10/0x10 [ 312.373305][ T8351] ? rcu_is_watching+0x15/0xb0 [ 312.373336][ T8351] ? do_syscall_64+0xbe/0x3b0 [ 312.373368][ T8351] do_syscall_64+0xfa/0x3b0 [ 312.373391][ T8351] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.373415][ T8351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.373440][ T8351] ? clear_bhb_loop+0x60/0xb0 [ 312.373465][ T8351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.373497][ T8351] RIP: 0033:0x7f349b18d69f [ 312.373516][ T8351] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 312.373532][ T8351] RSP: 002b:00007f34993f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 312.373559][ T8351] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f349b18d69f [ 312.373574][ T8351] RDX: 0000000000000001 RSI: 00007f34993f60a0 RDI: 0000000000000004 [ 312.373586][ T8351] RBP: 00007f34993f6090 R08: 0000000000000000 R09: 0000000000000000 [ 312.373598][ T8351] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 312.373609][ T8351] R13: 00007f349b3b6038 R14: 00007f349b3b5fa0 R15: 00007ffdf8d2d568 [ 312.373640][ T8351] [ 312.693667][ T8355] netlink: 'syz.2.613': attribute type 6 has an invalid length. [ 312.831199][ T8353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.954392][ T5904] usb 5-1: USB disconnect, device number 6 [ 313.388544][ T8370] netlink: 44 bytes leftover after parsing attributes in process `syz.3.616'. [ 313.505742][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 313.577957][ T8203] veth0_vlan: entered promiscuous mode [ 313.775626][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 313.785279][ T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 313.809781][ T8203] veth1_vlan: entered promiscuous mode [ 313.822129][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.863473][ T10] usb 6-1: Product: syz [ 313.880674][ T10] usb 6-1: Manufacturer: syz [ 313.885309][ T10] usb 6-1: SerialNumber: syz [ 313.952787][ T8203] veth0_macvtap: entered promiscuous mode [ 313.975146][ T10] usb 6-1: config 0 descriptor?? [ 314.001993][ T10] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 314.014605][ T8203] veth1_macvtap: entered promiscuous mode [ 314.038803][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.242252][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.247367][ T8365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.317478][ T8365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.086523][ T10] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 315.119892][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 315.139992][ T10] usb 6-1: USB disconnect, device number 5 [ 315.661238][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.801968][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.904901][ T8392] FAULT_INJECTION: forcing a failure. [ 315.904901][ T8392] name failslab, interval 1, probability 0, space 0, times 0 [ 315.918317][ T8392] CPU: 0 UID: 0 PID: 8392 Comm: syz.3.621 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 315.918341][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.918351][ T8392] Call Trace: [ 315.918359][ T8392] [ 315.918367][ T8392] dump_stack_lvl+0x189/0x250 [ 315.918392][ T8392] ? __pfx____ratelimit+0x10/0x10 [ 315.918413][ T8392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.918434][ T8392] ? __pfx__printk+0x10/0x10 [ 315.918462][ T8392] ? lock_acquire+0x175/0x360 [ 315.918479][ T8392] ? __pfx___might_resched+0x10/0x10 [ 315.918504][ T8392] should_fail_ex+0x414/0x560 [ 315.918528][ T8392] should_failslab+0xa8/0x100 [ 315.918551][ T8392] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 315.918570][ T8392] ? __alloc_skb+0x112/0x2d0 [ 315.918594][ T8392] ? __pfx___mutex_trylock_common+0x10/0x10 [ 315.918622][ T8392] __alloc_skb+0x112/0x2d0 [ 315.918652][ T8392] netlink_dump+0x1b1/0xe60 [ 315.918680][ T8392] ? __netlink_lookup+0xbd/0x810 [ 315.918714][ T8392] ? __pfx_netlink_dump+0x10/0x10 [ 315.918751][ T8392] ? netlink_lookup+0x30/0x200 [ 315.918775][ T8392] ? netlink_lookup+0x30/0x200 [ 315.918797][ T8392] ? netlink_lookup+0x30/0x200 [ 315.918827][ T8392] __netlink_dump_start+0x5cb/0x7e0 [ 315.918861][ T8392] crypto_user_rcv_msg+0x34a/0x570 [ 315.918888][ T8392] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 315.918907][ T8392] ? preempt_schedule_irq+0xde/0x150 [ 315.918950][ T8392] ? __pfx_crypto_dump_report+0x10/0x10 [ 315.918969][ T8392] ? __pfx_crypto_dump_report_done+0x10/0x10 [ 315.918992][ T8392] ? kasan_check_range+0xa5/0x2c0 [ 315.919022][ T8392] netlink_rcv_skb+0x205/0x470 [ 315.919049][ T8392] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 315.919071][ T8392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.919109][ T8392] ? __pfx_crypto_netlink_rcv+0x10/0x10 [ 315.919137][ T8392] crypto_netlink_rcv+0x2a/0x40 [ 315.919157][ T8392] netlink_unicast+0x75c/0x8e0 [ 315.919191][ T8392] netlink_sendmsg+0x805/0xb30 [ 315.919232][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.919267][ T8392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.919286][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.919313][ T8392] __sock_sendmsg+0x21c/0x270 [ 315.919338][ T8392] sock_write_iter+0x258/0x330 [ 315.919361][ T8392] ? __pfx_sock_write_iter+0x10/0x10 [ 315.919392][ T8392] ? __lock_acquire+0xab9/0xd20 [ 315.919419][ T8392] do_iter_readv_writev+0x56b/0x7f0 [ 315.919441][ T8392] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 315.919464][ T8392] ? __pfx___schedule+0x10/0x10 [ 315.919480][ T8392] ? bpf_lsm_file_permission+0x9/0x20 [ 315.919500][ T8392] ? security_file_permission+0x75/0x290 [ 315.919523][ T8392] ? rw_verify_area+0x258/0x650 [ 315.919556][ T8392] vfs_writev+0x31a/0x960 [ 315.919583][ T8392] ? __lock_acquire+0xab9/0xd20 [ 315.919602][ T8392] ? __pfx_vfs_writev+0x10/0x10 [ 315.919639][ T8392] ? __fget_files+0x2a/0x420 [ 315.919665][ T8392] ? __fget_files+0x3a0/0x420 [ 315.919684][ T8392] ? __fget_files+0x2a/0x420 [ 315.919714][ T8392] do_writev+0x14d/0x2d0 [ 315.919739][ T8392] ? __pfx_do_writev+0x10/0x10 [ 315.919759][ T8392] ? rcu_is_watching+0x15/0xb0 [ 315.919784][ T8392] ? do_syscall_64+0xbe/0x3b0 [ 315.919809][ T8392] do_syscall_64+0xfa/0x3b0 [ 315.919831][ T8392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.919848][ T8392] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 315.919866][ T8392] ? clear_bhb_loop+0x60/0xb0 [ 315.919889][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.919907][ T8392] RIP: 0033:0x7f048ab8ebe9 [ 315.919923][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.919939][ T8392] RSP: 002b:00007f048b9c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 315.919958][ T8392] RAX: ffffffffffffffda RBX: 00007f048adb6180 RCX: 00007f048ab8ebe9 [ 315.919971][ T8392] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000007 [ 315.919982][ T8392] RBP: 00007f048b9c6090 R08: 0000000000000000 R09: 0000000000000000 [ 315.919993][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.920004][ T8392] R13: 00007f048adb6218 R14: 00007f048adb6180 R15: 00007fff63fb7868 [ 315.920033][ T8392] [ 316.900895][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.907338][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.944676][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.959037][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.903956][ T5842] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 318.101920][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 318.112833][ T5842] usb 4-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 318.152461][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'. [ 318.161486][ T8410] openvswitch: netlink: Flow actions attr not present in new flow. [ 318.179907][ T5842] usb 4-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.317066][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 318.359647][ T5842] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 318.378332][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.559221][ T5842] usb 4-1: config 0 descriptor?? [ 318.669813][ T8420] batadv_slave_1: entered promiscuous mode [ 318.681595][ T8420] hsr0: entered promiscuous mode [ 318.689065][ T8420] batadv_slave_1: left promiscuous mode [ 318.942996][ T8423] netlink: 56 bytes leftover after parsing attributes in process `syz.5.629'. [ 318.974722][ T5842] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 319.001905][ T5842] usb 4-1: USB disconnect, device number 8 [ 319.283345][ T8427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.324492][ T8427] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 319.839616][ T8419] hsr0: left promiscuous mode [ 321.657331][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 321.692153][ T8450] netlink: 24 bytes leftover after parsing attributes in process `syz.6.638'. [ 322.511030][ T8456] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 323.860153][ T8473] netlink: 'syz.4.641': attribute type 8 has an invalid length. [ 324.516460][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.4.645'. [ 325.126591][ T8492] netlink: 'syz.6.648': attribute type 10 has an invalid length. [ 325.134558][ T8492] netlink: 40 bytes leftover after parsing attributes in process `syz.6.648'. [ 325.152105][ T8492] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 325.622124][ T5855] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 326.555675][ T8501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.652'. [ 326.676426][ T8501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.685969][ T8501] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 327.881654][ T8508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.933396][ T8513] bond_slave_0: entered promiscuous mode [ 327.939153][ T8513] bond_slave_1: entered promiscuous mode [ 327.982394][ T8513] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 328.000616][ T8513] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 328.473269][ T8530] bridge2: entered promiscuous mode [ 328.481139][ T8530] team0: Port device bridge2 added [ 328.484487][ T5954] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 328.635757][ T5954] usb 4-1: device descriptor read/64, error -71 [ 328.999429][ T5954] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 329.995690][ T5954] usb 4-1: device descriptor read/64, error -71 [ 330.156353][ T5954] usb usb4-port1: attempt power cycle [ 330.492502][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.668'. [ 330.797959][ T5954] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 330.857235][ T5954] usb 4-1: device descriptor read/8, error -71 [ 331.063028][ T8563] netlink: 420 bytes leftover after parsing attributes in process `syz.4.672'. [ 331.825574][ T5954] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 331.917996][ T8565] fuse: Unknown parameter 'f' [ 332.536781][ T5954] usb 4-1: device descriptor read/8, error -71 [ 332.645782][ T5954] usb usb4-port1: unable to enumerate USB device [ 335.227725][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.676'. [ 340.818011][ T8640] netlink: 24 bytes leftover after parsing attributes in process `syz.5.695'. [ 341.193299][ T8648] tmpfs: Bad value for 'mpol' [ 341.743432][ T8651] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 343.672624][ T8665] netlink: 88 bytes leftover after parsing attributes in process `syz.6.698'. [ 343.886870][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.698'. [ 345.437569][ T8685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.467984][ T8685] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 345.900267][ T8689] sctp: [Deprecated]: syz.5.707 (pid 8689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.900267][ T8689] Use struct sctp_sack_info instead [ 354.200042][ T8710] netlink: 72 bytes leftover after parsing attributes in process `syz.5.713'. [ 354.479401][ T8717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.292448][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.716'. [ 356.022506][ T8726] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 360.356858][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 365.904801][ T61] Bluetooth: hci5: Frame reassembly failed (-84) [ 366.604262][ T8831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.855885][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 370.185813][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 370.387285][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.451017][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.498681][ T43] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 370.523271][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 370.552575][ T43] usb 5-1: SerialNumber: syz [ 370.880876][ T8856] netlink: 'syz.4.753': attribute type 2 has an invalid length. [ 371.181056][ T8885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.207430][ T8885] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 371.610737][ T43] usb 5-1: 0:2 : does not exist [ 372.105558][ T43] usb 5-1: USB disconnect, device number 7 [ 372.783281][ T8724] udevd[8724]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.216176][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.759'. [ 375.356670][ T8907] xt_policy: neither incoming nor outgoing policy selected [ 375.721474][ T8912] netlink: 'syz.3.766': attribute type 1 has an invalid length. [ 375.729318][ T8909] netlink: 'syz.3.766': attribute type 1 has an invalid length. [ 375.739573][ T8912] netlink: 'syz.3.766': attribute type 4 has an invalid length. [ 375.755567][ T8909] netlink: 'syz.3.766': attribute type 4 has an invalid length. [ 375.764217][ T8909] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.766'. [ 375.886031][ T8912] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.766'. [ 375.910597][ T8914] netlink: 'syz.3.766': attribute type 1 has an invalid length. [ 375.918641][ T8914] netlink: 'syz.3.766': attribute type 4 has an invalid length. [ 375.927445][ T8914] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.766'. [ 376.956022][ T120] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 377.140992][ T8935] netlink: 420 bytes leftover after parsing attributes in process `syz.5.774'. [ 377.753229][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 377.764539][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.807954][ T120] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 377.829693][ T120] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 377.874659][ T120] usb 3-1: Manufacturer: syz [ 377.904846][ T120] usb 3-1: config 0 descriptor?? [ 378.227708][ T120] usbhid 3-1:0.0: can't add hid device: -71 [ 378.233777][ T120] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 378.406619][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.412933][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.245567][ T120] usb 3-1: USB disconnect, device number 24 [ 379.300292][ T8937] netlink: 180 bytes leftover after parsing attributes in process `syz.4.777'. [ 379.330195][ T8937] netlink: 180 bytes leftover after parsing attributes in process `syz.4.777'. [ 379.374275][ T8937] netlink: 180 bytes leftover after parsing attributes in process `syz.4.777'. [ 379.461365][ T8937] netlink: 244 bytes leftover after parsing attributes in process `syz.4.777'. [ 379.544517][ T8960] bridge2: entered promiscuous mode [ 379.566587][ T8960] team0: Port device bridge2 added [ 379.916437][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.786'. [ 379.925668][ T8967] openvswitch: netlink: Flow actions attr not present in new flow. [ 382.514315][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 382.602787][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.5.796'. [ 385.474675][ T120] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 385.747118][ T120] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.333290][ T120] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 386.353372][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.392588][ T120] usb 3-1: Product: syz [ 386.495910][ T120] usb 3-1: Manufacturer: syz [ 386.501702][ T120] usb 3-1: SerialNumber: syz [ 386.507170][ T9031] netlink: 24 bytes leftover after parsing attributes in process `syz.6.807'. [ 386.558250][ T120] usb 3-1: config 0 descriptor?? [ 386.572610][ T120] ljca 3-1:0.0: bulk endpoints not found [ 387.657666][ T24] usb 3-1: USB disconnect, device number 25 [ 389.004270][ T9046] sctp: failed to load transform for md5: -4 [ 390.471637][ T9082] binder: 9081:9082 ioctl 8903 200000000180 returned -22 [ 390.710380][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.823'. [ 390.720433][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.823'. [ 390.828959][ T9090] dummy0: entered promiscuous mode [ 390.872461][ T9090] team0: entered promiscuous mode [ 390.891636][ T9090] team_slave_0: entered promiscuous mode [ 390.930645][ T9090] team_slave_1: entered promiscuous mode [ 390.958202][ T9090] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 391.009587][ T9090] Cannot create hsr debugfs directory [ 391.282264][ T9102] netlink: 'syz.4.827': attribute type 5 has an invalid length. [ 391.470713][ T9102] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.479930][ T9102] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.488918][ T9102] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.498153][ T9102] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.644040][ T9102] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.653248][ T9102] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.662668][ T9102] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.671710][ T9102] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.334339][ T9115] netlink: 72 bytes leftover after parsing attributes in process `syz.5.832'. [ 393.413334][ T9117] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 394.662974][ T9130] netlink: 780 bytes leftover after parsing attributes in process `syz.4.835'. [ 395.411975][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.836'. [ 395.913155][ T9139] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 396.700983][ T5855] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 397.962726][ T9160] sp0: Synchronizing with TNC [ 399.860780][ T9168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.880704][ T9168] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 400.462261][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.848'. [ 400.535531][ T5954] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 400.894802][ T5954] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 400.894833][ T5954] usb 4-1: config 0 has no interface number 0 [ 400.897675][ T5954] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 400.897703][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.897722][ T5954] usb 4-1: Product: syz [ 400.897736][ T5954] usb 4-1: Manufacturer: syz [ 400.897751][ T5954] usb 4-1: SerialNumber: syz [ 400.900430][ T5954] usb 4-1: config 0 descriptor?? [ 401.052093][ T9185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.072927][ T9185] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 401.685462][ T5954] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 401.689718][ T5954] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 401.689848][ T5954] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 401.689934][ T5954] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 401.696717][ T5954] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 402.249650][ T9201] netlink: 'syz.2.856': attribute type 10 has an invalid length. [ 402.257563][ T9201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.856'. [ 402.273321][ T9201] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 402.881684][ T9205] netlink: 268 bytes leftover after parsing attributes in process `syz.5.857'. [ 404.507675][ T9219] netlink: 9 bytes leftover after parsing attributes in process `syz.5.861'. [ 404.564022][ T9219] gretap0: entered promiscuous mode [ 404.889440][ T9227] pimreg3: entered allmulticast mode [ 404.906307][ T10] usb 4-1: USB disconnect, device number 13 [ 404.919181][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 404.972534][ T10] keyspan 4-1:0.133: device disconnected [ 406.658855][ T9246] bridge2: entered promiscuous mode [ 406.664756][ T9246] team0: Port device bridge2 added [ 406.959482][ T9257] netlink: 'syz.2.874': attribute type 5 has an invalid length. [ 407.146121][ T9257] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.154922][ T9257] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.164467][ T9257] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.173965][ T9257] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.251018][ T9257] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.260159][ T9257] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.269238][ T9257] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.278217][ T9257] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.727502][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 410.044297][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 412.301881][ T9311] netlink: 'syz.2.892': attribute type 5 has an invalid length. [ 412.409119][ T9311] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.417993][ T9311] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.427552][ T9311] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.436814][ T9311] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.031321][ T9311] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.040727][ T9311] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.049831][ T9311] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.058778][ T9311] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.279194][ T9335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.685480][ T5842] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 417.708418][ T9370] input: syz0 as /devices/virtual/input/input12 [ 417.714913][ T9370] input: failed to attach handler leds to device input12, error: -6 [ 417.867341][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.970395][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.983111][ T5842] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.996627][ T5842] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 418.042106][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.058185][ T5842] usb 6-1: config 0 descriptor?? [ 419.100456][ T5842] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 419.205643][ T9380] netlink: 268 bytes leftover after parsing attributes in process `syz.4.911'. [ 419.216705][ T9362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.246225][ T9362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.425580][ T9386] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 421.219589][ T9411] netlink: 92 bytes leftover after parsing attributes in process `syz.5.915'. [ 421.735468][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 422.160287][ T43] usb 6-1: USB disconnect, device number 6 [ 422.309382][ T9419] bond1: option mode: unable to set because the bond device has slaves [ 422.927823][ T9426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.922'. [ 422.955700][ T9426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.922'. [ 422.968376][ T9429] bond1: option mode: unable to set because the bond device has slaves [ 423.112348][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 423.288339][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 423.469340][ T43] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 423.480698][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.492689][ T43] usb 5-1: Product: syz [ 423.506526][ T43] usb 5-1: Manufacturer: syz [ 423.602911][ T43] usb 5-1: SerialNumber: syz [ 423.616212][ T43] usb 5-1: config 0 descriptor?? [ 423.641216][ T43] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 423.833383][ T9427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.895956][ T9427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.508762][ T43] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 424.541286][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 424.568961][ T43] usb 5-1: USB disconnect, device number 8 [ 425.750310][ T9458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.992598][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 428.098980][ T9483] Invalid ELF header magic: != ELF [ 430.188157][ T9499] FAULT_INJECTION: forcing a failure. [ 430.188157][ T9499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.202419][ T9499] CPU: 1 UID: 0 PID: 9499 Comm: syz.5.946 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 430.202448][ T9499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.202467][ T9499] Call Trace: [ 430.202480][ T9499] [ 430.202490][ T9499] dump_stack_lvl+0x189/0x250 [ 430.202522][ T9499] ? __pfx____ratelimit+0x10/0x10 [ 430.202546][ T9499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.202572][ T9499] ? __pfx__printk+0x10/0x10 [ 430.202601][ T9499] ? __might_fault+0xb0/0x130 [ 430.202636][ T9499] should_fail_ex+0x414/0x560 [ 430.202666][ T9499] _copy_from_user+0x2d/0xb0 [ 430.202697][ T9499] ___sys_sendmsg+0x158/0x2a0 [ 430.202742][ T9499] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.202819][ T9499] ? __fget_files+0x2a/0x420 [ 430.202844][ T9499] ? __fget_files+0x3a0/0x420 [ 430.202881][ T9499] __x64_sys_sendmsg+0x19b/0x260 [ 430.202919][ T9499] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.202966][ T9499] ? __pfx_ksys_write+0x10/0x10 [ 430.202984][ T9499] ? rcu_is_watching+0x15/0xb0 [ 430.203024][ T9499] ? do_syscall_64+0xbe/0x3b0 [ 430.203060][ T9499] do_syscall_64+0xfa/0x3b0 [ 430.203080][ T9499] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.203100][ T9499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.203118][ T9499] ? clear_bhb_loop+0x60/0xb0 [ 430.203142][ T9499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.203160][ T9499] RIP: 0033:0x7f349b18ebe9 [ 430.203176][ T9499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.203193][ T9499] RSP: 002b:00007f34993d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.203213][ T9499] RAX: ffffffffffffffda RBX: 00007f349b3b6090 RCX: 00007f349b18ebe9 [ 430.203227][ T9499] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000009 [ 430.203239][ T9499] RBP: 00007f34993d5090 R08: 0000000000000000 R09: 0000000000000000 [ 430.203251][ T9499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.203262][ T9499] R13: 00007f349b3b6128 R14: 00007f349b3b6090 R15: 00007ffdf8d2d568 [ 430.203292][ T9499] [ 431.035934][ T9502] netlink: 'syz.3.945': attribute type 6 has an invalid length. [ 432.422713][ T9525] Invalid ELF header magic: != ELF [ 433.892951][ T9542] xt_SECMARK: invalid mode: 2 [ 434.294098][ T9549] xt_policy: neither incoming nor outgoing policy selected [ 435.381353][ T9553] loop8: detected capacity change from 0 to 1 [ 435.411559][ T9553] Dev loop8: unable to read RDB block 1 [ 435.431549][ T9553] loop8: unable to read partition table [ 435.527991][ T9553] loop8: partition table beyond EOD, truncated [ 435.528039][ T9553] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 438.241019][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.967'. [ 438.644842][ T9582] netlink: 'syz.2.970': attribute type 7 has an invalid length. [ 438.690225][ T9582] netlink: 'syz.2.970': attribute type 5 has an invalid length. [ 438.754294][ T9582] netlink: 17 bytes leftover after parsing attributes in process `syz.2.970'. [ 438.923023][ T9596] Invalid ELF header magic: != ELF [ 438.969924][ T9599] bridge3: entered promiscuous mode [ 439.005137][ T9599] team0: Port device bridge3 added [ 439.273983][ T9605] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.462734][ T9605] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.570994][ T9605] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.680197][ T9605] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.783441][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.789906][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.552717][ T9605] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.733519][ T9605] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.936702][ T9605] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.891305][ T9605] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.921183][ T9632] netlink: 'syz.3.986': attribute type 5 has an invalid length. [ 442.005566][ T9632] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.015773][ T9632] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.024543][ T9632] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.033435][ T9632] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.176343][ T9632] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.185343][ T9632] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.194430][ T9632] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.203553][ T9632] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.771944][ T9648] Invalid ELF header magic: != ELF [ 443.845687][ T9653] netlink: 224 bytes leftover after parsing attributes in process `syz.5.990'. [ 444.009734][ T9657] binder: 9652:9657 ioctl 4018620d 0 returned -22 [ 445.101507][ T6264] Bluetooth: hci5: Frame reassembly failed (-84) [ 445.134901][ T6264] Bluetooth: hci5: Frame reassembly failed (-84) [ 445.533191][ T9675] netlink: 72 bytes leftover after parsing attributes in process `syz.3.997'. [ 446.645495][ T5911] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 447.068746][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 447.125520][ T5844] Bluetooth: hci5: command 0x1003 tx timeout [ 447.336005][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 447.354954][ T5911] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.369873][ T5911] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 447.382873][ T5911] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 447.400518][ T5911] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 447.849821][ T5911] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 447.875474][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 447.890782][ T5911] usb 6-1: SerialNumber: syz [ 447.920763][ T9673] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 447.944277][ T9673] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 447.966559][ T5911] hub 6-1:1.0: bad descriptor, ignoring hub [ 447.973087][ T5911] hub 6-1:1.0: probe with driver hub failed with error -5 [ 448.175214][ T9673] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 448.318485][ T9703] loop8: detected capacity change from 0 to 7 [ 448.858419][ T9704] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 448.871228][ T9673] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 449.018306][ T9703] Dev loop8: unable to read RDB block 7 [ 449.023941][ T9703] loop8: AHDI p1 p2 p3 [ 449.028836][ T9703] loop8: partition table partially beyond EOD, truncated [ 449.036120][ T9703] loop8: p1 start 1601398130 is beyond EOD, truncated [ 449.042924][ T9703] loop8: p2 start 1702059890 is beyond EOD, truncated [ 449.047471][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'. [ 449.217023][ T9673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.276241][ T9673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.339695][ T5911] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 449.616002][ T120] usb 6-1: USB disconnect, device number 7 [ 449.654434][ T120] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 449.714401][ T9723] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1012'. [ 449.755479][ T9723] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1012'. [ 449.860056][ T9723] dummy0: entered promiscuous mode [ 449.884589][ T9723] team0: entered promiscuous mode [ 449.901197][ T9723] team_slave_0: entered promiscuous mode [ 449.926817][ T9723] team_slave_1: entered promiscuous mode [ 450.023666][ T9723] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 450.224278][ T9723] Cannot create hsr debugfs directory [ 450.490043][ T1110] Bluetooth: hci5: Frame reassembly failed (-84) [ 450.520394][ T12] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 452.574122][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 452.682616][ T9746] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1018'. [ 452.769913][ T9746] sysfs: cannot create duplicate filename '/class/ieee80211/`] Iq!>s*!' [ 452.790206][ T9746] CPU: 0 UID: 0 PID: 9746 Comm: syz.2.1018 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 452.790233][ T9746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.790246][ T9746] Call Trace: [ 452.790254][ T9746] [ 452.790264][ T9746] dump_stack_lvl+0x189/0x250 [ 452.790295][ T9746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.790318][ T9746] ? __pfx__printk+0x10/0x10 [ 452.790344][ T9746] ? kernfs_path_from_node+0x2c/0x260 [ 452.790368][ T9746] ? kernfs_path_from_node+0x2c/0x260 [ 452.790389][ T9746] ? kernfs_path_from_node+0x2c/0x260 [ 452.790415][ T9746] ? kernfs_path_from_node+0x22c/0x260 [ 452.790437][ T9746] ? kernfs_path_from_node+0x2c/0x260 [ 452.790464][ T9746] sysfs_warn_dup+0x8e/0xa0 [ 452.790486][ T9746] sysfs_do_create_link_sd+0xc0/0x110 [ 452.790511][ T9746] device_add_class_symlinks+0x1cf/0x240 [ 452.790545][ T9746] device_add+0x475/0xb50 [ 452.790578][ T9746] wiphy_register+0x199a/0x26b0 [ 452.790620][ T9746] ? __pfx_wiphy_register+0x10/0x10 [ 452.790644][ T9746] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 452.790679][ T9746] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 452.790711][ T9746] ieee80211_register_hw+0x33e1/0x4120 [ 452.790758][ T9746] ? ieee80211_register_hw+0x1471/0x4120 [ 452.790798][ T9746] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 452.790832][ T9746] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 452.790871][ T9746] ? __hrtimer_setup+0x187/0x210 [ 452.790890][ T9746] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 452.790924][ T9746] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 452.790982][ T9746] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 452.791009][ T9746] ? trace_kmalloc+0x1f/0xd0 [ 452.791032][ T9746] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 452.791053][ T9746] ? kstrndup+0xbf/0x160 [ 452.791087][ T9746] hwsim_new_radio_nl+0xea4/0x1b10 [ 452.791118][ T9746] ? __pfx___nla_validate_parse+0x10/0x10 [ 452.791158][ T9746] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 452.791190][ T9746] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 452.791222][ T9746] ? __nla_parse+0x40/0x60 [ 452.791252][ T9746] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 452.791283][ T9746] genl_family_rcv_msg_doit+0x215/0x300 [ 452.791312][ T9746] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 452.791347][ T9746] ? bpf_lsm_capable+0x9/0x20 [ 452.791371][ T9746] ? security_capable+0x7e/0x2e0 [ 452.791403][ T9746] genl_rcv_msg+0x60e/0x790 [ 452.791430][ T9746] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.791448][ T9746] ? ref_tracker_free+0x63a/0x7d0 [ 452.791468][ T9746] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 452.791497][ T9746] ? __pfx_ref_tracker_free+0x10/0x10 [ 452.791530][ T9746] netlink_rcv_skb+0x205/0x470 [ 452.791558][ T9746] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.791580][ T9746] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 452.791625][ T9746] ? down_read+0x1ad/0x2e0 [ 452.791650][ T9746] genl_rcv+0x28/0x40 [ 452.791668][ T9746] netlink_unicast+0x75c/0x8e0 [ 452.791704][ T9746] netlink_sendmsg+0x805/0xb30 [ 452.791741][ T9746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.791777][ T9746] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.791796][ T9746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.791826][ T9746] __sock_sendmsg+0x21c/0x270 [ 452.791852][ T9746] ____sys_sendmsg+0x505/0x830 [ 452.791911][ T9746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.791959][ T9746] ? import_iovec+0x74/0xa0 [ 452.791995][ T9746] ___sys_sendmsg+0x21f/0x2a0 [ 452.792041][ T9746] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.792123][ T9746] ? __fget_files+0x2a/0x420 [ 452.792147][ T9746] ? __fget_files+0x3a0/0x420 [ 452.792186][ T9746] __x64_sys_sendmsg+0x19b/0x260 [ 452.792225][ T9746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.792274][ T9746] ? rcu_is_watching+0x15/0xb0 [ 452.792306][ T9746] ? do_syscall_64+0xbe/0x3b0 [ 452.792336][ T9746] do_syscall_64+0xfa/0x3b0 [ 452.792359][ T9746] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.792383][ T9746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.792406][ T9746] ? clear_bhb_loop+0x60/0xb0 [ 452.792434][ T9746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.792456][ T9746] RIP: 0033:0x7f7facd8ebe9 [ 452.792476][ T9746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.792496][ T9746] RSP: 002b:00007f7fadcc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.792520][ T9746] RAX: ffffffffffffffda RBX: 00007f7facfb5fa0 RCX: 00007f7facd8ebe9 [ 452.792536][ T9746] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 452.792551][ T9746] RBP: 00007f7face11e19 R08: 0000000000000000 R09: 0000000000000000 [ 452.792565][ T9746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.792578][ T9746] R13: 00007f7facfb6038 R14: 00007f7facfb5fa0 R15: 00007ffd300cc538 [ 452.792616][ T9746] [ 454.872628][ T9756] tmpfs: Bad value for 'mpol' [ 455.279263][ T9754] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 455.673652][ T9766] syz.2.1025 (9766) used greatest stack depth: 16184 bytes left [ 456.849860][ T9780] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1028'. [ 460.215606][ T5911] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 460.305420][ T120] IPVS: starting estimator thread 0... [ 460.446634][ T5911] usb 4-1: device descriptor read/64, error -71 [ 460.525609][ T9819] IPVS: using max 43 ests per chain, 103200 per kthread [ 461.015621][ T5911] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 461.750679][ T9826] netlink: 'syz.4.1043': attribute type 10 has an invalid length. [ 461.772880][ T9826] bond_slave_0: left promiscuous mode [ 461.773680][ T5911] usb 4-1: device descriptor read/64, error -71 [ 461.791663][ T9826] bond_slave_1: left promiscuous mode [ 462.539645][ T5911] usb usb4-port1: attempt power cycle [ 462.732916][ T9834] loop1: detected capacity change from 0 to 7 [ 462.743499][ T9834] buffer_io_error: 9 callbacks suppressed [ 462.743513][ T9834] Buffer I/O error on dev loop1, logical block 0, async page read [ 462.758000][ T9834] Buffer I/O error on dev loop1, logical block 0, async page read [ 462.765975][ T9834] Buffer I/O error on dev loop1, logical block 0, async page read [ 462.773898][ T9834] Buffer I/O error on dev loop1, logical block 0, async page read [ 462.781998][ T9834] Buffer I/O error on dev loop1, logical block 0, async page read [ 462.789973][ T9834] Buffer I/O error on dev loop1, logical block 0, async page read [ 462.797960][ T9834] Buffer I/O error on dev loop1, logical block 0, async page read [ 462.806489][ T9834] ldm_validate_partition_table(): Disk read failed. [ 462.813155][ T9834] Buffer I/O error on dev loop1, logical block 0, async page read [ 462.821129][ T9834] Buffer I/O error on dev loop1, logical block 0, async page read [ 462.829074][ T9834] Buffer I/O error on dev loop1, logical block 0, async page read [ 462.837133][ T9834] Dev loop1: unable to read RDB block 0 [ 462.843012][ T9834] loop1: unable to read partition table [ 462.848903][ T9834] loop1: partition table beyond EOD, truncated [ 462.855104][ T9834] loop_reread_partitions: partition scan of loop1 (被xڬdGݡ [ 462.855104][ T9834] ) failed (rc=-5) [ 465.228622][ T9859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.249983][ T9859] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 465.904943][ T9861] binder: 9860:9861 ioctl 8903 200000000180 returned -22 [ 466.423070][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1055'. [ 466.459859][ T5911] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 466.798455][ T9873] input: syz1 as /devices/virtual/input/input13 [ 466.841945][ T9865] netlink: 'syz.5.1053': attribute type 1 has an invalid length. [ 466.935625][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 466.951351][ T9865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.980456][ T5911] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 467.023949][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.039056][ T5911] usb 4-1: Product: syz [ 467.044195][ T5911] usb 4-1: Manufacturer: syz [ 467.054464][ T5911] usb 4-1: SerialNumber: syz [ 467.071252][ T5911] usb 4-1: config 0 descriptor?? [ 467.140212][ T5911] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 467.335695][ T9866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.357866][ T9866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.560720][ T5911] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 468.580774][ T5911] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 469.025620][ T5911] usb 4-1: USB disconnect, device number 17 [ 469.127522][ T9891] sp0: Synchronizing with TNC [ 471.421591][ T9897] binder: 9895:9897 ioctl 8903 200000000180 returned -22 [ 474.746983][ T9928] 9pnet_fd: Insufficient options for proto=fd [ 475.064248][ T9928] ip6gre1: entered allmulticast mode [ 475.166284][ T1095] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 476.395030][ T9952] netlink: 'syz.4.1076': attribute type 5 has an invalid length. [ 476.419364][ T9952] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.428478][ T9952] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.437059][ T9952] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.445286][ T9952] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.458798][ T9952] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.467756][ T9952] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.476274][ T9952] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.484640][ T9952] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.904301][ T9969] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 478.047186][ T5911] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 478.129283][ T9969] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 478.369975][ T5911] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x82 is Bulk; changing to Interrupt [ 478.380251][ T5911] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x3 is Bulk; changing to Interrupt [ 478.395031][ T5911] usb 6-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.342457][ T5911] usb 6-1: config 1 interface 0 has no altsetting 0 [ 479.383479][ T5911] usb 6-1: string descriptor 0 read error: -22 [ 479.403177][ T5911] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.439296][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.545531][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 480.401539][ T5911] usb 6-1: can't set config #1, error -71 [ 480.446182][ T5911] usb 6-1: USB disconnect, device number 8 [ 482.984976][ T9998] befs: (nbd6): No write support. Marking filesystem read-only [ 482.993931][ T9998] syz.6.1088: attempt to access beyond end of device [ 482.993931][ T9998] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 483.006975][ T9998] befs: (nbd6): unable to read superblock [ 483.085799][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 486.377386][T10023] netlink: 'syz.4.1092': attribute type 5 has an invalid length. [ 486.889333][T10023] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.897858][T10023] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.906252][T10023] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.914500][T10023] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.224929][T10023] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.234158][T10023] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.243962][T10023] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.252477][T10023] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.415543][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 488.499008][T10045] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1100'. [ 491.896000][T10056] bond1: option mode: unable to set because the bond device has slaves [ 494.223411][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1105'. [ 496.248961][T10101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1114'. [ 496.258169][T10101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1114'. [ 497.275797][T10118] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.284263][T10118] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.545619][T10135] netlink: 420 bytes leftover after parsing attributes in process `syz.4.1123'. [ 501.220830][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.227673][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.147316][T10160] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1135'. [ 502.845486][ T10] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 502.995782][ T10] usb 6-1: device descriptor read/64, error -71 [ 503.427394][ T10] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 503.565706][ T10] usb 6-1: device descriptor read/64, error -71 [ 503.683978][T10185] evm: overlay not supported [ 503.696317][ T10] usb usb6-port1: attempt power cycle [ 503.746967][T10185] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1140'. [ 503.780035][T10185] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1140'. [ 504.065696][ T10] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 504.125816][ T10] usb 6-1: device descriptor read/8, error -71 [ 504.465551][ T10] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 504.503958][ T10] usb 6-1: device descriptor read/8, error -71 [ 504.895186][ T6053] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 504.937261][ T10] usb usb6-port1: unable to enumerate USB device [ 504.987670][ T6053] Bluetooth: hci5: Frame reassembly failed (-84) [ 505.566693][T10200] 9pnet_fd: Insufficient options for proto=fd [ 505.695669][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 506.420500][T10210] kvm: kvm [10208]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xaf [ 506.433856][T10210] netlink: 'syz.6.1148': attribute type 1 has an invalid length. [ 506.838859][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 508.727692][T10224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.739279][T10231] 9pnet_fd: Insufficient options for proto=fd [ 508.954867][T10226] netlink: 'syz.2.1156': attribute type 5 has an invalid length. [ 509.780913][T10226] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.789813][T10226] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.798596][T10226] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.807936][T10226] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.860060][T10226] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.869007][T10226] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.877941][T10226] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.886885][T10226] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.360953][T10262] openvswitch: netlink: Actions may not be safe on all matching packets [ 512.450362][T10263] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.1165'. [ 513.137958][T10274] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1168'. [ 513.625077][T10263] sysfs: cannot create duplicate filename '/class/ieee80211/`] Iq!>s*!' [ 513.637494][ T5844] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 513.753328][T10263] CPU: 0 UID: 0 PID: 10263 Comm: syz.5.1165 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 513.753357][T10263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.753370][T10263] Call Trace: [ 513.753379][T10263] [ 513.753388][T10263] dump_stack_lvl+0x189/0x250 [ 513.753420][T10263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.753442][T10263] ? __pfx__printk+0x10/0x10 [ 513.753467][T10263] ? kernfs_path_from_node+0x2c/0x260 [ 513.753492][T10263] ? kernfs_path_from_node+0x2c/0x260 [ 513.753514][T10263] ? kernfs_path_from_node+0x2c/0x260 [ 513.753539][T10263] ? kernfs_path_from_node+0x22c/0x260 [ 513.753561][T10263] ? kernfs_path_from_node+0x2c/0x260 [ 513.753588][T10263] sysfs_warn_dup+0x8e/0xa0 [ 513.753610][T10263] sysfs_do_create_link_sd+0xc0/0x110 [ 513.753636][T10263] device_add_class_symlinks+0x1cf/0x240 [ 513.753670][T10263] device_add+0x475/0xb50 [ 513.753702][T10263] wiphy_register+0x199a/0x26b0 [ 513.753745][T10263] ? __pfx_wiphy_register+0x10/0x10 [ 513.753770][T10263] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 513.753804][T10263] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 513.753836][T10263] ieee80211_register_hw+0x33e1/0x4120 [ 513.753868][T10263] ? preempt_schedule+0xae/0xc0 [ 513.753901][T10263] ? ieee80211_register_hw+0x1471/0x4120 [ 513.753939][T10263] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 513.753972][T10263] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 513.754010][T10263] ? __hrtimer_setup+0x187/0x210 [ 513.754029][T10263] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 513.754063][T10263] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 513.754151][T10263] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 513.754182][T10263] ? trace_kmalloc+0x1f/0xd0 [ 513.754201][T10263] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 513.754224][T10263] ? kstrndup+0xbf/0x160 [ 513.754270][T10263] hwsim_new_radio_nl+0xea4/0x1b10 [ 513.754306][T10263] ? __pfx___nla_validate_parse+0x10/0x10 [ 513.754354][T10263] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 513.754400][T10263] ? __nla_parse+0x40/0x60 [ 513.754430][T10263] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 513.754466][T10263] genl_family_rcv_msg_doit+0x215/0x300 [ 513.754498][T10263] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 513.754538][T10263] ? bpf_lsm_capable+0x9/0x20 [ 513.754565][T10263] ? security_capable+0x7e/0x2e0 [ 513.754601][T10263] genl_rcv_msg+0x60e/0x790 [ 513.754632][T10263] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.754652][T10263] ? ref_tracker_free+0x63a/0x7d0 [ 513.754675][T10263] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 513.754708][T10263] ? __pfx_ref_tracker_free+0x10/0x10 [ 513.754744][T10263] netlink_rcv_skb+0x205/0x470 [ 513.754776][T10263] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.754801][T10263] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.754851][T10263] ? down_read+0x1ad/0x2e0 [ 513.754881][T10263] genl_rcv+0x28/0x40 [ 513.754900][T10263] netlink_unicast+0x75c/0x8e0 [ 513.754941][T10263] netlink_sendmsg+0x805/0xb30 [ 513.754984][T10263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.755025][T10263] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.755046][T10263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.755079][T10263] __sock_sendmsg+0x21c/0x270 [ 513.755109][T10263] ____sys_sendmsg+0x505/0x830 [ 513.755150][T10263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.755193][T10263] ? import_iovec+0x74/0xa0 [ 513.755229][T10263] ___sys_sendmsg+0x21f/0x2a0 [ 513.755283][T10263] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.755365][T10263] ? __fget_files+0x2a/0x420 [ 513.755386][T10263] ? __fget_files+0x3a0/0x420 [ 513.755418][T10263] __x64_sys_sendmsg+0x19b/0x260 [ 513.755451][T10263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.755492][T10263] ? rcu_is_watching+0x15/0xb0 [ 513.755519][T10263] ? do_syscall_64+0xbe/0x3b0 [ 513.755545][T10263] do_syscall_64+0xfa/0x3b0 [ 513.755565][T10263] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.755585][T10263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.755604][T10263] ? clear_bhb_loop+0x60/0xb0 [ 513.755627][T10263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.755646][T10263] RIP: 0033:0x7f349b18ebe9 [ 513.755663][T10263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.755681][T10263] RSP: 002b:00007f34993f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.755701][T10263] RAX: ffffffffffffffda RBX: 00007f349b3b5fa0 RCX: 00007f349b18ebe9 [ 513.755715][T10263] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 513.755728][T10263] RBP: 00007f349b211e19 R08: 0000000000000000 R09: 0000000000000000 [ 513.755740][T10263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.755752][T10263] R13: 00007f349b3b6038 R14: 00007f349b3b5fa0 R15: 00007ffdf8d2d568 [ 513.755783][T10263] [ 515.898460][T10287] netlink: 'syz.5.1174': attribute type 5 has an invalid length. [ 515.943175][T10287] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.953461][T10287] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.962751][T10287] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.971661][T10287] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.000084][T10287] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.000150][T10287] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.000201][T10287] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.000233][T10287] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.825507][T10292] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 518.821922][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 524.460271][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1192'. [ 526.368807][T10361] Invalid ELF header magic: != ELF [ 526.469872][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1195'. [ 531.995480][ T5911] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 532.136388][ T1110] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 532.162555][ T6262] Bluetooth: hci5: Frame reassembly failed (-84) [ 532.377163][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 532.499879][ T5911] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 532.604781][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.717685][ T5911] usb 6-1: Product: syz [ 532.722183][ T5911] usb 6-1: Manufacturer: syz [ 532.755809][ T5911] usb 6-1: SerialNumber: syz [ 532.794003][ T5911] usb 6-1: config 0 descriptor?? [ 532.884493][ T5911] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 533.055868][T10377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.236182][T10377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.339570][T10386] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1204'. [ 534.233557][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 534.234548][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 535.381599][ T5911] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 535.399667][ T5911] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 535.499421][ T5911] usb 6-1: USB disconnect, device number 13 [ 536.623966][ T6053] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 536.685264][ T6053] Bluetooth: hci5: Frame reassembly failed (-84) [ 538.665715][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 540.895568][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 540.945991][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 540.955509][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 540.963984][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 540.973295][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 540.981766][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 542.419263][T10422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 543.159792][ T5844] Bluetooth: hci5: command tx timeout [ 543.196502][T10422] netlink: 'syz.4.1214': attribute type 5 has an invalid length. [ 543.258460][T10417] chnl_net:caif_netlink_parms(): no params data found [ 544.073492][T10447] netlink: 'syz.2.1222': attribute type 3 has an invalid length. [ 544.145995][T10447] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1222'. [ 544.360363][T10417] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.403570][T10417] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.431635][T10417] bridge_slave_0: entered allmulticast mode [ 544.546422][T10417] bridge_slave_0: entered promiscuous mode [ 545.285434][ T5844] Bluetooth: hci5: command tx timeout [ 545.615644][T10417] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.622848][T10417] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.517841][T10417] bridge_slave_1: entered allmulticast mode [ 546.555987][T10417] bridge_slave_1: entered promiscuous mode [ 546.706952][T10469] xt_policy: neither incoming nor outgoing policy selected [ 547.319760][ T5844] Bluetooth: hci5: command tx timeout [ 547.652136][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1229'. [ 548.555331][T10417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.375462][ T5844] Bluetooth: hci5: command tx timeout [ 550.154134][ T6265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.050220][T10417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.387790][T10498] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1235'. [ 553.603403][T10510] netlink: 420 bytes leftover after parsing attributes in process `syz.6.1237'. [ 555.406343][ T6265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.548120][T10512] x_tables: duplicate underflow at hook 1 [ 555.655901][T10514] bridge3: entered promiscuous mode [ 555.661711][T10514] team0: Port device bridge3 added [ 555.840097][ T6265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.956359][T10518] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1242'. [ 556.010414][T10417] team0: Port device team_slave_0 added [ 556.053803][T10417] team0: Port device team_slave_1 added [ 559.136526][ T6265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.190446][T10529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.204139][T10529] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 561.016783][T10417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.023862][T10417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.121664][T10417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.137437][T10417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.144406][T10417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.175516][T10417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.676104][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 562.664110][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.670515][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.749020][T10417] hsr_slave_0: entered promiscuous mode [ 563.812520][T10417] hsr_slave_1: entered promiscuous mode [ 563.825472][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 563.850919][ T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 563.887400][ T24] usb 5-1: config 0 has no interface number 0 [ 563.900435][T10417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.914377][ T24] usb 5-1: config 0 interface 12 has no altsetting 0 [ 563.929874][T10549] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1250'. [ 563.944882][T10417] Cannot create hsr debugfs directory [ 563.960540][ T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 563.975557][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.034064][ T24] usb 5-1: Product: syz [ 564.067236][ T24] usb 5-1: Manufacturer: syz [ 564.101212][ T24] usb 5-1: SerialNumber: syz [ 564.148812][ T24] usb 5-1: config 0 descriptor?? [ 566.387218][ T24] usb 5-1: can't set config #0, error -71 [ 566.397032][ T24] usb 5-1: USB disconnect, device number 9 [ 570.821763][ T6265] bridge_slave_1: left allmulticast mode [ 570.860298][ T6265] bridge_slave_1: left promiscuous mode [ 570.890402][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.272661][ T6265] bridge_slave_0: left allmulticast mode [ 571.288565][ T6265] bridge_slave_0: left promiscuous mode [ 571.314773][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.781359][ T6265] team0: Port device geneve0 removed [ 572.789639][T10586] loop1: detected capacity change from 0 to 7 [ 572.796525][T10586] buffer_io_error: 9 callbacks suppressed [ 572.796539][T10586] Buffer I/O error on dev loop1, logical block 0, async page read [ 572.810316][T10586] Buffer I/O error on dev loop1, logical block 0, async page read [ 572.818270][T10586] Buffer I/O error on dev loop1, logical block 0, async page read [ 572.826222][T10586] Buffer I/O error on dev loop1, logical block 0, async page read [ 572.834165][T10586] Buffer I/O error on dev loop1, logical block 0, async page read [ 572.842250][T10586] Buffer I/O error on dev loop1, logical block 0, async page read [ 572.850247][T10586] Buffer I/O error on dev loop1, logical block 0, async page read [ 572.858158][T10586] ldm_validate_partition_table(): Disk read failed. [ 572.864817][T10586] Buffer I/O error on dev loop1, logical block 0, async page read [ 572.872829][T10586] Buffer I/O error on dev loop1, logical block 0, async page read [ 572.880777][T10586] Buffer I/O error on dev loop1, logical block 0, async page read [ 572.889438][T10586] Dev loop1: unable to read RDB block 0 [ 572.898331][T10586] loop1: unable to read partition table [ 572.904178][T10586] loop1: partition table beyond EOD, truncated [ 572.910488][T10586] loop_reread_partitions: partition scan of loop1 (被xڬdGݡ [ 572.910488][T10586] ) failed (rc=-5) [ 573.129769][ T6265] team0: Port device bridge1 removed [ 573.472783][ T6265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.483314][ T6265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.497788][ T6265] bond0 (unregistering): Released all slaves [ 573.564400][T10580] netlink: 'syz.5.1262': attribute type 5 has an invalid length. [ 573.599556][T10580] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.608851][T10580] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.617933][T10580] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.627110][T10580] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.647247][T10580] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.656834][T10580] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.656860][T10580] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.656881][T10580] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.660246][T10417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.680112][T10417] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.711746][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.718974][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.560568][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.567880][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.448969][T10630] macvtap1: entered allmulticast mode [ 577.454412][T10630] veth0_macvtap: entered allmulticast mode [ 579.028934][T10417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.049921][ T6265] hsr_slave_0: left promiscuous mode [ 581.077145][ T6265] hsr_slave_1: left promiscuous mode [ 581.124894][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.167906][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.186424][ T6265] batman_adv: batadv0: Removing interface: virt_wifi0 [ 581.222660][ T6265] [ 581.225042][ T6265] ====================================================== [ 581.232074][ T6265] WARNING: possible circular locking dependency detected [ 581.239115][ T6265] 6.16.0-syzkaller #0 Not tainted [ 581.244138][ T6265] ------------------------------------------------------ [ 581.251145][ T6265] kworker/u8:17/6265 is trying to acquire lock: [ 581.257374][ T6265] ffff888079f30e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 581.267319][ T6265] [ 581.267319][ T6265] but task is already holding lock: [ 581.274670][ T6265] ffff888077916d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2320 [ 581.286252][ T6265] [ 581.286252][ T6265] which lock already depends on the new lock. [ 581.286252][ T6265] [ 581.296654][ T6265] [ 581.296654][ T6265] the existing dependency chain (in reverse order) is: [ 581.305659][ T6265] [ 581.305659][ T6265] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 581.314086][ T6265] lock_acquire+0x120/0x360 [ 581.319103][ T6265] __mutex_lock+0x182/0xe80 [ 581.324120][ T6265] dev_set_mtu+0x10e/0x260 [ 581.329055][ T6265] team_add_slave+0x8b8/0x2840 [ 581.334363][ T6265] do_set_master+0x530/0x6d0 [ 581.339472][ T6265] do_setlink+0xcf0/0x41c0 [ 581.344407][ T6265] rtnl_newlink+0x160b/0x1c70 [ 581.349620][ T6265] rtnetlink_rcv_msg+0x7cc/0xb70 [ 581.355074][ T6265] netlink_rcv_skb+0x205/0x470 [ 581.360353][ T6265] netlink_unicast+0x75c/0x8e0 [ 581.365634][ T6265] netlink_sendmsg+0x805/0xb30 [ 581.370915][ T6265] __sock_sendmsg+0x21c/0x270 [ 581.376109][ T6265] ____sys_sendmsg+0x505/0x830 [ 581.381396][ T6265] ___sys_sendmsg+0x21f/0x2a0 [ 581.386591][ T6265] __x64_sys_sendmsg+0x19b/0x260 [ 581.392055][ T6265] do_syscall_64+0xfa/0x3b0 [ 581.397077][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.403488][ T6265] [ 581.403488][ T6265] -> #0 (team->team_lock_key#4){+.+.}-{4:4}: [ 581.411667][ T6265] validate_chain+0xb9b/0x2140 [ 581.416953][ T6265] __lock_acquire+0xab9/0xd20 [ 581.422161][ T6265] lock_acquire+0x120/0x360 [ 581.427185][ T6265] __mutex_lock+0x182/0xe80 [ 581.432213][ T6265] team_device_event+0x182/0xa20 [ 581.437668][ T6265] notifier_call_chain+0x1b3/0x3e0 [ 581.443293][ T6265] dev_close_many+0x29c/0x410 [ 581.448485][ T6265] unregister_netdevice_many_notify+0x619/0x2320 [ 581.455332][ T6265] default_device_exit_batch+0x819/0x890 [ 581.461499][ T6265] ops_undo_list+0x522/0x990 [ 581.466610][ T6265] cleanup_net+0x4c5/0x800 [ 581.471542][ T6265] process_scheduled_works+0xade/0x17b0 [ 581.477600][ T6265] worker_thread+0x8a0/0xda0 [ 581.482736][ T6265] kthread+0x70e/0x8a0 [ 581.487354][ T6265] ret_from_fork+0x3fc/0x770 [ 581.492471][ T6265] ret_from_fork_asm+0x1a/0x30 [ 581.497766][ T6265] [ 581.497766][ T6265] other info that might help us debug this: [ 581.497766][ T6265] [ 581.507987][ T6265] Possible unsafe locking scenario: [ 581.507987][ T6265] [ 581.515431][ T6265] CPU0 CPU1 [ 581.520792][ T6265] ---- ---- [ 581.526149][ T6265] lock(&dev_instance_lock_key#3); [ 581.531352][ T6265] lock(team->team_lock_key#4); [ 581.538809][ T6265] lock(&dev_instance_lock_key#3); [ 581.546531][ T6265] lock(team->team_lock_key#4); [ 581.551474][ T6265] [ 581.551474][ T6265] *** DEADLOCK *** [ 581.551474][ T6265] [ 581.559626][ T6265] 5 locks held by kworker/u8:17/6265: [ 581.564990][ T6265] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 581.575867][ T6265] #1: ffffc90003acfbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 581.586391][ T6265] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 581.595706][ T6265] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 581.605717][ T6265] #4: ffff888077916d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2320 [ 581.617730][ T6265] [ 581.617730][ T6265] stack backtrace: [ 581.623612][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: kworker/u8:17 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 581.623628][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 581.623637][ T6265] Workqueue: netns cleanup_net [ 581.623657][ T6265] Call Trace: [ 581.623665][ T6265] [ 581.623672][ T6265] dump_stack_lvl+0x189/0x250 [ 581.623688][ T6265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.623702][ T6265] ? __pfx__printk+0x10/0x10 [ 581.623719][ T6265] ? print_lock_name+0xde/0x100 [ 581.623736][ T6265] print_circular_bug+0x2ee/0x310 [ 581.623753][ T6265] check_noncircular+0x134/0x160 [ 581.623770][ T6265] validate_chain+0xb9b/0x2140 [ 581.623787][ T6265] ? __lock_acquire+0xab9/0xd20 [ 581.623803][ T6265] __lock_acquire+0xab9/0xd20 [ 581.623816][ T6265] ? team_device_event+0x182/0xa20 [ 581.623827][ T6265] lock_acquire+0x120/0x360 [ 581.623839][ T6265] ? team_device_event+0x182/0xa20 [ 581.623852][ T6265] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 581.623875][ T6265] __mutex_lock+0x182/0xe80 [ 581.623889][ T6265] ? team_device_event+0x182/0xa20 [ 581.623903][ T6265] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 581.623922][ T6265] ? team_device_event+0x182/0xa20 [ 581.623934][ T6265] ? __pfx___mutex_lock+0x10/0x10 [ 581.623947][ T6265] ? __timer_delete_sync+0x218/0x2d0 [ 581.623971][ T6265] team_device_event+0x182/0xa20 [ 581.623984][ T6265] notifier_call_chain+0x1b3/0x3e0 [ 581.624001][ T6265] dev_close_many+0x29c/0x410 [ 581.624017][ T6265] ? __lock_acquire+0xab9/0xd20 [ 581.624029][ T6265] ? __pfx_dev_close_many+0x10/0x10 [ 581.624048][ T6265] unregister_netdevice_many_notify+0x619/0x2320 [ 581.624065][ T6265] ? __local_bh_enable_ip+0x12d/0x1c0 [ 581.624079][ T6265] ? __local_bh_enable_ip+0x12d/0x1c0 [ 581.624092][ T6265] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 581.624110][ T6265] ? unregister_netdevice_queue+0x1b3/0x380 [ 581.624126][ T6265] ? batadv_meshif_destroy_netlink+0x1dd/0x270 [ 581.624144][ T6265] default_device_exit_batch+0x819/0x890 [ 581.624165][ T6265] ? __pfx___might_resched+0x10/0x10 [ 581.624184][ T6265] ? __pfx_default_device_exit_batch+0x10/0x10 [ 581.624203][ T6265] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 581.624218][ T6265] ? net_generic+0x1e/0x240 [ 581.624234][ T6265] ? __pfx_default_device_exit_batch+0x10/0x10 [ 581.624251][ T6265] ops_undo_list+0x522/0x990 [ 581.624271][ T6265] ? __pfx_ops_undo_list+0x10/0x10 [ 581.624292][ T6265] cleanup_net+0x4c5/0x800 [ 581.624310][ T6265] ? __pfx_cleanup_net+0x10/0x10 [ 581.624330][ T6265] ? process_scheduled_works+0x9ef/0x17b0 [ 581.624343][ T6265] ? process_scheduled_works+0x9ef/0x17b0 [ 581.624357][ T6265] process_scheduled_works+0xade/0x17b0 [ 581.624380][ T6265] ? __pfx_process_scheduled_works+0x10/0x10 [ 581.624398][ T6265] worker_thread+0x8a0/0xda0 [ 581.624413][ T6265] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 581.624437][ T6265] ? __kthread_parkme+0x7b/0x200 [ 581.624454][ T6265] kthread+0x70e/0x8a0 [ 581.624472][ T6265] ? __pfx_worker_thread+0x10/0x10 [ 581.624485][ T6265] ? __pfx_kthread+0x10/0x10 [ 581.624502][ T6265] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.624513][ T6265] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.624526][ T6265] ? __pfx_kthread+0x10/0x10 [ 581.624542][ T6265] ret_from_fork+0x3fc/0x770 [ 581.624555][ T6265] ? __pfx_ret_from_fork+0x10/0x10 [ 581.624569][ T6265] ? __switch_to_asm+0x39/0x70 [ 581.624585][ T6265] ? __switch_to_asm+0x33/0x70 [ 581.624600][ T6265] ? __pfx_kthread+0x10/0x10 [ 581.624617][ T6265] ret_from_fork_asm+0x1a/0x30 [ 581.624638][ T6265] [ 582.479689][ T6265] team0 (unregistering): Port device team_slave_1 removed [ 582.508223][ T6265] team0 (unregistering): Port device team_slave_0 removed [ 582.691328][ T6265] team0 (unregistering): Port device dummy0 removed [ 582.950944][T10417] veth0_vlan: entered promiscuous mode [ 582.960482][T10417] veth1_vlan: entered promiscuous mode [ 582.986095][T10417] veth0_macvtap: entered promiscuous mode [ 582.994353][T10417] veth1_macvtap: entered promiscuous mode [ 583.009848][T10417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.025975][T10417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.051345][T10417] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 583.081674][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.087434][T10417] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 583.097418][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.114302][ T6053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.124779][ T6053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.153079][ T6265] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.201480][ T6265] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.229414][ T6265] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.289596][ T6265] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.362133][ T6265] bridge_slave_1: left allmulticast mode [ 583.367900][ T6265] bridge_slave_1: left promiscuous mode [ 583.376963][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.396498][ T6265] bridge_slave_0: left allmulticast mode [ 583.402178][ T6265] bridge_slave_0: left promiscuous mode [ 583.408158][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.427565][ T6265] bond_slave_0: left promiscuous mode [ 583.433430][ T6265] bond_slave_1: left promiscuous mode [ 583.577833][ T6265] bridge2 (unregistering): left promiscuous mode [ 583.584846][ T6265] team0: Port device bridge2 removed [ 583.626802][ T6265] bridge3 (unregistering): left promiscuous mode [ 583.634310][ T6265] team0: Port device bridge3 removed [ 583.676070][ T6265] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 583.684841][ T6265] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 583.697252][ T6265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.708200][ T6265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.718387][ T6265] bond0 (unregistering): Released all slaves [ 583.730797][ T6265] bond1 (unregistering): Released all slaves [ 583.962636][ T6265] dummy0: left promiscuous mode [ 583.968216][ T6265] team0: left promiscuous mode [ 583.973007][ T6265] team_slave_0: left promiscuous mode [ 583.978711][ T6265] team_slave_1: left promiscuous mode [ 583.986841][ T6265] hsr_slave_0: left promiscuous mode [ 583.992622][ T6265] hsr_slave_1: left promiscuous mode [ 583.999496][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.007021][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.014598][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.022772][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.035068][ T6265] veth1_macvtap: left promiscuous mode [ 584.040729][ T6265] veth0_macvtap: left promiscuous mode [ 584.046851][ T6265] veth1_vlan: left promiscuous mode [ 584.052135][ T6265] veth0_vlan: left promiscuous mode [ 584.194582][ T6265] team0 (unregistering): Port device team_slave_1 removed [ 584.208504][ T6265] team0 (unregistering): Port device team_slave_0 removed