last executing test programs: 3m11.935741205s ago: executing program 3 (id=2370): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x121281, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) fsopen(&(0x7f0000001180)='pstore\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) 3m11.246787134s ago: executing program 0 (id=2372): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0xce}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f112e2c2eabbe30d81852c35be3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3m11.027867s ago: executing program 0 (id=2375): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0xfff, 0x420040) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000380)={0x4cba7c19, 0x3, 0x1}) mknod(&(0x7f0000000040)='./file1/file4\x00', 0x8000, 0x3f) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40600024}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x78, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a4}]}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x855}, 0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000e8ffffffffff0b00000048000580080001"], 0x5c}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 3m10.454424051s ago: executing program 3 (id=2379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000800000003125ce882cbf490d908f1523f0000000000", 0x2d}, {&(0x7f0000000640)="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", 0x2cb}], 0x2}, 0x4005) 3m9.54710489s ago: executing program 0 (id=2382): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r5, 0x104, 0x3, 0x0, &(0x7f0000000140)) 3m9.485600294s ago: executing program 3 (id=2383): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500", 0x39}, {&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d271d30d1a5fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24", 0xf0}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="f600e21c4bdb7f2cb71c6b25f8ead6df564bd1a854dafaa4c9f6b54a7146522d37", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000d40)="504fd84e46c1819f771555bb3dbd485672d2ba0e9572e3ee66ef94536a7dfd0082883c5bd7fcb4e185c0cd7967b8616cc0446a181b1528f750b94e39b3a39c177446c9d7d9f2ff6922899e853818a3e80b2fd38f5e782b6b42c95104fd111ddce1505140ac49ae419e6264054d2cc0", 0x6f}], 0x1}}], 0x3, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m9.308801101s ago: executing program 3 (id=2384): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000cc0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000041, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x80001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f040000000000005504000001ed0aff2400000017ffffffcc40000000000000730a00fe0000000077040000000000f1c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d900000000caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee633000000000000e5129722a6e1593a52ae80d4d800000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba690200937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2053c3c280acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f018720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455bc3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e37a1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) 3m8.833622022s ago: executing program 2 (id=2389): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) syz_emit_ethernet(0x1c2, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x18c, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x16, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668"}, {0x0, 0xe, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e2718"}]}}}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="8238", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3m8.703147807s ago: executing program 4 (id=2391): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) syz_emit_ethernet(0x1c6, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x190, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd"}, {0x0, 0xe, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27"}]}}}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="8238", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3m8.67722895s ago: executing program 4 (id=2392): socket$inet6(0xa, 0x80001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 3m8.094041234s ago: executing program 2 (id=2393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x0, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r2, @ANYBLOB="c8002a001001930301ae010481036cc80105bc8301ecc82d1a00031300000000000000010700f900120000000800050000000882414206eb04000000ffffffffffff0d0000000802110000007f00000006000000030508021100000108000000040802110000000100000005ffffffffffff080000008c10be091a2eb22562b0d1e337f2e008673b04060402070002002d1a0100020600000000000000010005000c000000010012000000202d1a00081600000000000001000e0005000a000000080409000000fa0600f900b46000000600fb00ff0100007200fa00a124d8b635942e46386b1b9a8af7ae9d4eb6c86cf7879f655274fcbac702541e6710b0bf1b64e33b249377c42f2cacea636797af87baa281fc5be729c35fddab2a3b9e5bc851dde6290f6f67ba5b605918e2936b2b37d34ec99a6e9fea188bbb70d3f95aeeb8f3505be5ee8b3ebe00000600fb000f0000003300fa007e10cf471875082443becbfb9d3a1a2f7255f33a68c83d54b64e9e26cb5cb7cc14995f9be86b13e706009b50fbe59c000410fa004b37330c9a17589db604b727d5272db8cd11c8efc859f894108286f5678cb405b429e3d44cc050e4e7fd247faab487ba01fbf76aa7fe0ddfdb1db3dba5a53ea13718d10604374295ac2f254feac0917247805acc381696eec9c8b266fb52c1aefe3cf4b3b7ebe17daf6c3951ca18e1b04a9d8d3246fbb40e7f183ea40d4484b95573ccacb82f484744cbe6c404ecabab814ce2ac79faea4b2b2ac196f38518c636a77ed1017de63a9ea7911d30f1e15e8012309f5a503bbf9f86545e8384d1f3868213bdfa823bc1c3c6e573498661a48bcb054a5c866d9e4da3ba8d829c825b6f93ca8fe0d8f9aec39ccae61fb9860b4bff3035beb5d9cd415179bfb35c946f909ce17776ac5a63d9059bae84f83b0336f889d46700243252721e68c7ae46df89316b6e5808d98d4547d1e3321e17d5dbab52b8d0408c7149a79bda26597c11553acfcfaffb237ad65c89ac5b5036a942223acf85a53ff867843422407e00109af40615f377d33330983703d7624b1de409db7038d40c2dbf49beb0ebe457d821a57374392398b055d748aa93de2efcd4817ca3b4f1e4d1f8a38047f6bbfd62eaba56885b85fd56081c0f2f37185ecefccad5c5096c9880c495562f6be6b94e5508b296f2cf4cf686a2da72c59434900fea664ee28dfafff1f073cfd6b11e112b466e8646b86d9661ad8165b7be3add23c071b1b8f04760681ffd24fe024cf23683d27efe582379b75adc352f8655ef5e498f32d35b9be5a297222888332320ceacc809433e44621182f02e380ec7bce7ad75293953a614a875ba26d76d87df122f61a057f60ce92915bb3439c141e7243c40d06a00f60916b2b14612166182e0752fd5e6de43f6fc1eab0a496e37ce2162e4cf6eeb0be4b6b78e9e908b680047c7de273088b9f32be4c96965729e58d319101b72460274cd08b3ed50d1806514a58881daf78690001ef36b07872d44e244868f9ff274c71ebb830b82f8c65c0bf07e8cb0ebea47edfde721474d9704ebe33af892a6ddcc0ec446e7b74a4d8a03db971f7e2bd53fcbd7b478bc825c9f5d0df3e881310498c1234374eacf857084a291722e9f2ae507fa3c2d15df61cd0567222dcf3a18c3000cb85fb9007adc7271068ab50e1d5eac870b6caeead8afecd3f6258fb1dc9106cb0f73caba69364fb23d5601320269b0735bdadf5e78d3df42641f5630c34d3aa2d46e90ce31d18405b4b77cc463d00eb160363e4d19977a6a4a96d60b1095681a8772b98f4dc1008cd03cd74879512b879bc1bca76043ab9980af68bdfa029ac6beefc3e284f493a2e8c01696c0d9d156b50e3d867bc3884f740e261aefee14354033ea0898c839e95a79067225a55f55be5a6dcd16aa66e661b661bd18aa91acaed3059f25b9a95f57731c2b5632a3576fdac6e547220b807e4c1062fccde24c1fab33b9e44759b4964f6e7f880cb5d1537b8c489e813b5a689bdfc620ee7b5d29a814cf2eb7d5b7fd15fc1c309e66da7f7ef4ee9189c6d9c0e918af0d0e4f1f57e11ecdfc04f55b5a3dddfc483e3f8730c63205988df7c163f64648936a88ae975adc2c50ae56b1c163787aaa7ba716d804f5e6bd8f1b1338871318aa066730d9e96a626ee84343738ed51a6d22175948bf81804b346f75b509907d5c21c6e6ae722e438673720c3ad7a575a6231755fbf8b104c9a830d47353c00d9fd78b839cc8259e095b39b8255bec6910ec0dc0408aa121d7b92a1eb9c8651256db5ceef34ee6d6ce5d72450e923e1ab0438e5a161345a3f7f9d2ba7bcaba1f9f243b5744bfac464b5cc79401584497f3fdecd6b7263361fec78ce0433541e347a6c738dcd57453a5a971b9e71886c90e0dec627e71f6abd31a9a10b08fbbdae83f63acc237c9427895645df83e14edefd9e6039714637b6d5912e844dc6fe195096183fc1b96b7761d3089349295712e9a65c5dcad3a3efa551579df919e903daa87607692056fc23001219eed963076568e729d88d443115bbb3a680240b1ac74ed26cd137aebb79be7acccb73b92e70d9422c08dd0a61665b6d72c900869c2e0c6ecc48cc7e3d64daee58cf01824ddad88ecbadb163f3584c6834ffb66fdfe78069433fa1aeee3d746fa5b9111de638263f7afb0f5461979f7f2f4774f381c4b094d4ad9f5ca988b9cbb7b91607bf8707bf16682462709d4ab3ca22772338608332d09a12fcb2938b1e65949a76688a7fc86924aa38afe0b90d37048d69e73a0b99a3584101c647d79f284ccba120d8c96d287891d10648415e3aa09a110bbd22505afcace48c2c70ea837b25bf7ed4bdbb4fe89643438b17798241359b560aaf88f6ef07d68f5cf0c138edcadce2fa38506de6a8096f98909c10ab69da33fc676e554bb56d04706b6157745ff88f0ebfc1eedff191378af5c4aa21300cefd6fbb2c7c9dba20546d17773ba50ab2e56af79ef0b9728472f161e76c9f08c22a45de62d5243d842779c739122415d32016d24f54b47b6523524dfc04ec0f6d002a681169ddf47cba8b8631c999ecf65c34a00445fbdebf73c95f0f0e3b9f005283f418b98b214f83428cd1978f91832093c873b7abc3078554566aafbf5cfe42e595efd5792071e870519f65ae6286e101facfae7b2808153738f5bc3eeb5a3749e3db9133cf686c2c18173beea1950ea7a8dc2ce32ccd0f4ea751dd7895a39eb583b78972dc09deaa6b5fb1abdd67c24d0d7700649c51828fe0bda349b6960d9250483da7acf82b5ee701001fa48c7d25c90dfab836c32a59eefaf1e7279592516ff93a83b68f30a93991dc37842f69633498dab7dbb4756ae6f708d936485d6cca6d31f62935b4741300d402d07f19b8b87bebaa674ee0e2b4303c52d6c1480d3d9f63ce9f33010bfe19b3407ef67a944c299f3a830ae27063b3c1d103afd7222065900cdeb40d21aeebff275f7daddb70aef3cfca57d349c6dbcdfd8d90fc2727fb6ed19aa6dfcc4eb1fbc09dbf80a6dc44a0cac039ebe0634516b4e77fd2eb4e45a8a346c093b1f2b3871dbae3cbb23a4a5ed85ad93c1869bb3fae22279d41d4b17d5cae5605c035019b84df1e4a9a3c16022dfdda156f7ddba7874950077be843fc108001cffc8264895e5cc323a465d8d15ab8117c4141910ba2305f5ea22b79d8c800f98a380125ad4dde15e06d056d829eb8ef41a8425ea435ece5d962f2a289571fd084827e74d3b6a765ece373a9d7b18c22bebe361eb672a60f458f9e0c37417aae5496f82b763bdbc6ad442c2a9e7ce218e25e55a12cb40f7c6536c1c9c6595ad878fae79e58cc84e819cec1111e039151a66e081b8b07ea8ac38c3e45d23054f2d19b83d900e2d1ada6ce767bb0e937bdf82cc8539d0b2e9ee9e9b7462194477ac572112ddf03ab43b373f094418662b989f3c001ef261d0d67bfcaf4d57f28de1cc9e9004bd03142ba66b58b5d416334aa5c2be4c0f7822203df8a118f239ee64b660fe28a0a0e2b52024b96bf2419963807f13ea374b8930c077ff70ba1c3243d95587d7fac373e07067f575c04951048318ade9e42f07cca63258fe05fa79799ac07f309819daf32e6daf20725a9a160643f21be894cb5f83d2bb15184a9b881a5bf363d5bfe24350f9d98c56d04a4074391ea139dd16d171c3e66ae550b12c11cef32d8b1e379df9acf9b80a10dd0435ef1f0778e14e255e43bf207473846c6ba6edd1e5b8603427b0829ef3a7f34d585cbbf2cd6a41abbe46dda4a4f1c39c8f7467c931c01a83235125680a49f2aea2925d3ffe2b28266d4d880a11f3b6fda37debf284fa4cbe8d76dbec4a0d7fb27e3a4b7fed8602e69e262245df7e74200f90d26a55eb703c8df232adc4f5d8ac6afab2597718ae017a148f43905e4ac472aba785c5d5884464751ddcf667a003da751972ca1d3d480dbb8fdb30b5b9bd07d3226637d613a17067a28bcde3abd061787af7b53d2a52b1a2ad6038827789ee2c9c8801a4d70595d15fd0c099526fac236cbd86dba5dc661887561c6668fdd09683e37f1b2b1db1d8ac00466444cbb037a9468c596bcdcd13d58f29f719152c1d2c4a61ff401c5c88d13a3946af704fcd8254fc56bcb93e1883f6b6ae9d3cbcdb141fb079c515fe70e0c572c67ff971e987330a29966dff4ffd8afdb7d1724d2c77e9f84cbcc5027e5f6843371e2dee35369c712d96757271d40ef1892a896aabca599d08607fce05e120d94b5e06ec84cab31d3fca0ed7f2644be23c922fcd8dd8a2942b53d530736897b9cbe6da0082caa9f796abf43103c275df74497c927a79c685ee38e3b3567163e173f05f7fb62f31ee69f6419a117094b5bc5852315fa12b9897f25a876b0e9fa1c1e5f7f8f206c3d39ae5a77d954209ecf2ed3bc5240b67710acc26345b9e57af7d6afc067e80781286e7d1501ac6a20acfddef9c3f784150674c9a3b6c4447e9b41d1f692e3904ef3d4ec3ef17ade974d4dec9dc43216814ee9a0db30794dad700ff1165db7c4dfcc75b46e9d4ebd61633f291b87517125131b7801af8f7f79bdabc07515c23f0cb46620b08b19ed3ebc79379c4dc171c54d161ce25f510d7b6e4d672e626ae87b3eea41eb6abba8612ace7ed8b545dfc8337c2fd6ffd5a7e95d4db44c21abdc6ddcc41b122c88d7a9b60c99a57ec855f943455397b1cf00c735f36b7a6edea674c88c4d709d59c50d265940fe05220751d5ea67443dcbf359a8e58c35cf3b9183436a96c6f06aeaeedfc9658a3a087dca95bdf4a2c8b7248719cf6b7a0dea6c574be52c9d1c426cf1d592a62cf38e4b84e26385848f2969495a6904f6817372d7e8aca0e3cd8dc7cca514dfb3bf5b63ab9c632e4953ee86e82c7447afd38f0b843cabaf0263a5db1314ffecfa7f9cefb5917d50d2f85e5323a6b0fb2d951bba37bbd0f74a3e07821feb4efe8148da695e00b52ce93d9ebc81a9b47e34757311363019aafd6b9ebc7764421935dfa465f018904929fa7612d5c929659c70287681619a5c23d5d8858266747186149f4b6138a81542f7230c0b1b99eb7df8e88f67d2aa9c7ab5f2be195ade8a1636137876fad0892eceb0675ac206c8084ab154da4e76d7e76a81891723cbe164125a64d43981be9dfd7ae587ac4c696eb6e4a7f635550104deef141ccbb0999222a952cb3bd920620532808430db8aa28ee7ac3224477d269c9874c40ee08d19f0932cfc560d541694b788e4ea05936fd42b999c59f6db079e748d551600309aef89071c30fe0ff5bb4920d2eac3c054e2871e17240e92527f627eff2184a9be241a31c0ac8474ae0f82861e60bd449065d8285c33edf31d631c360ace955143678cf45f1fd1f5da77b94c2d87555976eda3833265cdfee777b7d87514f344edeee24d8a9dda9b0bb35552432d26ea874853acffc85958a05be561c8845236393e69aedd7eef8dfcccc26d2c66c20ced811f8eb6613cbbf3e97711912840de7d4e2a7987567d4cd7bd116be665d7170310efc740995493ea25d5239c9345f1e8360bdeea3c89edb2d3deb74a0f372b0770c81e1b57884abebbca40a6dd70d990c59538821c8c8bbaf18ff21caa9b155c5582177066ecd445817ea567ad508fce7751f62e594d99a4bec2fba725827a3d845ce152015c9c2c37283af56590efb4e22e0c017ba992227be8acd968257a2a3197f11a6d4c68423cd74e2c32407104ecc883c5c06136470cea05637e154425d27210310bcfd3598052cd602c7350d913dc5914b0b69ff645cbdb7e250f20da09a819095a9425d91335743d912ca832628e002a0083254006b108021100000039ffffff08021100000084000000fbffffffffffffffffff070000007606050418000200bd06080211000000824602a303ff030000ffffffffffff0e0b000001800000030000000405ffffffffffff09000000010802110000000500"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) 3m7.625005955s ago: executing program 3 (id=2394): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500", 0x39}, {&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d271d30d1a5fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24", 0xf0}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="f600e21c4bdb7f2cb71c6b25f8ead6df564bd1a854dafaa4c9f6b54a7146522d37", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000d40)="504fd84e46c1819f771555bb3dbd485672d2ba0e9572e3ee66ef94536a7dfd0082883c5bd7fcb4e185c0cd7967b8616cc0446a181b1528f750b94e39b3a39c177446c9d7d9f2ff6922899e853818a3e80b2fd38f5e782b6b42c95104fd111ddce1505140ac49ae419e6264054d2cc0", 0x6f}], 0x1}}], 0x3, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m7.420377752s ago: executing program 3 (id=2395): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m7.328778525s ago: executing program 2 (id=2396): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea9", 0x3c}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}], 0x1}}], 0x2, 0x40800) 3m7.317004622s ago: executing program 0 (id=2397): r0 = syz_io_uring_setup(0x114, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 3m7.231111575s ago: executing program 2 (id=2398): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f112e2c2eabbe30d81852c35be3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3m7.167210217s ago: executing program 0 (id=2399): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m7.135892185s ago: executing program 2 (id=2400): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 3m7.100133337s ago: executing program 1 (id=2401): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000600)="8280ba83bad48229", 0x8, 0x0, 0x0, 0x0) 3m7.098433878s ago: executing program 4 (id=2402): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) 3m6.988206804s ago: executing program 4 (id=2403): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x33, {0x1, 0x100000000000007}, 0x1}, 0x1) r4 = syz_io_uring_setup(0xeca, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000370400000000fcdbdf25000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0xff39) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x67, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00000000000000130000000000000000005aaadf04fc1c0a0a", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m6.795087525s ago: executing program 0 (id=2404): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)={0xcc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0xcc}, 0x1, 0x0, 0x0, 0x60048090}, 0xc0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 3m6.075976342s ago: executing program 1 (id=2405): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500", 0x39}, {&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d271d30d1a5fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24", 0xf0}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="f600e21c4bdb7f2cb71c6b25f8ead6df564bd1a854dafaa4c9f6b54a7146522d37", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000d40)="504fd84e46c1819f771555bb3dbd485672d2ba0e9572e3ee66ef94536a7dfd0082883c5bd7fcb4e185c0cd7967b8616cc0446a181b1528f750b94e39b3a39c177446c9d7d9f2ff6922899e853818a3e80b2fd38f5e782b6b42c95104fd111ddce1505140ac49ae419e6264054d2cc0", 0x6f}], 0x1}}], 0x3, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m5.892368675s ago: executing program 1 (id=2406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x0, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) 3m5.877276137s ago: executing program 2 (id=2407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000f000b0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x40) setuid(0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) syz_pidfd_open(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xf8) syz_emit_ethernet(0x32, &(0x7f0000001600)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x6, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xfc, 0x100, @val=0x80}}}}}}}, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '0\x00;', 0x30, 0x2b, 0x0, @private2, @local, {[@srh={0x1d, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, [@mcast1, @mcast1]}], {0x0, 0x0, 0x8}}}}}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000040)=""/76, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=""/38, 0x4000}) 3m5.730129606s ago: executing program 1 (id=2408): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x10, 0x4000}, 0x82, 0x0, 0x1, 0x0, 0x4, 0xf, 0x2, 0x0, 0x5, 0x0, {0x0, 0xfffffffd, 0x3, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x0) 3m5.63031238s ago: executing program 4 (id=2409): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x40, 0x0, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000001ffedbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300004400238006001800aeff"], 0x74}}, 0x0) 3m5.571061199s ago: executing program 1 (id=2410): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f112e2c2eabbe30d81852c35be3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3m5.437357412s ago: executing program 1 (id=2411): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) recvmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/242, 0xf2}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a80)=""/254, 0xfe}], 0x1}, 0x7}], 0x2, 0x100, 0x0) 3m5.38843578s ago: executing program 4 (id=2412): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 2m47.417406393s ago: executing program 32 (id=2404): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)={0xcc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0xcc}, 0x1, 0x0, 0x0, 0x60048090}, 0xc0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 2m47.307178285s ago: executing program 33 (id=2411): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) recvmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/242, 0xf2}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a80)=""/254, 0xfe}], 0x1}, 0x7}], 0x2, 0x100, 0x0) 2m47.218159379s ago: executing program 34 (id=2407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000f000b0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x40) setuid(0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) syz_pidfd_open(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xf8) syz_emit_ethernet(0x32, &(0x7f0000001600)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x6, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xfc, 0x100, @val=0x80}}}}}}}, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '0\x00;', 0x30, 0x2b, 0x0, @private2, @local, {[@srh={0x1d, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, [@mcast1, @mcast1]}], {0x0, 0x0, 0x8}}}}}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000040)=""/76, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=""/38, 0x4000}) 2m47.160012333s ago: executing program 35 (id=2395): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m46.925185073s ago: executing program 36 (id=2412): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 12.852239399s ago: executing program 9 (id=3017): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES64=r4, @ANYRES32=r3, @ANYRES16=r1, @ANYRES8=r4, @ANYRESDEC=r3], 0xff2e) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x8) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) ioctl$TCXONC(r3, 0x540a, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 10.831043144s ago: executing program 8 (id=3023): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_setup(0x3, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="00000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000001000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff7600001a5e9200000000000056080000010000408500000007000000b70000000000000095000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000a80)={0x2, 0x0, [{0x4000, 0x0, 0x0}, {0x41000, 0xfe, &(0x7f00000004c0)=""/254}]}) 10.653637413s ago: executing program 6 (id=3024): syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 10.565031931s ago: executing program 6 (id=3025): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf25010000000800010003000000240004800500030001000000050003ee010000000500030080ff00000500030006000000080002"], 0x48}, 0x1, 0x0, 0x0, 0x4050}, 0x40000) 10.502308758s ago: executing program 6 (id=3026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 10.47779516s ago: executing program 5 (id=3027): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) set_mempolicy(0x3, 0x0, 0x5) mlock(&(0x7f0000f66000/0x4000)=nil, 0x4000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) r4 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r4, 0xffff) close(0x3) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r4, 0x1, 0x0, 0x8000}) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0xe1ee, 0x80, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r5, 0x32d7, 0x0, 0x46, 0x0, 0x0) 9.565931147s ago: executing program 9 (id=3029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050", @ANYRES8=r0], 0x3c}}, 0x10) 9.245177626s ago: executing program 5 (id=3030): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r0, 0x0) 7.859377388s ago: executing program 5 (id=3033): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={0x77359400}, 0x10) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 7.502057041s ago: executing program 8 (id=3035): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 5.835522435s ago: executing program 5 (id=3041): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffb7feff1eff0086dd674a9e6c00442f8200000000000000000000000000000000ff02000000000000000000000000000104206558000000030c0008000c0086dd88ca88be1200000415030735010000000000c289080022eb000000012e0059040200000000000003000485150800655800000004a0b2"], 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000480)='./bus\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) rmdir(0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x533a81, 0x1d0, 0x8}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000e0381, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x0, 0x2}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000001700)={0x72, [[0x80000000, 0x8001, 0x9, 0x0, 0x7, 0x1ff, 0x7, 0xd], [0x401, 0x6, 0x42ba, 0x0, 0x9, 0xfffffff3, 0x8001, 0x10], [0x843, 0x5, 0x5, 0x7, 0x4, 0x504, 0x3, 0x7]], '\x00', [{0x3, 0xa14d, 0x1, 0x1, 0x1, 0x1}, {0x10, 0x7, 0x1, 0x0, 0x1}, {0x9, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x0, 0x1}, {0x9, 0xfff, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x3, 0x1, 0x1}, {0x8002, 0x2}, {0x10000, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7, 0xffff0000, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x200, 0x1, 0x1, 0x1}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x1, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x0, 0x100, 0x3ff, 0xa1, 0x1}}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 5.780826809s ago: executing program 8 (id=3042): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x121281, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) fsopen(&(0x7f0000001180)='pstore\x00', 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x24040000) syz_emit_ethernet(0x6e, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 5.769961496s ago: executing program 9 (id=3043): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r1, 0x1, 0x12, 0x0, &(0x7f0000000080)) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'nr0\x00', 0x0}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xae642, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r5, 0x0) preadv2(r5, &(0x7f0000000140)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8, 0x0, 0x1f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff69}, 0x94) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000040)={0x3, 0x0, [0x5, 0xfffffff9, 0x200, 0x100, 0xcae, 0x8, 0xbe, 0x79f]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) 5.604053085s ago: executing program 6 (id=3044): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x1ff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$inet6_icmp_raw(0xa, 0x3, 0x87) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='6V\"'], 0x0}, 0x0) 4.432418077s ago: executing program 8 (id=3046): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x3, 0x5, 0x82, 0x7c, 0x80, 0x9, 0x6, 0x7f, 0x7, 0x9, 0x5d, 0x9e, 0x1}, 0xe) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xc, 0x1, 0x7, @SEQ_CONTROLLER=0xff, 0x40, 0x47, 0x5}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x105, 0x0, 0x400000000000a, 0x4, 0x5, 0x2, 0xfffffffffffffffa, 0x80000000}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000000)) 3.784591243s ago: executing program 7 (id=3048): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500", 0x39}, {&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d271d30d1a5fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24", 0xf0}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="f600e21c4bdb7f2cb71c6b25f8ead6df564bd1a854dafaa4c9f6b54a7146522d37", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.712624282s ago: executing program 7 (id=3049): syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x4, 0xe, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010028bd7000fbdbdf250a008000ce"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r5, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x0, 0x0}) io_uring_enter(r5, 0x4e14, 0x913a, 0x0, 0x0, 0x0) 2.294136213s ago: executing program 5 (id=3050): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.239288389s ago: executing program 5 (id=3051): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80003, 0x0) epoll_create1(0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$dsp(r4, 0x0, 0xfffffe59) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) 1.74060572s ago: executing program 7 (id=3052): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.703365688s ago: executing program 9 (id=3053): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.619562158s ago: executing program 9 (id=3054): syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x4, 0xe, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010028bd7000fbdbdf250a008000ce"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(0xffffffffffffffff, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x4e14, 0x913a, 0x0, 0x0, 0x0) 1.595136794s ago: executing program 7 (id=3055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010001000000fcffffff100000001800018014000200776c616e3000000800000000000000000800090000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0) 1.489881933s ago: executing program 7 (id=3056): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffb7feff1eff0086dd674a9e6c00442f8200000000000000000000000000000000ff02000000000000000000000000000104206558000000030c0008000c0086dd88ca88be1200000415030735010000000000c289080022eb000000012e0059040200000000000003000485150800655800000004a0b2"], 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000480)='./bus\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) rmdir(0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x533a81, 0x1d0, 0x8}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000e0381, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x6210}, {0x0, 0x30}], 0x2) 1.174890491s ago: executing program 6 (id=3057): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500", 0x39}, {&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb", 0x78}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="f600e21c4bdb7f2cb71c6b25f8ead6df564bd1a854dafaa4c9f6b54a7146522d37", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000d40)="504fd84e46c1819f771555bb3dbd485672d2ba0e9572e3ee66ef94536a7dfd0082883c5bd7fcb4e185c0cd7967b8616cc0446a181b1528f750b94e39b3a39c177446c9d7d9f2ff6922899e", 0x4b}], 0x1}}], 0x3, 0x2090) 979.314303ms ago: executing program 6 (id=3058): socket(0x1d, 0x2, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000340)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x10, 0x4000}, 0x82, 0x0, 0x1, 0x0, 0x4, 0xf, 0x2, 0x0, 0x5, 0x0, {0x0, 0xfffffffd, 0x3, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x0) 692.276952ms ago: executing program 8 (id=3059): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) syz_emit_ethernet(0x1ad, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x177, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x14, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0eb"}, {0x0, 0xe, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6"}]}}}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="8238", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 561.948883ms ago: executing program 8 (id=3060): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x208001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d46c0000007f000001000000000000000000000000010000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000053500000a0001002000000000000000480003006465666c61746500"/207], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0x0, 0x0) ptrace$cont(0x1f, 0x0, 0x6, 0x4) sendmsg$nl_xfrm(r3, 0x0, 0x4) socket(0x10, 0x803, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r6, &(0x7f0000000100)={&(0x7f00000002c0)=@pppoe={0x2a, 0x0, {0x4, @broadcast, 'macvlan0\x00'}}, 0x80, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 95.762488ms ago: executing program 9 (id=3061): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffb7feff1eff0086dd674a9e6c00442f8200000000000000000000000000000000ff02000000000000000000000000000104206558000000030c0008000c0086dd88ca88be1200000415030735010000000000c289080022eb000000012e0059040200000000000003000485150800655800000004a0b2"], 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000480)='./bus\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) rmdir(0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x533a81, 0x1d0, 0x8}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000e0381, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x0, 0x2}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000001700)={0x72, [[0x80000000, 0x8001, 0x9, 0x0, 0x7, 0x1ff, 0x7, 0xd], [0x401, 0x6, 0x42ba, 0x0, 0x9, 0xfffffff3, 0x8001, 0x10], [0x843, 0x5, 0x5, 0x7, 0x4, 0x504, 0x3, 0x7]], '\x00', [{0x3, 0xa14d, 0x1, 0x1, 0x1, 0x1}, {0x10, 0x7, 0x1, 0x0, 0x1}, {0x9, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x0, 0x1}, {0x9, 0xfff, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x3, 0x1, 0x1}, {0x8002, 0x2}, {0x10000, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7, 0xffff0000, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x200, 0x1, 0x1, 0x1}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x1, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x0, 0x100, 0x3ff, 0xa1, 0x1}}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r6, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x6210}, {0x0, 0x30}], 0x2) 0s ago: executing program 7 (id=3062): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x2, r2, 0x0, 0x0, 0x0, 0x80800}) listen(r2, 0x5) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): ve_1: entered allmulticast mode [ 734.597951][T13517] bridge_slave_1: entered promiscuous mode [ 734.624823][T13513] chnl_net:caif_netlink_parms(): no params data found [ 734.683752][T13517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.696365][T13517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.725899][ T63] bridge_slave_1: left allmulticast mode [ 734.734873][ T63] bridge_slave_1: left promiscuous mode [ 734.741776][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.753871][ T63] bridge_slave_0: left allmulticast mode [ 734.760432][ T63] bridge_slave_0: left promiscuous mode [ 734.766574][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.872742][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.885987][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.896215][ T63] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 734.907700][ T63] bond0 (unregistering): Released all slaves [ 734.916715][ T63] bond1 (unregistering): Released all slaves [ 734.946103][T13516] chnl_net:caif_netlink_parms(): no params data found [ 735.015651][T13511] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.023739][T13511] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.030851][T13511] bridge_slave_0: entered allmulticast mode [ 735.039798][T13511] bridge_slave_0: entered promiscuous mode [ 735.066778][T13517] team0: Port device team_slave_0 added [ 735.079357][ T63] tipc: Left network mode [ 735.088689][T13511] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.096618][T13511] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.097595][ T63] IPVS: stopping master sync thread 7001 ... [ 735.109121][T13511] bridge_slave_1: entered allmulticast mode [ 735.124837][T13511] bridge_slave_1: entered promiscuous mode [ 735.160362][T13517] team0: Port device team_slave_1 added [ 735.166557][T13520] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.176410][T13520] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.184953][T13520] bridge_slave_0: entered allmulticast mode [ 735.191969][T13520] bridge_slave_0: entered promiscuous mode [ 735.210438][T13511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.239206][T13520] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.248552][T13520] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.257194][T13520] bridge_slave_1: entered allmulticast mode [ 735.264396][T13520] bridge_slave_1: entered promiscuous mode [ 735.281917][T13511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.292625][T11897] Bluetooth: hci2: command tx timeout [ 735.298662][T11897] Bluetooth: hci5: command tx timeout [ 735.302272][T13520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.317491][T13513] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.325118][T13513] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.333111][T13513] bridge_slave_0: entered allmulticast mode [ 735.339783][T13513] bridge_slave_0: entered promiscuous mode [ 735.372077][T13520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.386379][T13513] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.394157][T13513] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.402464][T13513] bridge_slave_1: entered allmulticast mode [ 735.409122][T13513] bridge_slave_1: entered promiscuous mode [ 735.416494][T13517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.424937][T13517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.452869][T13517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.478290][T13511] team0: Port device team_slave_0 added [ 735.510102][T13517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.518506][T13517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.545884][T13517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.570047][T13511] team0: Port device team_slave_1 added [ 735.593556][T13520] team0: Port device team_slave_0 added [ 735.611724][T13515] Bluetooth: hci6: command tx timeout [ 735.621710][T11897] Bluetooth: hci1: command tx timeout [ 735.658370][T13520] team0: Port device team_slave_1 added [ 735.665463][T13516] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.673525][T13516] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.682103][T13516] bridge_slave_0: entered allmulticast mode [ 735.689410][T13516] bridge_slave_0: entered promiscuous mode [ 735.698287][T13513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.720280][T13517] hsr_slave_0: entered promiscuous mode [ 735.727400][T13517] hsr_slave_1: entered promiscuous mode [ 735.734572][T13517] debugfs: 'hsr0' already exists in 'hsr' [ 735.740293][T13517] Cannot create hsr debugfs directory [ 735.759455][T13511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.770010][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.797648][T13511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.810871][T13511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.823306][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.852797][T11897] Bluetooth: hci4: command tx timeout [ 735.858920][T13511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.887741][T13516] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.898297][T13516] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.914275][T13516] bridge_slave_1: entered allmulticast mode [ 735.922998][T13516] bridge_slave_1: entered promiscuous mode [ 735.945379][T13513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.052456][T13520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.059409][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.094855][T13520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.116578][T13516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.168980][T13520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.177152][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.204672][T13520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.218258][T13516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.236705][T13513] team0: Port device team_slave_0 added [ 736.245278][T13513] team0: Port device team_slave_1 added [ 736.324103][T13516] team0: Port device team_slave_0 added [ 736.330293][T13513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.339296][T13513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.366651][T13513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.385157][T13511] hsr_slave_0: entered promiscuous mode [ 736.391407][T13511] hsr_slave_1: entered promiscuous mode [ 736.398221][T13511] debugfs: 'hsr0' already exists in 'hsr' [ 736.404549][T13511] Cannot create hsr debugfs directory [ 736.454831][T13516] team0: Port device team_slave_1 added [ 736.460803][T13513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.468199][T13513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.500003][T13513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.540320][T13520] hsr_slave_0: entered promiscuous mode [ 736.547096][T13520] hsr_slave_1: entered promiscuous mode [ 736.553702][T13520] debugfs: 'hsr0' already exists in 'hsr' [ 736.559411][T13520] Cannot create hsr debugfs directory [ 736.617596][T13516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.625452][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.652290][T13516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.673683][T13513] hsr_slave_0: entered promiscuous mode [ 736.679695][T13513] hsr_slave_1: entered promiscuous mode [ 736.686823][T13513] debugfs: 'hsr0' already exists in 'hsr' [ 736.693868][T13513] Cannot create hsr debugfs directory [ 736.714197][ T63] hsr_slave_0: left promiscuous mode [ 736.720077][ T63] hsr_slave_1: left promiscuous mode [ 736.727043][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.735335][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.744217][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.752215][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.762670][ T63] veth1_macvtap: left promiscuous mode [ 736.768218][ T63] veth0_macvtap: left promiscuous mode [ 736.774275][ T63] veth1_vlan: left promiscuous mode [ 736.779486][ T63] @ÿ: left promiscuous mode [ 736.923956][ T63] team0 (unregistering): Port device team_slave_1 removed [ 736.937040][ T63] team0 (unregistering): Port device team_slave_0 removed [ 737.018640][T13516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.027127][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.054449][T13516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.220809][T13516] hsr_slave_0: entered promiscuous mode [ 737.229043][T13516] hsr_slave_1: entered promiscuous mode [ 737.240127][T13516] debugfs: 'hsr0' already exists in 'hsr' [ 737.246702][T13516] Cannot create hsr debugfs directory [ 737.369841][T13517] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 737.379018][T11897] Bluetooth: hci5: command tx timeout [ 737.385783][T13515] Bluetooth: hci2: command tx timeout [ 737.465593][T13517] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 737.516329][T13517] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 737.575798][T13517] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 737.634013][ T63] IPVS: stop unused estimator thread 0... [ 737.694335][T13515] Bluetooth: hci1: command tx timeout [ 737.699743][T13515] Bluetooth: hci6: command tx timeout [ 737.825142][T13511] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 737.837764][T13511] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 737.867421][T13511] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 737.877455][T13511] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 737.941707][T13515] Bluetooth: hci4: command tx timeout [ 737.943373][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.988936][T13513] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 738.000010][T13513] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 738.048980][T13513] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 738.087631][T13513] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 738.113069][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.185578][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.265687][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.287416][T13520] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 738.332793][T13520] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 738.385024][T13520] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 738.407249][T13520] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 738.458211][T13511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.569295][T13516] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 738.587599][T13516] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 738.613450][T13511] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.626316][T13516] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 738.637138][T13516] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 738.658821][T13517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.689827][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.713275][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.720338][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.741943][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.749034][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.796135][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.828109][T13517] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.888999][T13513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.934019][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.941151][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.970585][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.004079][T13513] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.029845][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.036973][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.068985][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.107215][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.114338][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.126569][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.133689][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.146946][T13511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 739.240512][T13520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.274706][T13513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 739.309920][T13520] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.376900][T13516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.415633][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.422776][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.454827][T13515] Bluetooth: hci2: command tx timeout [ 739.460241][T13515] Bluetooth: hci5: command tx timeout [ 739.509062][T13504] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.516203][T13504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.640474][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.666597][T13511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.714681][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.774830][T13515] Bluetooth: hci6: command tx timeout [ 739.780772][T13515] Bluetooth: hci1: command tx timeout [ 739.790220][T13516] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.865635][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.956053][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.963200][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.012117][T13515] Bluetooth: hci4: command tx timeout [ 740.038283][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.069578][T13513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.119793][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.126942][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.212875][T13517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.440774][T13520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.526729][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.607594][T13511] veth0_vlan: entered promiscuous mode [ 740.703013][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.806545][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.827485][T13511] veth1_vlan: entered promiscuous mode [ 740.937836][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.975813][T13513] veth0_vlan: entered promiscuous mode [ 741.017450][T13517] veth0_vlan: entered promiscuous mode [ 741.040082][T13511] veth0_macvtap: entered promiscuous mode [ 741.066033][T13513] veth1_vlan: entered promiscuous mode [ 741.078281][T13517] veth1_vlan: entered promiscuous mode [ 741.125702][T13511] veth1_macvtap: entered promiscuous mode [ 741.184602][T13513] veth0_macvtap: entered promiscuous mode [ 741.207013][T13511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.235513][T13520] veth0_vlan: entered promiscuous mode [ 741.259328][T13513] veth1_macvtap: entered promiscuous mode [ 741.307891][T13511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.327882][T13516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.357412][T13517] veth0_macvtap: entered promiscuous mode [ 741.372602][T12872] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.388519][ T63] bridge_slave_1: left allmulticast mode [ 741.396911][ T63] bridge_slave_1: left promiscuous mode [ 741.404103][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.422825][ T63] bridge_slave_0: left allmulticast mode [ 741.428474][ T63] bridge_slave_0: left promiscuous mode [ 741.437890][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.455528][ T63] bridge_slave_1: left allmulticast mode [ 741.463691][ T63] bridge_slave_1: left promiscuous mode [ 741.469373][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.480416][ T63] bridge_slave_0: left allmulticast mode [ 741.486813][ T63] bridge_slave_0: left promiscuous mode [ 741.494434][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.512172][ T63] bridge_slave_1: left allmulticast mode [ 741.518408][ T63] bridge_slave_1: left promiscuous mode [ 741.524702][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.533128][T13515] Bluetooth: hci5: command tx timeout [ 741.538513][T13515] Bluetooth: hci2: command tx timeout [ 741.549150][ T63] bridge_slave_0: left allmulticast mode [ 741.555480][ T63] bridge_slave_0: left promiscuous mode [ 741.561987][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.573850][ T63] bridge_slave_1: left allmulticast mode [ 741.579518][ T63] bridge_slave_1: left promiscuous mode [ 741.586794][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.596122][ T63] bridge_slave_0: left allmulticast mode [ 741.602705][ T63] bridge_slave_0: left promiscuous mode [ 741.608543][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.618352][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.630724][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.815399][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.828043][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.838683][ T63] bond0 (unregistering): Released all slaves [ 741.854559][T13515] Bluetooth: hci1: command tx timeout [ 741.854582][T11897] Bluetooth: hci6: command tx timeout [ 741.995742][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.006163][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.016305][ T63] bond0 (unregistering): Released all slaves [ 742.091772][T11897] Bluetooth: hci4: command tx timeout [ 742.154864][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.165793][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.175896][ T63] bond0 (unregistering): Released all slaves [ 742.184740][ T63] bond1 (unregistering): Released all slaves [ 742.337022][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.346784][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.357046][ T63] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 742.366774][ T63] bond0 (unregistering): Released all slaves [ 742.376780][T12872] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.385554][T12872] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.395373][T13520] veth1_vlan: entered promiscuous mode [ 742.405323][T13517] veth1_macvtap: entered promiscuous mode [ 742.427954][T13513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.453757][T13513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.491385][T12872] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.513774][ T63] @„;: left promiscuous mode [ 742.572723][T13517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.580274][T13520] veth0_macvtap: entered promiscuous mode [ 742.594777][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.604061][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.627125][ T63] @„;: left promiscuous mode [ 742.637427][T13520] veth1_macvtap: entered promiscuous mode [ 742.645992][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.656795][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.692836][T13517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.734977][ T63] tipc: Left network mode [ 742.754857][ T63] tipc: Left network mode [ 742.777741][T11725] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.794255][T11725] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.823592][T13520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.842485][ T63] tipc: Left network mode [ 742.857248][T11725] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.866557][T11725] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.878472][ T63] IPVS: stopping master sync thread 9346 ... [ 742.885733][ T63] IPVS: stopping master sync thread 8369 ... [ 742.898710][ T63] IPVS: stopping master sync thread 8815 ... [ 742.907425][T13520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.916994][ T63] IPVS: stopping master sync thread 10946 ... [ 742.917954][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.934527][ T3556] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.943450][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.973773][ T3556] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.982689][ T3556] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.023692][ T3556] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.090153][T13516] veth0_vlan: entered promiscuous mode [ 743.101788][T11725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.109609][T11725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.130698][T13516] veth1_vlan: entered promiscuous mode [ 743.136608][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.147900][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.261306][ T29] audit: type=1400 audit(1772319087.608:13104): avc: denied { mounton } for pid=13511 comm="syz-executor" path="/root/syzkaller.aW2GPZ/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 743.289846][ T29] audit: type=1400 audit(1772319087.608:13105): avc: denied { mounton } for pid=13511 comm="syz-executor" path="/root/syzkaller.aW2GPZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 743.339847][ T29] audit: type=1400 audit(1772319087.608:13106): avc: denied { mounton } for pid=13511 comm="syz-executor" path="/root/syzkaller.aW2GPZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=48276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 743.395017][T11725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.402775][T13516] veth0_macvtap: entered promiscuous mode [ 743.413987][ T29] audit: type=1400 audit(1772319087.678:13107): avc: denied { mounton } for pid=13511 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 743.439655][T11725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.524817][T13516] veth1_macvtap: entered promiscuous mode [ 743.559893][T13516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.626216][T13516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.662543][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.682384][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.695850][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.705279][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.737838][ T1147] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.779577][ T1147] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.794668][ T1147] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.817359][T12872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.819899][ T1147] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.825832][T12872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.885496][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.903563][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.917865][T13747] netlink: 6032 bytes leftover after parsing attributes in process `syz.8.2416'. [ 744.070561][T13749] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2418'. [ 744.292956][T13764] loop2: detected capacity change from 0 to 7 [ 744.306018][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.332163][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.336036][T13764] Dev loop2: unable to read RDB block 7 [ 744.364700][T13765] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 744.382292][T13764] loop2: AHDI p1 p2 p3 [ 744.387699][T13764] loop2: partition table partially beyond EOD, truncated [ 744.395034][ T29] audit: type=1400 audit(1772319088.718:13108): avc: denied { append } for pid=13763 comm="syz.9.2422" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 744.449889][T13764] loop2: p1 start 1601398130 is beyond EOD, truncated [ 744.459431][T13764] loop2: p2 start 1702059890 is beyond EOD, truncated [ 744.626963][T11725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.777260][T13781] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 744.927154][T11725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.987847][ T29] audit: type=1400 audit(1772319089.338:13109): avc: denied { create } for pid=13763 comm="syz.9.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 745.153700][ T29] audit: type=1400 audit(1772319089.338:13110): avc: denied { write } for pid=13763 comm="syz.9.2422" path="socket:[48812]" dev="sockfs" ino=48812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 746.734950][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2430'. [ 746.752966][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2429'. [ 746.915608][T13825] netlink: 608 bytes leftover after parsing attributes in process `syz.7.2432'. [ 747.165303][ T29] audit: type=1400 audit(1772319091.518:13111): avc: denied { create } for pid=13837 comm="syz.8.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 747.185528][T13838] syzkaller1: entered promiscuous mode [ 747.202891][T13838] syzkaller1: entered allmulticast mode [ 747.269818][ T29] audit: type=1400 audit(1772319091.618:13112): avc: denied { ioctl } for pid=13837 comm="syz.8.2435" path="socket:[48906]" dev="sockfs" ino=48906 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 747.329044][ T63] hsr_slave_0: left promiscuous mode [ 747.337697][ T63] hsr_slave_1: left promiscuous mode [ 747.358250][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.388735][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.403167][T13847] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2431'. [ 747.432051][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.455032][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.476000][ T63] hsr_slave_0: left promiscuous mode [ 747.482794][ T63] hsr_slave_1: left promiscuous mode [ 747.488786][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.497746][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.506747][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.514427][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.540765][ T63] hsr_slave_0: left promiscuous mode [ 747.553925][ T63] hsr_slave_1: left promiscuous mode [ 747.567292][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.591908][ T29] audit: type=1400 audit(1772319091.938:13113): avc: denied { ioctl } for pid=13840 comm="syz.6.2436" path="socket:[48929]" dev="sockfs" ino=48929 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 747.597823][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.627789][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.644211][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.680679][ T63] hsr_slave_0: left promiscuous mode [ 747.686858][ T63] hsr_slave_1: left promiscuous mode [ 747.694354][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.702075][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.709857][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.717593][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.742821][ T63] veth1_macvtap: left promiscuous mode [ 747.748325][ T63] veth0_macvtap: left promiscuous mode [ 747.754707][ T63] veth1_macvtap: left promiscuous mode [ 747.760165][ T63] veth0_macvtap: left promiscuous mode [ 747.767973][ T63] veth1_macvtap: left promiscuous mode [ 747.774413][ T63] veth0_macvtap: left promiscuous mode [ 747.779944][ T63] veth1_vlan: left promiscuous mode [ 747.785236][ T63] @ÿ: left promiscuous mode [ 747.791356][ T63] veth1_macvtap: left promiscuous mode [ 747.796945][ T63] veth0_macvtap: left promiscuous mode [ 748.077407][ T63] team0 (unregistering): Port device team_slave_1 removed [ 748.104671][ T63] team0 (unregistering): Port device team_slave_0 removed [ 748.314945][ T63] team0 (unregistering): Port device team_slave_1 removed [ 748.330099][ T63] team0 (unregistering): Port device team_slave_0 removed [ 748.526834][ T63] team0 (unregistering): Port device team_slave_1 removed [ 748.539393][ T63] team0 (unregistering): Port device team_slave_0 removed [ 748.646158][ T63] pim6reg (unregistering): left allmulticast mode [ 748.725462][ T63] team0 (unregistering): Port device team_slave_1 removed [ 748.737527][ T63] team0 (unregistering): Port device team_slave_0 removed [ 748.974080][T13841] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2436'. [ 749.006325][T13658] lo speed is unknown, defaulting to 1000 [ 749.027521][T13658] infiniband syz0: ib_query_port failed (-19) [ 749.120089][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2442'. [ 749.212996][T13752] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 749.263578][T13895] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2443'. [ 749.411372][T13752] usb 6-1: Using ep0 maxpacket: 16 [ 749.434499][T13752] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 749.464739][T13752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.557380][T13752] usb 6-1: Product: syz [ 749.577047][T13752] usb 6-1: Manufacturer: syz [ 749.597404][T13752] usb 6-1: SerialNumber: syz [ 749.627646][T13752] usb 6-1: config 0 descriptor?? [ 749.672570][T13752] hub 6-1:0.0: bad descriptor, ignoring hub [ 749.685703][T13752] hub 6-1:0.0: probe with driver hub failed with error -5 [ 750.381134][T13752] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 750.518615][T13912] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2449'. [ 750.584664][T13752] usb 7-1: Using ep0 maxpacket: 8 [ 750.594919][T13714] usb 6-1: USB disconnect, device number 2 [ 750.611759][T13752] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 750.646791][T13752] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 750.751441][T13752] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 750.773552][T13931] 9p: Bad value for 'rfdno' [ 750.797217][T13927] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2451'. [ 750.814674][T13752] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 750.847386][T13752] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 750.923161][T13752] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 750.934209][T13752] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.003924][T13752] usb 7-1: Product: syz [ 751.008175][T13752] usb 7-1: Manufacturer: syz [ 751.013593][T13752] usb 7-1: SerialNumber: syz [ 751.073436][T13752] usb 7-1: config 0 descriptor?? [ 751.117175][T13752] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input84 [ 751.271607][T13945] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2453'. [ 751.510388][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2456'. [ 753.165559][T13752] usb 7-1: USB disconnect, device number 2 [ 753.580176][T13714] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 753.782192][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 753.851257][T13714] usb 8-1: Using ep0 maxpacket: 8 [ 753.882193][T13714] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 753.927494][T13984] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2466'. [ 753.932713][T13714] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 753.962770][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.993315][ T10] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 754.038742][T13984] syzkaller1: entered promiscuous mode [ 754.054596][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.083553][T13984] syzkaller1: entered allmulticast mode [ 754.101078][T13714] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 754.121082][T13714] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 754.130936][T13714] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 754.251635][T13714] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 754.284927][T13993] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 754.418685][T13991] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2465'. [ 754.423502][ T10] usb 10-1: config 0 descriptor?? [ 754.456551][ T10] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 754.484903][T13714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.510829][T13714] usb 8-1: Product: syz [ 754.521684][T13714] usb 8-1: Manufacturer: syz [ 754.621024][T13714] usb 8-1: SerialNumber: syz [ 754.634871][T13714] usb 8-1: config 0 descriptor?? [ 754.642948][T13714] usb 8-1: can't set config #0, error -71 [ 754.669283][T13969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.681745][T13714] usb 8-1: USB disconnect, device number 2 [ 754.712558][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2468'. [ 754.721839][T13969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.809720][T14002] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 754.881057][T13752] usb 10-1: USB disconnect, device number 2 [ 755.171069][ T792] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 755.438674][T14017] fuse: Unknown parameter '0x0000000000000006' [ 755.803742][T13658] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 755.812481][ T792] usb 7-1: device descriptor read/64, error -71 [ 756.018189][T13658] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 756.034188][T13658] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 756.081276][T13714] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 756.088852][ T792] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 756.093214][T13658] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 756.250836][T13658] usb 10-1: config 220 has no interface number 2 [ 756.261281][ T792] usb 7-1: device descriptor read/64, error -71 [ 756.264743][T13658] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 756.281213][T13714] usb 9-1: Using ep0 maxpacket: 16 [ 756.329021][T13658] usb 10-1: config 220 interface 0 has no altsetting 0 [ 756.455423][T13658] usb 10-1: config 220 interface 76 has no altsetting 0 [ 756.526231][T13658] usb 10-1: config 220 interface 1 has no altsetting 0 [ 756.651337][T13658] usb 10-1: string descriptor 0 read error: -71 [ 756.703274][T13658] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 756.768826][T13658] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.904142][T13658] usb 10-1: can't set config #220, error -71 [ 756.925103][ T792] usb usb7-port1: attempt power cycle [ 757.047122][T13658] usb 10-1: USB disconnect, device number 3 [ 757.146923][T13714] usb 9-1: config 0 has no interfaces? [ 757.212452][T13714] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 757.224975][T13714] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 757.238451][T13714] usb 9-1: Manufacturer: syz [ 757.261476][T13714] usb 9-1: config 0 descriptor?? [ 757.315924][ T29] audit: type=1400 audit(1772319101.618:13114): avc: denied { create } for pid=14037 comm="syz.7.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 757.373958][ T29] audit: type=1400 audit(1772319101.628:13115): avc: denied { setopt } for pid=14037 comm="syz.7.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 757.446500][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2483'. [ 757.593428][ T792] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 757.623278][ T792] usb 7-1: device descriptor read/8, error -71 [ 757.706314][T14053] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 757.971430][ T792] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 758.198237][ T792] usb 7-1: device not accepting address 6, error -71 [ 758.205209][ T792] usb usb7-port1: unable to enumerate USB device [ 758.991108][ T792] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 759.221306][T13658] usb 9-1: USB disconnect, device number 2 [ 759.360291][T14084] netlink: 'syz.6.2489': attribute type 1 has an invalid length. [ 759.371990][T14084] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2489'. [ 759.411122][ T792] usb 8-1: Using ep0 maxpacket: 8 [ 759.417858][ T792] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 759.750545][ T792] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 759.767278][ T792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 759.800135][ T792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 759.835480][ T792] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.902324][ T792] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 759.924434][ T792] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.932862][ T792] usb 8-1: Product: syz [ 759.937290][ T792] usb 8-1: Manufacturer: syz [ 759.954127][ T792] usb 8-1: SerialNumber: syz [ 760.020201][ T792] usb 8-1: config 0 descriptor?? [ 760.085878][ T792] input: KB Gear Tablet as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input85 [ 761.319948][T13714] usb 8-1: USB disconnect, device number 3 [ 761.411888][T14109] netlink: 620 bytes leftover after parsing attributes in process `syz.9.2495'. [ 761.515035][T14115] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 761.773115][T14123] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.2502'. [ 761.831073][ T5882] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 762.323598][ T5882] usb 10-1: Using ep0 maxpacket: 32 [ 762.353213][ T5882] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 762.362147][ T5882] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 762.370868][ T5882] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.451855][ T5882] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 762.533246][ T5882] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 762.581354][T13714] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 762.599831][ T5882] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.621202][ T29] audit: type=1400 audit(1772319106.968:13116): avc: denied { write } for pid=14144 comm="syz.7.2505" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 762.652378][ T29] audit: type=1400 audit(1772319106.968:13117): avc: denied { open } for pid=14144 comm="syz.7.2505" path="/16/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 762.676363][ T5882] usb 10-1: config 0 descriptor?? [ 762.768895][T13714] usb 9-1: Using ep0 maxpacket: 16 [ 762.804827][T13714] usb 9-1: config 0 has no interfaces? [ 762.854325][T13714] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 763.072858][T14157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.123264][T13714] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 763.153547][T13714] usb 9-1: Manufacturer: syz [ 763.181543][T13714] usb 9-1: config 0 descriptor?? [ 763.409292][T14164] netlink: 620 bytes leftover after parsing attributes in process `syz.5.2508'. [ 763.564981][ T792] usb 10-1: USB disconnect, device number 4 [ 763.729868][T14171] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2510'. [ 765.411084][ T792] usb 9-1: USB disconnect, device number 3 [ 767.727648][T14220] netlink: 620 bytes leftover after parsing attributes in process `syz.6.2520'. [ 767.887557][T14223] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2521'. [ 768.369592][T14238] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 768.551482][ T5882] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 768.761492][ T5882] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.813938][ T5917] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 768.961697][ T5882] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 769.557249][ T5882] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.597386][ T5882] usb 10-1: config 0 descriptor?? [ 769.646819][ T5882] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 769.654255][ T5917] usb 7-1: Using ep0 maxpacket: 16 [ 769.699671][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 769.735915][ T5917] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 769.756858][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.781034][ T5917] usb 7-1: Product: syz [ 769.792764][ T5917] usb 7-1: Manufacturer: syz [ 769.807979][ T5917] usb 7-1: SerialNumber: syz [ 769.829349][ T5917] usb 7-1: config 0 descriptor?? [ 769.842357][T14234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.947356][T14234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.962286][ T5917] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 770.486539][ T24] usb 10-1: USB disconnect, device number 5 [ 770.586574][T14265] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 770.613193][T14265] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 770.900545][T14280] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2534'. [ 771.031081][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 771.239095][T14289] netlink: 568 bytes leftover after parsing attributes in process `syz.7.2535'. [ 771.272364][ T24] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 771.293414][ T24] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 771.321231][ T24] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 771.359249][ T24] usb 10-1: config 220 has no interface number 2 [ 771.368531][ T24] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 771.385497][ T24] usb 10-1: config 220 interface 0 has no altsetting 0 [ 771.408139][ T24] usb 10-1: config 220 interface 76 has no altsetting 0 [ 771.435443][ T24] usb 10-1: config 220 interface 1 has no altsetting 0 [ 771.453044][ T24] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 771.466540][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.626348][ T1147] usb 7-1: Failed to submit usb control message: -110 [ 771.729290][ T24] usb 10-1: Product: syz [ 771.777504][ T24] usb 10-1: Manufacturer: syz [ 771.781155][ T1147] usb 7-1: unable to send the bmi data to the device: -110 [ 771.800173][ T24] usb 10-1: SerialNumber: syz [ 771.872834][T14298] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 772.031258][ T1147] usb 7-1: unable to get target info from device [ 772.053116][ T1147] usb 7-1: could not get target info (-110) [ 772.056876][ T24] usb 10-1: can't set config #220, error -71 [ 772.059251][ T1147] usb 7-1: could not probe fw (-110) [ 772.108757][ T47] usb 7-1: USB disconnect, device number 7 [ 772.197666][ T24] usb 10-1: USB disconnect, device number 6 [ 772.305919][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2539'. [ 772.316296][T14306] netlink: 608 bytes leftover after parsing attributes in process `syz.5.2538'. [ 772.410792][T14309] syzkaller0: entered promiscuous mode [ 772.417102][ T29] audit: type=1400 audit(1772319116.758:13118): avc: denied { write } for pid=14308 comm="syz.6.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 772.541347][T14309] syzkaller0: entered allmulticast mode [ 773.430056][T14323] syzkaller0: entered promiscuous mode [ 773.511331][T14323] syzkaller0: entered allmulticast mode [ 773.664242][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2548'. [ 773.701727][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2548'. [ 773.861124][ T5917] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 773.877236][T14329] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2545'. [ 774.051026][ T5917] usb 9-1: Using ep0 maxpacket: 32 [ 774.058702][ T5917] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 774.067313][ T5917] usb 9-1: config 0 has no interface number 0 [ 774.073451][ T5917] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 774.087422][ T5917] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 774.096649][ T5917] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.104710][ T5917] usb 9-1: Product: syz [ 774.109605][ T5917] usb 9-1: Manufacturer: syz [ 774.114871][ T5917] usb 9-1: SerialNumber: syz [ 774.122317][ T5917] usb 9-1: config 0 descriptor?? [ 774.128020][T14343] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 774.347337][T14343] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 774.560507][ T5917] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 774.571229][ T5917] asix 9-1:0.188: probe with driver asix failed with error -61 [ 775.269334][ T29] audit: type=1400 audit(1772319119.598:13119): avc: denied { bind } for pid=14367 comm="syz.9.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 775.295986][ T29] audit: type=1400 audit(1772319119.628:13120): avc: denied { write } for pid=14367 comm="syz.9.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 775.363995][T14371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 775.681237][ T5823] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 775.715634][T14382] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 775.991233][ T5823] usb 8-1: Using ep0 maxpacket: 32 [ 776.003213][ T5823] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 776.023394][ T5823] usb 8-1: config 0 has no interface number 0 [ 776.030771][ T5823] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 776.062616][T14390] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2557'. [ 776.073409][ T5823] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 776.100190][ T5823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.132375][ T5823] usb 8-1: Product: syz [ 776.140621][ T5823] usb 8-1: Manufacturer: syz [ 776.151653][ T5823] usb 8-1: SerialNumber: syz [ 776.176372][ T5823] usb 8-1: config 0 descriptor?? [ 776.191420][T14374] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 776.458217][T14374] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 776.671902][ T5917] usb 9-1: USB disconnect, device number 4 [ 776.953049][T14419] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2564'. [ 777.235593][T14405] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2561'. [ 777.300683][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2566'. [ 777.321966][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2566'. [ 777.330880][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2566'. [ 777.493223][ T5823] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 777.505373][ T5823] asix 8-1:0.188: probe with driver asix failed with error -61 [ 777.988523][T14457] fuse: Unknown parameter 'group_i00000000000000000000' [ 778.069755][T14458] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 778.185608][T14455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 779.027816][ T24] usb 8-1: USB disconnect, device number 4 [ 781.333769][T14505] fuse: Unknown parameter 'group_i00000000000000000000' [ 781.416590][T14511] netlink: 568 bytes leftover after parsing attributes in process `syz.9.2584'. [ 782.335437][ T5917] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 782.352018][ T5823] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 782.506727][ T5917] usb 10-1: Using ep0 maxpacket: 16 [ 782.618217][ T5823] usb 6-1: Using ep0 maxpacket: 32 [ 782.679021][ T5823] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 783.001042][ T5823] usb 6-1: config 0 has no interface number 0 [ 783.011586][ T5823] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 783.168323][ T5823] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 783.174876][ T5917] usb 10-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 783.186655][ T5917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.186831][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.225557][ T5917] usb 10-1: Product: syz [ 783.232428][ T5917] usb 10-1: Manufacturer: syz [ 783.238270][ T5917] usb 10-1: SerialNumber: syz [ 783.248492][ T5823] usb 6-1: Product: syz [ 783.258823][ T5917] usb 10-1: config 0 descriptor?? [ 783.268737][ T5823] usb 6-1: Manufacturer: syz [ 783.282620][ T5917] hub 10-1:0.0: bad descriptor, ignoring hub [ 783.282780][ T5823] usb 6-1: SerialNumber: syz [ 783.288694][ T5917] hub 10-1:0.0: probe with driver hub failed with error -5 [ 783.334436][ T5823] usb 6-1: config 0 descriptor?? [ 783.340065][T14520] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 783.411037][T13658] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 783.555566][T14520] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 783.573630][T13658] usb 7-1: Using ep0 maxpacket: 8 [ 783.585605][T13658] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 783.620692][T14558] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2586'. [ 783.640902][T13658] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 783.661166][T13658] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 783.672621][T13658] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 783.683251][T13658] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 783.722431][T13658] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 783.731686][T13658] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.739748][T13658] usb 7-1: Product: syz [ 783.744928][T13658] usb 7-1: Manufacturer: syz [ 783.749606][T13658] usb 7-1: SerialNumber: syz [ 783.757097][T13658] usb 7-1: config 0 descriptor?? [ 783.766935][T13658] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input86 [ 783.918224][T14567] batman_adv: batadv0: Adding interface: dummy0 [ 783.926252][T14567] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.987649][T14567] batman_adv: batadv0: Interface activated: dummy0 [ 785.128768][ T5823] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 785.170562][ T5823] asix 6-1:0.188: probe with driver asix failed with error -71 [ 785.214127][ T5823] usb 6-1: USB disconnect, device number 3 [ 785.703816][T13658] usb 10-1: USB disconnect, device number 7 [ 785.932671][ T5823] usb 7-1: USB disconnect, device number 8 [ 786.113372][T14593] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 786.136374][T14593] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 786.448526][T14606] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2606'. [ 789.831086][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 790.036686][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 790.056750][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 790.081084][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 790.092760][ T5920] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 790.125461][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 790.151033][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 790.169324][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 790.204878][ T10] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 790.224154][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.232881][ T10] usb 6-1: Product: syz [ 790.237038][ T10] usb 6-1: Manufacturer: syz [ 790.256775][ T10] usb 6-1: SerialNumber: syz [ 790.262718][ T5920] usb 8-1: Using ep0 maxpacket: 16 [ 790.272708][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.292032][ T10] usb 6-1: config 0 descriptor?? [ 790.301537][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.329269][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input87 [ 790.345020][ T5920] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 790.376709][ T5920] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 790.395989][ T5920] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.430917][ T5920] usb 8-1: config 0 descriptor?? [ 791.092715][ T5920] usbhid 8-1:0.0: can't add hid device: -71 [ 791.098730][ T5920] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 791.117917][ T5920] usb 8-1: USB disconnect, device number 5 [ 791.822162][ T10] usb 6-1: USB disconnect, device number 4 [ 794.212171][T14747] netlink: 'syz.9.2635': attribute type 1 has an invalid length. [ 794.219897][T14747] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2635'. [ 795.426406][T14762] fuse: Bad value for 'user_id' [ 795.442645][T14762] fuse: Bad value for 'user_id' [ 796.330243][ T5920] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 796.552630][ T5920] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 796.569945][ T5920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.584372][T14797] netlink: 'syz.9.2647': attribute type 1 has an invalid length. [ 796.593457][ T5920] usb 9-1: config 0 descriptor?? [ 796.598404][T14797] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2647'. [ 797.017558][ T5920] usb 9-1: Cannot read MAC address [ 797.024172][ T5920] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 797.691226][ T5920] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 797.853782][ T5920] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 797.870771][ T5920] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 797.883988][ T5920] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 797.956107][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.978888][ T5920] usb 6-1: Product: syz [ 797.984326][ T5920] usb 6-1: Manufacturer: syz [ 797.989623][T14816] @ÿ: renamed from veth0_vlan (while UP) [ 798.036971][ T5920] usb 6-1: SerialNumber: syz [ 798.085967][T14819] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 798.115876][ T5920] usb 6-1: config 0 descriptor?? [ 798.158904][T14806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 798.166285][T14806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 798.379431][T14806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 798.386755][T14806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 798.887674][ T793] usb 9-1: USB disconnect, device number 5 [ 799.382595][T14850] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2659'. [ 799.399463][ T5920] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 799.402668][T14850] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2659'. [ 799.443045][ T5920] dm9601 6-1:0.0 eth21: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 00:00:0d:01:01:03 [ 799.492077][ T5920] usb 6-1: USB disconnect, device number 5 [ 799.515782][ T5920] dm9601 6-1:0.0 eth21: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 801.829924][ T793] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 802.022724][ T793] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 802.047750][ T793] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.091515][ T793] usb 10-1: config 0 descriptor?? [ 802.761150][ T5920] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 802.952003][ T5920] usb 9-1: Using ep0 maxpacket: 8 [ 802.986440][ T5920] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 803.023401][ T5920] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 803.057154][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.071361][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.097940][ T5920] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 803.134213][ T793] usb 10-1: Cannot set autoneg [ 803.139624][ T793] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 803.154081][ T5920] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 803.190581][ T5920] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 803.237527][ T5920] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 803.269145][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.299569][ T5920] usb 9-1: Product: syz [ 803.311721][ T5920] usb 9-1: Manufacturer: syz [ 803.316331][ T5920] usb 9-1: SerialNumber: syz [ 803.349908][ T5920] usb 9-1: config 0 descriptor?? [ 803.364538][ T5920] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input88 [ 803.496879][T14927] loop2: detected capacity change from 0 to 7 [ 803.528587][T14927] Dev loop2: unable to read RDB block 7 [ 803.541055][T14927] loop2: AHDI p1 p2 p3 [ 803.546680][T14927] loop2: partition table partially beyond EOD, truncated [ 803.576789][T14927] loop2: p1 start 1601398130 is beyond EOD, truncated [ 803.595503][ T24] usb 9-1: USB disconnect, device number 6 [ 803.626459][T14927] loop2: p2 start 1702059890 is beyond EOD, truncated [ 804.622309][ T5920] usb 10-1: USB disconnect, device number 8 [ 805.720432][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2680'. [ 806.156736][T14979] fuse: Bad value for 'fd' [ 806.172763][T11897] Bluetooth: hci6: Invalid connection link type handle 0x00c9 [ 806.496600][T14985] xt_hashlimit: size too large, truncated to 1048576 [ 807.092386][T15001] lo speed is unknown, defaulting to 1000 [ 807.098403][T15001] lo speed is unknown, defaulting to 1000 [ 807.112967][T15001] lo speed is unknown, defaulting to 1000 [ 807.175510][T15001] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 807.286044][T15002] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 807.434459][T15001] lo speed is unknown, defaulting to 1000 [ 807.440917][T15001] lo speed is unknown, defaulting to 1000 [ 807.455806][T15001] lo speed is unknown, defaulting to 1000 [ 807.464068][T15001] lo speed is unknown, defaulting to 1000 [ 807.470540][T15001] lo speed is unknown, defaulting to 1000 [ 808.221041][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 808.402996][ T10] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 808.430390][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.446849][T15032] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2691'. [ 808.459609][ T10] usb 6-1: config 0 descriptor?? [ 808.631668][T11897] Bluetooth: hci6: Invalid connection link type handle 0x00c9 [ 808.749613][T15041] fuse: Bad value for 'fd' [ 808.925986][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2695'. [ 809.142683][ T792] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 809.403395][ T792] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 809.413685][ T792] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.425779][ T792] usb 8-1: Product: syz [ 809.429943][ T792] usb 8-1: Manufacturer: syz [ 810.421704][ T10] usb 6-1: Cannot set autoneg [ 810.436960][ T10] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 810.606913][ T792] usb 8-1: SerialNumber: syz [ 810.650907][ T792] usb 8-1: config 0 descriptor?? [ 810.996816][T13714] usb 6-1: USB disconnect, device number 6 [ 811.071099][ T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 811.088839][ T792] usb 8-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 811.113292][ T792] f81604 8-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 811.361664][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 811.623249][ T792] f81604 8-1:0.0: probe with driver f81604 failed with error -71 [ 811.639126][ T792] usb 8-1: USB disconnect, device number 6 [ 811.674910][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 811.694206][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 811.707638][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 811.729164][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 811.770164][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 811.816225][ T10] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 811.835510][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.855149][ T10] usb 9-1: Product: syz [ 811.877680][ T10] usb 9-1: Manufacturer: syz [ 811.905368][ T10] usb 9-1: SerialNumber: syz [ 811.916168][ T10] usb 9-1: config 0 descriptor?? [ 811.981475][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input89 [ 812.094652][ T29] audit: type=1400 audit(1772319156.438:13121): avc: denied { setopt } for pid=15097 comm="syz.6.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 812.156003][ T5917] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 812.183921][T13658] usb 9-1: USB disconnect, device number 7 [ 812.342078][ T5917] usb 8-1: Using ep0 maxpacket: 8 [ 812.354318][ T5917] usb 8-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 812.372678][ T5917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.518860][ T5917] usb 8-1: config 0 descriptor?? [ 812.552975][ T5917] gm12u320 8-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 812.593494][ T5917] gm12u320 8-1:0.0: probe with driver gm12u320 failed with error -5 [ 812.634201][ T5917] usb-storage 8-1:0.0: USB Mass Storage device detected [ 812.655546][ T5917] usb-storage 8-1:0.0: device ignored [ 812.838959][ T5917] usb 8-1: USB disconnect, device number 7 [ 813.331486][ T5917] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 813.491190][T13658] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 813.592840][ T5917] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 813.616138][ T5917] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.643169][ T5917] usb 10-1: config 0 descriptor?? [ 813.671025][T13658] usb 6-1: Using ep0 maxpacket: 16 [ 813.746014][T13658] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 813.791034][T13658] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.836951][T13658] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.889978][T13658] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 813.934750][T13658] usb 6-1: config 7 interface 0 has no altsetting 0 [ 813.952954][T13658] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 813.998857][T13658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.478491][T13658] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.0050/input/input90 [ 814.571986][ T5823] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 814.612116][T13658] kye 0003:0458:5010.0050: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 814.687839][T13658] usb 6-1: USB disconnect, device number 7 [ 814.703008][ T5917] usb 10-1: Cannot set autoneg [ 814.709872][ T5917] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 814.748742][ T5823] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 814.781885][ T5823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.795423][T15163] fido_id[15163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 814.810378][ T5823] usb 8-1: Product: syz [ 814.820466][ T5823] usb 8-1: Manufacturer: syz [ 814.836881][ T5823] usb 8-1: SerialNumber: syz [ 814.853561][ T47] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 814.862430][ T5823] usb 8-1: config 0 descriptor?? [ 815.024991][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 815.044102][ T47] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 815.061629][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.088295][ T47] usb 7-1: Product: syz [ 815.093342][ T47] usb 7-1: Manufacturer: syz [ 815.097975][ T47] usb 7-1: SerialNumber: syz [ 815.132682][ T47] usb 7-1: config 0 descriptor?? [ 815.140056][ T47] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 815.294775][ T5823] usb 8-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 815.304022][ T5823] f81604 8-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 815.321527][ T5823] f81604 8-1:0.0: probe with driver f81604 failed with error -71 [ 815.346758][ T5823] usb 8-1: USB disconnect, device number 8 [ 815.366739][ T47] ssu100 7-1:0.0: probe with driver ssu100 failed with error -5 [ 815.530302][T15185] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2720'. [ 815.593483][ T5823] usb 7-1: USB disconnect, device number 9 [ 816.072478][ T5823] usb 10-1: USB disconnect, device number 9 [ 816.601654][ T47] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 816.824334][ T47] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 816.885712][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.937397][ T47] usb 7-1: Product: syz [ 816.975055][ T47] usb 7-1: Manufacturer: syz [ 817.007073][ T47] usb 7-1: SerialNumber: syz [ 817.281639][ T792] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 817.442331][ T792] usb 6-1: Using ep0 maxpacket: 16 [ 817.464772][ T792] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 817.507362][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.530470][ T792] usb 6-1: Product: syz [ 817.541589][ T792] usb 6-1: Manufacturer: syz [ 817.556464][ T792] usb 6-1: SerialNumber: syz [ 817.571636][ T5823] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 817.583058][ T792] usb 6-1: config 0 descriptor?? [ 817.591722][T13752] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 817.627355][ T792] hub 6-1:0.0: bad descriptor, ignoring hub [ 817.644155][ T792] hub 6-1:0.0: probe with driver hub failed with error -5 [ 817.752826][ T47] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 817.771782][T13752] usb 10-1: Using ep0 maxpacket: 8 [ 817.783561][ T5823] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 817.803241][ T47] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 817.829732][T13752] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 817.840470][ T5823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.863287][T13752] usb 10-1: config 179 has no interface number 0 [ 817.880111][ T5823] usb 9-1: Product: syz [ 817.890062][T13752] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 817.904836][ T5823] usb 9-1: Manufacturer: syz [ 817.925386][ T5823] usb 9-1: SerialNumber: syz [ 817.997152][T13752] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 818.041722][ T5823] usb 9-1: config 0 descriptor?? [ 818.062871][T15232] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2729'. [ 818.123526][T15238] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2732'. [ 818.125705][T13752] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 818.147171][T13752] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 818.160461][T13752] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 818.174635][T13752] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 818.185629][T13752] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.217880][T15222] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 818.265514][ T5823] usb 9-1: f81604_read: reg: 105 failed: -EPROTO [ 818.276895][ T5823] f81604 9-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 818.301992][ T5823] f81604 9-1:0.0: probe with driver f81604 failed with error -71 [ 818.338134][ T5823] usb 9-1: USB disconnect, device number 8 [ 819.117220][ T47] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 819.259941][ T5823] usb 10-1: USB disconnect, device number 10 [ 819.266458][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 819.266485][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 819.663632][ T47] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 819.707108][ T47] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 819.737554][T15274] 9p: Bad value for 'rfdno' [ 819.773431][T15274] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2740'. [ 819.775972][ T47] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 819.972161][ T47] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 820.031626][ T47] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 820.091815][ T47] usb 7-1: USB disconnect, device number 10 [ 820.658726][ T47] usb 6-1: USB disconnect, device number 8 [ 820.846812][T15287] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 820.924495][T15287] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 820.961980][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2744'. [ 821.026084][T15290] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2744'. [ 821.833612][ T5823] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 822.128142][ T5823] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 822.151554][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.159564][ T5823] usb 7-1: Product: syz [ 822.181241][ T5823] usb 7-1: Manufacturer: syz [ 822.185866][ T5823] usb 7-1: SerialNumber: syz [ 822.219883][ T5823] usb 7-1: config 0 descriptor?? [ 822.444651][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 822.471506][ T792] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 822.479126][ T5823] usb 7-1: f81604_read: reg: 105 failed: -EPROTO [ 822.501592][ T5823] f81604 7-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 822.509082][ T5823] f81604 7-1:0.0: probe with driver f81604 failed with error -71 [ 822.555768][ T5823] usb 7-1: USB disconnect, device number 11 [ 822.623982][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 822.641308][ T10] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 822.641503][ T792] usb 8-1: Using ep0 maxpacket: 32 [ 822.652724][ T10] usb 6-1: config 0 has no interface number 0 [ 822.679508][ T10] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.711055][ T10] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.722114][ T792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.732986][ T10] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 822.733013][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.741989][ T10] usb 6-1: config 0 descriptor?? [ 822.768705][ T792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.804525][ T792] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 822.831915][ T792] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.872674][ T792] usb 8-1: config 0 descriptor?? [ 823.274066][T15348] 9p: Bad value for 'rfdno' [ 823.304219][T15348] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2753'. [ 823.382502][ T792] savu 0003:1E7D:2D5A.0051: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 823.412206][ T10] usbhid 6-1:0.4: can't add hid device: -71 [ 823.431574][ T10] usbhid 6-1:0.4: probe with driver usbhid failed with error -71 [ 823.478401][ T10] usb 6-1: USB disconnect, device number 9 [ 823.662099][T13810] usb 8-1: USB disconnect, device number 9 [ 824.293019][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2759'. [ 824.317603][T15369] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2759'. [ 824.761179][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 824.933895][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.970270][ T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 825.036670][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.079372][ T10] usb 6-1: config 0 descriptor?? [ 825.112541][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 825.325614][T15376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.451629][T15376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.478680][ T10] usb 6-1: USB disconnect, device number 10 [ 826.342858][T15394] 9p: Bad value for 'rfdno' [ 826.362459][T15394] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2766'. [ 826.411152][T13810] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 826.541328][T13810] usb 6-1: device descriptor read/64, error -71 [ 826.892031][T13810] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 827.072796][T13810] usb 6-1: device descriptor read/64, error -71 [ 827.132282][T15409] lo speed is unknown, defaulting to 1000 [ 827.185952][T13810] usb usb6-port1: attempt power cycle [ 827.531030][T13810] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 827.974762][ T793] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 827.983407][T13810] usb 6-1: device descriptor read/8, error -71 [ 828.166477][ T793] usb 7-1: Using ep0 maxpacket: 16 [ 828.180248][ T793] usb 7-1: config 0 has no interfaces? [ 828.195872][ T793] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 828.231875][ T793] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 828.381794][ T793] usb 7-1: Manufacturer: syz [ 828.413559][ T793] usb 7-1: config 0 descriptor?? [ 828.428746][T15423] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2777'. [ 829.287950][T15430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.910087][T15437] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 829.936261][T15437] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 830.133711][T15442] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2783'. [ 830.152801][T15442] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15442 comm=syz.9.2783 [ 830.276987][T15448] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2784'. [ 830.760591][T13810] usb 7-1: USB disconnect, device number 12 [ 831.191017][T13810] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 831.362586][T13810] usb 7-1: Using ep0 maxpacket: 16 [ 831.404890][T13810] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 831.417468][T13810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.427594][T13810] usb 7-1: Product: syz [ 831.434809][T13810] usb 7-1: Manufacturer: syz [ 831.439582][T13810] usb 7-1: SerialNumber: syz [ 831.595502][T13810] usb 7-1: config 0 descriptor?? [ 831.609368][T13810] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 831.794944][T15463] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 831.821420][T13810] ssu100 7-1:0.0: probe with driver ssu100 failed with error -5 [ 832.033437][T13810] usb 7-1: USB disconnect, device number 13 [ 832.226250][T15470] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 833.014410][T15475] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2792'. [ 833.081963][T15476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 833.702871][T13810] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 834.112808][T13810] usb 6-1: Using ep0 maxpacket: 32 [ 834.129010][T13810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.142344][T13810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.260162][T13810] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 834.489208][T13810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.520610][T13810] usb 6-1: config 0 descriptor?? [ 835.332581][T13810] savu 0003:1E7D:2D5A.0052: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 835.685228][T15510] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 835.923507][ T24] usb 6-1: USB disconnect, device number 15 [ 836.318466][T13810] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 836.576641][T13810] usb 8-1: Using ep0 maxpacket: 16 [ 836.596231][T13810] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 836.614777][T15517] 9p: Bad value for 'rfdno' [ 836.619734][T15517] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2805'. [ 836.629152][T13810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.689268][T13810] usb 8-1: Product: syz [ 836.703871][T13810] usb 8-1: Manufacturer: syz [ 836.778518][T13810] usb 8-1: SerialNumber: syz [ 836.833101][T13810] usb 8-1: config 0 descriptor?? [ 836.862180][T13810] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 837.019244][ T29] audit: type=1326 audit(1772319181.348:13122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b279c799 code=0x7ffc0000 [ 837.062414][T13810] ssu100 8-1:0.0: probe with driver ssu100 failed with error -5 [ 837.077419][ T29] audit: type=1326 audit(1772319181.348:13123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b279c799 code=0x7ffc0000 [ 837.109066][ T29] audit: type=1326 audit(1772319181.428:13124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b279c799 code=0x7ffc0000 [ 837.157649][ T29] audit: type=1326 audit(1772319181.428:13125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f18b279c799 code=0x7ffc0000 [ 837.182980][ T29] audit: type=1326 audit(1772319181.428:13126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b279c799 code=0x7ffc0000 [ 837.245679][ T29] audit: type=1326 audit(1772319181.428:13127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b279c799 code=0x7ffc0000 [ 837.319046][ T29] audit: type=1326 audit(1772319181.428:13128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b279c799 code=0x7ffc0000 [ 837.368686][T13810] usb 8-1: USB disconnect, device number 10 [ 837.383290][ T29] audit: type=1326 audit(1772319181.428:13129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b279c799 code=0x7ffc0000 [ 837.424360][ T29] audit: type=1326 audit(1772319181.428:13130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f18b279c799 code=0x7ffc0000 [ 837.483280][ T29] audit: type=1326 audit(1772319181.428:13131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15527 comm="syz.5.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b279c799 code=0x7ffc0000 [ 837.599477][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2812'. [ 837.617604][T15536] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2812'. [ 837.977350][T15544] fuse: Unknown parameter 'user_i00000000000000000000' [ 837.996180][T15543] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2814'. [ 837.996961][T15546] netlink: 6032 bytes leftover after parsing attributes in process `syz.9.2818'. [ 839.571051][ T5823] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 839.613404][T15588] fuse: Unknown parameter 'user_i00000000000000000000' [ 839.721642][ T5823] usb 9-1: Using ep0 maxpacket: 16 [ 839.732732][ T5823] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 839.748694][ T5823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.761696][ T5823] usb 9-1: Product: syz [ 839.766077][ T5823] usb 9-1: Manufacturer: syz [ 839.771984][ T5823] usb 9-1: SerialNumber: syz [ 839.785346][ T5823] usb 9-1: config 0 descriptor?? [ 839.803169][ T5823] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 840.038049][ T5823] ssu100 9-1:0.0: probe with driver ssu100 failed with error -5 [ 840.074371][T15600] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2833'. [ 840.144789][T15603] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2835'. [ 840.239925][ T793] usb 9-1: USB disconnect, device number 9 [ 840.315486][T15603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15603 comm=syz.7.2835 [ 841.475181][ T24] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 841.672066][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 841.680599][ T24] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 841.781526][ T24] usb 10-1: config 0 has no interface number 0 [ 841.787739][ T24] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 841.823613][ T24] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 841.851527][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.870083][ T24] usb 10-1: Product: syz [ 841.881965][ T24] usb 10-1: Manufacturer: syz [ 841.895972][ T24] usb 10-1: SerialNumber: syz [ 841.944847][ T24] usb 10-1: config 0 descriptor?? [ 841.951726][T15608] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 842.024765][T15621] fuse: Unknown parameter 'user_i00000000000000000000' [ 842.198410][T15608] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 842.477257][ T5823] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 843.073610][ T5823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.090505][ T5823] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 843.101803][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.161985][ T5823] usb 6-1: config 0 descriptor?? [ 843.177715][ T5823] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 843.215662][ T792] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 843.383792][ T792] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 843.394598][ T792] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 843.412609][ T792] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 843.432041][T15626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.480931][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.492182][ T792] usb 7-1: Product: syz [ 843.496377][ T792] usb 7-1: Manufacturer: syz [ 843.501764][ T792] usb 7-1: SerialNumber: syz [ 843.621301][T15626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.621599][ T792] usb 7-1: config 0 descriptor?? [ 843.637412][T13658] usb 6-1: USB disconnect, device number 16 [ 844.594581][T15630] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 844.602399][T15630] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 844.636182][ T24] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 844.810552][ T24] asix 10-1:0.188: probe with driver asix failed with error -71 [ 844.827666][ T24] usb 10-1: USB disconnect, device number 11 [ 844.884647][T15630] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 844.924615][T15630] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 845.110026][T15656] fuse: Unknown parameter 'user_id00000000000000000000' [ 845.163202][T13658] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 845.182328][T15658] 9p: Bad value for 'rfdno' [ 845.197288][T15658] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2849'. [ 845.311020][T13658] usb 6-1: device descriptor read/64, error -71 [ 845.632391][T13658] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 845.858125][ T792] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 846.834024][ T792] usb 7-1: USB disconnect, device number 14 [ 846.961030][T13658] usb 6-1: device descriptor read/64, error -71 [ 846.982297][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2856'. [ 847.052951][T15669] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15669 comm=syz.9.2856 [ 847.081746][T13658] usb usb6-port1: attempt power cycle [ 847.380487][ T792] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 847.541546][ T792] usb 7-1: Using ep0 maxpacket: 32 [ 847.666956][ T792] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 847.675573][ T792] usb 7-1: config 0 has no interface number 0 [ 847.693916][ T792] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 847.717178][ T792] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 847.720625][T15694] fuse: Unknown parameter 'user_id00000000000000000000' [ 847.918479][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.942013][ T792] usb 7-1: Product: syz [ 847.946169][ T792] usb 7-1: Manufacturer: syz [ 847.960842][ T792] usb 7-1: SerialNumber: syz [ 847.997500][ T792] usb 7-1: config 0 descriptor?? [ 848.020658][T15676] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 848.293356][T15700] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2864'. [ 848.394016][T15676] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 848.851001][ T29] kauditd_printk_skb: 1251 callbacks suppressed [ 848.851019][ T29] audit: type=1400 audit(1772319193.048:14383): avc: denied { connect } for pid=15702 comm="syz.8.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 848.921488][ T792] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 848.941716][ T792] asix 7-1:0.188: probe with driver asix failed with error -61 [ 848.957446][ T29] audit: type=1400 audit(1772319193.058:14384): avc: denied { write } for pid=15702 comm="syz.8.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 849.202467][T15712] 9p: Bad value for 'rfdno' [ 849.213683][T15712] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2866'. [ 849.392107][ T792] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 849.543294][T13658] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 849.685531][ T792] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 849.697195][ T792] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 849.714236][T13658] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.725585][T13658] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 849.733333][ T792] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 849.734774][T13658] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.810304][ T792] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.820161][ T792] usb 10-1: Product: syz [ 849.825287][ T792] usb 10-1: Manufacturer: syz [ 849.833243][ T792] usb 10-1: SerialNumber: syz [ 849.835067][T13658] usb 8-1: config 0 descriptor?? [ 849.839854][ T792] usb 10-1: config 0 descriptor?? [ 849.851279][T15711] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 849.864351][T15711] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 849.877736][T13658] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 849.963926][T15724] netlink: 'syz.5.2870': attribute type 1 has an invalid length. [ 849.986825][T15724] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2870'. [ 850.083572][T15711] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 850.113170][T15711] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 850.126852][T13714] usb 7-1: USB disconnect, device number 15 [ 850.166218][T15714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.184687][T15714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.212706][ T24] usb 8-1: USB disconnect, device number 11 [ 850.731730][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 850.862942][ T24] usb 8-1: device descriptor read/64, error -71 [ 850.968242][ T792] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 851.013543][ T792] usb 10-1: USB disconnect, device number 12 [ 851.099205][T15738] fuse: Unknown parameter 'user_id00000000000000000000' [ 851.111430][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 851.154356][T15735] lo speed is unknown, defaulting to 1000 [ 851.305954][ T24] usb 8-1: device descriptor read/64, error -71 [ 851.414265][ T793] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 851.422096][ T24] usb usb8-port1: attempt power cycle [ 851.635673][ T793] usb 9-1: Using ep0 maxpacket: 16 [ 851.648358][ T793] usb 9-1: config 0 has no interfaces? [ 851.656453][ T793] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 851.671618][ T793] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 851.697922][ T793] usb 9-1: Manufacturer: syz [ 851.727216][T15747] lo speed is unknown, defaulting to 1000 [ 851.781766][ T793] usb 9-1: config 0 descriptor?? [ 851.811418][ T24] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 851.892575][ T24] usb 8-1: device descriptor read/8, error -71 [ 852.161593][T13658] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 852.231649][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 852.281748][ T24] usb 8-1: device descriptor read/8, error -71 [ 852.341055][T13658] usb 10-1: Using ep0 maxpacket: 16 [ 852.362332][T13658] usb 10-1: config 0 has no interfaces? [ 852.394162][ T24] usb usb8-port1: unable to enumerate USB device [ 852.407866][T13658] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 852.431420][T13658] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 852.494895][T13658] usb 10-1: Manufacturer: syz [ 852.524135][T13658] usb 10-1: config 0 descriptor?? [ 853.179475][T15758] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2880'. [ 853.538472][T15768] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2882'. [ 853.623459][T15770] netlink: 'syz.6.2883': attribute type 1 has an invalid length. [ 853.631707][T15770] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2883'. [ 854.173925][T15776] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2885'. [ 854.492313][T15783] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2887'. [ 854.553997][T15783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15783 comm=syz.6.2887 [ 854.675028][T15785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2889'. [ 854.807667][ T24] usb 9-1: USB disconnect, device number 10 [ 854.980706][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2891'. [ 854.993525][ T5823] usb 10-1: USB disconnect, device number 13 [ 856.332378][T15779] Bluetooth: hci5: command 0x0406 tx timeout [ 856.338434][T15779] Bluetooth: hci2: command 0x0406 tx timeout [ 856.345713][T15778] Bluetooth: hci6: command 0x0406 tx timeout [ 856.347989][T15777] Bluetooth: hci1: command 0x0406 tx timeout [ 856.351745][T15779] Bluetooth: hci4: command 0x0406 tx timeout [ 856.683541][T15809] netlink: 'syz.7.2897': attribute type 1 has an invalid length. [ 856.711793][T13658] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 856.721333][T15809] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2897'. [ 856.883968][T13658] usb 10-1: Using ep0 maxpacket: 16 [ 856.901053][T13658] usb 10-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 856.911150][T13658] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.929603][T13658] usb 10-1: Product: syz [ 856.941008][T13658] usb 10-1: Manufacturer: syz [ 856.951173][T13658] usb 10-1: SerialNumber: syz [ 856.961914][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2899'. [ 856.967347][T13658] usb 10-1: config 0 descriptor?? [ 856.997966][T13658] hub 10-1:0.0: bad descriptor, ignoring hub [ 857.011509][T13658] hub 10-1:0.0: probe with driver hub failed with error -5 [ 857.713413][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2902'. [ 860.160450][T15852] __nla_validate_parse: 1 callbacks suppressed [ 860.160467][T15852] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2908'. [ 860.531373][T13658] usb 10-1: USB disconnect, device number 14 [ 860.631571][ T5823] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 860.783378][ T5823] usb 7-1: too many configurations: 36, using maximum allowed: 8 [ 860.800093][ T5823] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 860.810548][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.819887][ T5823] usb 7-1: Product: syz [ 860.824220][ T5823] usb 7-1: Manufacturer: syz [ 860.828790][ T5823] usb 7-1: SerialNumber: syz [ 860.846703][ T5823] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 860.897217][ T29] audit: type=1400 audit(1772319205.248:14385): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 860.909017][ T24] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 861.038839][ T5823] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 861.226674][T15863] netlink: 'syz.5.2912': attribute type 1 has an invalid length. [ 861.251693][ T5823] usb 10-1: Using ep0 maxpacket: 8 [ 861.265074][ T5823] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 861.276641][ T5823] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 861.291667][T15863] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2912'. [ 861.311445][ T5823] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.359440][ T5823] usb 10-1: config 0 descriptor?? [ 861.409779][ T29] audit: type=1400 audit(1772319205.758:14386): avc: denied { write } for pid=15853 comm="syz.6.2909" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 861.410198][T15854] random: crng reseeded on system resumption [ 861.528920][ T29] audit: type=1400 audit(1772319205.758:14387): avc: denied { open } for pid=15853 comm="syz.6.2909" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 861.644956][ T5823] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 861.739824][ T10] usb 7-1: USB disconnect, device number 16 [ 861.852090][ T5823] usb 10-1: USB disconnect, device number 15 [ 862.011600][ T24] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 862.019200][ T24] ath9k_htc: Failed to initialize the device [ 862.037492][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 863.180136][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2920'. [ 863.405330][T15896] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2923'. [ 863.414721][T15896] IPv6: NLM_F_CREATE should be specified when creating new route [ 863.426965][T15896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 863.434407][T15896] IPv6: NLM_F_CREATE should be set when creating new route [ 863.441613][T15896] IPv6: NLM_F_CREATE should be set when creating new route [ 863.701430][T13658] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 863.941022][T13658] usb 7-1: Using ep0 maxpacket: 32 [ 863.949628][T13658] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.960772][T13658] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.970858][T13658] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 863.990105][T13658] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.028093][T13658] usb 7-1: config 0 descriptor?? [ 864.039763][T15901] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2924'. [ 864.143577][T15904] netlink: 'syz.8.2925': attribute type 1 has an invalid length. [ 864.152600][T15904] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2925'. [ 864.496946][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.503148][ T24] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 864.504237][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.519647][T13658] savu 0003:1E7D:2D5A.0053: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 864.662681][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 864.671710][ T24] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 864.680840][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.705699][ T24] usb 8-1: Product: syz [ 864.835776][ T24] usb 8-1: Manufacturer: syz [ 864.919213][ T24] usb 8-1: SerialNumber: syz [ 864.962047][ T24] usb 8-1: config 0 descriptor?? [ 864.985987][ T24] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 865.184848][ T24] ssu100 8-1:0.0: probe with driver ssu100 failed with error -5 [ 866.793418][T13658] usb 8-1: USB disconnect, device number 16 [ 866.842222][ T24] usb 7-1: USB disconnect, device number 17 [ 867.215557][T15932] syzkaller0: entered promiscuous mode [ 867.230280][T15932] syzkaller0: entered allmulticast mode [ 870.179901][T15961] netlink: 'syz.7.2940': attribute type 1 has an invalid length. [ 870.188045][T15961] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2940'. [ 871.741863][T15974] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2943'. [ 872.864809][ T24] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 873.036628][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 873.077182][ T24] usb 10-1: config 0 has no interfaces? [ 873.088738][ T24] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 873.108580][ T24] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 873.129202][ T24] usb 10-1: Manufacturer: syz [ 873.139181][ T24] usb 10-1: config 0 descriptor?? [ 873.284764][T15989] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2948'. [ 873.611402][T15992] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15992 comm=syz.7.2948 [ 873.881600][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 874.055494][T15978] lo speed is unknown, defaulting to 1000 [ 874.092671][ T24] usb 9-1: config 0 has an invalid interface number: 99 but max is 0 [ 874.100764][ T24] usb 9-1: config 0 has no interface number 0 [ 874.363760][ T24] usb 9-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 874.374611][T16006] netlink: 'syz.5.2951': attribute type 1 has an invalid length. [ 874.393452][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.402287][T16006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2951'. [ 874.425059][ T24] usb 9-1: Product: syz [ 874.430084][ T24] usb 9-1: Manufacturer: syz [ 874.507674][ T24] usb 9-1: SerialNumber: syz [ 874.518981][ T24] usb 9-1: config 0 descriptor?? [ 874.573664][ T24] peak_usb 9-1:0.99: probe with driver peak_usb failed with error 99 [ 875.269135][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2954'. [ 875.648027][ T792] usb 10-1: USB disconnect, device number 16 [ 876.285244][T16011] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2953'. [ 876.337452][T13714] usb 9-1: USB disconnect, device number 11 [ 876.606803][ T29] audit: type=1400 audit(1772319220.958:14388): avc: denied { block_suspend } for pid=16021 comm="syz.8.2957" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 876.634665][T16024] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2957'. [ 876.667256][T16024] unsupported nlmsg_type 40 [ 877.788331][T16046] netlink: 'syz.5.2965': attribute type 1 has an invalid length. [ 877.827843][T16046] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2965'. [ 877.851253][T13658] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 878.055154][T13658] usb 8-1: Using ep0 maxpacket: 8 [ 878.079143][T13658] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 878.193087][T13658] usb 8-1: config 0 has no interface number 0 [ 878.209329][T13658] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 878.236943][T13658] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 878.263482][T13658] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 878.383177][T13658] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 878.405930][T13658] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 878.439750][T13658] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.501724][T13658] usb 8-1: config 0 descriptor?? [ 878.527198][T13658] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 878.754004][ T10] usb 8-1: USB disconnect, device number 17 [ 878.781481][ T10] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 878.852511][T13658] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 878.936728][T16060] syzkaller0: entered promiscuous mode [ 878.966611][T16060] syzkaller0: entered allmulticast mode [ 879.052122][ T793] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 879.073639][T13658] usb 9-1: config 0 has an invalid interface number: 20 but max is 0 [ 879.082320][T13658] usb 9-1: config 0 has no interface number 0 [ 879.088393][T13658] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.099924][T13658] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.115231][T13658] usb 9-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 879.146971][T13658] usb 9-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 879.156976][T13658] usb 9-1: New USB device strings: Mfr=51, Product=0, SerialNumber=0 [ 879.165809][T13658] usb 9-1: Manufacturer: syz [ 879.173257][T13658] usb 9-1: config 0 descriptor?? [ 879.252674][ T793] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 879.263185][ T793] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 879.331066][ T793] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 879.356853][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.365563][ T793] usb 6-1: Product: syz [ 879.369798][ T793] usb 6-1: Manufacturer: syz [ 879.387327][ T793] usb 6-1: SerialNumber: syz [ 879.399085][ T793] usb 6-1: config 0 descriptor?? [ 879.409587][T16058] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 879.420558][T16058] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 879.640439][T16058] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 879.648603][T16058] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 879.795500][T13658] usbhid 9-1:0.20: can't add hid device: -71 [ 879.802066][T13658] usbhid 9-1:0.20: probe with driver usbhid failed with error -71 [ 879.816483][T13658] usb 9-1: USB disconnect, device number 12 [ 880.485719][ T793] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 880.735293][ T793] usb 6-1: USB disconnect, device number 20 [ 881.805763][T13658] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 881.995988][T13658] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 882.005171][T13658] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.181976][T16092] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2981'. [ 882.230727][T16096] fuse: Unknown parameter 'fd0x0000000000000003' [ 882.248353][T16092] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16092 comm=syz.5.2981 [ 882.776410][T13658] usb 10-1: config 0 descriptor?? [ 883.851295][ T793] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 884.072940][ T793] usb 8-1: config 0 has an invalid interface number: 20 but max is 0 [ 884.154074][ T793] usb 8-1: config 0 has no interface number 0 [ 884.167785][ T793] usb 8-1: config 0 interface 20 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.252362][ T793] usb 8-1: config 0 interface 20 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.343949][ T793] usb 8-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 884.393557][ T793] usb 8-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 884.403023][ T793] usb 8-1: New USB device strings: Mfr=51, Product=0, SerialNumber=0 [ 884.419873][ T793] usb 8-1: Manufacturer: syz [ 884.433304][ T793] usb 8-1: config 0 descriptor?? [ 884.896737][T13658] usb 10-1: Cannot set autoneg [ 884.902235][T13658] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 885.056257][ T793] usbhid 8-1:0.20: can't add hid device: -71 [ 885.062923][ T793] usbhid 8-1:0.20: probe with driver usbhid failed with error -71 [ 885.089319][ T793] usb 8-1: USB disconnect, device number 18 [ 885.397250][T16135] fuse: Unknown parameter 'fd0x0000000000000003' [ 885.650605][ T793] usb 10-1: USB disconnect, device number 17 [ 885.720622][T16144] fuse: Bad value for 'rootmode' [ 886.017055][T16158] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3005'. [ 886.306605][T16164] fuse: Unknown parameter 'fd0x0000000000000003' [ 886.662017][ T24] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 886.824801][ T24] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 886.837164][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.867325][ T24] usb 8-1: config 0 descriptor?? [ 887.101364][ T793] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 887.281029][ T793] usb 6-1: Using ep0 maxpacket: 16 [ 887.290821][ T793] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 887.300339][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.308546][ T793] usb 6-1: Product: syz [ 887.312907][ T793] usb 6-1: Manufacturer: syz [ 887.320999][ T793] usb 6-1: SerialNumber: syz [ 887.341743][ T793] r8152-cfgselector 6-1: Unknown version 0x0000 [ 887.354371][ T793] r8152-cfgselector 6-1: config 0 descriptor?? [ 887.621183][T13714] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 887.829410][ T793] r8152-cfgselector 6-1: USB disconnect, device number 21 [ 887.857539][T13714] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 888.041595][T13714] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 888.055535][T13714] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.139240][T13714] usb 10-1: Product: syz [ 888.148536][T13714] usb 10-1: Manufacturer: syz [ 888.158887][T13714] usb 10-1: SerialNumber: syz [ 888.174940][T13714] usb 10-1: config 0 descriptor?? [ 888.267227][T13714] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 888.312389][ T9533] udevd[9533]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 888.552766][ T24] usb 8-1: Cannot set autoneg [ 888.560104][ T24] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 889.447213][T16218] syzkaller0: entered promiscuous mode [ 889.466850][T16218] syzkaller0: entered allmulticast mode [ 889.745708][ T10] usb 8-1: USB disconnect, device number 19 [ 890.246256][ T10] usb 10-1: USB disconnect, device number 18 [ 893.213293][T16254] fuse: Unknown parameter '0x0000000000000006' [ 894.580990][ T10] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 894.641037][T13658] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 895.431829][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 895.443754][T13658] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 895.461098][T13658] usb 7-1: config 1 has no interface number 0 [ 895.472196][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 895.479226][T16275] lo speed is unknown, defaulting to 1000 [ 895.491078][T13658] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 895.511982][ T10] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 895.527433][T13658] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 895.538279][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.558839][T13658] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.570453][ T10] usb 10-1: config 0 descriptor?? [ 895.590898][T13658] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 895.601764][T13658] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.609794][T13658] usb 7-1: Product: syz [ 895.614260][T13658] usb 7-1: Manufacturer: syz [ 895.621627][T13658] usb 7-1: SerialNumber: syz [ 895.631336][T16272] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 895.792888][T13714] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 895.803624][ T10] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 895.845638][T16272] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 895.875747][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3045'. [ 895.953241][T13714] usb 9-1: Using ep0 maxpacket: 8 [ 895.966456][T13714] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 895.977123][T13714] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 895.989353][T13714] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 896.010809][T13714] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.024500][T13714] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 896.034935][ T10] usb 10-1: USB disconnect, device number 19 [ 896.041914][T13714] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.157767][T16286] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3049'. [ 896.651184][T16288] netlink: 'syz.6.3044': attribute type 3 has an invalid length. [ 897.205862][T13658] usb 7-1: Incompatible driver and firmware versions [ 897.224314][ T29] audit: type=1326 audit(1772319241.568:14389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.7.3049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07fe59c799 code=0x0 [ 897.804871][T13714] usb 9-1: GET_CAPABILITIES returned 0 [ 897.821545][T13714] usbtmc 9-1:16.0: can't read capabilities [ 898.196504][T16299] netlink: 124 bytes leftover after parsing attributes in process `syz.7.3052'. [ 898.334262][T16308] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3054'. [ 898.386990][T16297] lo speed is unknown, defaulting to 1000 [ 898.467666][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 898.579200][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 898.602986][ T29] audit: type=1326 audit(1772319242.938:14390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.9.3054" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff717b9c799 code=0x0 [ 898.655266][T13714] usb 7-1: USB disconnect, device number 18 [ 898.747789][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 898.786869][ T24] usb 6-1: config 0 has no interfaces? [ 898.815022][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 898.847663][ T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 898.949730][ T24] usb 6-1: Manufacturer: syz [ 899.094826][ T24] usb 6-1: config 0 descriptor?? [ 899.115183][T13658] usb 9-1: USB disconnect, device number 13 [ 899.861579][ T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 900.061487][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 900.113306][ T24] usb 9-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 900.135444][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.178627][ T24] usb 9-1: Product: syz [ 900.204044][ T24] usb 9-1: Manufacturer: syz [ 900.220695][ T24] usb 9-1: SerialNumber: syz [ 900.238202][ T24] usb 9-1: config 0 descriptor?? [ 900.255129][ T24] hub 9-1:0.0: bad descriptor, ignoring hub [ 900.269034][ T24] hub 9-1:0.0: probe with driver hub failed with error -5 [ 900.331286][ C0] ------------[ cut here ]------------ [ 900.337087][ C0] ODEBUG: free active (active state 0) object: ffff88801ebda890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 900.349983][ C0] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#0: swapper/0/0 [ 900.359705][ C0] Modules linked in: [ 900.363791][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 900.374283][ C0] Tainted: [L]=SOFTLOCKUP [ 900.378583][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 900.388638][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 900.394442][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 24 e6 0b 41 56 48 8b 14 dd e0 03 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 8c e9 db 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 900.414054][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010246 [ 900.420116][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 900.428076][ C0] RDX: ffffffff8c1b0320 RSI: ffffffff8c1aff40 RDI: ffffffff90e3e7d0 [ 900.436035][ C0] RBP: 0000000000000001 R08: ffff88801ebda890 R09: ffffffff8bb2b860 [ 900.443999][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1aff40 [ 900.451957][ C0] R13: ffffffff8bb2b8a0 R14: ffffffff8a7b9140 R15: ffffc90000007b38 [ 900.459906][ C0] FS: 0000000000000000(0000) GS:ffff888124347000(0000) knlGS:0000000000000000 [ 900.468827][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 900.475401][ C0] CR2: 00002000000eb030 CR3: 00000000569e0000 CR4: 00000000003526f0 [ 900.483366][ C0] Call Trace: [ 900.486623][ C0] [ 900.489441][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 900.495062][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 900.500850][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 900.506399][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 900.512451][ C0] ? mark_held_locks+0x40/0x70 [ 900.517194][ C0] ? kasan_quarantine_put+0x104/0x240 [ 900.522548][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 900.527719][ C0] ? rose_timer_expiry+0x53f/0x630 [ 900.532815][ C0] kfree+0x38f/0x6b0 [ 900.536687][ C0] rose_timer_expiry+0x53f/0x630 [ 900.541609][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 900.547042][ C0] call_timer_fn+0x19a/0x670 [ 900.551615][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 900.556702][ C0] ? debug_object_activate+0x331/0x490 [ 900.562144][ C0] ? __run_timers+0x747/0xb30 [ 900.566803][ C0] ? rcu_is_watching+0x12/0xc0 [ 900.571552][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 900.576986][ C0] __run_timers+0x757/0xb30 [ 900.581480][ C0] ? __pfx___run_timers+0x10/0x10 [ 900.586491][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 900.591519][ C0] run_timer_base+0x114/0x190 [ 900.596178][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 900.601365][ C0] run_timer_softirq+0x1a/0x50 [ 900.606111][ C0] handle_softirqs+0x1eb/0x9e0 [ 900.610849][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 900.616117][ C0] __irq_exit_rcu+0xef/0x150 [ 900.620682][ C0] irq_exit_rcu+0x9/0x30 [ 900.624905][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 900.630516][ C0] [ 900.633427][ C0] [ 900.636331][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 900.642289][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 900.647891][ C0] Code: 98 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 bc 1b 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 900.667477][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 900.673524][ C0] RAX: 0000000001dd15eb RBX: ffffffff8e4975c0 RCX: ffffffff8b8fcc75 [ 900.681478][ C0] RDX: 0000000000000000 RSI: ffffffff8de72aaa RDI: ffffffff8c1af220 [ 900.689439][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 900.697389][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 900.705354][ C0] R13: 0000000000000000 R14: ffffffff90d97910 R15: 0000000000000000 [ 900.713309][ C0] ? ct_kernel_exit+0x125/0x180 [ 900.718135][ C0] default_idle+0x9/0x10 [ 900.722358][ C0] default_idle_call+0x6c/0xb0 [ 900.727096][ C0] do_idle+0x35b/0x4b0 [ 900.731151][ C0] ? __pfx_do_idle+0x10/0x10 [ 900.735727][ C0] cpu_startup_entry+0x4f/0x60 [ 900.740463][ C0] rest_init+0x251/0x260 [ 900.744688][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 900.750211][ C0] start_kernel+0x47f/0x480 [ 900.754697][ C0] x86_64_start_reservations+0x24/0x30 [ 900.760130][ C0] x86_64_start_kernel+0x12b/0x130 [ 900.765224][ C0] common_startup_64+0x13e/0x148 [ 900.770141][ C0] [ 900.773142][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 900.780392][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 900.790867][ C0] Tainted: [L]=SOFTLOCKUP [ 900.795160][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 900.805184][ C0] Call Trace: [ 900.808434][ C0] [ 900.811252][ C0] dump_stack_lvl+0x100/0x190 [ 900.815913][ C0] vpanic+0x552/0x970 [ 900.819867][ C0] ? __pfx_vpanic+0x10/0x10 [ 900.824346][ C0] panic+0xd1/0xe0 [ 900.828037][ C0] ? __pfx_panic+0x10/0x10 [ 900.832427][ C0] ? check_panic_on_warn+0x1f/0x90 [ 900.837516][ C0] check_panic_on_warn.cold+0x19/0x34 [ 900.842858][ C0] ? debug_print_object+0x18e/0x2a0 [ 900.848025][ C0] __warn.cold+0x191/0x348 [ 900.852412][ C0] __report_bug+0x296/0x3d0 [ 900.856891][ C0] ? debug_print_object+0x18e/0x2a0 [ 900.862063][ C0] ? __pfx___report_bug+0x10/0x10 [ 900.867062][ C0] ? lock_acquire+0x1cf/0x380 [ 900.871718][ C0] ? mark_held_locks+0x40/0x70 [ 900.876467][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 900.882249][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 900.887418][ C0] report_bug_entry+0xe1/0x290 [ 900.892172][ C0] ? debug_print_object+0x19b/0x2a0 [ 900.897341][ C0] handle_bug+0x1c9/0x2a0 [ 900.901646][ C0] exc_invalid_op+0x17/0x50 [ 900.906122][ C0] asm_exc_invalid_op+0x1a/0x20 [ 900.910949][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 900.916733][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 24 e6 0b 41 56 48 8b 14 dd e0 03 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 8c e9 db 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 900.936309][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010246 [ 900.942349][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 900.950288][ C0] RDX: ffffffff8c1b0320 RSI: ffffffff8c1aff40 RDI: ffffffff90e3e7d0 [ 900.958227][ C0] RBP: 0000000000000001 R08: ffff88801ebda890 R09: ffffffff8bb2b860 [ 900.966169][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1aff40 [ 900.974113][ C0] R13: ffffffff8bb2b8a0 R14: ffffffff8a7b9140 R15: ffffc90000007b38 [ 900.982058][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 900.987668][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 900.993272][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 900.999072][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 901.004598][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 901.010640][ C0] ? mark_held_locks+0x40/0x70 [ 901.015379][ C0] ? kasan_quarantine_put+0x104/0x240 [ 901.020724][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 901.025908][ C0] ? rose_timer_expiry+0x53f/0x630 [ 901.030997][ C0] kfree+0x38f/0x6b0 [ 901.034873][ C0] rose_timer_expiry+0x53f/0x630 [ 901.039787][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 901.045233][ C0] call_timer_fn+0x19a/0x670 [ 901.049799][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 901.054882][ C0] ? debug_object_activate+0x331/0x490 [ 901.060312][ C0] ? __run_timers+0x747/0xb30 [ 901.064965][ C0] ? rcu_is_watching+0x12/0xc0 [ 901.069704][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 901.075137][ C0] __run_timers+0x757/0xb30 [ 901.079619][ C0] ? __pfx___run_timers+0x10/0x10 [ 901.084624][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 901.089626][ C0] run_timer_base+0x114/0x190 [ 901.094277][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 901.099453][ C0] run_timer_softirq+0x1a/0x50 [ 901.104190][ C0] handle_softirqs+0x1eb/0x9e0 [ 901.108928][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 901.114189][ C0] __irq_exit_rcu+0xef/0x150 [ 901.118752][ C0] irq_exit_rcu+0x9/0x30 [ 901.122967][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 901.128578][ C0] [ 901.131485][ C0] [ 901.134395][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 901.140344][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 901.145946][ C0] Code: 98 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 bc 1b 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 901.165534][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 901.171570][ C0] RAX: 0000000001dd15eb RBX: ffffffff8e4975c0 RCX: ffffffff8b8fcc75 [ 901.179510][ C0] RDX: 0000000000000000 RSI: ffffffff8de72aaa RDI: ffffffff8c1af220 [ 901.187449][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 901.195400][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 901.203340][ C0] R13: 0000000000000000 R14: ffffffff90d97910 R15: 0000000000000000 [ 901.211288][ C0] ? ct_kernel_exit+0x125/0x180 [ 901.216119][ C0] default_idle+0x9/0x10 [ 901.220332][ C0] default_idle_call+0x6c/0xb0 [ 901.225068][ C0] do_idle+0x35b/0x4b0 [ 901.229110][ C0] ? __pfx_do_idle+0x10/0x10 [ 901.233676][ C0] cpu_startup_entry+0x4f/0x60 [ 901.238413][ C0] rest_init+0x251/0x260 [ 901.242627][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 901.248148][ C0] start_kernel+0x47f/0x480 [ 901.252624][ C0] x86_64_start_reservations+0x24/0x30 [ 901.258056][ C0] x86_64_start_kernel+0x12b/0x130 [ 901.263140][ C0] common_startup_64+0x13e/0x148 [ 901.268055][ C0] [ 901.271387][ C0] Kernel Offset: disabled [ 901.275706][ C0] Rebooting in 86400 seconds..