last executing test programs: 49m57.702942745s ago: executing program 32 (id=429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) 49m27.828101806s ago: executing program 33 (id=590): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) 48m56.698413928s ago: executing program 34 (id=707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 48m41.418787177s ago: executing program 35 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}}, 0x10) 48m12.191398272s ago: executing program 36 (id=955): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x79f, 0xd7b, 0x10000000, 0x7f, 0xc}, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010100, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, 0x0, 0xfdef) 48m4.548912996s ago: executing program 37 (id=1007): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x2, 0x10, 0x72748f52b8af0932}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x3c}}, 0x20024090) 47m56.227450497s ago: executing program 38 (id=1057): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_FLAGS={0x8, 0x8, 0x372}]}, 0x20}}, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 47m39.034987593s ago: executing program 39 (id=1126): socket$nl_generic(0x10, 0x3, 0x10) r0 = fanotify_init(0x10, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') fanotify_mark(r0, 0x11, 0x8000013, r1, 0x0) preadv(r1, &(0x7f0000001400), 0x0, 0xc002a3, 0x0) 47m30.092507708s ago: executing program 40 (id=1147): gettid() writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() tkill(r5, 0x2a) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) epoll_create(0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2021}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 47m22.642941908s ago: executing program 41 (id=1196): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) unshare(0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r1}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) 47m21.692660141s ago: executing program 42 (id=1202): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f00000001c0)='BU\v\x1e\xa6\xdcV\xec7\xecX\x8c\\\xf6\xd4Z\x94i\xe2\x13.\x1e-)\xb3\xa4\xf8\to\xebA\x99f\xbb\x18\xda\xbe\xa1m\xe4\xba\x9d\x14\b\bj\x97\xc7\xe0\xf4)\xc1\x7f0\a5J\xc3\x16<\xd5SP\x96\x96_\xc0\xd0\x9dc\xad\x8be\xcb\x1c\x85\x00\xcd\xf0\xd2\xcaY\xca9\x1b\xdfnE(\x03\xf8E\x95\x857\xf8\x7f\x15\xf1\x88G\xdeY\xc3\x12n\xe2bz\xd9\b\xf6IS\xeasy\xa1\x83\xfcb\xdbP\x9c\n\xbdF\xad\x84\xdd\r\x03+\xfd\xc4') 47m18.401276041s ago: executing program 43 (id=1208): open_by_handle_at(0xffffffffffffffff, &(0x7f00000011c0)=@nfs={0x90, 0x24, {0x4, 0x0, 0x7fffffff, 0x80, "c9c12c175ebae6e8e10160e5ecc936cc666b90272c370699bfe921a85b38ca66ca3454b0e9c232b9d7bb9bef8c3dc67462365c7963a54803ea4e65c27e2d4dbd6833c8a5c74fe81cc08f8ba6f808a1e2ba4919b72b3a7c2983b34b4b6457f439e4e1a56a63c18c69f82a44e7a1a4f8212287cbb1d5678bce4b9069e37cf965e5"}}, 0x111180) 47m13.234109826s ago: executing program 44 (id=1214): pipe2$9p(&(0x7f00000003c0)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff002000000800395032303030"], 0x15) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x249c, {0x8}, 0x41dd, 0x0, 0x0, 0x1, 0x0, 0x5, 0x7, 0x6, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x3}}, 0xa0) 46m38.175544572s ago: executing program 45 (id=1397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 46m31.580691541s ago: executing program 46 (id=1459): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @multicast1}, 0x2, 0x3, 0x2, 0x1}}, 0x80, 0x0}, 0x4048850) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005234538ba55"], 0xfe33) 46m12.426101803s ago: executing program 47 (id=1530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 46m5.658512147s ago: executing program 48 (id=1552): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b70000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) recvfrom(r0, &(0x7f0000000040)=""/156, 0x9c, 0x112, 0x0, 0x0) 46m2.673988589s ago: executing program 49 (id=1516): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x7, 0x7ffc0001}]}) setns(0xc9, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) 45m36.639302097s ago: executing program 50 (id=1722): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 45m22.02794061s ago: executing program 51 (id=1721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r1}, 0xc) 45m3.417408549s ago: executing program 52 (id=1858): getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x800, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0x2}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x4, 0x485, 0x9, 0x0, 0xb6, 0x2}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x58}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0x2c}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) 44m57.389212215s ago: executing program 53 (id=1832): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @b={0x5, 0x2, 0x3, 0x1, 0x3, 0x5, 0x3, {}, 0x10, 0xb, 0xf0, 0x7, 0x5, "34b08167f2"}}, 0x15) 44m16.563106911s ago: executing program 54 (id=1971): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018"], &(0x7f0000000680)='syzkaller\x00'}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000001c0)) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000e0000002f4900007f00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r4}, 0x38) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000300)='r:_est/event1 ./file0:0x0', 0x19) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4d0, &(0x7f00000013c0)="$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") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'veth1\x00'}) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000740)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[], 0x4, 0x2ae, &(0x7f0000000d00)="$eJzs3TFrU1sAB/DTtKWPPlo6PZ4uHnRyCbWzQ4u0WAwo2ggqCLf0VkOuScnNkBSHOrsIDg5+A3F0E8Qv0MXP4FaE0qmTlXpb2xScmjZDf78l/+SfczjnXjh3vFs337yor+bl1aQdSrNDoTQbQml3KEyFUji0Ea6/ffX+9YNHj+/MVSrz92NcmFu6MRNjnLzy5cnLj1e/tv99+Gny81jYnHq6tT3zffO/zUtbP5ee1/JYy2Oj2Y5JXG4228lylsaVWl4vx3gvS5M8jbVGnrZ6+tWsubbWjUljZWJ8rZXmeUwa3VhPu7HdjO1WNybPklojlsvlODEeOI3qh929vbC9Vxj0ajh/7v/FduxQ/yeEnY1OtVMtPot+YbEyPx1/Gz0atdPpVIdD+DZUfC362NuPhvGD8TMn+8NHy7Wi3+9u3a2cGD8WVs526wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxg5fjH1NGvO51Odbjoy3/ri7SwWJmfPvhDbz8SLo+c2zYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FTy7no9ybK01Zdwuw/zlPq4nt7wLoRwJjPvX8gzWrMgDCYM+mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA89f7EnsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuqry7Xk+yLG31K/z4v5j4WDXoPQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAaf0KAAD//0eSZmc=") 44m13.373101068s ago: executing program 55 (id=1994): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/36, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) unshare(0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r1, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000000c0)}, 0x20) 43m50.570697268s ago: executing program 56 (id=2173): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x1, 0x0, 0x0, {0x8, 0x1, 0x0, 0x2}, 0x0, 0x3ff, 0xc}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x2, 0x1, 0x0, {0xfffffffffffffffa, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xab}}]}, 0x68}}, 0x810) 20m28.45449981s ago: executing program 8 (id=7351): memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000008b, 0x0, 0x0, 0x0, 0x0) 20m27.449296193s ago: executing program 8 (id=7354): prctl$PR_SET_MM(0x41555856, 0x9, &(0x7f0000ffa000/0x3000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000520001002abd7000fcdbdf250200000100", @ANYRES32=r1, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="0000060004000000000006000a0000000000050004000000000002007d0000005300", @ANYRES32=r3, @ANYBLOB="0000020000000000000003000b00000000000100", @ANYRES32=r4], 0x30}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000001000000000000fcffffff00000000000000000000001000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000650901000000000066000000060000000000009af8ff000000005d9100000002000037010000f8ffffffb702000008000079f662f1848fe82a892700b70300000200000056000000060000002c93000000000000b5030000000000008500000078000000b70000000000"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@mcast1}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r7, &(0x7f0000004940)=[{&(0x7f00000047c0)=""/68, 0x44}], 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 20m26.352890159s ago: executing program 8 (id=7356): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400d0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181a82, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioprio_set$uid(0x3, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x43, 0xa0, 0x128, 0x98, 0x200, 0x178, 0x178, 0x200, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x98, 0xf8, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x0, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x2, 0x6, 0x0, 0x1, 0x1], 0x3}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x5, 0xce, 0x1f8, 'snmp\x00', 'syz0\x00', {0xc3e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) 20m24.62649137s ago: executing program 8 (id=7360): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x60, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 20m21.583612423s ago: executing program 8 (id=7367): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400d0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181a82, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioprio_set$uid(0x3, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x43, 0xa0, 0x128, 0x98, 0x200, 0x178, 0x178, 0x200, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x98, 0xf8, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x0, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x2, 0x6, 0x0, 0x1, 0x1], 0x3}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x5, 0xce, 0x1f8, 'snmp\x00', 'syz0\x00', {0xc3e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) 20m18.664520092s ago: executing program 8 (id=7371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x20000000, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb", 0x17}], 0x1}, 0x4005) 20m3.353154245s ago: executing program 57 (id=7371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x20000000, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb", 0x17}], 0x1}, 0x4005) 13m34.831979335s ago: executing program 7 (id=7980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r1) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(0xffffffffffffffff, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pwrite64$ublk_bdev(r0, &(0x7f0000000180), 0x0, 0x7f) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000400)) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x801, 0x0, 0x2}, 0x30, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) bpf$BPF_LINK_CREATE_XDP(0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x37}, 0x40) socket$inet_mptcp(0x2, 0x1, 0x106) 13m31.330290378s ago: executing program 7 (id=7983): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) 13m30.84182384s ago: executing program 7 (id=7987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 13m29.472895722s ago: executing program 7 (id=7988): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir1\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, 'work'}}, {@nfs_export_on}, {@uuid_off}, {@redirect_dir_on}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt/dir2\x00', 0x1) 13m23.899123854s ago: executing program 7 (id=7995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(0xffffffffffffffff, 0x9, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13m21.307986036s ago: executing program 7 (id=7999): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ubifs\x00', 0x208400, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) 13m5.670737777s ago: executing program 58 (id=7999): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ubifs\x00', 0x208400, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) 12m39.734457802s ago: executing program 3 (id=8052): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_tcp(0x2, 0x1, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x4, 0x202, 0x7d, 0xffffffffffffffff, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x800, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 12m38.325073806s ago: executing program 3 (id=8055): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nullb/nullb1/zone_size\x00', 0x20201, 0x12f) write(r1, &(0x7f00000001c0)='4\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) 12m36.771523373s ago: executing program 3 (id=8056): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0) write(r2, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1234567890\n', 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r6, &(0x7f00000004c0)='\n', 0x1) socket(0x10, 0x803, 0x0) 12m35.311975308s ago: executing program 3 (id=8059): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 12m33.710014966s ago: executing program 3 (id=8063): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 12m30.015254733s ago: executing program 3 (id=8065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d571", 0xf2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x110000) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r9, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000000280)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12102) 12m14.233023538s ago: executing program 59 (id=8065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d571", 0xf2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x110000) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r9, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000000280)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12102) 11m10.315687934s ago: executing program 5 (id=8143): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_tcp(0x2, 0x1, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x4, 0x202, 0x7d, 0xffffffffffffffff, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x800, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 11m5.421809911s ago: executing program 5 (id=8148): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x58}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x14) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$igmp(0x2, 0x3, 0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x502902ab}, [@map_fd={0x18, 0x6}]}, &(0x7f00000002c0)='GPL\x00', 0x13, 0x92, &(0x7f0000000400)=""/146, 0x0, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x3, 0x81c6, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000740)=[0xffffffffffffffff, r5, r4], &(0x7f0000000780)=[{0x5, 0x5, 0x9, 0x5}, {0x2, 0x5, 0xe}, {0x0, 0x1, 0x5, 0x2}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x4, 0xf, 0x7}, {0x4, 0x4, 0x4, 0x8}, {0x0, 0x5, 0x6, 0xc}, {0x4, 0x1, 0x10001, 0x2}, {0x2, 0x5, 0x6, 0x4}, {0x0, 0x3}], 0x10, 0xc}, 0x94) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x24000000) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) io_uring_setup(0x7, &(0x7f0000000100)={0x0, 0xc8a0, 0xc018, 0x8000008, 0xc1}) 11m3.610409914s ago: executing program 5 (id=8151): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r4, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 10m59.55667496s ago: executing program 5 (id=8157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000240)='fdinfo/3\x00') r6 = getpid() syz_pidfd_open(r6, 0x0) setns(r5, 0x4000000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(0xffffffffffffffff, 0x9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) 10m56.694967088s ago: executing program 5 (id=8161): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r4, 0x400, 0x1) 10m51.353869684s ago: executing program 5 (id=8164): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, 0x0) r1 = syz_usbip_server_init(0x1) write$usbip_server(r1, 0x0, 0x35) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) 10m34.410397587s ago: executing program 60 (id=8164): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, 0x0) r1 = syz_usbip_server_init(0x1) write$usbip_server(r1, 0x0, 0x35) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) 7m4.624835565s ago: executing program 2 (id=8528): mkdirat(0xffffffffffffff9c, 0x0, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000d5}, 0x4c040) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffe}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 6m59.293820531s ago: executing program 1 (id=8532): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea8"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd453, 0x0, 0x0, 0x0, 0x100}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad4300000000000000000f"], 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000002680)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="00002abd7000fddbdf256a00000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000000000500d200000000000500d200020000000500d2000e0000000500d200080000000a00060008021100000100000a00060008021100000000000500d200070000000500d20007000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000081}, 0x4080) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, &(0x7f0000000400)={'ipvs\x00'}, &(0x7f0000000440)=0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) syz_emit_ethernet(0x89, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@llc_tr={0x11, {@snap={0x1, 0xab, "faff", "e7205f", 0x6005, "d69a7891e980d4adbac2481165547e5e7c4e64705a89b4a42f09d7f914f952e2007f15a139f8681e00602fd57916d66967c44759bcb374c36fd7a97a0f627f68b2c04ccf1539caa9881e1700545bc367773a595175a1119c6bdf071806541a8d91743119dec0eb1f8184952efc7a95128b06"}}}}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 6m58.837365762s ago: executing program 2 (id=8533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) dup(r1) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r3, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pwrite64$ublk_bdev(r0, &(0x7f0000000180), 0x0, 0x7f) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000400)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x801, 0x0, 0x2}, 0x30, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) bpf$BPF_LINK_CREATE_XDP(0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x37}, 0x40) socket$inet_mptcp(0x2, 0x1, 0x106) 6m56.454664669s ago: executing program 2 (id=8535): r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={0xffffffffffffffff, &(0x7f00000014c0), 0x0}, 0x20) writev(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf2502000000", @ANYRES32=r7], 0x1c}}, 0x4008054) socket$nl_route(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000340)="6e08b8eb711bb392b47914c31074289145b335653fc80bf630bca822187c2f98453d18313202b5e8e3cfd4346c4d7defa34c7a269832bfb089e82b4f9f44b3f8864523a285a8db6eb993fe3ce076d75c425168c2b7ab63e705b35deb5c4d9693ac3c59665978cb8f8f6a2aa903a67a550259ef55b0c0f756b42322626659c743e44f88", 0x83}, {&(0x7f0000000580)}], 0x2) 6m54.533396555s ago: executing program 2 (id=8539): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000300)='p:test/event1 ./file0:0x0 ar', 0x1c) 6m53.583674817s ago: executing program 2 (id=8540): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r4, 0x400, 0x1) 6m52.685813258s ago: executing program 1 (id=8541): mkdirat(0xffffffffffffff9c, 0x0, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000d5}, 0x4c040) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffe}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 6m52.353428136s ago: executing program 1 (id=8542): add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x5400}], 0x1, &(0x7f00000002c0), 0x0, 0x0) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4111, 0x100f}], 0x5a) 6m50.0714468s ago: executing program 2 (id=8543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r1) writev(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r3, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pwrite64$ublk_bdev(r0, &(0x7f0000000180), 0x0, 0x7f) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000400)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x801, 0x0, 0x2}, 0x30, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) bpf$BPF_LINK_CREATE_XDP(0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x37}, 0x40) socket$inet_mptcp(0x2, 0x1, 0x106) 6m50.006357252s ago: executing program 1 (id=8544): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 6m47.375256305s ago: executing program 1 (id=8546): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 6m45.902744189s ago: executing program 1 (id=8549): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea8"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd453, 0x0, 0x0, 0x0, 0x100}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad4300000000000000000f"], 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000002680)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="00002abd7000fddbdf256a00000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000000000500d200000000000500d200020000000500d2000e0000000500d200080000000a00060008021100000100000a00060008021100000000000500d200070000000500d20007000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000081}, 0x4080) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, &(0x7f0000000400)={'ipvs\x00'}, &(0x7f0000000440)=0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) syz_emit_ethernet(0x89, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@llc_tr={0x11, {@snap={0x1, 0xab, "faff", "e7205f", 0x6005, "d69a7891e980d4adbac2481165547e5e7c4e64705a89b4a42f09d7f914f952e2007f15a139f8681e00602fd57916d66967c44759bcb374c36fd7a97a0f627f68b2c04ccf1539caa9881e1700545bc367773a595175a1119c6bdf071806541a8d91743119dec0eb1f8184952efc7a95128b06"}}}}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 6m34.574180258s ago: executing program 61 (id=8543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r1) writev(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r3, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pwrite64$ublk_bdev(r0, &(0x7f0000000180), 0x0, 0x7f) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000400)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x801, 0x0, 0x2}, 0x30, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) bpf$BPF_LINK_CREATE_XDP(0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x37}, 0x40) socket$inet_mptcp(0x2, 0x1, 0x106) 6m29.197936356s ago: executing program 62 (id=8549): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea8"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd453, 0x0, 0x0, 0x0, 0x100}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad4300000000000000000f"], 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000002680)=ANY=[@ANYBLOB="00000000f7732cc717aef98a06eb005e36afc96409aad1d9c4dfee23c16b1b6a7ef98129a12767f7336f2b9f9796f18c5aeccd43bf067dddd065d27ae3efb124db2558ba1ae50c8e028f32a3856284bb744e7f00000000000000e0b2fc9fa34a366f013820dbcd19c7b65a1e4899a97f7824656415e81dcb7fb62fe1270087add83a4c2ed0d1204bbd6421064e9a48968e009bf8500ce24d8fc03138a1c8ac9dd3bc8097e21a318b654990f6223cbf3ecc80d3a4c2110e2854ac3031d68fd22cc5e6d1b87991f9b113e72a795d6fefb226c47dda727a5a6c5d02dbae077f6aece2fd36141613fa86f0c4653f88a1e718053cb87bd0befe45ace78339ebb7a23d9135eb979d1eab0257bf7d3ff65a49a60a4e5f89864abbfc8e2f0f828b7aea388f73f2d245fdeed43b73730f83e274d03ec63e0a755dd8a956dd81b65d61abc0d5b2bbed8f295a2b3d471aeffbe7ca69465aff6c5b29138098d7652ab7e52b41c37df27e7b73cd6091d70032a3ce0066fd62a5710e98574ec15f17ecebc673ce2d7fb713bcf73646562e", @ANYRES16=r7, @ANYBLOB="00002abd7000fddbdf256a00000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000000000500d200000000000500d200020000000500d2000e0000000500d200080000000a00060008021100000100000a00060008021100000000000500d200070000000500d20007000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000081}, 0x4080) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, &(0x7f0000000400)={'ipvs\x00'}, &(0x7f0000000440)=0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) syz_emit_ethernet(0x89, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@llc_tr={0x11, {@snap={0x1, 0xab, "faff", "e7205f", 0x6005, "d69a7891e980d4adbac2481165547e5e7c4e64705a89b4a42f09d7f914f952e2007f15a139f8681e00602fd57916d66967c44759bcb374c36fd7a97a0f627f68b2c04ccf1539caa9881e1700545bc367773a595175a1119c6bdf071806541a8d91743119dec0eb1f8184952efc7a95128b06"}}}}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 13.292408573s ago: executing program 4 (id=9195): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffe, 0x34014c40, 0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 9.229372497s ago: executing program 6 (id=9204): sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x48104}, 0x400d0) sched_setattr(0x0, &(0x7f0000000280)={0x7d, 0x6, 0x8, 0x2, 0x0, 0xc, 0x40000000000001, 0xfffffe0000000002, 0xfa11, 0xf7ffffff}, 0x0) 8.909914174s ago: executing program 6 (id=9205): syz_open_dev$video4linux(&(0x7f0000000000), 0x80000000000ffff, 0x20002) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc0803, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r3, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7cb, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYRES16=r2], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300), 0x10}, 0x94) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0x0) 7.945482216s ago: executing program 4 (id=9207): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.553186138s ago: executing program 0 (id=9208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000001340)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a", 0x8d}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff53761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fdff01000000000000549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3d3c6f0d17be3ee7", 0xa0}, {&(0x7f0000000140)="de21cf0a7caa580c2ee9f858f448439a91d577dc48e04d539e17cf5357ff6cc0848e8bdfe13b6da3724e6fb7ef168cc77b41daf55a31", 0x36}, {&(0x7f0000000540)="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", 0xddf}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 6.189824407s ago: executing program 6 (id=9210): syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b514090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="ef", 0x1}], 0x1, 0x805, 0x1ff) 6.176541867s ago: executing program 9 (id=9211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fadadf25270800000a000300", @ANYRES32=r2, @ANYBLOB="04005f0006003600387600000a0006"], 0x34}, 0x1, 0x0, 0x0, 0x440c4}, 0x4) 5.925372473s ago: executing program 9 (id=9212): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0xffffffff91020258, 0x200, 0x1, 0x4, 0x992, 0x0, 0x0, 0x124, 0x5}}, 0x50) 5.803045616s ago: executing program 9 (id=9213): mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./sys/module/tcp_cubic/parameters/hystart\x00', 0x7f) mount(0x0, &(0x7f00000000c0)='./sys/module/tcp_cubic/parameters/hystart\x00', &(0x7f0000000040)='tracefs\x00', 0x2183000, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000210557510110f3020fda9010203010902240001de0d000809041f0b02511bdcfc09058e03000203070909050e", @ANYRES64], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/tcp_cubic/parameters/hystart\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000300)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/48, 0x30}) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000009c0)={0x1, 0x0, [{0x2000, 0x71, &(0x7f0000000400)=""/113}]}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) 5.685900329s ago: executing program 4 (id=9214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6", 0xf5) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x110000) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r9, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000000280)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12102) 4.575145324s ago: executing program 4 (id=9215): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.152751264s ago: executing program 6 (id=9216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 3.373273822s ago: executing program 4 (id=9217): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x38, &(0x7f0000000100)="900100"/56) 2.832762844s ago: executing program 0 (id=9218): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f00000003c0)='-1\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.446468823s ago: executing program 0 (id=9219): syz_open_dev$video4linux(&(0x7f0000000000), 0x80000000000ffff, 0x20002) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc0803, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r3, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7cb, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYRES16=r2], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300), 0x10}, 0x94) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0x0) 1.69185889s ago: executing program 6 (id=9220): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x103902) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 1.379304068s ago: executing program 9 (id=9221): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) 1.185233432s ago: executing program 0 (id=9222): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0xffffffff91020258, 0x200, 0x1, 0x4, 0x992, 0x0, 0x0, 0x124, 0x5}}, 0x50) 1.126947014s ago: executing program 0 (id=9223): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) listen(r2, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) ppoll(&(0x7f0000000240)=[{r2, 0x5400}], 0x1, &(0x7f00000002c0), 0x0, 0x0) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_UNLOCK(r4, 0xc) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4111, 0x100f}], 0x5a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}, 0x20) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r5, 0xcd) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x10000, 0x5, 0x8001, 0x8000, 0x507, 0x4, 0x4}) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r0) 781.148051ms ago: executing program 0 (id=9224): syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b514090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="ef", 0x1}], 0x1, 0x805, 0x1ff) 293.343743ms ago: executing program 9 (id=9225): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/kmsg\x00', 0x1, 0x0) lseek(r0, 0x20, 0x1) 98.576447ms ago: executing program 4 (id=9226): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xb66, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 96.867587ms ago: executing program 9 (id=9227): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200076a0ec20749380000000a0304004e234e2202000100ffff00000000000100"/56, @ANYRES32=0x0, @ANYBLOB="050000001306000008000001000000000800030011"], 0x54}}, 0x20004010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) 0s ago: executing program 6 (id=9228): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a001600250000000c600e41b0000900ac00081f25000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) close(0xffffffffffffffff) kernel console output (not intermixed with test programs): USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2459.830533][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2459.838587][T31009] usb 1-1: Manufacturer: syz [ 2459.985854][T31009] usb 1-1: config 0 descriptor?? [ 2460.001653][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2460.060264][T29177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2460.115193][T29177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2460.234552][T31009] rc_core: IR keymap rc-hauppauge not found [ 2460.255471][T31009] Registered IR keymap rc-empty [ 2460.469813][T31009] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2460.502732][T31009] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27 [ 2460.635369][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 2460.888563][ T8] usb 1-1: USB disconnect, device number 15 [ 2461.602970][ T2380] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8138'. [ 2467.689565][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.699140][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.853205][T21872] Bluetooth: hci4: link tx timeout [ 2467.859163][T21872] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 2467.874506][T21872] Bluetooth: hci4: link tx timeout [ 2467.879694][T21872] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 2467.888854][T21872] Bluetooth: hci4: link tx timeout [ 2467.897424][T21872] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 2467.909887][T21872] Bluetooth: hci4: link tx timeout [ 2467.919218][T21872] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 2467.928353][T21872] Bluetooth: hci4: link tx timeout [ 2467.937327][T21872] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 2467.947279][T21872] Bluetooth: hci4: link tx timeout [ 2467.952833][T21872] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 2468.077603][ T2410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8150'. [ 2468.841861][ T5811] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2469.082190][ T5811] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2469.091764][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2469.113731][ T5811] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2469.141483][ T5811] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2469.149610][ T5811] usb 5-1: Manufacturer: syz [ 2469.217502][ T5811] usb 5-1: config 0 descriptor?? [ 2469.805197][ T5811] rc_core: IR keymap rc-hauppauge not found [ 2469.811632][ T5811] Registered IR keymap rc-empty [ 2469.916089][T21872] Bluetooth: hci4: command 0x0406 tx timeout [ 2469.949140][ T5811] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2469.963818][ T5811] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 2469.992137][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 2470.532142][ T5811] usb 5-1: USB disconnect, device number 2 [ 2471.344124][ T2422] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8153'. [ 2472.034660][ T2448] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 2472.043833][ T2448] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 2472.052460][ T2448] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 2472.619149][ T2446] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:0": -EINTR [ 2472.767642][ T1914] IPVS: starting estimator thread 0... [ 2472.944189][ T2450] IPVS: using max 23 ests per chain, 55200 per kthread [ 2480.811368][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2481.053428][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2481.217319][ T2486] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8163'. [ 2481.635293][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2481.726115][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2481.990596][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2482.234144][ T9] usb 5-1: Manufacturer: syz [ 2482.302897][ T9] usb 5-1: config 0 descriptor?? [ 2483.321407][ T9] rc_core: IR keymap rc-hauppauge not found [ 2483.351540][ T9] Registered IR keymap rc-empty [ 2485.021413][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2485.043002][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 2485.156414][ T9] usb 5-1: USB disconnect, device number 3 [ 2486.595369][ T923] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2486.958253][ T2527] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 2486.967308][ T2527] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 2486.977120][ T2527] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 2487.521195][ T2525] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:0": -EINTR [ 2487.661453][T31009] IPVS: starting estimator thread 0... [ 2487.941365][ T2531] IPVS: using max 22 ests per chain, 52800 per kthread [ 2490.988385][ T2534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2494.324757][ T2563] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 2494.331332][ T2563] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2494.422978][ T2563] vhci_hcd vhci_hcd.0: Device attached [ 2494.741655][ T9] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 2495.610189][ T2566] vhci_hcd: connection reset by peer [ 2496.761405][T29177] vhci_hcd: stop threads [ 2496.765721][T29177] vhci_hcd: release socket [ 2496.831466][T29177] vhci_hcd: disconnect device [ 2497.692498][ T2588] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2497.700703][ T2588] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2497.709338][ T2588] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2498.471039][T21872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2498.486266][T21872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2498.505562][T21872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2498.537862][T21872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2498.546753][T21872] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2498.554312][T21872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2498.654874][ T2595] wg2 speed is unknown, defaulting to 1000 [ 2500.302957][ T9] vhci_hcd: vhci_device speed not set [ 2500.631599][T31551] Bluetooth: hci3: command tx timeout [ 2500.865168][ T2595] chnl_net:caif_netlink_parms(): no params data found [ 2501.627893][T24392] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 2501.637140][T24392] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2501.796170][ T2595] bridge0: port 1(bridge_slave_0) entered blocking state [ 2501.891517][ T2595] bridge0: port 1(bridge_slave_0) entered disabled state [ 2501.898826][ T2595] bridge_slave_0: entered allmulticast mode [ 2501.933026][ T2595] bridge_slave_0: entered promiscuous mode [ 2501.945335][ T2595] bridge0: port 2(bridge_slave_1) entered blocking state [ 2501.955977][ T2595] bridge0: port 2(bridge_slave_1) entered disabled state [ 2501.963397][ T2595] bridge_slave_1: entered allmulticast mode [ 2501.970935][ T2595] bridge_slave_1: entered promiscuous mode [ 2502.098359][ T2627] fido_id[2627]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2502.438733][T19349] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2502.677616][ T2595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2502.771882][T31551] Bluetooth: hci3: command tx timeout [ 2502.831755][ T2595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2504.792985][T31551] Bluetooth: hci3: command tx timeout [ 2504.823861][T19349] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2505.429682][T19349] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2505.624827][T19349] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2505.683205][ T2640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8190'. [ 2505.745660][ T2640] macsec0: entered promiscuous mode [ 2505.823469][ T2595] team0: Port device team_slave_0 added [ 2505.846130][ T2651] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 2505.854523][ T2651] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 2505.863121][ T2651] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 2505.925308][ T2595] team0: Port device team_slave_1 added [ 2506.094108][ T2595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2506.142313][ T2595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2506.221352][ T2595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2506.281464][ T2595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2506.288449][ T2595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2506.381386][ T2595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2506.885518][T31551] Bluetooth: hci3: command tx timeout [ 2508.310172][ T2595] hsr_slave_0: entered promiscuous mode [ 2508.353653][ T2595] hsr_slave_1: entered promiscuous mode [ 2508.380585][ T2595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2508.401379][ T2595] Cannot create hsr debugfs directory [ 2508.899108][ T2682] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8191'. [ 2509.691691][ T5830] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2509.915448][ T5830] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2509.936487][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2509.963376][ T5830] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2509.988543][ T5830] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2510.012093][ T5830] usb 5-1: Manufacturer: syz [ 2510.022532][ T5830] usb 5-1: config 0 descriptor?? [ 2510.183205][ T5830] rc_core: IR keymap rc-hauppauge not found [ 2510.189178][ T5830] Registered IR keymap rc-empty [ 2510.199910][ T5830] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2510.235654][ T5830] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input30 [ 2510.493786][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 2510.506531][ T5830] usb 5-1: USB disconnect, device number 4 [ 2510.732547][T19349] hsr_slave_0: left promiscuous mode [ 2510.743362][T19349] hsr_slave_1: left promiscuous mode [ 2510.762169][T19349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2510.769718][T19349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2510.779307][T19349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2510.790359][T19349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2510.810401][T19349] bridge_slave_1: left allmulticast mode [ 2510.817779][T19349] bridge_slave_1: left promiscuous mode [ 2510.836437][T19349] bridge0: port 2(bridge_slave_1) entered disabled state [ 2510.854837][T19349] bridge_slave_0: left allmulticast mode [ 2510.860535][T19349] bridge_slave_0: left promiscuous mode [ 2510.877056][T19349] bridge0: port 1(bridge_slave_0) entered disabled state [ 2510.942756][T19349] veth1_macvtap: left promiscuous mode [ 2510.948432][T19349] veth0_macvtap: left promiscuous mode [ 2510.958958][T19349] veth1_vlan: left promiscuous mode [ 2510.965720][T19349] veth0_vlan: left promiscuous mode [ 2511.164882][ T2666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2516.460026][T31009] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2516.707926][T31009] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2516.717115][T31009] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2516.781098][T31009] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2516.852002][T31009] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2516.860055][T31009] usb 1-1: Manufacturer: syz [ 2516.923778][T31009] usb 1-1: config 0 descriptor?? [ 2517.251105][T31009] rc_core: IR keymap rc-hauppauge not found [ 2517.257413][T31009] Registered IR keymap rc-empty [ 2517.287212][T31009] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2517.338218][T31009] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input31 [ 2517.484858][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 2517.590990][ T1914] usb 1-1: USB disconnect, device number 16 [ 2518.183521][T19349] team0 (unregistering): Port device team_slave_1 removed [ 2518.348285][T19349] team0 (unregistering): Port device team_slave_0 removed [ 2518.428753][T19349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2518.575341][T19349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2518.620048][ T2709] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2519.385518][T19349] bond0 (unregistering): Released all slaves [ 2519.653809][ T2595] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2519.673340][ T2708] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2519.682147][ T2708] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2519.690557][ T2708] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2519.747672][ T2595] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2519.798538][ T2741] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8207'. [ 2519.859739][ T2595] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2519.913107][ T2595] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2521.777008][T31551] Bluetooth: hci0: command 0x0406 tx timeout [ 2522.003664][ T2595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2522.063262][T19349] IPVS: stop unused estimator thread 0... [ 2522.112350][ T2595] 8021q: adding VLAN 0 to HW filter on device team0 [ 2523.931545][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 2523.938982][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2524.362881][ T2710] bridge0: port 2(bridge_slave_1) entered blocking state [ 2524.369982][ T2710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2524.771546][ T1914] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2524.825697][ T2595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2524.974090][ T2781] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8217'. [ 2525.004733][ T1914] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2525.015811][ T1914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2525.050859][ T1914] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2525.090698][ T1914] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2525.131659][ T1914] usb 5-1: Manufacturer: syz [ 2525.138742][ T1914] usb 5-1: config 0 descriptor?? [ 2525.414020][ T1914] rc_core: IR keymap rc-hauppauge not found [ 2525.419987][ T1914] Registered IR keymap rc-empty [ 2525.470715][ T1914] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2525.533159][ T1914] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input32 [ 2525.570969][ T2595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2525.735843][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 2525.772309][ T2595] veth0_vlan: entered promiscuous mode [ 2525.803708][ T9] usb 5-1: USB disconnect, device number 5 [ 2525.834281][ T2595] veth1_vlan: entered promiscuous mode [ 2526.258636][ T2595] veth0_macvtap: entered promiscuous mode [ 2526.677077][ T2595] veth1_macvtap: entered promiscuous mode [ 2527.240543][ T2595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2527.479351][ T2595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2528.084021][ T2595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2528.094660][ T2595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2528.105189][ T2595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2528.115692][ T2595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2528.125576][ T2595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2528.136973][ T2595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2528.147383][ T2595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2528.158211][ T2595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2528.168189][ T2595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2528.178789][ T2595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2528.191081][ T2595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2528.207485][ T2815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8221'. [ 2528.299655][ T2817] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2528.308004][ T2817] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2528.316502][ T2817] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2528.330590][ T2595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2528.504805][ T2595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2529.208011][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.221309][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.257824][ T2595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2529.647391][ T2595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2529.811344][ T2595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2529.836596][ T2595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2529.877412][ T2595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2529.912557][ T2595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.000675][ T2595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2530.120836][ T2595] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2530.175393][ T2595] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2530.219098][ T2595] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2530.258635][ T2595] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2531.656936][ T2847] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8225'. [ 2531.928856][ T2710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2531.973709][ T2710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2532.075201][ T2710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2532.122776][ T2710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2533.481787][ T5811] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2533.693887][ T5811] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2533.722987][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2533.793821][ T5811] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2534.172709][ T5811] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2534.235454][ T2864] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 2534.244237][ T2864] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 2534.252893][ T2864] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 2534.261071][ T5811] usb 5-1: Manufacturer: syz [ 2534.278058][ T5811] usb 5-1: config 0 descriptor?? [ 2535.791377][ T5811] rc_core: IR keymap rc-hauppauge not found [ 2535.797334][ T5811] Registered IR keymap rc-empty [ 2535.818153][ T5811] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2535.855277][ T5811] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 2536.132683][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 2536.134088][T24392] usb 5-1: USB disconnect, device number 6 [ 2536.138890][ C1] igorplugusb 5-1:0.0: submit urb failed: -19 [ 2538.050817][ T2887] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8235'. [ 2543.833061][ T2919] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 2543.833061][ T2919] program syz.2.8243 not setting count and/or reply_len properly [ 2547.776906][ T2930] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 2547.785194][ T2930] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 2547.793695][ T2930] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 2549.641352][T29177] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2549.692787][ T2951] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8246'. [ 2550.789271][ T2958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8253'. [ 2550.821423][ T2958] macsec0: entered promiscuous mode [ 2553.305368][ T2972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8258'. [ 2558.405560][ T2996] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 2558.550970][ T2996] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 2558.603583][ T2996] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 2558.667747][ T1439] IPVS: starting estimator thread 0... [ 2558.803494][ T2998] IPVS: using max 17 ests per chain, 40800 per kthread [ 2559.297706][ T3003] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8262'. [ 2569.598839][ T3041] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 2569.607190][ T3041] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 2569.617247][ T3041] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 2571.254189][ T3056] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8277'. [ 2581.505145][ T3112] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2581.589962][T30025] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2581.615188][ T3112] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2581.688126][ T3112] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2581.846528][ T3118] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8293'. [ 2582.691662][ T3124] overlayfs: missing 'lowerdir' [ 2583.551379][ T1914] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2583.796183][ T1914] usb 1-1: Using ep0 maxpacket: 8 [ 2583.833875][ T1914] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2583.871279][ T1914] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2583.881064][ T1914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2583.955833][ T1914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2583.999275][ T1914] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2584.070028][ T1914] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2584.112022][ T1914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2584.400890][ T1914] usb 1-1: usb_control_msg returned -32 [ 2584.439946][ T1914] usbtmc 1-1:16.0: can't read capabilities [ 2585.115054][ T3157] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8304'. [ 2585.613765][ T3161] overlayfs: missing 'lowerdir' [ 2586.523135][ T5830] usb 1-1: USB disconnect, device number 17 [ 2586.772532][ T3167] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2587.243017][ T3169] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 2587.301320][ T3169] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 2587.376031][ T3169] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 2589.010781][ T3195] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8314'. [ 2589.200996][ T3197] overlayfs: missing 'lowerdir' [ 2590.557148][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.564412][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2592.163390][ T3226] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2592.222799][ T3226] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2592.402283][ T3226] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2592.631427][T31551] Bluetooth: hci4: command 0x0406 tx timeout [ 2593.926518][ T3241] overlayfs: missing 'lowerdir' [ 2596.969050][ T3253] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8327'. [ 2601.570619][ T3283] overlayfs: missing 'lowerdir' [ 2602.911953][ T3289] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8337'. [ 2605.615627][ T3311] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 2605.735870][ T3311] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 2605.921828][ T3311] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 2607.411651][ T3325] overlayfs: missing 'lowerdir' [ 2610.896988][ T3359] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2610.921498][ T3359] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2610.930567][ T3359] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2613.846011][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2620.242354][ T3432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8368'. [ 2622.704105][ T3449] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 2622.741448][ T3449] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 2622.752071][ T3449] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 2623.359838][T31551] Bluetooth: hci3: command 0x0406 tx timeout [ 2627.143214][ T3487] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2627.421120][ T3494] syz.2.8380: attempt to access beyond end of device [ 2627.421120][ T3494] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 2627.444406][ T3494] MINIX-fs: unable to read superblock [ 2633.661454][ T5809] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2634.061570][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 2634.093940][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2634.436218][ T5809] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2634.445964][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2634.471450][ T5809] usb 3-1: Product: syz [ 2634.475801][ T5809] usb 3-1: Manufacturer: syz [ 2634.480414][ T5809] usb 3-1: SerialNumber: syz [ 2634.504532][ T5809] usb 3-1: config 0 descriptor?? [ 2634.524059][ T5809] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2634.552564][ T5809] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 2636.178340][ T5809] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2637.276745][ T5809] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2637.321654][ T5809] em28xx 3-1:0.0: board has no eeprom [ 2638.331353][ T5809] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2638.339789][ T5809] em28xx 3-1:0.0: dvb set to bulk mode. [ 2638.409763][ T5811] em28xx 3-1:0.0: Binding DVB extension [ 2638.452631][ T5809] usb 3-1: USB disconnect, device number 2 [ 2638.459472][ T5809] em28xx 3-1:0.0: Disconnecting em28xx [ 2639.311579][ T5811] em28xx 3-1:0.0: Registering input extension [ 2639.318394][ T5809] em28xx 3-1:0.0: Closing input extension [ 2639.378562][ T5809] em28xx 3-1:0.0: Freeing device [ 2642.352893][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 2642.994115][ T9] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2644.694008][ T3600] fido_id[3600]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2645.980097][ T3621] netlink: 'syz.0.8412': attribute type 13 has an invalid length. [ 2647.035982][ T6323] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2649.366801][ T3643] FAULT_INJECTION: forcing a failure. [ 2649.366801][ T3643] name failslab, interval 1, probability 0, space 0, times 0 [ 2649.429999][ T3643] CPU: 1 PID: 3643 Comm: syz.4.8420 Not tainted syzkaller #0 [ 2649.437433][ T3643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2649.447515][ T3643] Call Trace: [ 2649.450819][ T3643] [ 2649.453776][ T3643] dump_stack_lvl+0x18c/0x250 [ 2649.458492][ T3643] ? show_regs_print_info+0x20/0x20 [ 2649.463716][ T3643] ? load_image+0x420/0x420 [ 2649.468246][ T3643] ? __might_sleep+0xe0/0xe0 [ 2649.472872][ T3643] ? __lock_acquire+0x7d80/0x7d80 [ 2649.477936][ T3643] ? __asan_memset+0x22/0x40 [ 2649.482579][ T3643] should_fail_ex+0x394/0x4c0 [ 2649.487320][ T3643] should_failslab+0x9/0x20 [ 2649.491869][ T3643] slab_pre_alloc_hook+0x59/0x300 [ 2649.496949][ T3643] kmem_cache_alloc+0x5a/0x2c0 [ 2649.501747][ T3643] ? security_inode_alloc+0x34/0x110 [ 2649.507080][ T3643] security_inode_alloc+0x34/0x110 [ 2649.512234][ T3643] inode_init_always+0x914/0xc90 [ 2649.517207][ T3643] new_inode_pseudo+0x95/0x1d0 [ 2649.522002][ T3643] alloc_anon_inode+0x1e/0x2f0 [ 2649.526802][ T3643] aio_setup_ring+0x104/0xf30 [ 2649.531522][ T3643] ? pcpu_alloc+0x11e7/0x1880 [ 2649.536231][ T3643] ? ioctx_alloc+0x2e2/0x770 [ 2649.540853][ T3643] ? free_ioctx_reqs+0x190/0x190 [ 2649.545827][ T3643] ioctx_alloc+0x316/0x770 [ 2649.550276][ T3643] __se_sys_io_setup+0x7b/0x190 [ 2649.555149][ T3643] do_syscall_64+0x55/0xb0 [ 2649.559589][ T3643] ? clear_bhb_loop+0x40/0x90 [ 2649.564292][ T3643] ? clear_bhb_loop+0x40/0x90 [ 2649.568998][ T3643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2649.574916][ T3643] RIP: 0033:0x7f4c4899e159 [ 2649.579362][ T3643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2649.599000][ T3643] RSP: 002b:00007f4c49802028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2649.607447][ T3643] RAX: ffffffffffffffda RBX: 00007f4c48c25fa0 RCX: 00007f4c4899e159 [ 2649.615444][ T3643] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000008001 [ 2649.623436][ T3643] RBP: 00007f4c48a35024 R08: 0000000000000000 R09: 0000000000000000 [ 2649.631427][ T3643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2649.639425][ T3643] R13: 00007f4c48c26038 R14: 00007f4c48c25fa0 R15: 00007ffd5cbd80d8 [ 2649.647450][ T3643] [ 2651.999736][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.006339][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.202803][ T3682] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8431'. [ 2661.172264][ T3741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8445'. [ 2661.334469][ T3741] bond1 (unregistering): Released all slaves [ 2663.011265][T31551] Bluetooth: hci3: command 0x0406 tx timeout [ 2666.134491][ T3776] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8454'. [ 2673.165435][ T3830] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8465'. [ 2674.762249][ T3824] overlayfs: unescaped trailing colons in lowerdir mount option. [ 2677.637173][T31551] Bluetooth: hci3: command 0x0406 tx timeout [ 2678.821416][T24392] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2679.037016][T24392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2679.064156][T24392] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2679.095959][T24392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2679.136836][T24392] usb 5-1: config 0 descriptor?? [ 2679.211345][T31009] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2679.347849][ T5809] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2679.365345][T24392] usbhid 5-1:0.0: can't add hid device: -71 [ 2679.384988][T24392] usbhid: probe of 5-1:0.0 failed with error -71 [ 2679.403226][T31009] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2679.413831][T24392] usb 5-1: USB disconnect, device number 7 [ 2679.434034][T31009] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 2679.465436][T31009] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2679.511239][T31009] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 2679.541241][T31009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2679.552915][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2679.572370][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 2679.602497][ T5809] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2679.641288][ T5809] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 2679.660681][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2679.961333][T24392] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2680.012331][T31009] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 2680.018585][T31009] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 2680.057491][T31009] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 2680.086136][T31009] cxacru: probe of 3-1:1.0 failed with error -71 [ 2680.109672][ T5809] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 2680.127989][ T5809] ATM dev 1: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 2680.135964][T31009] usb 3-1: USB disconnect, device number 3 [ 2680.147261][ T5809] ATM dev 1: usbatm_atm_init: atm_start failed: -71! [ 2680.167251][ T5809] cxacru: probe of 2-1:1.0 failed with error -71 [ 2680.194508][ T5809] usb 2-1: USB disconnect, device number 24 [ 2680.201894][T24392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2680.250420][T24392] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2680.281509][T24392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2680.320980][T24392] usb 5-1: config 0 descriptor?? [ 2680.334910][T24392] hub 5-1:0.0: USB hub found [ 2680.509322][T30025] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2680.541322][ T1439] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2680.552681][T24392] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 2680.741380][ T1439] usb 1-1: Using ep0 maxpacket: 32 [ 2680.749329][ T1439] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 2680.771233][ T1439] usb 1-1: config 0 has no interface number 0 [ 2680.824029][ T1439] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2680.833738][ T1439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2680.890653][ T1439] usb 1-1: Product: syz [ 2680.900774][ T1439] usb 1-1: Manufacturer: syz [ 2680.915922][ T1439] usb 1-1: SerialNumber: syz [ 2680.942777][ T1439] usb 1-1: config 0 descriptor?? [ 2681.013156][ T1439] smsc95xx v2.0.0 [ 2681.413421][ T1439] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2681.469534][ T1439] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2682.922426][ T1439] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2682.963178][ T1439] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 2682.987281][ T1439] usb 1-1: USB disconnect, device number 18 [ 2683.014160][T24392] usbhid 5-1:0.0: can't add hid device: -71 [ 2683.020218][T24392] usbhid: probe of 5-1:0.0 failed with error -71 [ 2683.122350][T24392] usb 5-1: USB disconnect, device number 8 [ 2684.600451][ T3893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8485'. [ 2684.629763][ T3893] macsec0: entered promiscuous mode [ 2685.721612][ T1439] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2686.583059][ T1439] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2686.610232][ T1439] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 2686.737861][ T1439] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2686.766728][T31551] Bluetooth: hci3: Malformed Event: 0x02 [ 2686.825783][ T1439] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 2686.880317][ T1439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2687.175637][ T3906] netlink: 'syz.2.8490': attribute type 5 has an invalid length. [ 2687.363013][ T1439] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 2687.446677][ T1439] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 2687.524997][ T1439] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 2687.650037][ T1439] cxacru: probe of 1-1:1.0 failed with error -71 [ 2687.683010][ T1439] usb 1-1: USB disconnect, device number 19 [ 2688.077386][ T3918] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8493'. [ 2689.407849][ T3931] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 2689.417296][ T3931] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 2689.425787][ T3931] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 2690.451417][T31009] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2691.350009][ T3950] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8503'. [ 2691.454911][T31009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2691.508513][T31009] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2691.547926][T31009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2691.592507][T31009] usb 5-1: config 0 descriptor?? [ 2692.723216][T31009] usbhid 5-1:0.0: can't add hid device: -71 [ 2692.764448][T31009] usbhid: probe of 5-1:0.0 failed with error -71 [ 2692.782439][T31009] usb 5-1: USB disconnect, device number 9 [ 2693.331555][T31009] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2693.543553][T31009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2693.576711][T31009] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2693.611217][T31009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2693.653443][T31009] usb 5-1: config 0 descriptor?? [ 2693.676967][T31009] hub 5-1:0.0: USB hub found [ 2693.869680][T31009] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 2694.481875][ T1439] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2696.271446][ T1439] usb 1-1: Using ep0 maxpacket: 32 [ 2696.283440][ T1439] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 2696.299103][T31009] usbhid 5-1:0.0: can't add hid device: -71 [ 2696.327442][ T1439] usb 1-1: config 0 has no interface number 0 [ 2696.333775][T31009] usbhid: probe of 5-1:0.0 failed with error -71 [ 2696.362489][ T1439] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2696.384098][ T1439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2696.394038][ T1439] usb 1-1: Product: syz [ 2696.405505][ T1439] usb 1-1: Manufacturer: syz [ 2696.410228][ T1439] usb 1-1: SerialNumber: syz [ 2696.416621][T31009] usb 5-1: USB disconnect, device number 10 [ 2696.439861][ T1439] usb 1-1: config 0 descriptor?? [ 2696.456699][ T1439] smsc95xx v2.0.0 [ 2696.863572][ T3973] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 2696.871958][ T3973] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 2696.880391][ T3973] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 2696.896617][ T1439] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2696.997708][ T1439] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2697.230377][ T1439] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2697.295712][ T1439] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 2697.337786][ T1439] usb 1-1: USB disconnect, device number 21 [ 2701.566716][ T3997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8514'. [ 2701.831477][T21872] Bluetooth: hci3: command 0x0406 tx timeout [ 2702.270281][ T4013] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8513'. [ 2703.163009][ T4015] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 2703.171346][ T4015] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 2703.179793][ T4015] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 2704.329264][ T4025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8525'. [ 2711.880598][ T6323] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2713.360425][ T4060] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 2713.369049][ T4060] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 2713.378410][ T4060] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 2713.438900][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.445543][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2716.275882][ T4076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8535'. [ 2716.341621][ T2312] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2716.629027][ T2312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2716.681194][ T2312] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2717.530722][ T2312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2717.543139][ T2312] usb 5-1: config 0 descriptor?? [ 2717.764090][T30988] IPVS: stopping master sync thread 13445 ... [ 2717.773343][ T2312] usbhid 5-1:0.0: can't add hid device: -71 [ 2717.779376][ T2312] usbhid: probe of 5-1:0.0 failed with error -71 [ 2717.843387][ T2312] usb 5-1: USB disconnect, device number 11 [ 2718.109966][ T4087] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8532'. [ 2718.361332][ T2312] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2718.613210][ T2312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2718.661195][ T2312] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2718.670321][ T2312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2718.723531][ T2312] usb 5-1: config 0 descriptor?? [ 2718.791778][ T2312] hub 5-1:0.0: USB hub found [ 2718.836211][T30988] hsr_slave_0: left promiscuous mode [ 2718.901298][T30988] hsr_slave_1: left promiscuous mode [ 2719.001598][T30988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2719.061561][T30988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2719.083391][T30988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2719.123690][T30988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2719.169568][T30988] bridge_slave_1: left allmulticast mode [ 2719.319565][T30988] bridge_slave_1: left promiscuous mode [ 2719.345353][T30988] bridge0: port 2(bridge_slave_1) entered disabled state [ 2719.751662][ T2312] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 2721.056037][T30988] bridge_slave_0: left allmulticast mode [ 2721.101866][T30988] bridge_slave_0: left promiscuous mode [ 2721.107725][T30988] bridge0: port 1(bridge_slave_0) entered disabled state [ 2721.406910][ T2312] usbhid 5-1:0.0: can't add hid device: -71 [ 2721.520904][ T2312] usbhid: probe of 5-1:0.0 failed with error -71 [ 2721.693991][ T2312] usb 5-1: USB disconnect, device number 12 [ 2721.877957][T30988] veth1_macvtap: left promiscuous mode [ 2721.933362][T30988] veth0_macvtap: left promiscuous mode [ 2722.017262][T30988] veth1_vlan: left promiscuous mode [ 2722.113721][T30988] veth0_vlan: left promiscuous mode [ 2724.856590][ T4112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8547'. [ 2729.171307][ T1439] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2729.373296][ T1439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2729.397017][ T1439] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2729.447086][ T1439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2729.484385][ T1439] usb 5-1: config 0 descriptor?? [ 2729.769444][ T1439] usbhid 5-1:0.0: can't add hid device: -71 [ 2729.797199][ T1439] usbhid: probe of 5-1:0.0 failed with error -71 [ 2729.855990][ T1439] usb 5-1: USB disconnect, device number 13 [ 2730.311525][ T1439] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2730.527277][ T1439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2731.281375][ T1439] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2731.290466][ T1439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2731.342011][ T1439] usb 5-1: config 0 descriptor?? [ 2731.388181][ T1439] hub 5-1:0.0: USB hub found [ 2732.138321][ T1439] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 2732.515401][T30988] team0 (unregistering): Port device team_slave_1 removed [ 2734.049899][T30988] team0 (unregistering): Port device team_slave_0 removed [ 2734.207898][ T1439] usbhid 5-1:0.0: can't add hid device: -71 [ 2734.220266][ T1439] usbhid: probe of 5-1:0.0 failed with error -71 [ 2734.292499][ T1439] usb 5-1: USB disconnect, device number 14 [ 2734.461770][T30988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2734.943070][T30988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2738.791970][T31551] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2738.805505][T31551] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2738.814472][T31551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2738.824337][T31551] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2738.833901][T31551] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2738.842858][T31551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2740.041636][T30988] bond0 (unregistering): Released all slaves [ 2741.881389][T21872] Bluetooth: hci2: command tx timeout [ 2742.298621][ T4132] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 2742.312606][ T4136] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8549'. [ 2742.326659][ T4132] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 2742.392496][ T4132] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 2742.451450][ T1439] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2742.517930][ T4176] wg2 speed is unknown, defaulting to 1000 [ 2742.691331][ T1439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2742.731664][ T1439] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2742.793168][ T1439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2742.861818][ T1439] usb 1-1: config 0 descriptor?? [ 2743.067501][T31551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2743.087866][T31551] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2743.096655][T31551] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2743.107191][T31551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2743.116710][T31551] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2743.124038][T31551] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2743.190763][ T1439] usbhid 1-1:0.0: can't add hid device: -71 [ 2743.231386][ T1439] usbhid: probe of 1-1:0.0 failed with error -71 [ 2743.250437][ T1439] usb 1-1: USB disconnect, device number 22 [ 2743.469166][ T4198] wg2 speed is unknown, defaulting to 1000 [ 2744.732562][T21872] Bluetooth: hci2: command tx timeout [ 2744.741726][ T3558] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2745.001355][ T1439] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2745.066390][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 2745.271382][T21872] Bluetooth: hci5: command tx timeout [ 2745.457932][ T1439] usb 1-1: device not accepting address 23, error -71 [ 2745.826478][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 2745.861917][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 2745.886176][ T4176] bridge_slave_0: entered allmulticast mode [ 2745.906889][ T4176] bridge_slave_0: entered promiscuous mode [ 2745.934719][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 2745.959206][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 2745.983200][ T4176] bridge_slave_1: entered allmulticast mode [ 2746.007612][ T4176] bridge_slave_1: entered promiscuous mode [ 2746.075424][T30988] IPVS: stop unused estimator thread 0... [ 2746.155439][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2746.265800][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2746.526525][ T4217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8573'. [ 2746.609031][ T4176] team0: Port device team_slave_0 added [ 2746.793097][T21872] Bluetooth: hci2: command tx timeout [ 2747.212776][ T4176] team0: Port device team_slave_1 added [ 2747.244118][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2747.261250][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2747.358919][T21872] Bluetooth: hci5: command tx timeout [ 2747.525527][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2748.164732][T30988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2748.292780][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2748.373593][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2748.493701][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2748.561499][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 2749.977276][T21872] Bluetooth: hci2: command tx timeout [ 2749.977317][T31551] Bluetooth: hci5: command tx timeout [ 2750.384493][T30988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2750.709031][T30988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2750.843034][ T4176] hsr_slave_0: entered promiscuous mode [ 2750.871713][ T4176] hsr_slave_1: entered promiscuous mode [ 2750.924643][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2750.941008][ T4176] Cannot create hsr debugfs directory [ 2751.150862][T30988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2751.552454][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 2751.559632][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 2751.617160][ T4198] bridge_slave_0: entered allmulticast mode [ 2751.632878][ T4198] bridge_slave_0: entered promiscuous mode [ 2751.991626][T21872] Bluetooth: hci5: command tx timeout [ 2752.431926][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 2752.439099][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 2752.472222][ T4198] bridge_slave_1: entered allmulticast mode [ 2752.501401][ T4198] bridge_slave_1: entered promiscuous mode [ 2752.843990][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2752.864979][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2754.215056][T30988] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2755.633363][ T4198] team0: Port device team_slave_0 added [ 2755.703231][ T4198] team0: Port device team_slave_1 added [ 2755.894480][T30988] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2756.434057][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2756.441013][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2756.501302][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2756.573393][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2756.580384][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2756.691167][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2756.860775][T30988] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2757.263501][T30988] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2757.566486][ T4198] hsr_slave_0: entered promiscuous mode [ 2757.573472][ T4198] hsr_slave_1: entered promiscuous mode [ 2757.579896][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2757.609480][ T4198] Cannot create hsr debugfs directory [ 2763.581283][ T4176] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2763.816312][ T4176] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2764.021340][ T4176] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2764.391619][ T4176] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2765.565212][ T4309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8595'. [ 2767.980025][ T4198] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2768.085531][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2768.133480][ T4198] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2768.374752][ T4198] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2768.435404][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 2768.453622][ T4198] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2768.582347][ T2709] bridge0: port 1(bridge_slave_0) entered blocking state [ 2768.589526][ T2709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2768.766499][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 2768.773718][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2769.104215][T30988] hsr_slave_0: left promiscuous mode [ 2769.181322][T30988] hsr_slave_1: left promiscuous mode [ 2769.229575][T30988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2769.238624][T30988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2769.272320][T30988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2770.571607][T30988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2770.591892][T30988] bridge_slave_1: left allmulticast mode [ 2770.597599][T30988] bridge_slave_1: left promiscuous mode [ 2770.603988][T30988] bridge0: port 2(bridge_slave_1) entered disabled state [ 2770.623767][T30988] bridge_slave_0: left allmulticast mode [ 2770.629480][T30988] bridge_slave_0: left promiscuous mode [ 2770.644173][T30988] bridge0: port 1(bridge_slave_0) entered disabled state [ 2770.708547][T30988] hsr_slave_0: left promiscuous mode [ 2770.726814][T30988] hsr_slave_1: left promiscuous mode [ 2770.751530][T30988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2770.769247][T30988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2770.780178][T30988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2770.790349][T30988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2770.808858][T30988] bridge_slave_1: left allmulticast mode [ 2770.814829][T30988] bridge_slave_1: left promiscuous mode [ 2770.820571][T30988] bridge0: port 2(bridge_slave_1) entered disabled state [ 2770.839310][T30988] bridge_slave_0: left allmulticast mode [ 2770.847921][T30988] bridge_slave_0: left promiscuous mode [ 2770.869843][T30988] bridge0: port 1(bridge_slave_0) entered disabled state [ 2771.030861][T30988] veth1_macvtap: left promiscuous mode [ 2771.061470][T30988] veth0_macvtap: left promiscuous mode [ 2771.075056][T30988] veth1_vlan: left promiscuous mode [ 2771.080432][T30988] veth0_vlan: left promiscuous mode [ 2771.183010][T30988] veth1_macvtap: left promiscuous mode [ 2771.188597][T30988] veth0_macvtap: left promiscuous mode [ 2771.210654][T30988] veth1_vlan: left promiscuous mode [ 2771.226925][T30988] veth0_vlan: left promiscuous mode [ 2774.877360][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.883898][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2776.649882][ T6323] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2779.054422][T30988] team0 (unregistering): Port device team_slave_1 removed [ 2779.210477][T30988] team0 (unregistering): Port device team_slave_0 removed [ 2779.374172][T30988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2779.393165][ T5830] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2779.567605][ T5830] usb 1-1: device descriptor read/64, error -71 [ 2779.594474][T30988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2779.871273][ T5830] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2780.061186][ T5830] usb 1-1: device descriptor read/64, error -71 [ 2780.196445][ T5830] usb usb1-port1: attempt power cycle [ 2780.611201][ T5830] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2780.651987][ T5830] usb 1-1: device descriptor read/8, error -71 [ 2780.820597][T30988] bond0 (unregistering): Released all slaves [ 2780.931262][ T5830] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2780.962445][ T5830] usb 1-1: device descriptor read/8, error -71 [ 2781.086565][ T5830] usb usb1-port1: unable to enumerate USB device [ 2783.637353][T30988] team0 (unregistering): Port device team_slave_1 removed [ 2783.807219][T30988] team0 (unregistering): Port device team_slave_0 removed [ 2783.950327][T30988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2784.073957][T30988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2786.699667][T30988] bond0 (unregistering): Released all slaves [ 2787.061518][ T4378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8613'. [ 2787.181275][T31009] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2787.208988][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2787.334596][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 2787.376132][T31009] usb 1-1: device descriptor read/64, error -71 [ 2787.397553][T19349] bridge0: port 1(bridge_slave_0) entered blocking state [ 2787.404780][T19349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2787.474962][T19349] bridge0: port 2(bridge_slave_1) entered blocking state [ 2787.482204][T19349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2787.651423][T31009] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2788.631424][T31009] usb 1-1: device descriptor read/64, error -71 [ 2788.775416][T31009] usb usb1-port1: attempt power cycle [ 2788.800459][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2789.164716][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2789.241427][T31009] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2789.261913][T30988] IPVS: stop unused estimator thread 0... [ 2789.304660][T31009] usb 1-1: device descriptor read/8, error -71 [ 2789.314933][T30988] IPVS: stop unused estimator thread 0... [ 2789.593438][T31009] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2789.658598][T31009] usb 1-1: device descriptor read/8, error -71 [ 2789.801421][T31009] usb usb1-port1: unable to enumerate USB device [ 2789.894615][ T4176] veth0_vlan: entered promiscuous mode [ 2789.939591][ T4176] veth1_vlan: entered promiscuous mode [ 2790.072249][ T4176] veth0_macvtap: entered promiscuous mode [ 2790.213814][ T4176] veth1_macvtap: entered promiscuous mode [ 2790.834084][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2790.966143][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2791.086359][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2791.192479][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2791.308879][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2791.420076][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2791.542935][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2791.671573][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2791.851735][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2792.182538][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2792.306470][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2792.413465][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2792.505620][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2792.548861][ T5812] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2792.631053][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2792.820370][ T5812] usb 5-1: device descriptor read/64, error -71 [ 2792.870422][ T4176] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2792.910321][ T4176] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2792.987011][ T4176] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2793.021771][ T4176] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2793.164660][ T4198] veth0_vlan: entered promiscuous mode [ 2793.193330][ T5812] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2793.207285][ T4198] veth1_vlan: entered promiscuous mode [ 2793.382759][ T5812] usb 5-1: device descriptor read/64, error -71 [ 2793.387336][ T4198] veth0_macvtap: entered promiscuous mode [ 2793.417944][T29177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2793.445776][T29177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2793.472766][ T4198] veth1_macvtap: entered promiscuous mode [ 2793.524833][ T5812] usb usb5-port1: attempt power cycle [ 2793.561242][T30025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2793.588026][T30025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2793.594206][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2793.634521][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.664254][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2793.688434][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.717282][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2793.741151][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.751862][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2793.770251][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.780722][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2793.795254][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.809455][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2793.856773][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2793.898699][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.929176][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2793.960496][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.971252][ T5812] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2793.985821][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2794.001263][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2795.248840][ T5812] usb 5-1: device descriptor read/8, error -71 [ 2795.283064][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2795.374161][ T4198] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2795.400209][ T4198] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2795.440010][ T4198] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2795.481423][ T4198] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2795.775660][T30025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2795.798031][T30025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2795.866897][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2795.878342][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2797.388673][ T4458] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 2797.397734][ T4458] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 2797.406335][ T4458] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 2797.527216][ T1914] IPVS: starting estimator thread 0... [ 2798.321362][ T4460] IPVS: using max 34 ests per chain, 81600 per kthread [ 2799.106513][ T4462] syz.6.8565: vmalloc error: size 134217728, failed to allocated page array size 262144, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 2799.124715][ T4462] CPU: 1 PID: 4462 Comm: syz.6.8565 Not tainted syzkaller #0 [ 2799.132355][ T4462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2799.142423][ T4462] Call Trace: [ 2799.145694][ T4462] [ 2799.148615][ T4462] dump_stack_lvl+0x18c/0x250 [ 2799.153298][ T4462] ? show_regs_print_info+0x20/0x20 [ 2799.158487][ T4462] ? load_image+0x420/0x420 [ 2799.162980][ T4462] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2799.169397][ T4462] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2799.175911][ T4462] warn_alloc+0x246/0x340 [ 2799.180230][ T4462] ? zone_watermark_ok_safe+0x230/0x230 [ 2799.185793][ T4462] ? _raw_spin_unlock+0x28/0x40 [ 2799.190689][ T4462] __vmalloc_node_range+0x661/0x1320 [ 2799.196013][ T4462] ? __asan_memset+0x22/0x40 [ 2799.200660][ T4462] ? free_vm_area+0x50/0x50 [ 2799.205178][ T4462] ? kvmalloc_node+0x70/0x180 [ 2799.209862][ T4462] ? rcu_is_watching+0x15/0xb0 [ 2799.214618][ T4462] ? kvmalloc_node+0x70/0x180 [ 2799.219285][ T4462] ? trace_kmalloc+0x1f/0xa0 [ 2799.223865][ T4462] kvmalloc_node+0x13f/0x180 [ 2799.228446][ T4462] ? vdpasim_blk_dev_add+0x1a8/0x290 [ 2799.233731][ T4462] vdpasim_blk_dev_add+0x1a8/0x290 [ 2799.238867][ T4462] ? vdpasim_net_mgmtdev_release+0x10/0x10 [ 2799.244692][ T4462] ? vdpasim_blk_get_config+0x5a0/0x5a0 [ 2799.250232][ T4462] ? vdpasim_blk_dev_del+0x20/0x20 [ 2799.255341][ T4462] ? vdpasim_blk_work+0x15b0/0x15b0 [ 2799.260527][ T4462] ? vdpa_mgmtdev_get_from_attr+0x267/0x270 [ 2799.266412][ T4462] vdpa_nl_cmd_dev_add_set_doit+0xa85/0xbd0 [ 2799.272303][ T4462] ? vdpa_nl_cmd_mgmtdev_get_dumpit+0x270/0x270 [ 2799.278532][ T4462] ? __nla_parse+0x40/0x50 [ 2799.282949][ T4462] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2799.289281][ T4462] genl_family_rcv_msg_doit+0x21a/0x310 [ 2799.294824][ T4462] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2799.300710][ T4462] ? bpf_lsm_capable+0x9/0x10 [ 2799.305376][ T4462] ? security_capable+0x89/0xb0 [ 2799.310218][ T4462] genl_rcv_msg+0x611/0x7a0 [ 2799.314719][ T4462] ? genl_bind+0x360/0x360 [ 2799.319120][ T4462] ? vdpa_nl_cmd_mgmtdev_get_dumpit+0x270/0x270 [ 2799.325362][ T4462] netlink_rcv_skb+0x235/0x4c0 [ 2799.330115][ T4462] ? genl_bind+0x360/0x360 [ 2799.334528][ T4462] ? netlink_ack+0x1160/0x1160 [ 2799.339287][ T4462] ? __lock_acquire+0x7d80/0x7d80 [ 2799.344475][ T4462] ? net_generic+0x1e/0x240 [ 2799.348972][ T4462] ? down_read+0x1ac/0x2e0 [ 2799.353386][ T4462] genl_rcv+0x28/0x40 [ 2799.357380][ T4462] netlink_unicast+0x7b1/0x930 [ 2799.362138][ T4462] netlink_sendmsg+0x8d0/0xbf0 [ 2799.366896][ T4462] ? netlink_getsockopt+0x590/0x590 [ 2799.372100][ T4462] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2799.377653][ T4462] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2799.382946][ T4462] ? security_socket_sendmsg+0x80/0xa0 [ 2799.388418][ T4462] ? netlink_getsockopt+0x590/0x590 [ 2799.393621][ T4462] ____sys_sendmsg+0x61b/0x980 [ 2799.398405][ T4462] ? __asan_memset+0x22/0x40 [ 2799.403023][ T4462] ? __sys_sendmsg_sock+0x30/0x30 [ 2799.408077][ T4462] ? __import_iovec+0x5f2/0x850 [ 2799.412929][ T4462] ? import_iovec+0x73/0xa0 [ 2799.417432][ T4462] ___sys_sendmsg+0x2a6/0x360 [ 2799.422107][ T4462] ? __sys_sendmsg+0x2b0/0x2b0 [ 2799.426887][ T4462] __se_sys_sendmsg+0x1d0/0x2c0 [ 2799.431736][ T4462] ? __x64_sys_sendmsg+0x80/0x80 [ 2799.436680][ T4462] ? lockdep_hardirqs_on+0x98/0x150 [ 2799.441886][ T4462] do_syscall_64+0x55/0xb0 [ 2799.446291][ T4462] ? clear_bhb_loop+0x40/0x90 [ 2799.450959][ T4462] ? clear_bhb_loop+0x40/0x90 [ 2799.455625][ T4462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2799.461508][ T4462] RIP: 0033:0x7f4f67f9e159 [ 2799.465914][ T4462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2799.485514][ T4462] RSP: 002b:00007f4f68e92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2799.493936][ T4462] RAX: ffffffffffffffda RBX: 00007f4f68226180 RCX: 00007f4f67f9e159 [ 2799.501908][ T4462] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2799.509885][ T4462] RBP: 00007f4f68035024 R08: 0000000000000000 R09: 0000000000000000 [ 2799.517861][ T4462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2799.525820][ T4462] R13: 00007f4f68226218 R14: 00007f4f68226180 R15: 00007ffd38d50478 [ 2799.533797][ T4462] [ 2799.538383][ T4462] Mem-Info: [ 2799.541925][ T4462] active_anon:38680 inactive_anon:0 isolated_anon:0 [ 2799.541925][ T4462] active_file:19543 inactive_file:44238 isolated_file:0 [ 2799.541925][ T4462] unevictable:768 dirty:79 writeback:0 [ 2799.541925][ T4462] slab_reclaimable:12363 slab_unreclaimable:106117 [ 2799.541925][ T4462] mapped:32793 shmem:32537 pagetables:720 [ 2799.541925][ T4462] sec_pagetables:0 bounce:0 [ 2799.541925][ T4462] kernel_misc_reclaimable:0 [ 2799.541925][ T4462] free:1230335 free_pcp:13445 free_cma:0 [ 2799.587529][ T4462] Node 0 active_anon:154720kB inactive_anon:0kB active_file:78104kB inactive_file:176752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131104kB dirty:312kB writeback:0kB shmem:128612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11712kB pagetables:2880kB sec_pagetables:0kB all_unreclaimable? no [ 2799.621818][ T4462] Node 1 active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2799.652467][ T4462] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2799.679651][ T4462] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2799.685462][ T4462] Node 0 DMA32 free:1011800kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:154684kB inactive_anon:0kB active_file:77680kB inactive_file:176348kB unevictable:1536kB writepending:312kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:34272kB local_pcp:14436kB free_cma:0kB [ 2799.716936][ T4462] lowmem_reserve[]: 0 0 0 0 0 [ 2799.721699][ T4462] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:424kB inactive_file:404kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2799.748603][ T4462] lowmem_reserve[]: 0 0 0 0 0 [ 2799.753401][ T4462] Node 1 Normal free:3894172kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19492kB local_pcp:0kB free_cma:0kB [ 2799.782654][ T4462] lowmem_reserve[]: 0 0 0 0 0 [ 2799.787353][ T4462] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2799.799993][ T4462] Node 0 DMA32: 6*4kB (UE) 2590*8kB (UME) 819*16kB (UME) 973*32kB (UE) 178*64kB (UME) 350*128kB (UME) 245*256kB (UME) 155*512kB (UM) 85*1024kB (UM) 35*2048kB (UME) 144*4096kB (UM) = 1011800kB [ 2799.819724][ T4462] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2799.832299][ T4462] Node 1 Normal: 271*4kB (UE) 68*8kB (UME) 44*16kB (UME) 272*32kB (UME) 78*64kB (UME) 28*128kB (UE) 3*256kB (U) 2*512kB (ME) 0*1024kB 1*2048kB (E) 945*4096kB (M) = 3894172kB [ 2799.849682][ T4462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2799.859265][ T4462] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2799.868588][ T4462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2799.878171][ T4462] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2799.887474][ T4462] 96315 total pagecache pages [ 2799.892165][ T4462] 0 pages in swap cache [ 2799.896304][ T4462] Free swap = 124912kB [ 2799.900438][ T4462] Total swap = 124996kB [ 2799.904614][ T4462] 2097051 pages RAM [ 2799.909167][ T4462] 0 pages HighMem/MovableOnly [ 2799.913874][ T4462] 416960 pages reserved [ 2799.918038][ T4462] 0 pages cma reserved [ 2802.302764][ T4473] futex_wake_op: syz.6.8632 tries to shift op by 144; fix this program [ 2803.761885][ T4479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8624'. [ 2808.808952][ T2063] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2808.960135][ T5812] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2809.191230][ T5812] usb 10-1: device descriptor read/64, error -71 [ 2809.461495][ T5812] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2809.631322][ T5812] usb 10-1: device descriptor read/64, error -71 [ 2809.759423][ T5812] usb usb10-port1: attempt power cycle [ 2810.851609][ T5812] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2811.071197][ T5812] usb 10-1: device descriptor read/8, error -71 [ 2811.733446][ T1439] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2812.007044][ T1439] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 2812.094800][ T4530] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.8644'. [ 2812.108793][ T1439] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2812.185938][ T1439] usb 7-1: config 0 has no interface number 0 [ 2812.231286][ T1439] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2812.573728][ T1439] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2812.780647][ T1439] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2813.161690][ T1439] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2813.200356][ T1439] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2813.238448][ T1439] usb 7-1: Product: syz [ 2813.258676][ T1439] usb 7-1: Manufacturer: syz [ 2813.285467][ T1439] usb 7-1: SerialNumber: syz [ 2813.306659][ T1439] usb 7-1: config 0 descriptor?? [ 2814.319486][ T1439] usbtouchscreen: probe of 7-1:0.117 failed with error -71 [ 2814.415055][ T1439] usb 7-1: USB disconnect, device number 3 [ 2815.233380][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8650'. [ 2815.284996][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2815.293579][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2815.326152][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2815.421806][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2815.691230][ T5812] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2817.271414][ T4566] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.8654'. [ 2817.381327][ T5812] usb 5-1: device descriptor read/64, error -71 [ 2818.135077][ T5812] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2818.381228][ T5812] usb 5-1: device descriptor read/64, error -71 [ 2818.501322][ T5812] usb usb5-port1: attempt power cycle [ 2823.331283][ T1914] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2823.991259][ T1914] usb 7-1: device descriptor read/64, error -71 [ 2824.281323][ T1914] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2824.461422][ T1914] usb 7-1: device descriptor read/64, error -71 [ 2824.601756][ T1914] usb usb7-port1: attempt power cycle [ 2827.061225][ T1914] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2827.160133][ T1914] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2827.221801][ T1914] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2827.230820][ T1914] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 2827.446449][ T1914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2827.712598][ T1914] usb 7-1: USB disconnect, device number 6 [ 2829.861259][ T4643] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2831.255041][ T5812] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2831.421206][ T5812] usb 7-1: device descriptor read/64, error -71 [ 2831.711260][ T5812] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2831.871212][ T5812] usb 7-1: device descriptor read/64, error -71 [ 2832.001385][ T5812] usb usb7-port1: attempt power cycle [ 2832.081217][ T5811] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 2832.347689][ T5811] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 2832.451186][ T5812] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2833.018543][ T5812] usb 7-1: device descriptor read/8, error -71 [ 2833.064403][ T5811] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2833.108024][ T5811] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2833.186826][ T5811] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2833.261801][ T5811] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2833.308706][ T5811] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2833.312826][ T5812] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2833.332704][ T5811] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2833.342690][ T5811] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2833.371425][ T5811] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2833.442786][ T5812] usb 7-1: device descriptor read/8, error -71 [ 2833.451493][ T5811] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2833.461652][ T5811] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2833.501670][ T5811] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2833.541167][ T5811] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2833.563030][ T5812] usb usb7-port1: unable to enumerate USB device [ 2833.597225][ T5811] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2833.636996][ T5811] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2833.671146][ T5811] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2833.702428][ T5811] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2833.736084][ T5811] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2833.765600][ T5811] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2833.776199][ T5811] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2833.791441][ T5811] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2833.810294][ T5811] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2833.821763][ T5811] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2833.830904][ T5811] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2833.842554][ T5811] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2833.855101][ T5811] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2833.881196][ T5811] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2833.891566][ T5811] usb 10-1: Product: syz [ 2833.895850][ T5811] usb 10-1: Manufacturer: syz [ 2833.913749][ T4667] netlink: 'syz.4.8687': attribute type 11 has an invalid length. [ 2833.942082][ T5811] usb 10-1: SerialNumber: syz [ 2833.960705][ T5811] usb 10-1: config 0 descriptor?? [ 2834.049909][ T5811] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 2835.279432][ T4435] usb 10-1: USB disconnect, device number 6 [ 2835.291753][ T4435] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 2835.579222][ T1914] libceph: connect (1)[c::]:6789 error -101 [ 2835.687151][ T1914] libceph: mon0 (1)[c::]:6789 connect error [ 2835.823508][ T4684] ceph: No mds server is up or the cluster is laggy [ 2836.377185][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.383883][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2838.006363][ T5809] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2838.172000][ T5809] usb 7-1: device descriptor read/64, error -71 [ 2838.801216][ T5809] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2839.066037][ T5809] usb 7-1: device descriptor read/64, error -71 [ 2840.254406][ T4703] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2840.365572][ T5809] usb usb7-port1: attempt power cycle [ 2840.561661][ T1914] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2840.797810][ T1914] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2840.923851][ T1914] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2841.055279][ T1914] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 2841.131172][ T5809] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2841.157315][ T1914] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2841.925135][ T5809] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 2841.949035][ T5809] usb 7-1: config 0 has no interface number 0 [ 2841.955327][ T5809] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2841.957422][ T1914] usb 10-1: USB disconnect, device number 7 [ 2841.983115][ T5809] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2842.001498][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2842.021559][ T5809] usb 7-1: Product: syz [ 2842.025769][ T5809] usb 7-1: Manufacturer: syz [ 2842.041179][ T5809] usb 7-1: SerialNumber: syz [ 2842.053319][ T5809] usb 7-1: config 0 descriptor?? [ 2842.110955][ T5809] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 2843.443242][ T1914] usb 7-1: USB disconnect, device number 13 [ 2843.486646][ T1914] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 2846.832572][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8705'. [ 2846.858266][ T4748] macsec0: entered promiscuous mode [ 2847.384767][ T4757] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in; [ 2847.384767][ T4757] program syz.9.8706 not setting count and/or reply_len properly [ 2848.455293][ T4766] comedi comedi0: dt2801: I/O port conflict (0x294,2) [ 2849.772189][ T5812] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2849.931550][ T1914] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2850.048562][ T5812] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2850.157419][ T5812] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2850.234713][ T1914] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2850.321393][ T5812] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 2850.341271][ T1914] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2850.381282][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2850.440951][ T1914] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 2850.511634][ T1914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2850.553769][ T1914] cxacru 7-1:1.0: usbatm_usb_probe: bind failed: -19! [ 2850.952597][ T1914] usb 5-1: USB disconnect, device number 22 [ 2852.523956][ T4795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8718'. [ 2853.355231][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8720'. [ 2853.501261][ T5812] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2854.258227][ T5830] usb 7-1: USB disconnect, device number 14 [ 2854.334334][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2854.401960][ T5812] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2854.476133][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2854.511550][ T5812] usb 1-1: config 0 descriptor?? [ 2855.022162][ T5812] usbhid 1-1:0.0: can't add hid device: -71 [ 2855.028334][ T5812] usbhid: probe of 1-1:0.0 failed with error -71 [ 2855.230764][ T5830] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 2855.468742][ T5812] usb 1-1: USB disconnect, device number 33 [ 2855.578250][ T5830] usb 10-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 2855.624387][ T5830] usb 10-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 2855.645994][ T5830] usb 10-1: Product: syz [ 2855.670933][ T5830] usb 10-1: config 0 descriptor?? [ 2855.723008][ T5830] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 2855.873386][ T5830] usb 10-1: Detected FT232H [ 2855.921170][ T5812] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2856.011874][ T5830] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2856.049919][ T5830] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2856.087939][ T5830] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 2856.122124][ T5830] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2856.176834][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2856.197572][ T5830] usb 10-1: USB disconnect, device number 8 [ 2856.371524][ T5812] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2856.380624][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2856.531840][ T5830] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2857.091585][ T5830] ftdi_sio 10-1:0.0: device disconnected [ 2857.172734][ T5812] usb 1-1: config 0 descriptor?? [ 2857.240781][ T5812] usb 1-1: can't set config #0, error -71 [ 2857.294580][ T5812] usb 1-1: USB disconnect, device number 34 [ 2858.008864][ T4843] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2858.953023][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8728'. [ 2858.984116][ T4849] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2860.941286][ T4863] wg2 speed is unknown, defaulting to 1000 [ 2861.661228][T31009] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2862.184331][T31009] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2862.333203][T31009] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2862.342410][T31009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2862.362629][T31009] usb 7-1: config 0 descriptor?? [ 2864.403228][T21872] Bluetooth: hci2: command 0x0406 tx timeout [ 2864.719907][T31009] usb 7-1: can't set config #0, error -71 [ 2864.773499][T31009] usb 7-1: USB disconnect, device number 15 [ 2870.419875][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8744'. [ 2871.483607][ T4703] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2875.461578][ T5809] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2875.872383][ T5809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2875.913689][ T5809] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2875.971973][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2876.010789][ T5809] usb 7-1: config 0 descriptor?? [ 2876.332308][ T5809] usbhid 7-1:0.0: can't add hid device: -71 [ 2876.376519][ T5809] usbhid: probe of 7-1:0.0 failed with error -71 [ 2876.464401][ T5809] usb 7-1: USB disconnect, device number 16 [ 2878.001823][ T4435] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2879.875019][ T4435] usb 7-1: unable to read config index 0 descriptor/all [ 2879.897217][ T4435] usb 7-1: can't read configurations, error -71 [ 2880.183400][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8758'. [ 2881.065756][ T4966] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 2881.731287][ T4435] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2881.934653][ T4970] netlink: 'syz.4.8762': attribute type 12 has an invalid length. [ 2882.189863][ T4435] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2882.329330][ T4435] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2882.491478][ T4435] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2882.836448][ T4435] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2882.949516][ T4435] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2883.131550][ T4435] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2883.161256][ T4435] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2883.171439][ T4435] usb 1-1: Product: syz [ 2883.175644][ T4435] usb 1-1: Manufacturer: syz [ 2883.247808][ T4435] cdc_wdm 1-1:1.0: skipping garbage [ 2883.368527][ T4435] cdc_wdm 1-1:1.0: skipping garbage [ 2883.405676][ T4435] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2883.434944][ T4435] cdc_wdm 1-1:1.0: Unknown control protocol [ 2883.517554][ T4435] usb 1-1: USB disconnect, device number 35 [ 2885.825279][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8771'. [ 2886.741481][ T5811] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 2886.923340][ T5811] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2886.934855][ T5811] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2886.954018][ T5811] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2886.975645][ T5811] usb 10-1: config 0 descriptor?? [ 2887.187097][ T5811] usbhid 10-1:0.0: can't add hid device: -71 [ 2887.201388][ T5811] usbhid: probe of 10-1:0.0 failed with error -71 [ 2887.249289][ T5811] usb 10-1: USB disconnect, device number 9 [ 2887.496015][T31009] libceph: connect (1)[c::]:6789 error -101 [ 2887.692329][T31009] libceph: mon0 (1)[c::]:6789 connect error [ 2887.913561][T31551] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2887.923442][T31551] Bluetooth: hci2: Injecting HCI hardware error event [ 2887.938232][T21872] Bluetooth: hci2: hardware error 0x00 [ 2888.181995][ T5811] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 2888.197877][ T5013] ceph: No mds server is up or the cluster is laggy [ 2888.382816][ T5811] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2888.399481][ T5811] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2888.434574][ T5811] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2888.479563][ T5811] usb 10-1: config 0 descriptor?? [ 2888.574175][ T5811] usb 10-1: can't set config #0, error -71 [ 2888.613434][ T5811] usb 10-1: USB disconnect, device number 10 [ 2888.615802][ T5019] serio: Serial port ttynull [ 2889.652671][ T5028] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8779'. [ 2889.783392][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8779'. [ 2889.801126][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2889.902065][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2890.311213][T21872] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2890.912714][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2890.934912][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2892.109952][ T5052] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2895.347683][ T5088] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2895.524902][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8798'. [ 2897.764526][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.770913][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2901.254412][ T5138] ceph: No mds server is up or the cluster is laggy [ 2901.557416][ T1914] libceph: connect (1)[c::]:6789 error -101 [ 2901.658179][ T1914] libceph: mon0 (1)[c::]:6789 connect error [ 2902.036574][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 2902.044024][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 2905.116372][ T5118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2905.260389][ T5118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2905.855682][ T5118] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2905.920818][ T5118] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2905.941522][ T5118] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2905.950447][ T5118] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2906.204789][ T2709] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2916.233523][ T5219] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.8829'. [ 2922.199606][ T5264] ceph: No mds server is up or the cluster is laggy [ 2922.213046][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 2922.233701][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 2923.126009][ T5279] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2926.171410][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8848'. [ 2926.445538][ T5288] macsec0: entered promiscuous mode [ 2928.877808][ T5316] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2931.530981][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8863'. [ 2936.267956][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8875'. [ 2939.812972][T30988] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2940.748465][ T5405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2943.048020][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8887'. [ 2944.915428][ T5450] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2948.818984][ T5476] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8900'. [ 2949.262726][ T5485] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2952.651354][ T27] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2952.855131][ T27] usb 5-1: device descriptor read/64, error -71 [ 2953.268671][ T27] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2953.515375][ T27] usb 5-1: device descriptor read/64, error -71 [ 2953.716099][ T27] usb usb5-port1: attempt power cycle [ 2954.172260][ T27] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2955.133482][ T27] usb 5-1: device not accepting address 25, error -71 [ 2959.204407][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.210764][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2962.929523][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8924'. [ 2969.761825][ T5614] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.8938'. [ 2969.772224][ T5612] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8937'. [ 2970.061194][ T4144] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2970.960228][ T5626] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2970.991552][ T4144] usb 1-1: device descriptor read/64, error -71 [ 2971.540148][ T4144] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2972.731290][ T4144] usb 1-1: device descriptor read/64, error -71 [ 2973.568934][ T4144] usb usb1-port1: attempt power cycle [ 2974.787075][ T5042] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2975.353228][ T5649] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.8947'. [ 2975.616010][ T5654] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2976.965552][ T5661] ceph: No mds server is up or the cluster is laggy [ 2976.989251][ T27] libceph: connect (1)[c::]:6789 error -101 [ 2977.109640][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 2978.811236][ T4144] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2978.971259][ T4144] usb 7-1: device descriptor read/64, error -71 [ 2979.331599][ T4144] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2979.621229][ T4144] usb 7-1: device descriptor read/64, error -71 [ 2979.773314][ T4144] usb usb7-port1: attempt power cycle [ 2979.871208][ T5812] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 2980.211267][ T4144] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2980.315778][ T4144] usb 7-1: device descriptor read/8, error -71 [ 2980.731441][ T4144] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2980.805214][ T4144] usb 7-1: device descriptor read/8, error -71 [ 2980.891133][ T5812] usb 10-1: Using ep0 maxpacket: 8 [ 2980.920733][ T5812] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 2980.941659][ T4144] usb usb7-port1: unable to enumerate USB device [ 2981.023782][ T5696] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2981.080530][ T5812] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2981.232506][ T5812] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2981.367471][ T5812] usb 10-1: Product: syz [ 2981.447335][ T5812] usb 10-1: Manufacturer: syz [ 2981.554579][ T5812] usb 10-1: SerialNumber: syz [ 2981.774610][ T5812] usb 10-1: config 0 descriptor?? [ 2981.900696][ T5812] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2982.398042][ T5701] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2982.398306][ T5812] usb 10-1: setting power ON [ 2982.413510][ T5812] dvb-usb: bulk message failed: -22 (2/0) [ 2982.428871][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2982.452043][ T5812] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2982.466028][ T5812] usb 10-1: media controller created [ 2982.504994][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2982.545529][ T5812] usb 10-1: selecting invalid altsetting 6 [ 2982.556306][ T5812] usb 10-1: digital interface selection failed (-22) [ 2982.596115][ T5812] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2982.668106][ T5812] usb 10-1: setting power OFF [ 2982.686682][ T5812] dvb-usb: bulk message failed: -22 (2/0) [ 2983.526255][ T5812] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2983.536272][ T5812] (NULL device *): no alternate interface [ 2983.576934][ T5812] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2983.624000][ T5812] usb 10-1: USB disconnect, device number 11 [ 2987.021196][ T5812] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2988.484825][ T5737] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2988.932440][ T5812] usb 5-1: device descriptor read/all, error -71 [ 2989.030811][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8974'. [ 2990.086649][ T5759] netlink: 'syz.0.8978': attribute type 72 has an invalid length. [ 2993.083623][ T5776] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2993.586062][ T5151] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2994.404559][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8985'. [ 2994.604470][ T5151] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2994.634719][ T5800] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2995.560827][ T5151] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 2995.651124][ T5151] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2995.710764][ T5151] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 2995.722901][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2995.745300][ T5805] netlink: 'syz.6.8988': attribute type 72 has an invalid length. [ 2995.980834][ T5151] cxacru 1-1:1.0: invalid response length to cm 0x90: 0 [ 2996.058525][ T5813] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 2996.213971][ T5813] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 2996.230476][ T4144] usb 1-1: USB disconnect, device number 39 [ 2998.294445][ T5838] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2999.877659][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8997'. [ 2999.909923][ T5844] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.8998'. [ 3000.191117][ T5151] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 3001.656510][ T5151] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3001.736864][ T5151] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 3001.818757][ T5151] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 3001.895159][ T5151] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 3001.957944][ T5151] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3003.318718][ T5151] cxacru 7-1:1.0: send of cm 0x91 failed (-71) [ 3003.327496][ T5151] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 3003.335647][ T5151] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 3003.344081][ T5151] cxacru: probe of 7-1:1.0 failed with error -71 [ 3003.381949][ T5151] usb 7-1: USB disconnect, device number 23 [ 3004.624632][ T5876] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3005.424515][ T5878] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.9009'. [ 3006.735751][ T2709] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3007.208004][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9011'. [ 3007.981219][ T5811] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 3008.307695][ T5811] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3008.401153][ T5811] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 3008.451531][ T5811] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 3008.524989][ T5811] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 3008.580310][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3008.636356][ T5907] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.9019'. [ 3008.897993][ T5912] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3010.001920][ T5811] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 3010.124737][ T5811] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 3010.221420][ T5811] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 3010.277731][ T5811] cxacru: probe of 5-1:1.0 failed with error -71 [ 3010.636283][ T5811] usb 5-1: USB disconnect, device number 29 [ 3015.773474][ T5934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3016.044829][ T5951] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3020.640047][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.646537][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.971197][ T5830] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 3021.191977][ T5830] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3021.212590][ T5830] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 3021.254675][ T5830] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 3021.301167][ T5830] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 3021.330822][ T5830] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3021.660942][ T5830] cxacru 10-1:1.0: invalid response length to cm 0x90: 0 [ 3023.035945][T24392] usb 10-1: USB disconnect, device number 12 [ 3023.925736][ T5981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3034.115340][ T6040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3037.342448][ T5812] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 3038.007654][ T5812] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 3038.065763][ T5812] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3038.111310][ T5812] usb 7-1: config 0 has no interface number 0 [ 3038.117481][ T5812] usb 7-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3038.190401][T30025] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3038.343008][ T5812] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 3039.051219][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3039.089868][ T5812] usb 7-1: Product: syz [ 3039.100004][ T5812] usb 7-1: Manufacturer: syz [ 3039.111688][ T5812] usb 7-1: SerialNumber: syz [ 3039.171926][ T5812] usb 7-1: config 0 descriptor?? [ 3039.222229][ T5812] yurex 7-1:0.50: Could not find endpoints [ 3040.170263][ T5811] usb 7-1: USB disconnect, device number 24 [ 3043.152393][ T6083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3050.742823][ T6135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3053.651614][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9089'. [ 3053.891224][ T5151] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 3054.724805][ T5151] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 3054.827825][ T5151] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3054.841601][ T5811] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 3054.899744][ T5151] usb 7-1: config 0 has no interface number 0 [ 3054.911414][ T5811] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3054.976174][ T5151] usb 7-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3055.282157][ T5151] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 3055.401774][ T5151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3055.521818][ T5151] usb 7-1: Product: syz [ 3055.578453][ T5151] usb 7-1: Manufacturer: syz [ 3055.660245][ T5151] usb 7-1: SerialNumber: syz [ 3056.152373][ T5151] usb 7-1: config 0 descriptor?? [ 3056.214322][ T5151] yurex 7-1:0.50: Could not find endpoints [ 3056.240090][ T6176] fido_id[6176]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3056.480170][ T5811] usb 7-1: USB disconnect, device number 25 [ 3056.490604][ T5989] cxacru 10-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 3056.490784][ T5813] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 3056.921725][T24392] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 3057.419911][T24392] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3057.451065][ T4435] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 3057.542950][T24392] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 3057.710109][T24392] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 3057.816200][ T4435] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3057.976956][T24392] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 3058.014073][ T4435] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 3058.140651][T24392] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3058.161427][ T4435] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 3058.177630][ T4435] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 3058.191441][ T4435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3058.475719][ T4435] cxacru 1-1:1.0: invalid response length to cm 0x90: 48 [ 3058.501543][ T6191] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 3058.556536][ T6191] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 3058.713001][T24392] usb 10-1: can't set config #1, error -71 [ 3058.725749][T24392] usb 10-1: USB disconnect, device number 13 [ 3059.145662][T24392] usb 1-1: USB disconnect, device number 40 [ 3061.241606][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9102'. [ 3061.465149][ T1914] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 3062.508888][ T1914] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3064.071288][ T6195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3064.586686][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9106'. [ 3065.394514][ T6226] fido_id[6226]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3067.744144][ T6251] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3070.022254][ T6262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9116'. [ 3070.151664][ T27] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 3070.370585][ T5811] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 3070.412409][ T27] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 3070.430867][ T27] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3070.490016][ T5811] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3070.549039][ T27] usb 10-1: config 0 has no interface number 0 [ 3070.649762][ T27] usb 10-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3070.961953][ T27] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 3071.066873][ T27] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3071.156194][ T27] usb 10-1: Product: syz [ 3071.205690][ T27] usb 10-1: Manufacturer: syz [ 3071.289856][ T27] usb 10-1: SerialNumber: syz [ 3071.398829][ T27] usb 10-1: config 0 descriptor?? [ 3071.440880][ T27] yurex 10-1:0.50: Could not find endpoints [ 3071.565049][ T6270] fido_id[6270]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3071.652451][ T1914] usb 10-1: USB disconnect, device number 14 [ 3071.694253][T30025] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3077.188529][ T6307] overlayfs: missing 'lowerdir' [ 3077.194111][ T5811] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 3077.492329][ T5811] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3077.547028][ T5811] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 3077.696618][ T5811] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 3077.881129][ T5811] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 3077.961073][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3078.271114][ T5811] cxacru 7-1:1.0: invalid response length to cm 0x90: 32 [ 3078.403811][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9130'. [ 3078.470477][ T4144] usb 7-1: USB disconnect, device number 26 [ 3078.684537][ T1914] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 3078.742018][ T1914] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3079.711528][ T6321] fido_id[6321]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3081.236438][ T6336] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3082.107945][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.120416][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.803959][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9138'. [ 3084.055198][ T6358] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3085.250358][ T6368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9147'. [ 3085.421162][T31009] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 3085.516974][ T5812] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 3085.625120][ T5812] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3086.483056][T31009] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 3086.491385][T31009] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3086.502003][T31009] usb 10-1: config 0 has no interface number 0 [ 3086.508225][T31009] usb 10-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3086.564846][T31009] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 3086.588210][T31009] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3086.596799][T31009] usb 10-1: Product: syz [ 3086.602054][T31009] usb 10-1: Manufacturer: syz [ 3086.608613][T31009] usb 10-1: SerialNumber: syz [ 3086.652095][T31009] usb 10-1: config 0 descriptor?? [ 3086.683157][T31009] yurex 10-1:0.50: Could not find endpoints [ 3086.774359][ T6372] fido_id[6372]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3086.891895][T31009] usb 10-1: USB disconnect, device number 15 [ 3087.327376][ T6377] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3089.722509][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9151'. [ 3091.586134][ T6405] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3094.752646][ T5812] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 3094.827719][ T6420] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3095.564138][ T5812] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3095.953109][ T5812] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 3096.264474][ T5812] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 3096.277898][ T5812] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 3096.287706][ T5812] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3096.556477][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9162'. [ 3096.736738][ T5812] cxacru 10-1:1.0: invalid response length to cm 0x90: 32 [ 3097.262453][ T6427] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3097.321647][ T6427] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 3097.391679][ T5811] usb 10-1: USB disconnect, device number 16 [ 3097.431551][ T6427] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3097.450189][ T6427] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3097.466845][ T6427] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 3097.713500][ T6427] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 3098.630730][T21872] Bluetooth: hci0: command 0x0406 tx timeout [ 3099.431023][T21872] Bluetooth: hci4: command 0x0406 tx timeout [ 3099.511185][T21872] Bluetooth: hci5: command 0x0c1a tx timeout [ 3100.062114][ T6451] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3100.711173][T21872] Bluetooth: hci0: command 0x0406 tx timeout [ 3101.591049][T21872] Bluetooth: hci5: command 0x0c1a tx timeout [ 3102.878473][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9172'. [ 3104.489725][T21872] Bluetooth: hci5: command 0x0c1a tx timeout [ 3104.955884][ T4697] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3105.185079][ T6486] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3106.777254][ T6500] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3108.301951][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9183'. [ 3108.897046][ T6512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9184'. [ 3109.241522][ T5812] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 3109.461789][ T5812] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3113.729796][ T6516] fido_id[6516]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3114.443451][ T6535] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3120.166804][ T6571] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 3123.045744][ T6191] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 3123.059294][ T6315] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 3123.071246][ T6435] cxacru 10-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 3125.021959][ T6603] netlink: 'syz.9.9211': attribute type 3 has an invalid length. [ 3125.311133][ T4435] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 3125.525165][ T4435] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 3125.541267][ T4435] usb 7-1: config 0 has no interface number 0 [ 3125.561092][ T4435] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3125.588547][ T4435] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 3125.611001][ T4435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3125.633150][ T4435] usb 7-1: Product: syz [ 3125.637368][ T4435] usb 7-1: Manufacturer: syz [ 3125.666760][ T4435] usb 7-1: SerialNumber: syz [ 3125.718761][ T4435] usb 7-1: config 0 descriptor?? [ 3125.753589][ T4435] yurex 7-1:0.50: Could not find endpoints [ 3126.185291][ T4435] usb 7-1: USB disconnect, device number 27 [ 3126.506145][ T5811] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 3126.898205][ T5811] usb 10-1: Using ep0 maxpacket: 16 [ 3126.909938][ T5811] usb 10-1: config 222 has an invalid interface number: 31 but max is 0 [ 3126.929376][ T5811] usb 10-1: config 222 has no interface number 0 [ 3127.627854][ T5811] usb 10-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 3127.639685][ T5811] usb 10-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 3127.651341][ T5811] usb 10-1: config 222 interface 31 has no altsetting 0 [ 3127.672846][ T5811] usb 10-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 3127.690998][ T5811] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3127.699133][ T5811] usb 10-1: Product: syz [ 3127.778725][ T5811] usb 10-1: Manufacturer: syz [ 3127.801021][ T5811] usb 10-1: SerialNumber: syz [ 3127.946480][ T6610] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 3128.341643][ T5811] ldusb 10-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 3128.400621][ T5811] usb 10-1: USB disconnect, device number 17 [ 3128.486927][ T5811] ldusb 10-1:222.31: LD USB Device #0 now disconnected [ 3130.621289][ T4144] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 3130.822961][ T4144] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 3130.842900][ T4144] usb 1-1: config 0 has no interface number 0 [ 3130.849058][ T4144] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3130.888939][ T4144] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 3130.900961][ T4144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3130.931930][ T4144] usb 1-1: Product: syz [ 3130.939332][ T4144] usb 1-1: Manufacturer: syz [ 3130.956045][ T4144] usb 1-1: SerialNumber: syz [ 3130.978355][ T4144] usb 1-1: config 0 descriptor?? [ 3131.019658][ T4144] yurex 1-1:0.50: Could not find endpoints [ 3131.244031][ T4435] usb 1-1: USB disconnect, device number 41 [ 3131.948375][ T6656] general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] PREEMPT SMP KASAN [ 3131.960276][ T6656] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 3131.968762][ T6656] CPU: 1 PID: 6656 Comm: syz.9.9227 Not tainted syzkaller #0 [ 3131.976135][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3131.986652][ T6656] RIP: 0010:kthread_destroy_worker+0x26/0xd0 [ 3131.992682][ T6656] Code: 1f 44 00 00 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 75 e9 2c 00 4c 8d 73 68 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 db 6a 85 00 4d 8b 36 4d 85 f6 74 [ 3132.012319][ T6656] RSP: 0018:ffffc9000449f0b0 EFLAGS: 00010207 [ 3132.018419][ T6656] RAX: 000000000000000c RBX: fffffffffffffffc RCX: 0000000000080000 [ 3132.026412][ T6656] RDX: ffffc90010d19000 RSI: 0000000000001cab RDI: 0000000000001cac [ 3132.034400][ T6656] RBP: 0000000000000000 R08: ffff88807efcb03b R09: 1ffff1100fdf9607 [ 3132.042396][ T6656] R10: dffffc0000000000 R11: ffffed100fdf9608 R12: dffffc0000000000 [ 3132.050390][ T6656] R13: dffffc0000000000 R14: 0000000000000064 R15: dffffc0000000000 [ 3132.058386][ T6656] FS: 00007f0f46bb46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3132.067341][ T6656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3132.073953][ T6656] CR2: 00007f4f68227dac CR3: 000000005a4e8000 CR4: 00000000003506e0 [ 3132.081965][ T6656] Call Trace: [ 3132.085302][ T6656] [ 3132.088424][ T6656] ? vdpasim_unbind_mm+0x170/0x170 [ 3132.094536][ T6656] vdpasim_free+0x56/0x430 [ 3132.098986][ T6656] ? devres_release+0xa0/0xa0 [ 3132.103694][ T6656] ? vdpasim_unbind_mm+0x170/0x170 [ 3132.108829][ T6656] vdpa_release_dev+0x6c/0xf0 [ 3132.113531][ T6656] ? __vdpa_alloc_device+0x410/0x410 [ 3132.118839][ T6656] device_release+0xbc/0x1e0 [ 3132.123457][ T6656] kobject_put+0x21b/0x450 [ 3132.127908][ T6656] vdpasim_create+0x365/0x890 [ 3132.132609][ T6656] vdpasim_blk_dev_add+0x11d/0x290 [ 3132.137741][ T6656] ? vdpasim_net_mgmtdev_release+0x10/0x10 [ 3132.143576][ T6656] ? vdpasim_blk_get_config+0x5a0/0x5a0 [ 3132.149147][ T6656] ? vdpasim_blk_dev_del+0x20/0x20 [ 3132.154286][ T6656] ? vdpasim_blk_work+0x15b0/0x15b0 [ 3132.159511][ T6656] ? vdpa_mgmtdev_get_from_attr+0x267/0x270 [ 3132.165430][ T6656] vdpa_nl_cmd_dev_add_set_doit+0xa85/0xbd0 [ 3132.171355][ T6656] ? vdpa_nl_cmd_mgmtdev_get_dumpit+0x270/0x270 [ 3132.177625][ T6656] ? __nla_parse+0x40/0x50 [ 3132.182076][ T6656] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 3132.188432][ T6656] genl_family_rcv_msg_doit+0x21a/0x310 [ 3132.194009][ T6656] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3132.199930][ T6656] ? security_capable+0x5f/0xb0 [ 3132.204805][ T6656] ? bpf_lsm_capable+0x9/0x10 [ 3132.209509][ T6656] ? security_capable+0x89/0xb0 [ 3132.214390][ T6656] genl_rcv_msg+0x611/0x7a0 [ 3132.218918][ T6656] ? genl_bind+0x360/0x360 [ 3132.223354][ T6656] ? vdpa_nl_cmd_mgmtdev_get_dumpit+0x270/0x270 [ 3132.229620][ T6656] ? netlink_rcv_skb+0x214/0x4c0 [ 3132.234578][ T6656] netlink_rcv_skb+0x235/0x4c0 [ 3132.239363][ T6656] ? genl_bind+0x360/0x360 [ 3132.243800][ T6656] ? netlink_ack+0x1160/0x1160 [ 3132.248583][ T6656] ? __lock_acquire+0x7d80/0x7d80 [ 3132.253631][ T6656] ? down_read+0x1ac/0x2e0 [ 3132.258074][ T6656] genl_rcv+0x28/0x40 [ 3132.262075][ T6656] netlink_unicast+0x7b1/0x930 [ 3132.266863][ T6656] netlink_sendmsg+0x8d0/0xbf0 [ 3132.271648][ T6656] ? netlink_getsockopt+0x590/0x590 [ 3132.276865][ T6656] ? apparmor_socket_sendmsg+0x8e/0x330 [ 3132.282439][ T6656] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3132.287756][ T6656] ? security_socket_sendmsg+0x80/0xa0 [ 3132.293238][ T6656] ? netlink_getsockopt+0x590/0x590 [ 3132.298462][ T6656] ____sys_sendmsg+0x61b/0x980 [ 3132.303255][ T6656] ? __asan_memset+0x22/0x40 [ 3132.307880][ T6656] ? __sys_sendmsg_sock+0x30/0x30 [ 3132.312928][ T6656] ? __import_iovec+0x5f2/0x850 [ 3132.317810][ T6656] ? import_iovec+0x73/0xa0 [ 3132.322341][ T6656] ___sys_sendmsg+0x2a6/0x360 [ 3132.327039][ T6656] ? __sys_sendmsg+0x2b0/0x2b0 [ 3132.331846][ T6656] __se_sys_sendmsg+0x1d0/0x2c0 [ 3132.336722][ T6656] ? __x64_sys_sendmsg+0x80/0x80 [ 3132.341689][ T6656] ? lockdep_hardirqs_on+0x98/0x150 [ 3132.346917][ T6656] do_syscall_64+0x55/0xb0 [ 3132.351351][ T6656] ? clear_bhb_loop+0x40/0x90 [ 3132.356054][ T6656] ? clear_bhb_loop+0x40/0x90 [ 3132.360752][ T6656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3132.366666][ T6656] RIP: 0033:0x7f0f4899e159 [ 3132.371104][ T6656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3132.390788][ T6656] RSP: 002b:00007f0f46bb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3132.399237][ T6656] RAX: ffffffffffffffda RBX: 00007f0f48c26180 RCX: 00007f0f4899e159 [ 3132.407236][ T6656] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 3132.415233][ T6656] RBP: 00007f0f48a35024 R08: 0000000000000000 R09: 0000000000000000 [ 3132.423227][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3132.431221][ T6656] R13: 00007f0f48c26218 R14: 00007f0f48c26180 R15: 00007fffa9273078 [ 3132.439225][ T6656] [ 3132.442272][ T6656] Modules linked in: [ 3132.448179][ T6656] ---[ end trace 0000000000000000 ]--- [ 3132.454181][ T6656] RIP: 0010:kthread_destroy_worker+0x26/0xd0 [ 3132.460193][ T6656] Code: 1f 44 00 00 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 75 e9 2c 00 4c 8d 73 68 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 db 6a 85 00 4d 8b 36 4d 85 f6 74 [ 3132.479912][ T6656] RSP: 0018:ffffc9000449f0b0 EFLAGS: 00010207 [ 3132.485997][ T6656] RAX: 000000000000000c RBX: fffffffffffffffc RCX: 0000000000080000 [ 3132.531097][ T6656] RDX: ffffc90010d19000 RSI: 0000000000001cab RDI: 0000000000001cac [ 3132.539108][ T6656] RBP: 0000000000000000 R08: ffff88807efcb03b R09: 1ffff1100fdf9607 [ 3132.547100][ T6656] R10: dffffc0000000000 R11: ffffed100fdf9608 R12: dffffc0000000000 [ 3132.555092][ T6656] R13: dffffc0000000000 R14: 0000000000000064 R15: dffffc0000000000 [ 3132.563086][ T6656] FS: 00007f0f46bb46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3132.572038][ T6656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3132.578637][ T6656] CR2: 00007f4f68227dac CR3: 000000005a4e8000 CR4: 00000000003506e0 [ 3132.587064][ T6656] Kernel panic - not syncing: Fatal exception [ 3132.593250][ T6656] Kernel Offset: disabled [ 3132.597561][ T6656] Rebooting in 86400 seconds..