last executing test programs: 20m42.800817852s ago: executing program 32 (id=15): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000580)={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0}) mount$9p_unix(0x0, 0x0, &(0x7f00000001c0), 0x1004000, 0x0) write(r2, &(0x7f0000000300)='0\n', 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setparam(r0, 0x0) r3 = io_uring_setup(0x66a4, &(0x7f0000000380)={0x0, 0x417c, 0x2, 0x1, 0x2b8}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x1) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20000040) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c814) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}}, 0x24) 6m51.661343844s ago: executing program 3 (id=2706): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x3, &(0x7f00000006c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xaf}, @call={0x85, 0x0, 0x0, 0x6c}], 0x0, 0x2942d506, 0x0, 0x0, 0x41100, 0x4a}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 6m50.915869253s ago: executing program 3 (id=2712): sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c2a0000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2a9c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6m50.490508575s ago: executing program 3 (id=2714): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x2}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0xaf0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, 0x0, 0x0, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 6m50.094184442s ago: executing program 3 (id=2717): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000900)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 6m49.213401675s ago: executing program 3 (id=2724): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 6m31.142692798s ago: executing program 33 (id=2724): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 5m57.052241343s ago: executing program 5 (id=2902): socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) fchdir(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x11622}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x7d}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x9}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x1ff}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x7}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 5m51.326140415s ago: executing program 5 (id=2919): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r3, 0x5) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005"], 0x4a) 5m48.327002403s ago: executing program 5 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c954", 0x2}], 0x1}}], 0x2, 0x40480c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd6d, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5m48.126606567s ago: executing program 5 (id=2927): socket(0x400000000010, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0xffffffff9080edc4, 0x0, 0x8000, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0}) mount$9p_unix(0x0, 0x0, &(0x7f00000001c0), 0x1004000, 0x0) write(r2, &(0x7f0000000300)='0\n', 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setparam(r0, 0x0) r3 = io_uring_setup(0x66a4, &(0x7f0000000380)={0x0, 0x417c, 0x2, 0x1, 0x2b8}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x1) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20000040) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c814) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}}, 0x24) 5m46.967654687s ago: executing program 5 (id=2932): epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 5m45.184906725s ago: executing program 5 (id=2935): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@empty, @initdev, 0x0}, &(0x7f0000000540)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@empty, @dev={0xac, 0x14, 0x14, 0x25}, r3}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x40) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000000)=0x4) 5m29.086007117s ago: executing program 34 (id=2935): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@empty, @initdev, 0x0}, &(0x7f0000000540)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@empty, @dev={0xac, 0x14, 0x14, 0x25}, r3}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x40) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000000)=0x4) 3m20.514289293s ago: executing program 4 (id=3321): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18", 0x1}], 0x1}}], 0x3, 0x40480c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd6d, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3m20.060864992s ago: executing program 4 (id=3324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="2c548f2664234a", 0x7}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) 3m16.706999932s ago: executing program 7 (id=3327): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x2, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x0) 3m12.909311966s ago: executing program 7 (id=3331): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000080)="01", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000008340)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006340)="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", 0x2000, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x460e, 0x3) 3m12.710931273s ago: executing program 4 (id=3334): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000100), 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r6, 0x0, 0x0, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x1000000000008, 0x5, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 3m11.279719837s ago: executing program 7 (id=3336): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000600)="bae51259bbc5e83b05cea6d1f4fd7461b0a405138fd788603f4c7fe9ee8960d5d854d8b78435a2845d312f940856e5b963585ef3047d3e0d99ade34c405aec32764e5a26babc", 0x46}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1}, 0x0) 3m8.956636013s ago: executing program 4 (id=3340): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, '\x00', "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) 3m8.784169183s ago: executing program 7 (id=3341): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f0000012300)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000014340)={0x2020}, 0x2020) 3m8.580949926s ago: executing program 4 (id=3343): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='bMaxPacketSize0\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 3m8.178097065s ago: executing program 4 (id=3345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="2c548f2664234a", 0x7}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) 3m8.154364682s ago: executing program 7 (id=3346): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000500)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 3m6.758969751s ago: executing program 7 (id=3349): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x57d9, &(0x7f0000000300)={0x0, 0xf20f, 0x10000, 0x2000002, 0x2a, 0x0, r1}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000011) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="060000060010220420000000000000001007000000000000"]) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000400), &(0x7f0000000580)=0x4) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000440)={0x25b, 0x10000, {0xffffffffffffffff}, {0xee01}, 0x0, 0x8}) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @empty, 'ip_vti0\x00'}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) close_range(0xffffffffffffffff, r4, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000180)={0xd, 0x8}) 2m52.765664784s ago: executing program 35 (id=3345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="2c548f2664234a", 0x7}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) 2m51.555328333s ago: executing program 36 (id=3349): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x57d9, &(0x7f0000000300)={0x0, 0xf20f, 0x10000, 0x2000002, 0x2a, 0x0, r1}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000011) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="060000060010220420000000000000001007000000000000"]) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000400), &(0x7f0000000580)=0x4) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000440)={0x25b, 0x10000, {0xffffffffffffffff}, {0xee01}, 0x0, 0x8}) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @empty, 'ip_vti0\x00'}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) close_range(0xffffffffffffffff, r4, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000180)={0xd, 0x8}) 51.386440595s ago: executing program 0 (id=3731): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f00000018c0)=""/4091, 0xffb}], 0x3}, 0x2}], 0x1, 0x100, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000880), 0xf504, r1}, 0x38) 50.048540989s ago: executing program 0 (id=3735): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)='h') 49.791212847s ago: executing program 0 (id=3738): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 48.918427613s ago: executing program 0 (id=3742): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0xfd) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') write(0xffffffffffffffff, &(0x7f00000001c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d", 0x3e) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/del2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000240)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f", 0x30) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/del3\x00', 0x42, 0x1ff) write(r1, &(0x7f00000002c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b", 0x3c) close(r1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 46.267939809s ago: executing program 0 (id=3748): creat(&(0x7f0000000380)='./file0\x00', 0x206) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 44.90266063s ago: executing program 0 (id=3752): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000012000101000000000000000000000000000000000000000004000000000000000300"/56, @ANYRES32=0x0, @ANYBLOB="00000000fdffffffadbf"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2800000bbbbbbbbbbbb0800450000340000000000019078ac090000001414aa0400907800000000449700070067fffd03020002ac1414aa64aa010144041660"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) 29.529230375s ago: executing program 37 (id=3752): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000012000101000000000000000000000000000000000000000004000000000000000300"/56, @ANYRES32=0x0, @ANYBLOB="00000000fdffffffadbf"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2800000bbbbbbbbbbbb0800450000340000000000019078ac090000001414aa0400907800000000449700070067fffd03020002ac1414aa64aa010144041660"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) 20.780554493s ago: executing program 9 (id=3821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) shutdown(r1, 0x1) r2 = socket$key(0xf, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000019140), 0x8400, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETA(r5, 0x80047456, &(0x7f0000000140)={0x10, 0x0, 0x9, 0x1ff, 0x10, "b4ba1c25a953278a"}) sendmsg$key(0xffffffffffffffff, &(0x7f00000190c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000019240)=ANY=[@ANYRES64=r0, @ANYRESHEX=r2, @ANYBLOB="359393c737c46b0725eb5ae02d482e1d958c8bcbf7c54b2c3a3a1895eee3d65c947ed4047088fbbf003b19b20b12459b3ff9576a7edd207f1d0df60fef40e8263fc92b3a389d89b483a8e8ff9d583f25fd527d1dc47cc21a49658e0291757152e8f94477", @ANYBLOB="0523a91e382473991d434574ab6e5e55511bc78c827910f08dcd567fde00"/45, @ANYRESDEC=r5], 0x10}}, 0x4000007) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='e:__group/myevent sched.sched_switch', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='MS', 0x2) 19.608434558s ago: executing program 1 (id=3824): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x11}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) getdents(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, &(0x7f0000000040)={{@_ha_fsid={[0x2, 0x6f]}, {0xfffb, 0x100, 0x346b68f4, 0x100000001}}, {{[0x71, 0x3, 0x7f4, 0x4]}, 0x0, 0x3, 0x9, 0x0, 0x0}}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) rseq(0x0, 0x0, 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 19.505652723s ago: executing program 9 (id=3825): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x78) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 19.308057533s ago: executing program 6 (id=3827): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2183}}, './file0\x00'}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r2, 0x0, {0x0, 0x0, 0x0, 0x56436486, 0x4000000000000004, 0x0, 0x1, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa231162b99d845fb00", [0x1, 0x4]}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x14, 0x1, 0x0, 0x25dfdbff, "", [@typed={0x0, 0x46, 0x0, 0x0, @str='[\x00'}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x57, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00'}, 0x18) 19.153586039s ago: executing program 8 (id=3828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xfffffffe}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 18.876609543s ago: executing program 2 (id=3829): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x117) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='\n', 0x1) 18.876188162s ago: executing program 9 (id=3830): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) write(r2, &(0x7f0000000240)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='dummy_udc.0', 0xb) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', &(0x7f00000001c0)='xfs\x00', 0x4, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 18.875884617s ago: executing program 6 (id=3831): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000900)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(0x3) r8 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 15.717620482s ago: executing program 6 (id=3832): sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c2a0000", @ANYRES16=0x0, @ANYBLOB="2800f0800a000800ffffffffffff00000500030019000000040009000a00080008021100000000003815f08020150d80ff0000008f6742a7153ddf24d64bdbaf298071706c0c30744645f4f5ac0c4d43dc95f004d93e7907b0c2c1a5f329942c5367ac8c9ca4deef9289ee892967329fa86af6655c4bb1793eaf44afd7e0202c09646c1b3ae491c9604c67d97ec75d866ba5f4a0da4e4132adf9ea150a692a767830895cb5b5748e9463d32b2ec6e6a5d2b2e39a8cc205dcba242cec3f20760809152df781092b55616849bfa7ea8404b9ff47325c8595391e6027b9516d305f95c4c624506bb48dc2a8e7a361b702a76cbfb5b3c401918bae4ac512b8e02ac449e451d2ad7bfd816754f6b6ddd385b0a751f5627d9930a3d651a119e3f4e19ae1ec73038c6de63bdcdd558dfa348f00280000006d1407a3ce399ee687c17ea3321c2876788536179edcad5a5c59f390d53839a32e4c6e1e380000001554be9b845fb9344325b79d1a439b24b505552a25a1a8e958757043cdbdc6ee089efe79428d9e8f84ba8bba5b6b605f658de967f0000000ea98e8063ea46b828d86c864068f43eff38c5e56e2e1602f1b6a78acc2e400d599721e1b48afd434087ab33ca7ad1ea4b5c8eea45a5d6b0f5d801fd1b0a41a4ab7a7501c3b90fa5fa556c0746cb5afab2b20eeaf102cf5170ef1de1fed4895919cb02bc90e0f2a6bef5c61199a3e8c6cf65dd7ac5f9ba5dbb6ba28e7888a3ddeb0b7af5489aabf75b0e4237f197adce19907963a82416527d7e793342fef8099a3a18b1757242cea899b1a6b3c53db79ffdcab0a41cad944e0e4c4e675d64f0d84443906baefeb9889cc90b46659953a6e0094c602ef3c985c84f894c9a3114e6052861c31e37020a7511f50bb000000f85bd5152b508246cce36f3d1c06d22bd0c99a8042ac3a14b76ad8f9377aa96131dddcfceab0b8c6691cb969dfcebdf7a34f20fcd50bf45c6fd224385f89dfc52bfb0ca4711707d4b0e5a9a103f8cf1df3773354313e8c3b67e58bedeb88ac1317f3b7f5b95758e510fcb5144703f1ddd919d9c41a961f8e8721677ca2fe091f3114fff53dd51110c10f45b427019148b08204999ebc1be4bfcf55de0a9469341120f9133094447a69e36ab27500711bb867bdf4d4af96005d0000007f5a3526654973bbb8dc2f92f65ad01f01546c05ad26711cfaab040829c915b822514d8feb992fbc98c37148311e8617e4f3c6dd445236e0e5e41d333d706c975611f8893c2fdca92b170091c09f2575e71296e88531fabc9d000000ec0000000be6b5a23ce9caad77f4dc9b9fcbeaefa37c2884e8c70bf9af5d31ff057661ee7b729d22f37494be92bb218b114a869474cd22b7fe5009f9b8d3937ab6064ef272483187b35bd84ee393b496cb76a3f0b0f966d77344fc1d325c603ce5deae7403445837f77d3c30fcba254ab18a0733e44c7d77987c3e4d5dafc971dd8bc4fdb6f2d2cbb65a3755dc6104ad1a9c039180faf9544b10842d5b890e8f399b3add502061202c920a6777eaeaecbe88658d98a3ee11f7e6522f5882e524cb8bf30ff50eab6d4bcadd5a860cc2d661be311051a0f60102043f3f22da7c0d73556bb03701f3c58dcd737fbf00000004c671a05b18efb59a15548701d615a19bab2bdc7850611172948f73c495e1ccb3ea5e5ee136c3268022d06866e075246b5c9e56fd1262f2e95cd2fb9f9ac95b8a6ff5b81f84ec8346fbb1ef752b41326269d70f725c676ef7acde0fe32316c082e9be2f8e4e03b3842573cf253feeab82e07beae7730f39a421d81a1d0d19024efa68dee212152e9bcc5d2cd2c51aa7205d2b6c44d55d3dc3774af2cec6d1468d706d9fbaeba2e9a9d16aaa0e9f91e981818f7e6b83a56862043c00041000004a98eff2982452fe05ace32c92800a7b45aacd093ba1f83128fa51249557f6348d9a38c41c103db6fb4de1f324c9ddba218e87ef5b345f3613243852526ec088dc39d663ac0165e146353174a927dd9329af21ca20b64d161ae4880f3fdd06a897f57b4addcdbd67bf9905ac6d6f9aeaf67d0017803383521119528d012951bd5689e2b53af1d840373b92b3e083b7fc99fbdb8d0e307c76bf76d85a1b8d2cd2f3018e4cf784f24ff429a69aacd0f33c396bf5a4e5308aec7d319c67acc1deba957184f8126b5cd7459dd1364b1d1290633d75da7b050689c3595f184d5dd6642eb5d1f98efbd4ad46bd301e85497cd79580e2b5d0419efdc1f8b5fe5ea56b078d713288e543f6e9648036988351c64423bf9b344ad01bd03b35a99d52dd329482798e1986b339746f755700ee073582f88b512b97e8c697ee512943f7d2e37abdb30e81e8b0806fbb4180c160e1a85cc2ba8af6c4cd2ef7ebaead1b5e96e665f8b648c4b932ad3469493c0bf563a9919ba7ea8af64b1888441920126e44d1591c07cea10d82358791503b2c090f9da72906c0e4a9007ea6b4b6110afaed3fbbc30a9c37a5fee6178b14fdd931312ec77e1edd079d599665e3849c6b308e9ca72798c9d6dba8570a0f4d9a024821e64a1634c7810b755e4533189970d014799dff59f5955e67884c847448d5448f9039cd05c54355f56acc5925cc14429b0afec153b07104d3f4222234c7db3d4d50ede8085b19fcf57c9b0b3d9a53a59d53153e8b9d7d475ffeb69c98627b636c8552f2aee5d3efe3f0fdecba6726c7bf4ec3f2662a0b1639d16f6958fb38e389bc64fc4d3179048d19e273f76495a3c757f2f4b2ac231b17cc33a4ceda409b68112b0fc6c08366b163d52ebb6dd162ec98362cd46b079a330213d5250c45db4cfef3e7a3f62ad66db849acc9a38e9bca977ae1006a6de60ee1c4dbe52abb32d780686be4d5bdedf31500fb14243cb737d9c5bcf969bbd45bc055ffe9300adbcb78932427af4a0a5efb682462db9b2c9adf3cd3f9ea0273e3b59581c6cb79f387111299dbe603c5dbdd48c25ccf64627062833a5c52bcc847455ff500bf79e435d7446ab6f895a28ec07154be9c739c1c08e65f6c016d8559ccc139dd74e570b82db752b46618824de9c20ffcb1b0d93ad0b308c3a774cec49136bb1cd8ec704397e343d51cfa4cb43692681e565add4e9149d62ed617bcfb777e62aa90e8e6690b7bb18fe7f7f336e707694d6c2d1dcefd93a59ee047369f26d24a86bc5bd9986e91c27dff02ef61caf065ff690417bfc6bca6f525dfdb56dd738b2c8b0470432659346cf62e3a1406cc7288008951183c791eb4a98fef9a277e4a381f19a060c8746ca7846007ece3046f1ffb9f4eac24949af2c9bdcc3fe68cb95f8fe5aaca41084394dd9302f189694b93d1c6673343d41d35138c01acf2695cc03600959137e0a21863ef165fad29e3926bf00781dcffdc338cd33ef999cfbfeec1e49583661e1b27ee0ce3e39f00dad24d44fae9562d104749c57f0b9a6e3758d1f53f69739eb8cd07fc6a3990ea5b87301a887a425837f34720ce41d759c730fa94a72e3c79523148d20c399782bcfdfd3685397e4a074e0d2e56f2ec84a0cbc9d099a320ef418a71cf2a279d128db2ad831b275b61f8ed89153bc0d1334860374c8ed424c30ad76f2a6df438516bf0c22fcbc7361b0ce18f11460748aa9b4dc99cf162444b40df380f4152705639b80a82053997f549d8af1f930900b92a7b64d7ec4d9f0b38901d9f2a858993565cee2aaf41442308ad01c3a2e4b6654e764e039de89baeb8f2f2008017acee7d80fced376f56f4da0cd4374ad6b5ac12149c47bb7f1400278b7d97323962bd329a89ee7e74bf3a18052961f0987820c6a54c41cc0cfbef09f74b0fa05d535dcb06bc3466a2edaefa0a8ad044b09885eb1b00154f60bfac0e3089e9af8eb32b1864a397b0af149be5549fcd2bd8fbd05f30e36eefb2f1d1ff6d66907c3fb4fc80517ca20b6a561bb3e9ff3f94bc5d582f659f1dc7b20a9e3614e7d6c9725339529fba159a1f1efaf1e0ee2c26e4739bfbfbd8a898d742e7aaf3d882482d0eb1f8087ae66aeff5e9e920266faf6725bbddf614e31a74ca5a7348da9e805ef965b893807c96b30945015e70f8f608f814bfe2605e6ed69b788fffdc3cd8a8b128ed4fff9f1cda62ba626282e29ba895f7269c9a9d4e00e4c39c5e6cdb242eda24cc0eb3ebf4df14aef3f0494ad618c61b1dc17f34b9c07d02cff6992c537a02c3b4986cb3750fe018241c844cbb93c6af1d010752c59e8290c65efaa02ff1d97b18570b08972c5f9be09b03c7e3485e721ada48381a17ce2fc2d46082b0cbd8d5a2ad74dd5845e001184932e69b17adeb555247bb0c7e080ff6bae6697824a7b9e0608027980a0b42927d35b517a1cb1b694d346243d698702c39b3fb65bd662f98f9325ee217224a36b8222e7435b2af7dc2d9148a8bde37745bf051964c7ab36d8a79300a75d5c347fc5d165f519142c6f0e00e51bb76131d7188dded2f59630482112c25a4f1a85a1e11224320534c76b6ecf0016125a2999a71c3340cfecfb0301fa0d7e6f62d9b4b7e00e524e705a031e59f3893eb4d3f109073cf60ab1c780bec2f76fde385b0d0b93b1009df5139029c099b10be990b171d0464688144301aef3fc11c925c9d9a964576e49eec8fb49ec687ab2c86265e3236014506900da4c8c7adda52e635ec36501b29eb9f7befef41e95334e9f96359d344ee7478f21286ae5efa2c0219808b2a1a11aa92d4e176d08857b71a721b67e444cbcce47f0de4e41158727ec4cc07dfd3608ec65f7b672111d3e921b79c489f6e29313300f965e47ee0b49220739a840df4a5a9180ca741e315130bd72fd32788b38be4e281057a2d6fb667f40c9dafc160ca545fdd2aaa03688c9c9c32a1595052d14b55f19d56e0f74a0fc2bf09202a5ac7dcc5c5133914a140697576e9ff5ede8a9f9920ad7c5342d9edabb008867cc8746bfed9695a05127673858c0c92e3c132cda039a1b8e3fecb21fb8df9b8acf960a7e1cbb83d3fa6df2ebb0976ba7351096bfa43a092a69c5a1f776fa9094e"], 0x2a9c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 15.661485543s ago: executing program 2 (id=3833): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, r4, r4, 0x0) r5 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1) r6 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) 14.099040413s ago: executing program 1 (id=3834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000002c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) bind(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x3, 0x1, 0x1, 0x1}}, 0x80) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r5, 0x200, 0x70bd28, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="70150f4af7f5"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x440c4}, 0x441d4) 13.950207115s ago: executing program 2 (id=3835): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000400040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x58, &(0x7f0000000440)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r4}, 0xc) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000000)='@+]\x00', &(0x7f00000000c0)="86", 0x1) r6 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r7 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='builtin_trusted\x00', r7) add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, 0x0) tkill(r5, 0xb) setrlimit(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) socket$inet6_udp(0xa, 0x2, 0x0) 13.86512488s ago: executing program 6 (id=3836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) shutdown(r1, 0x1) r2 = socket$key(0xf, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000019140), 0x8400, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETA(r5, 0x80047456, &(0x7f0000000140)={0x10, 0x0, 0x9, 0x1ff, 0x10, "b4ba1c25a953278a"}) sendmsg$key(0xffffffffffffffff, &(0x7f00000190c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000019240)=ANY=[@ANYRES64=r0, @ANYRESHEX=r2, @ANYBLOB="359393c737c46b0725eb5ae02d482e1d958c8bcbf7c54b2c3a3a1895eee3d65c947ed4047088fbbf003b19b20b12459b3ff9576a7edd207f1d0df60fef40e8263fc92b3a389d89b483a8e8ff9d583f25fd527d1dc47cc21a49658e0291757152e8f94477", @ANYBLOB="0523a91e382473991d434574ab6e5e55511bc78c827910f08dcd567fde00"/45, @ANYRESDEC=r5], 0x10}}, 0x4000007) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='e:__group/myevent sched.sched_switch', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='MS', 0x2) 10.015145952s ago: executing program 8 (id=3837): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x206f) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x319d, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_READ_MULTISHOT={0x31, 0x29, 0x0, @fd, 0x2, 0x0, 0x0, 0x7, 0x1, {0x1, 0x0, 0x9, '\x00', 0x0, 0x1000}}) io_uring_enter(r3, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000006680)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f000000a380)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f000000cbc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000064c0)={0x78, 0x0, 0x583c54bb, {0xbb5, 0x1, 0x0, {0x3, 0x7, 0x1000, 0x9, 0x6, 0x3ff, 0x9, 0x80e, 0x2, 0x2000, 0x4, r1, 0xffffffffffffffff, 0xd, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)=@md5={0x1, "4f80249e20c653587bed5774dc58572c"}, 0x11, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000810) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$FUSE(r7, 0x0, 0x0) 9.950961148s ago: executing program 6 (id=3838): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x89, 0x89, 0x3, [@union={0xf, 0x0, 0x0, 0x5, 0x0, 0xfed}, @fwd={0x4}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x2, 0x9}, @datasec={0x10, 0x0, 0x0, 0xf, 0x1, [], ':'}, @enum64={0x4, 0x6, 0x0, 0x13, 0x0, 0x8, [{0x5, 0x9, 0x66}, {0x5, 0x5, 0x7}, {0xf, 0x8, 0x4}, {0x8, 0x0, 0x638c}, {0x4, 0x3, 0x1}, {0xc, 0x1ff, 0x401}]}]}, {0x0, [0x0]}}, &(0x7f00000001c0)=""/76, 0xa7, 0x4c, 0x0, 0x2}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, r1, 0xc42eb000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd00000000000003ff00000800090002"], 0x34}}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@can_newroute={0x8c, 0x18, 0x400, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_LIM_HOPS={0x5, 0xd, 0x8}, @CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r8}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "c8e319b66662c877"}, 0x1}}, @CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "9b16f6a83bba114c"}, 0x4}}, @CGW_SRC_IF={0x8, 0x9, r9}, @CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "91852485680bffa8"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0x9e}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0xfffffffffffffffb, 0xfffffffffffffff8, 0xec}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000400000003740006140006006970366772653000000000000000000008000700000000000800040064310101080005"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x14000000}, @TCA_FQ_PLIMIT={0x1300, 0x1, 0x5}]}}]}, 0x48}}, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r15}, &(0x7f0000000080), &(0x7f0000000280)=r16}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x10, 0x1, 0x0, 0x262, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x4}, 0x50) 9.727449712s ago: executing program 1 (id=3839): syz_emit_ethernet(0x66, 0x0, 0x0) r0 = syz_io_uring_setup(0x31c7, 0x0, &(0x7f00000001c0), &(0x7f00000005c0), &(0x7f0000000000)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x100081, 0x27, 0x2, 0x0, 0x0, r0}, 0x0, 0x0, 0x0) syz_usbip_server_init(0x3) 9.336852463s ago: executing program 2 (id=3840): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x400, 0x8000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8.941079035s ago: executing program 9 (id=3841): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 8.891125997s ago: executing program 2 (id=3842): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$key(0xf, 0x3, 0x2) epoll_create(0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r3, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={@remote, 0x2f, r3}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@local, r3}, 0x14) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 8.770449105s ago: executing program 1 (id=3843): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000900)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(0x3) r8 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 8.539451699s ago: executing program 9 (id=3844): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)='\\', 0x1) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xaaf25) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x180800) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r2, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 5.474160071s ago: executing program 8 (id=3845): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000170a01020000000000000000000c0007"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x1000000000008, 0x5, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 5.470967252s ago: executing program 1 (id=3846): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x11}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) getdents(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, &(0x7f0000000040)={{@_ha_fsid={[0x2, 0x6f]}, {0xfffb, 0x100, 0x346b68f4, 0x100000001}}, {{[0x71, 0x3, 0x7f4, 0x4]}, 0x0, 0x3, 0x9, 0x0, 0x0}}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) rseq(0x0, 0x0, 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.000984763s ago: executing program 8 (id=3847): sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c2a0000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2a9c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.932726844s ago: executing program 1 (id=3848): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000240)={0x2, 0x0, @broadcast, 0x3}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe030001000000000800040001000000060015000700000028001680080001000200000014000500fe8000000000000000000000000000010800070001000000"], 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010400000000000000000a000000fe030001000000000800040001000000060015000700000020001680080001000200000014000500fe800000000000000000000000000001"], 0x4c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r6, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40880}, 0x40000) write(r4, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) r8 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x7fffffff, 0x8000, 0x0, 0x6, "f7f8cb", 0xa0c}}) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/g_printer0\x00', 0x2, 0x0) 1.745176994s ago: executing program 8 (id=3849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) shutdown(r1, 0x1) r2 = socket$key(0xf, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000019140), 0x8400, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETA(r5, 0x80047456, &(0x7f0000000140)={0x10, 0x0, 0x9, 0x1ff, 0x10, "b4ba1c25a953278a"}) sendmsg$key(0xffffffffffffffff, &(0x7f00000190c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000019240)=ANY=[@ANYRES64=r0, @ANYRESHEX=r2, @ANYBLOB="359393c737c46b0725eb5ae02d482e1d958c8bcbf7c54b2c3a3a1895eee3d65c947ed4047088fbbf003b19b20b12459b3ff9576a7edd207f1d0df60fef40e8263fc92b3a389d89b483a8e8ff9d583f25fd527d1dc47cc21a49658e0291757152e8f94477", @ANYBLOB="0523a91e382473991d434574ab6e5e55511bc78c827910f08dcd567fde00"/45, @ANYRESDEC=r5], 0x10}}, 0x4000007) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='e:__group/myevent sched.sched_switch', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='MS', 0x2) 1.688246856s ago: executing program 6 (id=3850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000002c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) bind(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x3, 0x1, 0x1, 0x1}}, 0x80) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r5, 0x200, 0x70bd28, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="70150f4af7f5"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x440c4}, 0x441d4) 198.032603ms ago: executing program 8 (id=3851): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x117) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='\n', 0x1) 56.390595ms ago: executing program 2 (id=3852): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/dvb_as102/parameters/fw_upload\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vidtv/unbind\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) write(r1, &(0x7f0000000300)='vidtv.0', 0x7) 0s ago: executing program 9 (id=3853): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r7, 0x407, 0x100004) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d) socket(0x1a, 0x80000, 0x3) kernel console output (not intermixed with test programs): 026.955050][T15950] block nbd0: server does not support multiple connections per device. [ 1027.009051][T15950] block nbd0: shutting down sockets [ 1027.034520][ T5741] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1027.106025][ T5741] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1027.147643][ T5741] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.185948][ T5741] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1027.228586][ T5741] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.275603][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1027.311919][ T5741] usb 5-1: Product: syz [ 1027.329594][ T5741] usb 5-1: Manufacturer: syz [ 1027.378010][ T5741] cdc_wdm 5-1:1.0: skipping garbage [ 1027.412781][ T5741] cdc_wdm 5-1:1.0: skipping garbage [ 1027.470688][ T5741] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1027.516107][ T5741] cdc_wdm 5-1:1.0: Unknown control protocol [ 1027.640188][ T5741] usb 5-1: USB disconnect, device number 21 [ 1028.638596][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1028.825383][T15989] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1032.941977][ T5741] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1033.316415][ T5741] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1033.440945][T16050] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1034.181058][ T5741] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1034.239251][ T5741] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.313143][ T5741] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1034.380182][ T5741] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.446298][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1034.497089][ T5741] usb 1-1: Product: syz [ 1034.511050][ T5741] usb 1-1: Manufacturer: syz [ 1034.559021][ T5741] cdc_wdm 1-1:1.0: skipping garbage [ 1034.580524][ T5741] cdc_wdm 1-1:1.0: skipping garbage [ 1036.163037][ T5741] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1036.467987][T15302] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1036.512566][ T5741] cdc_wdm 1-1:1.0: Unknown control protocol [ 1036.666805][ T9] usb 1-1: USB disconnect, device number 70 [ 1037.046413][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'. [ 1037.056588][T16073] dummy0: left allmulticast mode [ 1037.064403][T16073] bridge0: port 3(dummy0) entered disabled state [ 1037.140689][T16073] bridge_slave_1: left allmulticast mode [ 1037.146623][T16073] bridge_slave_1: left promiscuous mode [ 1037.153355][T16073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.276754][T16073] bridge_slave_0: left allmulticast mode [ 1037.282896][T16073] bridge_slave_0: left promiscuous mode [ 1037.289580][T16073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.601656][T16105] random: crng reseeded on system resumption [ 1040.339592][T16131] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2981'. [ 1042.417147][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1042.429785][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1042.439317][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1042.449145][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1042.463162][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1043.694941][T16206] fuse: Bad value for 'fd' [ 1043.897469][T16209] block nbd0: server does not support multiple connections per device. [ 1043.962141][T16209] block nbd0: shutting down sockets [ 1044.414668][ T5617] syz_tun (unregistering): left allmulticast mode [ 1044.532370][ T51] Bluetooth: hci5: command tx timeout [ 1044.609216][ T5988] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1044.643933][ T29] audit: type=1800 audit(1787371497.064:2214): pid=16242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3000" name="pnp_string" dev="configfs" ino=63008 res=0 errno=0 [ 1044.969760][ T9807] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.155089][ T9807] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.612843][ T51] Bluetooth: hci5: command tx timeout [ 1047.312910][T16246] jffs2: notice: (16246) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1047.530868][ T9807] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.782899][ T9807] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.271305][T16278] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1048.692521][ T51] Bluetooth: hci5: command tx timeout [ 1048.881933][ T3206] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1049.128441][T16296] block nbd0: server does not support multiple connections per device. [ 1049.155990][ T3206] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1049.174607][T16296] block nbd0: shutting down sockets [ 1049.194957][ T3206] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1049.231572][ T3206] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1049.260581][ T3206] usb 8-1: can't read configurations, error -71 [ 1049.701347][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3021'. [ 1049.741679][ T9807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.762277][ T9807] bond_slave_0: left promiscuous mode [ 1049.786648][ T9807] bond_slave_0: left allmulticast mode [ 1049.821383][ T9807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.861278][ T9807] bond_slave_1: left promiscuous mode [ 1049.876774][ T9807] bond_slave_1: left allmulticast mode [ 1049.895115][ T9807] bond0 (unregistering): Released all slaves [ 1050.773809][ T51] Bluetooth: hci5: command tx timeout [ 1051.838976][ T9807] hsr_slave_0: left promiscuous mode [ 1052.078256][ T9807] hsr_slave_1: left promiscuous mode [ 1052.123688][ T9807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.282829][ T9807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.628652][T16364] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1053.561082][ T9807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.609770][ T9807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.739829][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.871929][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.197298][ T9807] veth1_macvtap: left promiscuous mode [ 1054.238881][ T9807] veth0_macvtap: left promiscuous mode [ 1054.257846][ T9807] veth1_vlan: left promiscuous mode [ 1055.996860][ T9807] veth0_vlan: left promiscuous mode [ 1056.981666][T16400] block nbd0: server does not support multiple connections per device. [ 1057.667340][T16400] block nbd0: shutting down sockets [ 1060.868569][ T9807] team0 (unregistering): Port device team_slave_1 removed [ 1061.103661][ T9807] team0 (unregistering): Port device team_slave_0 removed [ 1061.786314][T16156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.817804][T16156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.856586][T16156] bridge_slave_0: entered allmulticast mode [ 1061.897696][T16156] bridge_slave_0: entered promiscuous mode [ 1061.934154][T16156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.955896][T16156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.993291][T16156] bridge_slave_1: entered allmulticast mode [ 1062.029921][T16156] bridge_slave_1: entered promiscuous mode [ 1062.119096][ T1107] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1062.211649][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1062.341035][T16156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.409666][T16156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.607550][T16156] team0: Port device team_slave_0 added [ 1063.678370][T16156] team0: Port device team_slave_1 added [ 1063.937049][T16156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.969718][T16156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.088423][T16156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.178218][T16156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.371933][T16156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.449684][T16156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.762098][ T5741] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1065.305330][T16156] hsr_slave_0: entered promiscuous mode [ 1065.344651][T16156] hsr_slave_1: entered promiscuous mode [ 1065.381756][ T5741] usb 3-1: Using ep0 maxpacket: 32 [ 1065.385452][T16156] debugfs: 'hsr0' already exists in 'hsr' [ 1065.423492][ T5741] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1065.440644][T16156] Cannot create hsr debugfs directory [ 1065.482146][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.537550][ T5741] usb 3-1: config 0 descriptor?? [ 1065.609337][ T5741] as10x_usb: device has been detected [ 1065.644757][ T5741] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1065.761006][ T5741] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1067.850291][ T5741] as10x_usb: error during firmware upload part1 [ 1067.887279][ T5741] Registered device nBox DVB-T Dongle [ 1067.903629][ T5741] usb 3-1: USB disconnect, device number 25 [ 1068.196436][ T5741] Unregistered device nBox DVB-T Dongle [ 1068.217161][ T5741] as10x_usb: device has been disconnected [ 1069.957399][T16502] siw: device registration error -23 [ 1070.085571][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1070.686796][T16156] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1070.722368][T16510] jffs2: notice: (16510) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1070.766192][T16156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1070.840456][T16156] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1071.255753][T16156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1071.438409][T16156] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1071.766424][ T29] audit: type=1800 audit(1787371524.164:2215): pid=16519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3066" name="pnp_string" dev="configfs" ino=64634 res=0 errno=0 [ 1071.855985][T16156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1071.964607][T16156] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1072.229134][T16156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1074.776337][T16156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.932158][T16156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.067509][ T9795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.074753][ T9795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.257467][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.264684][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.628576][T16610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3082'. [ 1082.699574][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1084.905986][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3093'. [ 1084.955994][T16651] bridge_slave_1: left allmulticast mode [ 1084.961905][T16651] bridge_slave_1: left promiscuous mode [ 1084.994846][T16651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.164636][T16651] bridge_slave_0: left allmulticast mode [ 1085.172284][T16651] bridge_slave_0: left promiscuous mode [ 1085.253551][T16651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.650114][T16156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.225554][T16709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3104'. [ 1092.560265][T16709] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1093.256836][ T77] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1094.410441][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1094.463695][T16156] veth0_vlan: entered promiscuous mode [ 1095.037232][T16156] veth1_vlan: entered promiscuous mode [ 1095.266789][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3111'. [ 1095.611717][T16156] veth0_macvtap: entered promiscuous mode [ 1095.681722][T16156] veth1_macvtap: entered promiscuous mode [ 1095.756963][T16156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.841041][T16156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.918086][ T9807] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.065482][ T9795] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.102343][ T9795] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.219362][ T9795] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.560625][ T5885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.596146][ T5885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.751453][ T5885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.779694][ T5885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.444099][T16804] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3123'. [ 1097.454435][ T5741] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1097.768534][T16804] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1097.877470][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3125'. [ 1097.934301][ T5741] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1097.951931][T16800] serio: Serial port ttynull [ 1097.970892][ T5741] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1098.001612][ T5741] usb 7-1: no configurations [ 1098.032303][ T5741] usb 7-1: can't read configurations, error -22 [ 1098.715161][ T29] audit: type=1800 audit(1787371551.134:2216): pid=16824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3127" name="pnp_string" dev="configfs" ino=66087 res=0 errno=0 [ 1101.282566][T16867] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3139'. [ 1101.834539][T16896] [U]  [ 1101.837739][T16896] [U] K{‘ [ 1101.865086][T16896] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 1101.884049][T16896] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 1101.994421][T16896] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 1102.022089][T16896] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 1102.115049][T16896] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 1102.194463][T16896] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 1102.236232][T16896] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 1102.419025][T16896] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 1103.692269][T16896] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 1103.700880][T16896] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 1103.714926][T16896] [U] 22½“Æ©Ðû©x?0;3u± [ 1103.719670][T16896] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 1103.745158][T16896] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 1103.756756][T16896] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 1103.774239][T16896] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 1103.793094][T16896] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 1103.824597][T16896] [U] ¹ ec [ 1103.827745][T16896] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 1103.884227][T16896] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 1103.986784][ T29] audit: type=1800 audit(1787371556.384:2217): pid=16905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.3142" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1104.240126][T16937] siw: device registration error -23 [ 1104.482989][T16941] syzkaller0: entered promiscuous mode [ 1104.520347][T16941] syzkaller0: entered allmulticast mode [ 1105.968842][T16989] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3171'. [ 1107.024876][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 1107.691107][ T29] audit: type=1800 audit(1787371560.104:2218): pid=17018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.3175" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1113.207281][T17067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3188'. [ 1113.687837][T17083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3194'. [ 1113.744708][ T29] audit: type=1800 audit(1787371566.164:2219): pid=17085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3193" name="pnp_string" dev="configfs" ino=67629 res=0 errno=0 [ 1115.093386][ T10] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 1115.183904][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.190973][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.285738][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1115.330074][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1115.357549][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.393081][ T10] usb 5-1: config 0 has no interface number 0 [ 1115.409965][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.436141][ T10] usb 5-1: config 0 descriptor?? [ 1115.465461][ T10] ldusb 5-1:0.55: Interrupt in endpoint not found [ 1115.711024][ T5761] usb 5-1: USB disconnect, device number 22 [ 1117.445222][T17145] jffs2: notice: (17145) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1121.639474][T17163] fuse: Bad value for 'group_id' [ 1121.670653][T17163] fuse: Bad value for 'group_id' [ 1122.079051][ T29] audit: type=1800 audit(1787371574.494:2220): pid=17184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3218" name="pnp_string" dev="configfs" ino=69989 res=0 errno=0 [ 1122.431893][ T5625] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1122.613526][ T5625] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1122.654084][ T5625] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1122.700790][ T5625] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.798503][ T5625] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1123.255326][ T5625] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.289697][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1123.310050][ T5625] usb 5-1: Product: syz [ 1123.321830][ T5625] usb 5-1: Manufacturer: syz [ 1123.396965][ T5625] cdc_wdm 5-1:1.0: skipping garbage [ 1123.422283][ T5625] cdc_wdm 5-1:1.0: skipping garbage [ 1123.444977][ T5625] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1123.477639][ T5625] cdc_wdm 5-1:1.0: Unknown control protocol [ 1123.648236][ C1] wdm_int_callback: 3 callbacks suppressed [ 1123.648260][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1123.660648][ C1] wdm_int_callback: 3 callbacks suppressed [ 1123.660668][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1123.674114][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1123.680703][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1123.688032][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1123.694634][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1123.700878][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1123.707464][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1123.713723][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1123.720311][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1123.726577][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1123.733163][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1123.739437][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1123.746022][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1123.752264][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1123.758865][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1123.766617][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1123.773221][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1123.779473][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1123.786059][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1123.831412][T10219] usb 5-1: USB disconnect, device number 23 [ 1123.837365][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1124.484578][ T9795] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1128.078654][T17241] fuse: Bad value for 'group_id' [ 1128.138898][T17241] fuse: Bad value for 'group_id' [ 1130.860843][ T29] audit: type=1800 audit(1787371583.274:2221): pid=17259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3241" name="pnp_string" dev="configfs" ino=70087 res=0 errno=0 [ 1130.998076][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1131.011240][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1131.020020][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1131.040781][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1131.049834][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1131.662937][T17267] siw: device registration error -23 [ 1132.133921][ T5615] syz_tun (unregistering): left allmulticast mode [ 1133.095098][ T51] Bluetooth: hci4: command tx timeout [ 1133.741533][ T9795] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.284430][ T51] Bluetooth: hci4: command tx timeout [ 1137.311965][ T9795] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.331841][ T51] Bluetooth: hci4: command tx timeout [ 1137.454686][T17314] block nbd0: server does not support multiple connections per device. [ 1137.464427][T17314] block nbd0: shutting down sockets [ 1137.649233][ T9795] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.283139][ T9795] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.419388][ T51] Bluetooth: hci4: command tx timeout [ 1143.125565][T17356] fuse: Unknown parameter 'grou00000000000000000000' [ 1146.553271][ T9795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.650813][ T9795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.710580][ T9795] bond0 (unregistering): Released all slaves [ 1148.697598][T17261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.716879][T17261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.729291][T17261] bridge_slave_0: entered allmulticast mode [ 1148.753326][T17261] bridge_slave_0: entered promiscuous mode [ 1148.791579][T17420] siw: device registration error -23 [ 1148.891265][T17261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.891864][ T5625] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1148.995846][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.135152][T17261] bridge_slave_1: entered allmulticast mode [ 1149.827593][T17261] bridge_slave_1: entered promiscuous mode [ 1149.931875][ T5625] usb 7-1: device descriptor read/64, error -71 [ 1150.191863][ T5625] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1150.195605][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1150.419508][ T5625] usb 7-1: device descriptor read/64, error -71 [ 1150.583182][ T5625] usb usb7-port1: attempt power cycle [ 1150.982319][ T5625] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1151.143295][ T5625] usb 7-1: device descriptor read/8, error -71 [ 1151.434796][T17261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.496246][ T5625] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1151.504847][T17261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.648058][ T9795] hsr_slave_0: left promiscuous mode [ 1151.702268][ T9795] hsr_slave_1: left promiscuous mode [ 1151.721854][ T5625] usb 7-1: device descriptor read/8, error -71 [ 1151.737790][ T9795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1151.775865][ T9795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.875351][ T5625] usb usb7-port1: unable to enumerate USB device [ 1151.884650][ T9795] veth1_macvtap: left promiscuous mode [ 1151.909396][ T29] audit: type=1800 audit(1787371604.324:2222): pid=17440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3286" name="pnp_string" dev="configfs" ino=68302 res=0 errno=0 [ 1151.909425][ T9795] veth0_macvtap: left promiscuous mode [ 1152.233712][ T9795] veth1_vlan: left promiscuous mode [ 1152.265449][ T9795] veth0_vlan: left promiscuous mode [ 1152.888672][T17442] fuse: Unknown parameter 'grou00000000000000000000' [ 1155.159632][ T9795] team0 (unregistering): Port device team_slave_1 removed [ 1155.259863][ T9795] team0 (unregistering): Port device team_slave_0 removed [ 1155.709447][ T9804] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1156.551077][T17460] syzkaller0: entered promiscuous mode [ 1156.596334][T17460] syzkaller0: entered allmulticast mode [ 1156.644887][T17261] team0: Port device team_slave_0 added [ 1158.996110][T17508] fuse: Unknown parameter 'group_i00000000000000000000' [ 1163.444854][T17538] serio: Serial port ttynull [ 1166.355853][T17261] team0: Port device team_slave_1 added [ 1166.519309][ T5269] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1166.788504][T17261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.800212][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.848595][T17261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.883437][T17261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.899859][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.927996][T17261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.481037][T17564] jffs2: notice: (17564) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1167.891207][T17546] syzkaller0: entered promiscuous mode [ 1167.926402][T17546] syzkaller0: entered allmulticast mode [ 1168.453411][T15302] Bluetooth: hci5: command 0x0406 tx timeout [ 1168.851387][T17562] fuse: Unknown parameter 'group_i00000000000000000000' [ 1171.162112][T10219] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 1171.423932][T10219] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1171.468337][T10219] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1171.512639][T10219] usb 7-1: config 0 has no interface number 0 [ 1171.546977][T10219] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1171.622831][T10219] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1171.655833][T10219] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1171.696514][T10219] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1171.766856][T10219] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1171.836124][T10219] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1171.874311][T10219] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.015903][T10219] usb 7-1: config 0 descriptor?? [ 1172.087563][T17585] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1172.573201][T10219] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1173.010728][T10219] usb 7-1: USB disconnect, device number 28 [ 1173.595046][T10219] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1176.614213][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.623371][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.703598][T17261] hsr_slave_0: entered promiscuous mode [ 1177.748903][T17261] hsr_slave_1: entered promiscuous mode [ 1177.802942][T17261] debugfs: 'hsr0' already exists in 'hsr' [ 1177.833662][T17261] Cannot create hsr debugfs directory [ 1178.997258][T17625] fuse: Unknown parameter 'group_i00000000000000000000' [ 1182.121869][ T9] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 1182.250047][T17658] jffs2: notice: (17658) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1182.302644][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1182.329427][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1182.342320][ T9] usb 3-1: config 0 has no interface number 0 [ 1182.360926][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1182.387877][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1182.429557][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1182.464591][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1182.512888][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1182.543763][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1182.605699][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.651614][ T9] usb 3-1: config 0 descriptor?? [ 1182.675361][T17645] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1182.733490][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1183.132821][T17645] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1183.144943][ T9] usb 3-1: USB disconnect, device number 26 [ 1183.170925][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1183.249739][T17676] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1184.957569][T17674] syzkaller0: entered promiscuous mode [ 1185.085843][T17674] syzkaller0: entered allmulticast mode [ 1186.697700][T17680] fuse: Unknown parameter 'group_id00000000000000000000' [ 1186.740308][ T1013] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1187.300973][T17706] jffs2: notice: (17706) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1187.699303][T17712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3356'. [ 1188.494132][T17723] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1189.351933][T10219] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 1189.552907][T10219] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1189.606008][T10219] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1189.639923][T10219] usb 7-1: config 0 has no interface number 0 [ 1189.668141][T10219] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1189.717277][T10219] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1189.747701][T10219] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1189.781286][T10219] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1189.813372][T10219] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1189.856808][T10219] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1189.909300][T10219] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.949661][T10219] usb 7-1: config 0 descriptor?? [ 1189.971124][T17722] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1189.999190][T17722] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1190.055142][T10219] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1190.148840][T17731] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3363'. [ 1190.222799][T17730] trusted_key: syz.8.3363 sent an empty control message without MSG_MORE. [ 1190.313875][ T9] usb 7-1: USB disconnect, device number 29 [ 1190.341647][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1190.982205][ T9] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 1191.175341][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1191.203029][T15302] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1191.223777][ T9] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1191.233219][T15302] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1191.242086][T15302] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1191.250509][T15302] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1191.259870][T15302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1191.270166][ T9] usb 9-1: config 0 has no interface number 0 [ 1191.288728][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1191.303185][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1191.315823][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1191.337016][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1191.362931][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1191.373914][ T9] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1191.388151][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.425860][ T9] usb 9-1: config 0 descriptor?? [ 1191.434372][T17734] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1191.477335][T17734] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1191.527758][ T9] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1191.797041][ T9] usb 9-1: USB disconnect, device number 2 [ 1191.814793][ T9] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1192.180087][T17744] jffs2: notice: (17744) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1193.331925][T15302] Bluetooth: hci3: command tx timeout [ 1195.412313][T15302] Bluetooth: hci3: command tx timeout [ 1197.144743][T17762] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1197.829629][T15302] Bluetooth: hci3: command tx timeout [ 1198.476446][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1198.493520][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1198.502784][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1198.523614][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1198.535100][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1198.591835][T10219] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 1198.742481][T10219] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1198.767551][T10219] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1198.777300][T10219] usb 7-1: config 0 has no interface number 0 [ 1198.799019][T10219] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1198.817022][T10219] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1198.837983][T10219] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1198.854984][T10219] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1198.867966][T10219] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1198.887522][T10219] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1198.908373][T10219] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.960869][T10219] usb 7-1: config 0 descriptor?? [ 1198.974131][T17767] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1198.982244][T17767] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1199.011091][T10219] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1199.249653][ T5741] usb 7-1: USB disconnect, device number 30 [ 1199.300149][ T5741] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1199.540911][T15302] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1199.557689][T15302] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1199.567548][T15302] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1199.588085][T15302] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1199.595702][T15302] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1199.602343][ T9] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 1199.665518][T17688] lo speed is unknown, defaulting to 1000 [ 1199.715295][T17688] lo speed is unknown, defaulting to 1000 [ 1199.789418][T17688] lo speed is unknown, defaulting to 1000 [ 1199.814994][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1199.851915][T17688] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1199.895500][T15302] Bluetooth: hci3: command tx timeout [ 1199.903903][T17688] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1199.942176][ T9] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1199.981355][T17688] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1200.031958][ T9] usb 9-1: config 0 has no interface number 0 [ 1200.077962][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1200.187154][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1200.264554][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1200.288937][T17688] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1200.335966][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1200.410109][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1200.484269][ T9] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1200.526079][T17688] lo speed is unknown, defaulting to 1000 [ 1200.569952][T17688] lo speed is unknown, defaulting to 1000 [ 1200.611443][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.614042][T15302] Bluetooth: hci7: command tx timeout [ 1200.668155][T17688] lo speed is unknown, defaulting to 1000 [ 1200.732810][ T9] usb 9-1: config 0 descriptor?? [ 1200.750540][T17688] lo speed is unknown, defaulting to 1000 [ 1200.790615][T17778] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1200.820658][T17688] lo speed is unknown, defaulting to 1000 [ 1200.856022][T17688] lo speed is unknown, defaulting to 1000 [ 1200.909522][T17778] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1201.022124][ T9] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1201.059769][T17803] 9p: Bad value for 'rfdno' [ 1201.324123][ T5741] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1201.414594][ T5758] usb 9-1: USB disconnect, device number 3 [ 1201.490045][ T5758] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1201.585941][ T5741] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1201.621048][ T5741] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.652928][T15302] Bluetooth: hci8: command tx timeout [ 1201.665710][ T5741] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1201.679575][T17768] lo speed is unknown, defaulting to 1000 [ 1201.696466][ T5741] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1201.730096][ T5741] usb 7-1: Product: syz [ 1201.734931][ T5741] usb 7-1: Manufacturer: syz [ 1201.745833][ T5741] usb 7-1: SerialNumber: syz [ 1201.817679][ T5741] usb 7-1: config 0 descriptor?? [ 1202.164708][T17820] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1202.692099][T15302] Bluetooth: hci7: command tx timeout [ 1202.921316][ T5758] usb 7-1: USB disconnect, device number 31 [ 1203.341107][T17665] syz_tun (unregistering): left allmulticast mode [ 1203.735012][T15302] Bluetooth: hci8: command tx timeout [ 1204.389861][ T12] bridge_slave_1: left allmulticast mode [ 1204.475896][ T12] bridge_slave_1: left promiscuous mode [ 1204.563430][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.772074][T15302] Bluetooth: hci7: command tx timeout [ 1204.773754][ T12] bridge_slave_0: left allmulticast mode [ 1204.941340][ T12] bridge_slave_0: left promiscuous mode [ 1205.044052][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.268797][ T29] audit: type=1800 audit(1787371657.684:2223): pid=17830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3387" name="pnp_string" dev="configfs" ino=71915 res=0 errno=0 [ 1205.811915][T15302] Bluetooth: hci8: command tx timeout [ 1206.399481][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.495772][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.577149][ T12] bond0 (unregistering): Released all slaves [ 1206.792027][T10219] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 1206.852209][T15302] Bluetooth: hci7: command tx timeout [ 1206.885106][ T12] hsr_slave_0: left promiscuous mode [ 1206.899449][ T12] hsr_slave_1: left promiscuous mode [ 1206.909078][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.920015][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.933708][T17851] 9p: Bad value for 'rfdno' [ 1206.992976][T10219] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1207.028737][T10219] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1207.066665][T10219] usb 3-1: config 0 has no interface number 0 [ 1207.083998][T10219] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1207.122002][T10219] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1207.136916][T10219] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1207.173846][T10219] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1207.199750][T10219] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1207.211517][T10219] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1207.237217][T10219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.268186][T10219] usb 3-1: config 0 descriptor?? [ 1207.288783][T17843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1207.325970][T17843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1207.363566][ T5758] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 1207.415314][T10219] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1207.515845][T17861] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1207.892002][T15302] Bluetooth: hci8: command tx timeout [ 1208.227671][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1208.238458][ T5741] usb 3-1: USB disconnect, device number 27 [ 1208.263590][ T5741] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1208.314039][ T5758] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1208.334606][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1208.346172][ T5758] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1208.355997][ T5758] usb 7-1: config 0 has no interface number 0 [ 1208.373955][ T5758] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1208.393395][ T5758] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1208.419479][ T5758] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1208.431640][ T5758] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1208.443005][ T5758] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1208.457407][ T5758] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1208.473223][ T5758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.488030][ T5758] usb 7-1: config 0 descriptor?? [ 1208.504770][T17856] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1208.523155][T17856] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1208.562590][ T5758] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1208.621869][T15460] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1208.768543][T17735] lo speed is unknown, defaulting to 1000 [ 1208.786769][T15460] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1208.821908][T15460] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.835100][ T9] usb 7-1: USB disconnect, device number 32 [ 1208.843578][T15460] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1208.865049][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1208.893225][T17779] lo speed is unknown, defaulting to 1000 [ 1208.904410][T15460] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1209.300012][T15460] usb 9-1: Product: syz [ 1209.788524][T15460] usb 9-1: Manufacturer: syz [ 1209.794060][T15460] usb 9-1: SerialNumber: syz [ 1209.803500][T15460] usb 9-1: config 0 descriptor?? [ 1210.070708][T15460] usb 9-1: USB disconnect, device number 4 [ 1210.587735][T17901] misc userio: Invalid payload size [ 1210.616940][T17901] misc userio: Invalid payload size [ 1210.694645][T17889] lo speed is unknown, defaulting to 1000 [ 1210.936502][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.472370][T17919] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1212.406896][ T5761] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 1212.490845][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.571815][ T5758] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 1212.591765][ T5761] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1212.612878][ T5761] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1212.627507][ T5761] usb 9-1: config 0 has no interface number 0 [ 1212.642151][ T5761] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1212.657189][ T5761] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1212.694830][ T5761] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1212.733086][ T5761] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1212.763131][ T5758] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1212.776304][ T5761] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1212.794521][ T5758] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1212.818901][ T5761] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1212.832280][ T5758] usb 7-1: config 0 has no interface number 0 [ 1212.842973][ T5758] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1212.861840][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.872541][ T5761] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.880854][ T5758] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1212.904417][ T5761] usb 9-1: config 0 descriptor?? [ 1212.911930][ T5758] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1212.938190][T17918] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1212.948171][ T5758] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1212.966085][T17918] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1212.979777][ T5758] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1213.008677][ T5761] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1213.020754][ T5758] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1213.044498][ T5758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.063594][ T5758] usb 7-1: config 0 descriptor?? [ 1213.069733][T17922] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1213.077790][T17922] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1213.095925][ T5758] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1213.180821][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.225616][ T5758] usb 9-1: USB disconnect, device number 5 [ 1213.255292][ T5758] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1213.274240][T17768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.286203][T17768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.295412][T17768] bridge_slave_0: entered allmulticast mode [ 1213.304984][T17768] bridge_slave_0: entered promiscuous mode [ 1213.307526][ T5761] usb 7-1: USB disconnect, device number 33 [ 1213.330202][ T5761] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 1213.381324][T17768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.389457][T17768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.396757][T17768] bridge_slave_1: entered allmulticast mode [ 1213.411150][T17768] bridge_slave_1: entered promiscuous mode [ 1214.079597][T17768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.654581][T17768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.877539][T17768] team0: Port device team_slave_0 added [ 1214.934032][T17779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.952947][T17779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.031861][ T5761] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1215.242741][T17779] bridge_slave_0: entered allmulticast mode [ 1215.295997][T17779] bridge_slave_0: entered promiscuous mode [ 1215.329376][T17779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.341030][T17779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.356227][T17779] bridge_slave_1: entered allmulticast mode [ 1215.395279][T17779] bridge_slave_1: entered promiscuous mode [ 1215.436367][T17735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.459419][T17735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.473689][T17735] bridge_slave_0: entered allmulticast mode [ 1215.544042][T17735] bridge_slave_0: entered promiscuous mode [ 1215.640439][T17768] team0: Port device team_slave_1 added [ 1215.880623][T17950] syzkaller0: entered promiscuous mode [ 1215.889523][T17950] syzkaller0: entered allmulticast mode [ 1215.949788][T17968] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3415'. [ 1215.983426][ T5761] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1216.003268][ T5761] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.015861][ T5761] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1216.030210][ T5761] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1216.047056][ T5761] usb 3-1: Product: syz [ 1216.051332][ T5761] usb 3-1: Manufacturer: syz [ 1216.062641][ T5761] usb 3-1: SerialNumber: syz [ 1216.083770][ T5761] usb 3-1: config 0 descriptor?? [ 1216.344487][ T9] usb 3-1: USB disconnect, device number 28 [ 1216.620438][T17974] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1217.543630][ T5741] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 1217.702706][ T5741] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1217.729399][ T5741] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1217.739868][ T5741] usb 7-1: config 0 has no interface number 0 [ 1217.754285][ T5741] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1217.786726][ T5741] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1217.803519][ T5741] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1217.816534][ T5741] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1217.829043][ T5741] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1217.841251][ T5741] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1217.864570][ T5741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.879615][ T152] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1217.898992][ T5741] usb 7-1: config 0 descriptor?? [ 1217.916503][T17978] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1217.938985][T17978] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1218.010589][ T5741] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1218.178876][ T9] usb 7-1: USB disconnect, device number 34 [ 1218.195695][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1218.454460][T17735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.463812][T17735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.470978][T17735] bridge_slave_1: entered allmulticast mode [ 1218.478891][T17735] bridge_slave_1: entered promiscuous mode [ 1218.643316][T17768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.650837][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.679069][T17768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.730658][T17779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.292267][T17735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.368358][T17768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.433213][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.627719][T17768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.675709][T17779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.688477][T17976] lo speed is unknown, defaulting to 1000 [ 1219.700362][T17988] comedi comedi4: comedi_config --init_data is deprecated [ 1219.721109][T17735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.851863][ T5741] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 1219.945421][T17779] team0: Port device team_slave_0 added [ 1219.955688][T17779] team0: Port device team_slave_1 added [ 1220.012762][ T5741] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1220.046798][ T5741] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1220.071894][ T5741] usb 7-1: config 0 has no interface number 0 [ 1220.083741][ T5741] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1220.108057][ T5741] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1220.118847][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.140013][ T5741] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1220.152216][ T5741] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1220.163730][ T5741] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1220.174994][ T5741] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1220.188395][ T5741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.196186][T17768] hsr_slave_0: entered promiscuous mode [ 1220.205616][ T5741] usb 7-1: config 0 descriptor?? [ 1220.225410][T17986] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1220.234319][T17986] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1220.234518][T17768] hsr_slave_1: entered promiscuous mode [ 1220.266335][ T5741] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1220.267240][T17768] debugfs: 'hsr0' already exists in 'hsr' [ 1220.284523][T17768] Cannot create hsr debugfs directory [ 1220.353924][T17735] team0: Port device team_slave_0 added [ 1220.382823][T17779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.390500][T17779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.431959][T17779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.496823][ T5741] usb 7-1: USB disconnect, device number 35 [ 1220.514139][T17735] team0: Port device team_slave_1 added [ 1220.517828][ T5741] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1220.589248][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.654210][T17779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.661184][T17779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.695078][T17779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.014854][T17735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.031773][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.091788][T17735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.159142][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.222671][T17735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.247580][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.304051][T17735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.353741][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1221.590663][T17779] hsr_slave_0: entered promiscuous mode [ 1222.245517][T17779] hsr_slave_1: entered promiscuous mode [ 1222.312656][T17779] debugfs: 'hsr0' already exists in 'hsr' [ 1222.328201][T17779] Cannot create hsr debugfs directory [ 1222.497147][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.603954][T17735] hsr_slave_0: entered promiscuous mode [ 1222.620292][T17735] hsr_slave_1: entered promiscuous mode [ 1222.627375][T17735] debugfs: 'hsr0' already exists in 'hsr' [ 1222.634735][T17735] Cannot create hsr debugfs directory [ 1222.637065][T18020] misc userio: Invalid payload size [ 1222.803932][ T5741] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1222.983923][ T5741] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1223.033728][ T5741] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1223.060125][ T5741] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1223.081366][ T5741] usb 9-1: Product: syz [ 1223.092555][ T5741] usb 9-1: Manufacturer: syz [ 1223.106881][ T5741] usb 9-1: SerialNumber: syz [ 1223.107550][T18022] 9pnet_virtio: no channels available for device syz [ 1223.133085][ T5741] usb 9-1: config 0 descriptor?? [ 1223.406054][ T10] usb 9-1: USB disconnect, device number 6 [ 1223.421797][ T9] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 1223.580249][ T12] bridge_slave_1: left allmulticast mode [ 1223.588773][ T12] bridge_slave_1: left promiscuous mode [ 1223.592923][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1223.595747][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.616412][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1223.629162][ T12] bridge_slave_0: left allmulticast mode [ 1223.637897][ T9] usb 3-1: config 0 has no interface number 0 [ 1223.644210][ T12] bridge_slave_0: left promiscuous mode [ 1223.649918][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1223.662806][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.670934][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1223.692790][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1223.705568][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1223.728166][ T12] batadv1: left allmulticast mode [ 1223.734693][ T12] batadv1: left promiscuous mode [ 1223.739896][ T12] bridge0: port 3(batadv1) entered disabled state [ 1223.747344][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1223.758569][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1223.759727][ T12] bridge_slave_1: left allmulticast mode [ 1223.772700][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.778309][ T9] usb 3-1: config 0 descriptor?? [ 1223.788574][ T12] bridge_slave_1: left promiscuous mode [ 1223.801341][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.828275][ T12] bridge_slave_0: left allmulticast mode [ 1223.832820][T18024] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1223.834122][ T12] bridge_slave_0: left promiscuous mode [ 1223.847161][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.852976][T18024] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1223.879945][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1224.144963][ T9] usb 3-1: USB disconnect, device number 29 [ 1224.167708][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1225.294171][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.307678][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.320853][ T12] bond0 (unregistering): Released all slaves [ 1225.506727][ T12] gretap0 (unregistering): left promiscuous mode [ 1226.285464][ T12] bond0 (unregistering): left promiscuous mode [ 1226.320780][ T12] bond0 (unregistering): Released all slaves [ 1226.517028][ T5269] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1226.620110][T17768] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1226.654208][T17768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1226.682680][T17768] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1226.717237][T17768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1226.745476][T18069] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3440'. [ 1226.778722][T17768] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1226.791239][T18062] serio: Serial port ttynull [ 1226.807869][T17768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1226.816129][T17768] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1226.828201][T17768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1227.121675][T18065] lo speed is unknown, defaulting to 1000 [ 1227.291893][ T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1227.473649][ T10] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1227.501668][ T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1227.546401][ T10] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1227.565338][ T10] usb 9-1: Product: syz [ 1227.578908][ T10] usb 9-1: Manufacturer: syz [ 1227.608267][ T10] usb 9-1: SerialNumber: syz [ 1227.624307][ T10] usb 9-1: config 0 descriptor?? [ 1227.858273][ T5741] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 1227.873407][ T3206] usb 9-1: USB disconnect, device number 7 [ 1228.013553][ T5741] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1228.044928][ T5741] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1228.060291][ T5741] usb 3-1: config 0 has no interface number 0 [ 1228.109741][ T5741] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1228.135780][ T5741] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1228.148150][ T5741] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1228.161813][ T5741] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1228.173201][ T5741] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1228.184195][ T5741] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1228.184229][ T12] hsr_slave_0: left promiscuous mode [ 1228.202749][ T12] hsr_slave_1: left promiscuous mode [ 1228.209720][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1228.209879][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.218075][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.237762][ T5741] usb 3-1: config 0 descriptor?? [ 1228.244452][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1228.244549][T18089] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1228.252043][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.259274][T18089] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1228.280774][ T12] hsr_slave_0: left promiscuous mode [ 1228.283798][ T5741] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1228.295376][ T12] hsr_slave_1: left promiscuous mode [ 1228.326450][ T12] veth1_macvtap: left promiscuous mode [ 1228.332275][ T12] veth0_macvtap: left promiscuous mode [ 1228.337843][ T12] veth1_vlan: left promiscuous mode [ 1228.343392][ T12] veth0_vlan: left promiscuous mode [ 1228.350103][ T12] veth1_macvtap: left promiscuous mode [ 1228.355904][ T12] veth0_macvtap: left promiscuous mode [ 1228.361452][ T12] veth1_vlan: left promiscuous mode [ 1228.367371][ T12] veth0_vlan: left promiscuous mode [ 1228.525684][ T9] usb 3-1: USB disconnect, device number 30 [ 1228.552963][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1229.894684][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1229.915768][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1230.728918][T18111] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3449'. [ 1230.864495][ T5988] smbdirect: ib_dev[syz2] removed [ 1231.040330][T18116] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3450'. [ 1231.107392][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1231.140440][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1231.356307][ T5269] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1231.370166][ T10] lo speed is unknown, defaulting to 1000 [ 1231.390525][ T10] infiniband syz2: ib_query_port failed (-19) [ 1232.242448][T17735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1232.474894][T17735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1232.682689][T17735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1232.942478][T17735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1233.071369][T17735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1233.337527][T17735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1233.531625][T17735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1234.877569][T17735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1234.930732][T17768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.169063][T18137] 9pnet_virtio: no channels available for device syz [ 1235.390189][T17768] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.448871][T17779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1235.494619][T17779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1235.512957][T17779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1235.543277][T17779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1235.579436][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.586665][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.639009][T17779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1235.661270][T17779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1235.678855][T17779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1235.722542][T17779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1235.765207][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.772435][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.427670][T18173] netlink: 'syz.6.3460': attribute type 29 has an invalid length. [ 1237.604057][ T136] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1237.755266][ T9807] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1237.889735][ T9807] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.071649][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.161963][ T58] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.262144][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.551484][T17735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.939390][T17735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.956518][T18179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3461'. [ 1239.053733][T17779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.081097][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.088316][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.178957][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.186179][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.260179][ T5269] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1239.315176][T17779] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.301743][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.308938][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.455010][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.462242][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.683163][T18198] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1240.689906][T18198] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1240.718106][T18198] vhci_hcd vhci_hcd.0: Device attached [ 1240.729675][T18203] vhci_hcd: connection closed [ 1240.750681][ T152] vhci_hcd vhci_hcd.2: stop threads [ 1240.834099][ T152] vhci_hcd vhci_hcd.2: release socket [ 1240.880089][ T152] vhci_hcd vhci_hcd.2: disconnect device [ 1240.922168][T18202] block nbd0: server does not support multiple connections per device. [ 1240.978899][T18202] block nbd0: shutting down sockets [ 1241.725738][T15302] Bluetooth: hci5: unexpected event for opcode 0x204e [ 1241.852919][ T5758] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 1242.013154][T17768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.035470][ T5758] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1242.067639][ T5758] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1242.104364][ T5758] usb 3-1: config 0 has no interface number 0 [ 1242.128938][ T5758] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1242.180468][ T5758] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1242.228027][ T5758] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1242.267612][ T5758] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1242.271608][T18245] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3473'. [ 1242.343793][ T5758] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1242.378413][ T5758] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1242.421544][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.518248][ T5758] usb 3-1: config 0 descriptor?? [ 1242.559211][T18224] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1242.632969][T18224] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1242.706216][ T5758] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1243.010531][ T5741] usb 3-1: USB disconnect, device number 31 [ 1243.066730][ T5741] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1244.314666][T17735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.513177][ T5269] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1244.666890][T17735] veth0_vlan: entered promiscuous mode [ 1244.741220][T17735] veth1_vlan: entered promiscuous mode [ 1244.840373][T17768] veth0_vlan: entered promiscuous mode [ 1244.893429][T17779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.007166][T17768] veth1_vlan: entered promiscuous mode [ 1245.113959][T17735] veth0_macvtap: entered promiscuous mode [ 1245.140094][T17735] veth1_macvtap: entered promiscuous mode [ 1245.298508][T17735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.422427][T17768] veth0_macvtap: entered promiscuous mode [ 1245.476788][T17735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.609928][T17768] veth1_macvtap: entered promiscuous mode [ 1245.711968][ T5988] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.902002][ T6140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.926801][T18297] block nbd0: server does not support multiple connections per device. [ 1245.979448][T18297] block nbd0: shutting down sockets [ 1246.309046][ T5988] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.444791][T17779] veth0_vlan: entered promiscuous mode [ 1246.498155][T17768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.564087][ T6140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.608339][T17768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.705611][T17779] veth1_vlan: entered promiscuous mode [ 1246.801992][ T1013] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.811062][ T3206] usb 7-1: new low-speed USB device number 36 using dummy_hcd [ 1246.927838][ T6140] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.001091][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.015219][ T3206] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1247.024868][ T5988] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.045260][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.067374][ T3206] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1247.097237][ T3206] usb 7-1: config 0 has no interface number 0 [ 1247.138880][ T3206] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1247.176263][ T3206] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1247.201811][ T3206] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1247.249591][ T3206] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1247.307149][ T3206] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1247.347867][ T3206] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1247.390091][ T3206] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.445942][ T3206] usb 7-1: config 0 descriptor?? [ 1247.473044][T18316] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1247.495871][T18316] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1247.526014][ T5269] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1247.581847][ T5988] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.786567][ T3206] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1248.828714][ T7096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.868929][ T7096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.894538][ T77] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1248.972827][T17779] veth0_macvtap: entered promiscuous mode [ 1249.007656][ T6140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.035262][T17779] veth1_macvtap: entered promiscuous mode [ 1249.047595][ T6140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.062709][ T10] usb 7-1: USB disconnect, device number 36 [ 1249.096021][ T10] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1249.174465][ T29] audit: type=1326 audit(1787371701.594:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.2.3487" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6e7d9e0d9 code=0x0 [ 1249.287470][ T7096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.314247][ T7096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.354808][T17779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1249.445107][T17779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.612533][T18334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.623871][ T7096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.690903][T18334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.701297][ T6140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.726098][T18337] 9p: Bad value for 'rfdno' [ 1249.772902][ T9807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.821122][ T9807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.013256][ T6140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.050725][ T6140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.242425][T18347] syzkaller0: entered promiscuous mode [ 1250.270272][T18347] syzkaller0: entered allmulticast mode [ 1250.386034][T18353] siw: device registration error -23 [ 1250.456881][ T7096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.470594][ T7096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.220531][T18380] jffs2: notice: (18380) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1252.507242][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3502'. [ 1253.123076][T18395] 9p: Bad value for 'rfdno' [ 1253.371037][ T5269] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1253.833046][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1253.846167][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1253.859942][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1253.876658][T18405] siw: device registration error -23 [ 1253.883166][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1253.892093][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1255.286929][T18429] syz_tun: entered allmulticast mode [ 1255.972801][T15302] Bluetooth: hci1: command tx timeout [ 1258.051771][T15302] Bluetooth: hci1: command tx timeout [ 1258.154043][T18444] syzkaller0: entered promiscuous mode [ 1258.173302][T18444] syzkaller0: entered allmulticast mode [ 1259.110239][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.276233][T18464] siw: device registration error -23 [ 1259.797312][ T5269] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1259.920980][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.132327][T15302] Bluetooth: hci1: command tx timeout [ 1260.265321][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.284127][T18481] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3524'. [ 1260.671997][ T5625] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1260.927019][ T5625] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1261.413913][ T5625] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1261.544820][ T5625] usb 9-1: Product: syz [ 1261.609026][ T5625] usb 9-1: Manufacturer: syz [ 1261.646344][ T5625] usb 9-1: SerialNumber: syz [ 1261.649060][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.669302][ T5625] usb 9-1: config 0 descriptor?? [ 1261.731134][ T5625] ch341 9-1:0.0: ch341-uart converter detected [ 1262.211908][T15302] Bluetooth: hci1: command tx timeout [ 1262.235834][T18509] 9pnet_virtio: no channels available for device syz [ 1262.852282][ T5625] usb 9-1: failed to receive control message: -110 [ 1264.561168][ T5625] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1265.210587][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3526'. [ 1265.445736][T18517] misc userio: Invalid payload size [ 1265.483649][T18517] misc userio: The device must be registered before sending interrupts [ 1265.545131][T18519] misc userio: The device must be registered before sending interrupts [ 1265.785111][ T6058] usb 9-1: USB disconnect, device number 8 [ 1265.846520][ T6058] ch341 9-1:0.0: device disconnected [ 1266.218166][T18529] siw: device registration error -23 [ 1267.423308][T18546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3539'. [ 1269.300013][ T136] bond0 (unregistering): Released all slaves [ 1269.390082][ T9804] smbdirect: ib_dev[syz5] removed [ 1269.601856][T18575] tipc: Enabling of bearer rejected, failed to enable media [ 1270.846146][T18585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3543'. [ 1272.038644][T18603] misc userio: Invalid payload size [ 1272.046527][T18603] misc userio: The device must be registered before sending interrupts [ 1272.055310][T18603] misc userio: The device must be registered before sending interrupts [ 1272.320434][T18613] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3549'. [ 1272.674955][ T5758] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1272.794885][T18622] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1273.280965][T18607] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1273.298065][T18607] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1273.314974][T18607] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1273.332948][T18607] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 1273.464501][ T5758] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1273.507834][ T5758] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1273.526724][ T5758] usb 7-1: config 1 descriptor has 1 excess byte, ignoring [ 1273.551751][ T5758] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1273.560789][ T5758] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 1273.573829][ T5758] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8805, setting to 1024 [ 1273.603730][ T5758] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1273.631816][ T5758] usb 7-1: Product: syz [ 1273.636048][ T5758] usb 7-1: Manufacturer: syz [ 1273.664029][ T5758] cdc_wdm 7-1:1.0: skipping garbage [ 1273.691631][ T5758] cdc_wdm 7-1:1.0: skipping garbage [ 1273.898349][ T136] hsr_slave_0: left promiscuous mode [ 1273.939889][ T136] hsr_slave_1: left promiscuous mode [ 1273.957043][ T5758] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1273.965140][ T5758] cdc_wdm 7-1:1.0: Unknown control protocol [ 1273.978099][ T5758] usb 7-1: USB disconnect, device number 37 [ 1274.744979][ T136] veth1_macvtap: left promiscuous mode [ 1274.796810][ T136] veth0_macvtap: left promiscuous mode [ 1274.837637][ T136] veth1_vlan: left promiscuous mode [ 1274.884084][ T136] veth0_vlan: left promiscuous mode [ 1275.168796][T18638] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3555'. [ 1277.025999][ T29] audit: type=1800 audit(1787371729.434:2225): pid=18664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.9.3556" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1277.593232][T18682] misc userio: No port type given on /dev/userio [ 1277.711606][T18683] misc userio: Invalid payload size [ 1277.807760][T18682] misc userio: The device must be registered before sending interrupts [ 1277.853548][T18683] misc userio: The device must be registered before sending interrupts [ 1278.653358][T18407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.984071][T18407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.993064][T18407] bridge_slave_0: entered allmulticast mode [ 1281.001469][T18407] bridge_slave_0: entered promiscuous mode [ 1281.015239][T18407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.023734][T18407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.030918][T18407] bridge_slave_1: entered allmulticast mode [ 1281.038555][T18407] bridge_slave_1: entered promiscuous mode [ 1281.446960][T18714] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1283.254177][T18407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1283.337356][T18407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.381099][T18731] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3572'. [ 1283.510758][T18737] misc userio: No port type given on /dev/userio [ 1283.525167][T18407] team0: Port device team_slave_0 added [ 1283.546722][T18407] team0: Port device team_slave_1 added [ 1283.558821][T18739] misc userio: Invalid payload size [ 1283.597320][T18737] misc userio: The device must be registered before sending interrupts [ 1283.709143][T18739] misc userio: The device must be registered before sending interrupts [ 1283.738318][T18407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.767388][T18407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.895704][T18407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.974558][T18407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.001135][T18407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1284.089627][T18407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1284.287418][T18764] netlink: 'syz.0.3580': attribute type 10 has an invalid length. [ 1284.509113][T18751] block nbd0: server does not support multiple connections per device. [ 1284.534843][T18764] syz_tun: entered promiscuous mode [ 1284.627842][T18751] block nbd0: shutting down sockets [ 1284.716737][T18773] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1285.113479][T18764] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1285.155333][T18407] hsr_slave_0: entered promiscuous mode [ 1285.232082][ T29] audit: type=1800 audit(1787371737.644:2226): pid=18765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.8.3576" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1285.326846][T18407] hsr_slave_1: entered promiscuous mode [ 1286.770026][T18792] jffs2: notice: (18792) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1288.903217][T18806] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3588'. [ 1289.536935][T18827] syzkaller0: entered promiscuous mode [ 1289.553503][T18827] syzkaller0: entered allmulticast mode [ 1289.626019][ T51] Bluetooth: hci2: sending frame failed (-49) [ 1289.634956][T15302] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 1289.750960][T18834] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1290.401048][T18835] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3595'. [ 1290.789719][T18407] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1290.841478][T18407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1291.544567][T18407] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1292.274219][T18407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1292.278991][T18845] jffs2: notice: (18845) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1292.388110][T18407] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1292.478920][T18407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1292.522033][T18845] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 1292.548410][T18407] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1292.614029][T18407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1292.754197][T18863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3604'. [ 1293.025738][T18407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.139111][T18884] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3610'. [ 1293.150050][T18407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.191438][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.198676][ T5885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.230036][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.237277][ T5885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.576185][T18884] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1294.848247][T18919] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 1296.757988][T18935] jffs2: notice: (18935) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1296.990540][T18940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3620'. [ 1298.135736][T18967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3630'. [ 1299.502334][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.529101][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.233030][T19001] jffs2: notice: (19001) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1301.849191][T18407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1301.877237][T19014] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3638'. [ 1302.107646][T18407] veth0_vlan: entered promiscuous mode [ 1302.197889][T18407] veth1_vlan: entered promiscuous mode [ 1302.370166][T18407] veth0_macvtap: entered promiscuous mode [ 1302.437888][T18407] veth1_macvtap: entered promiscuous mode [ 1302.567272][T18407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1302.616416][T19030] jffs2: notice: (19030) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1302.685256][T18407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1302.912403][ T9807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.952347][T19036] netlink: 'syz.0.3646': attribute type 13 has an invalid length. [ 1302.966505][ T9807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.208203][T19048] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3649'. [ 1303.662422][T19054] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1304.167771][ T9795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.503620][ T1107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.675756][ T9795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.724133][ T9795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1304.813547][T19069] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3653'. [ 1304.834510][ T5990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.854177][ T5990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.469758][T19087] jffs2: notice: (19087) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1305.731421][T19096] jffs2: notice: (19096) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1306.728440][ T29] audit: type=1800 audit(1787371759.114:2227): pid=19096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3663" name="del3" dev="jffs2" ino=4 res=0 errno=0 [ 1307.199860][T19115] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1307.965104][T19121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3668'. [ 1309.173828][T19151] jffs2: notice: (19151) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1309.625541][T19154] 9p: Bad value for 'rfdno' [ 1310.347152][T19166] binder_alloc: 19164: binder_alloc_buf, no vma [ 1310.490024][T19178] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1311.241341][T19171] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 1311.301800][T16797] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1311.496448][T16797] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1311.547696][T16797] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1311.548089][T19195] jffs2: notice: (19195) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1311.805827][T16797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1311.831751][T16797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1311.851461][T16797] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1311.893076][T16797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.912578][T16797] usb 2-1: config 0 descriptor?? [ 1312.520429][T16797] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 1312.598276][T16797] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1312.829584][T19219] 9p: Bad value for 'rfdno' [ 1313.745788][T19235] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1314.777377][T18182] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 1315.170156][T15302] Bluetooth: hci1: link tx timeout [ 1315.177938][T15302] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1315.196469][T15302] Bluetooth: hci1: link tx timeout [ 1315.205232][T15302] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1315.231460][T19253] jffs2: notice: (19253) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1315.771593][ T6058] usb 2-1: USB disconnect, device number 2 [ 1315.870801][T19268] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3710'. [ 1316.606255][T19279] misc userio: Invalid payload size [ 1316.623351][T19280] 9p: Bad value for 'rfdno' [ 1316.641424][T19279] misc userio: Invalid payload size [ 1316.677072][T19283] jffs2: notice: (19283) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1316.712896][T19286] misc userio: The device must be registered before sending interrupts [ 1316.834656][T19279] misc userio: The device must be registered before sending interrupts [ 1316.931948][T15302] Bluetooth: hci3: command 0x0406 tx timeout [ 1317.297609][T19294] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1317.318535][T15302] Bluetooth: hci1: command 0x0406 tx timeout [ 1318.711135][T19310] jffs2: notice: (19310) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1319.618927][T19333] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1319.625465][T19333] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1319.715265][T19338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3731'. [ 1319.808257][T19333] vhci_hcd vhci_hcd.0: Device attached [ 1320.077518][T19335] vhci_hcd: connection closed [ 1320.082797][ T5886] vhci_hcd vhci_hcd.1: stop threads [ 1320.136750][ T5886] vhci_hcd vhci_hcd.1: release socket [ 1320.160545][ T5886] vhci_hcd vhci_hcd.1: disconnect device [ 1320.191824][ T6058] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 1320.402167][T19254] Bluetooth: hci1: command 0x0406 tx timeout [ 1320.456939][ T6058] usb 35-1: enqueue for inactive port 0 [ 1320.642928][ T6058] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1322.131824][T18833] Bluetooth: hci7: command 0x0406 tx timeout [ 1322.137981][T19254] Bluetooth: hci8: command 0x0406 tx timeout [ 1322.501651][ T29] audit: type=1326 audit(1787371774.874:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19365 comm="syz.2.3740" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f389859e0d9 code=0x0 [ 1324.173762][T19375] jffs2: notice: (19375) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1324.490696][T19387] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3743'. [ 1324.904916][ T29] audit: type=1800 audit(1787371777.324:2229): pid=19392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3747" name="pnp_string" dev="configfs" ino=77802 res=0 errno=0 [ 1324.956897][T19403] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1324.963443][T19403] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1325.075364][T19403] vhci_hcd vhci_hcd.0: Device attached [ 1325.477119][T19404] vhci_hcd: connection closed [ 1325.482054][ T10] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 1325.505882][ T9799] vhci_hcd vhci_hcd.1: stop threads [ 1325.548461][ T9799] vhci_hcd vhci_hcd.1: release socket [ 1325.594960][ T9799] vhci_hcd vhci_hcd.1: disconnect device [ 1326.046563][ T51] Bluetooth: hci7: unexpected event for opcode 0x204e [ 1328.195880][T19423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.229189][T19418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.315959][T19423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.408161][T19463] jffs2: notice: (19463) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1328.966679][T19452] syzkaller0: entered promiscuous mode [ 1328.990811][T19452] syzkaller0: entered allmulticast mode [ 1329.051487][ T29] audit: type=1800 audit(1787371781.464:2230): pid=19484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3763" name="pnp_string" dev="configfs" ino=78529 res=0 errno=0 [ 1330.689805][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1332.784476][T19515] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1332.791051][T19515] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1332.868730][T19515] vhci_hcd vhci_hcd.0: Device attached [ 1332.899686][T19517] vhci_hcd: connection closed [ 1332.900158][ T1107] vhci_hcd vhci_hcd.2: stop threads [ 1332.922021][ T1107] vhci_hcd vhci_hcd.2: release socket [ 1332.928631][ T1107] vhci_hcd vhci_hcd.2: disconnect device [ 1333.783039][ T5758] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1334.440737][T19529] jffs2: notice: (19529) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1334.695043][ T5758] usb 7-1: Using ep0 maxpacket: 8 [ 1334.708845][ T5758] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1334.731824][ T5758] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1334.740389][ T5758] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1334.759132][ T5758] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1334.768475][ T5758] usb 7-1: config 250 has no interface number 0 [ 1334.781227][ T5758] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1334.809870][ T5758] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1335.074321][ T5758] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 1335.101738][ T5758] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1335.121730][ T5758] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1335.179326][ T5758] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1335.369408][ T5758] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1335.514489][ T5758] usb 7-1: Product: syz [ 1335.738280][ T5758] usb 7-1: SerialNumber: syz [ 1335.849617][ T5758] hub 7-1:250.228: bad descriptor, ignoring hub [ 1335.887742][ T5758] hub 7-1:250.228: probe with driver hub failed with error -5 [ 1336.056010][ T5758] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1336.742304][T19418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.802887][T19522] usb 7-1: reset high-speed USB device number 38 using dummy_hcd [ 1336.870812][T19554] tipc: Started in network mode [ 1336.919821][T19554] tipc: Node identity ac14140f, cluster identity 4711 [ 1336.951582][T19554] tipc: New replicast peer: 172.30.0.9 [ 1336.981395][T19554] tipc: Enabled bearer , priority 10 [ 1337.007351][T19555] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3778'. [ 1337.041376][T19555] tipc: Disabling bearer [ 1337.217459][T19418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.217617][ C1] usblp0: nonzero read bulk status received: -71 [ 1337.238922][ T29] audit: type=1800 audit(1787371789.654:2231): pid=19563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3781" name="pnp_string" dev="configfs" ino=78620 res=0 errno=0 [ 1337.293328][ T5758] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1337.735641][ T5758] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1337.770706][ T5758] usb 10-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1337.792457][ T6058] usb 7-1: USB disconnect, device number 38 [ 1337.806870][ T5758] usb 10-1: Product: syz [ 1337.824399][ T5758] usb 10-1: Manufacturer: syz [ 1337.834776][T19418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.850817][ T5758] usb 10-1: SerialNumber: syz [ 1337.874719][ T5758] usb 10-1: config 0 descriptor?? [ 1337.892958][ T6058] usblp0: removed [ 1337.917166][ T5758] ch341 10-1:0.0: ch341-uart converter detected [ 1338.246743][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3780'. [ 1338.269900][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3780'. [ 1338.280934][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3780'. [ 1338.297090][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3780'. [ 1338.336280][T19581] 9pnet_virtio: no channels available for device syz [ 1339.499634][ T5758] usb 10-1: failed to receive control message: -110 [ 1340.068971][ T5758] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1340.379043][ T5885] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.490187][ T5740] usb 10-1: USB disconnect, device number 2 [ 1340.590133][ T5740] ch341 10-1:0.0: device disconnected [ 1340.606215][ T5990] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.640817][T19591] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1340.647353][T19591] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1340.855256][T19591] vhci_hcd vhci_hcd.0: Device attached [ 1340.862400][ T9807] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.892077][T19599] vhci_hcd: connection closed [ 1340.897823][ T9807] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.910942][ T1107] vhci_hcd vhci_hcd.6: stop threads [ 1340.926445][ T1107] vhci_hcd vhci_hcd.6: release socket [ 1340.944572][ T1107] vhci_hcd vhci_hcd.6: disconnect device [ 1340.977111][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3786'. [ 1341.066398][ T1107] Bluetooth: hci2: Frame reassembly failed (-84) [ 1341.415015][T19616] jffs2: notice: (19616) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1342.562747][T18833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1342.577102][T18833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1342.593627][T18833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1342.607889][T18833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1342.621174][T18833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1342.940124][T19639] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.2147614719.218104002), cmd(2) [ 1343.091850][T18833] Bluetooth: hci2: command 0x1003 tx timeout [ 1343.093678][ T51] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1343.297843][T19654] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3795'. [ 1343.736858][T19663] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1343.894951][T19664] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 1344.049131][T17735] bond0: (slave syz_tun): Releasing backup interface [ 1344.067651][T19677] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3802'. [ 1344.150743][T19680] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 1344.157305][T19680] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1344.235763][T19680] vhci_hcd vhci_hcd.0: Device attached [ 1344.266131][T19684] vhci_hcd: connection closed [ 1344.267971][ T9807] vhci_hcd vhci_hcd.9: stop threads [ 1344.303503][ T9807] vhci_hcd vhci_hcd.9: release socket [ 1344.320939][ T9807] vhci_hcd vhci_hcd.9: disconnect device [ 1344.336807][T19687] jffs2: notice: (19687) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1344.517270][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.691938][ T51] Bluetooth: hci4: command tx timeout [ 1346.701563][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.773953][ T51] Bluetooth: hci4: command tx timeout [ 1347.150727][T19713] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.2147614719.218104002), cmd(2) [ 1347.393404][ T152] Bluetooth: hci2: Frame reassembly failed (-84) [ 1347.583902][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.743285][T19727] syzkaller0: entered promiscuous mode [ 1347.785946][T19727] syzkaller0: entered allmulticast mode [ 1347.845578][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.871765][T18833] Bluetooth: hci4: command tx timeout [ 1349.414585][ T51] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1349.964725][ T29] audit: type=1800 audit(1787371802.374:2232): pid=19756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.3816" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1350.060488][ T12] bridge_slave_1: left allmulticast mode [ 1350.083084][ T12] bridge_slave_1: left promiscuous mode [ 1350.110825][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.141027][T19769] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 1350.147562][T19769] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1350.173365][ T12] bridge_slave_0: left allmulticast mode [ 1350.195374][ T12] bridge_slave_0: left promiscuous mode [ 1350.206959][T19769] vhci_hcd vhci_hcd.0: Device attached [ 1350.213018][T19779] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.2147614719.218104002), cmd(2) [ 1350.225665][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.934619][ T5740] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 1350.955114][ T51] Bluetooth: hci4: command tx timeout [ 1350.960587][T19777] vhci_hcd: connection closed [ 1351.068452][ T152] vhci_hcd vhci_hcd.8: stop threads [ 1351.124140][ T152] vhci_hcd vhci_hcd.8: release socket [ 1351.146128][ T152] vhci_hcd vhci_hcd.8: disconnect device [ 1351.638803][T19786] Bluetooth: MGMT ver 1.23 [ 1351.674813][T19795] 9pnet_virtio: no channels available for device syz [ 1352.494260][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.132492][ T29] audit: type=1326 audit(1787371805.544:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.9.3830" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f699e0d9 code=0x7ffc0000 [ 1354.621743][ T29] audit: type=1326 audit(1787371807.014:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.9.3830" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f699e0d9 code=0x7ffc0000 [ 1354.839166][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.873002][ T29] audit: type=1326 audit(1787371807.014:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.9.3830" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f699e0d9 code=0x7ffc0000 [ 1355.008853][ T12] bond0 (unregistering): Released all slaves [ 1355.076364][ T29] audit: type=1326 audit(1787371807.014:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.9.3830" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f699e0d9 code=0x7ffc0000 [ 1355.153056][ T29] audit: type=1326 audit(1787371807.014:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.9.3830" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f62f699e0d9 code=0x7ffc0000 [ 1355.180811][ T29] audit: type=1326 audit(1787371807.014:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.9.3830" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f699e0d9 code=0x7ffc0000 [ 1355.210928][ T29] audit: type=1326 audit(1787371807.014:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.9.3830" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f699e0d9 code=0x7ffc0000 [ 1355.269207][ T29] audit: type=1326 audit(1787371807.014:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.9.3830" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f699e0d9 code=0x7ffc0000 [ 1355.298636][ T29] audit: type=1326 audit(1787371807.014:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.9.3830" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f62f699e0d9 code=0x7ffc0000 [ 1355.306802][T19821] XFS (nullb0): Invalid superblock magic number [ 1355.324375][ T29] audit: type=1326 audit(1787371807.014:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.9.3830" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f699e0d9 code=0x7ffc0000 [ 1355.461188][ T29] audit: type=1326 audit(1787371807.014:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.9.3830" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f699e0d9 code=0x7ffc0000 [ 1355.729187][ T29] audit: type=1326 audit(1787371807.074:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.9.3830" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f699e0d9 code=0x7ffc0000 [ 1355.771754][ T29] audit: type=1326 audit(1787371807.074:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19806 comm="syz.9.3830" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f699e0d9 code=0x7ffc0000 [ 1356.760849][ T5740] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1357.046700][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1360.190219][T19848] ceph: No mds server is up or the cluster is laggy [ 1360.526316][ T5740] libceph: connect (1)[c::]:6789 error -101 [ 1360.586331][ T5740] libceph: mon0 (1)[c::]:6789 connect error [ 1360.774907][T19627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.798922][T19627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.841264][T19627] bridge_slave_0: entered allmulticast mode [ 1360.870046][ T5740] libceph: connect (1)[c::]:6789 error -101 [ 1360.876153][ T5740] libceph: mon0 (1)[c::]:6789 connect error [ 1360.909230][T19627] bridge_slave_0: entered promiscuous mode [ 1360.960780][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.967650][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.981395][T19627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.023433][T19627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.069219][T19627] bridge_slave_1: entered allmulticast mode [ 1361.093395][T19627] bridge_slave_1: entered promiscuous mode [ 1361.210349][T19866] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3838'. [ 1361.255210][T19869] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1361.261750][T19869] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1361.306400][T19869] vhci_hcd vhci_hcd.0: Device attached [ 1361.331096][T19627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.393891][T19870] vhci_hcd: connection closed [ 1361.400339][T19859] vhci_hcd vhci_hcd.1: stop threads [ 1361.419252][ T12] hsr_slave_0: left promiscuous mode [ 1361.431507][T19859] vhci_hcd vhci_hcd.1: release socket [ 1361.441343][ T12] hsr_slave_1: left promiscuous mode [ 1361.455668][T19859] vhci_hcd vhci_hcd.1: disconnect device [ 1361.466318][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1361.481945][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.518517][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1361.556965][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.603684][ T12] veth1_macvtap: left promiscuous mode [ 1361.619009][ T12] veth0_macvtap: left promiscuous mode [ 1361.638138][ T12] veth1_vlan: left promiscuous mode [ 1361.657716][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 1361.657736][ T29] audit: type=1800 audit(1787371814.074:2312): pid=19864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.8.3837" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1361.697291][ T12] veth0_vlan: left promiscuous mode [ 1366.759010][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1366.953231][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1368.932926][T19627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1370.503068][T19893] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1370.706355][T19627] team0: Port device team_slave_0 added [ 1370.751263][T19627] team0: Port device team_slave_1 added [ 1370.905324][T19939] ================================================================== [ 1370.913417][T19939] BUG: KASAN: slab-use-after-free in dvb_media_device_free+0x589/0x650 [ 1370.921689][T19939] Read of size 8 at addr ffff88802d0b86b0 by task syz.2.3852/19939 [ 1370.929594][T19939] [ 1370.931926][T19939] CPU: 1 UID: 0 PID: 19939 Comm: syz.2.3852 Tainted: G L syzkaller #0 PREEMPT(full) [ 1370.931982][T19939] Tainted: [L]=SOFTLOCKUP [ 1370.931996][T19939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1370.932020][T19939] Call Trace: [ 1370.932033][T19939] [ 1370.932047][T19939] dump_stack_lvl+0x100/0x190 [ 1370.932100][T19939] print_report+0x13d/0x4b0 [ 1370.932160][T19939] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.932208][T19939] ? __virt_addr_valid+0x239/0x430 [ 1370.932267][T19939] ? dvb_media_device_free+0x589/0x650 [ 1370.932311][T19939] kasan_report+0xdf/0x1c0 [ 1370.932365][T19939] ? dvb_media_device_free+0x589/0x650 [ 1370.932415][T19939] dvb_media_device_free+0x589/0x650 [ 1370.932457][T19939] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.932504][T19939] ? up_write+0x2dc/0x5b0 [ 1370.932574][T19939] dvb_remove_device.part.0+0xa4/0x270 [ 1370.932622][T19939] dvb_remove_device+0x1f/0x30 [ 1370.932665][T19939] dvb_unregister_frontend+0x7a/0x150 [ 1370.932710][T19939] vidtv_bridge_remove+0x84/0x140 [ 1370.932767][T19939] ? __pfx_vidtv_bridge_remove+0x10/0x10 [ 1370.932822][T19939] platform_remove+0x5f/0x80 [ 1370.932865][T19939] ? __pfx_platform_remove+0x10/0x10 [ 1370.932906][T19939] device_remove+0xcb/0x180 [ 1370.932960][T19939] device_release_driver_internal+0x44e/0x620 [ 1370.933028][T19939] unbind_store+0xf8/0x110 [ 1370.933072][T19939] ? __pfx_unbind_store+0x10/0x10 [ 1370.933120][T19939] drv_attr_store+0x74/0xb0 [ 1370.933160][T19939] ? __pfx_drv_attr_store+0x10/0x10 [ 1370.933200][T19939] sysfs_kf_write+0xf2/0x150 [ 1370.933250][T19939] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1370.933288][T19939] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1370.933338][T19939] vfs_write+0x6af/0x1050 [ 1370.933377][T19939] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1370.933421][T19939] ? __pfx_vfs_write+0x10/0x10 [ 1370.933457][T19939] ? find_held_lock+0x2b/0x80 [ 1370.933516][T19939] ksys_write+0x12a/0x250 [ 1370.933560][T19939] ? __pfx_ksys_write+0x10/0x10 [ 1370.933601][T19939] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1370.933653][T19939] do_syscall_64+0x123/0x790 [ 1370.933720][T19939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.933760][T19939] RIP: 0033:0x7f389859e0d9 [ 1370.933789][T19939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1370.933828][T19939] RSP: 002b:00007f389949b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1370.933864][T19939] RAX: ffffffffffffffda RBX: 00007f3898826090 RCX: 00007f389859e0d9 [ 1370.933891][T19939] RDX: 0000000000000007 RSI: 0000200000000300 RDI: 0000000000000004 [ 1370.933915][T19939] RBP: 00007f3898635024 R08: 0000000000000000 R09: 0000000000000000 [ 1370.933939][T19939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1370.933964][T19939] R13: 00007f3898826128 R14: 00007f3898826090 R15: 00007ffcaefe2f58 [ 1370.934005][T19939] [ 1370.934017][T19939] [ 1371.218338][T19939] Allocated by task 1: [ 1371.222407][T19939] kasan_save_stack+0x30/0x50 [ 1371.227116][T19939] kasan_save_track+0x14/0x30 [ 1371.231817][T19939] __kasan_kmalloc+0xaa/0xb0 [ 1371.236431][T19939] __kmalloc_cache_noprof+0x2e7/0x6b0 [ 1371.241844][T19939] dvb_register_device+0x1d6/0x1e20 [ 1371.247067][T19939] dvb_register_frontend+0x552/0x820 [ 1371.252374][T19939] vidtv_bridge_probe+0x44b/0xa30 [ 1371.257432][T19939] platform_probe+0x106/0x1d0 [ 1371.262133][T19939] really_probe+0x241/0xa60 [ 1371.266669][T19939] __driver_probe_device+0x210/0x460 [ 1371.271992][T19939] driver_probe_device+0x4a/0x140 [ 1371.277051][T19939] __driver_attach+0x21f/0x5b0 [ 1371.281847][T19939] bus_for_each_dev+0x13e/0x1d0 [ 1371.286724][T19939] bus_add_driver+0x305/0x5b0 [ 1371.291429][T19939] driver_register+0x1e2/0x360 [ 1371.296234][T19939] vidtv_bridge_init+0x52/0x80 [ 1371.301023][T19939] do_one_initcall+0x11c/0x6f0 [ 1371.305828][T19939] kernel_init_freeable+0x6ea/0x7b0 [ 1371.311065][T19939] kernel_init+0x21/0x1e0 [ 1371.315418][T19939] ret_from_fork+0x730/0xd60 [ 1371.320045][T19939] ret_from_fork_asm+0x1a/0x30 [ 1371.324850][T19939] [ 1371.327172][T19939] Freed by task 19939: [ 1371.331241][T19939] kasan_save_stack+0x30/0x50 [ 1371.335941][T19939] kasan_save_track+0x14/0x30 [ 1371.340642][T19939] kasan_save_free_info+0x3b/0x70 [ 1371.345708][T19939] __kasan_slab_free+0x5f/0x80 [ 1371.350497][T19939] kfree+0x22b/0x6c0 [ 1371.354435][T19939] dvb_device_put.part.0+0x57/0x90 [ 1371.359572][T19939] dvb_remove_device.part.0+0x90/0x270 [ 1371.365055][T19939] dvb_remove_device+0x1f/0x30 [ 1371.369841][T19939] dvb_unregister_frontend+0x7a/0x150 [ 1371.375236][T19939] vidtv_bridge_remove+0x84/0x140 [ 1371.380295][T19939] platform_remove+0x5f/0x80 [ 1371.384904][T19939] device_remove+0xcb/0x180 [ 1371.389443][T19939] device_release_driver_internal+0x44e/0x620 [ 1371.395566][T19939] unbind_store+0xf8/0x110 [ 1371.400006][T19939] drv_attr_store+0x74/0xb0 [ 1371.404528][T19939] sysfs_kf_write+0xf2/0x150 [ 1371.409154][T19939] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1371.414457][T19939] vfs_write+0x6af/0x1050 [ 1371.418805][T19939] ksys_write+0x12a/0x250 [ 1371.423152][T19939] do_syscall_64+0x123/0x790 [ 1371.427784][T19939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.433697][T19939] [ 1371.436018][T19939] The buggy address belongs to the object at ffff88802d0b8600 [ 1371.436018][T19939] which belongs to the cache kmalloc-256 of size 256 [ 1371.450081][T19939] The buggy address is located 176 bytes inside of [ 1371.450081][T19939] freed 256-byte region [ffff88802d0b8600, ffff88802d0b8700) [ 1371.463898][T19939] [ 1371.466221][T19939] The buggy address belongs to the physical page: [ 1371.472632][T19939] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d0b8 [ 1371.481417][T19939] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1371.489926][T19939] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1371.497484][T19939] page_type: f5(slab) [ 1371.501480][T19939] raw: 00fff00000000040 ffff88801c027b40 dead000000000100 dead000000000122 [ 1371.510081][T19939] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1371.518683][T19939] head: 00fff00000000040 ffff88801c027b40 dead000000000100 dead000000000122 [ 1371.527373][T19939] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1371.536058][T19939] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1371.544746][T19939] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1371.553421][T19939] page dumped because: kasan: bad access detected [ 1371.559832][T19939] page_owner tracks the page as allocated [ 1371.565545][T19939] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17636490537 [ 1371.584330][T19939] post_alloc_hook+0xfd/0x120 [ 1371.589052][T19939] get_page_from_freelist+0x110d/0x35b0 [ 1371.594614][T19939] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1371.600523][T19939] new_slab+0xa5/0x640 [ 1371.604610][T19939] refill_objects+0xe3/0x410 [ 1371.609215][T19939] __pcs_replace_empty_main+0x372/0x680 [ 1371.614799][T19939] __kmalloc_cache_noprof+0x47b/0x6b0 [ 1371.620215][T19939] dvb_register_device+0x1d6/0x1e20 [ 1371.625436][T19939] dvb_register_frontend+0x552/0x820 [ 1371.630743][T19939] vidtv_bridge_probe+0x44b/0xa30 [ 1371.635801][T19939] platform_probe+0x106/0x1d0 [ 1371.640499][T19939] really_probe+0x241/0xa60 [ 1371.645040][T19939] __driver_probe_device+0x210/0x460 [ 1371.650362][T19939] driver_probe_device+0x4a/0x140 [ 1371.655424][T19939] __driver_attach+0x21f/0x5b0 [ 1371.660223][T19939] bus_for_each_dev+0x13e/0x1d0 [ 1371.665095][T19939] page_owner free stack trace missing [ 1371.670460][T19939] [ 1371.672781][T19939] Memory state around the buggy address: [ 1371.678412][T19939] ffff88802d0b8580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1371.686489][T19939] ffff88802d0b8600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1371.694568][T19939] >ffff88802d0b8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1371.702632][T19939] ^ [ 1371.708267][T19939] ffff88802d0b8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1371.716338][T19939] ffff88802d0b8780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1371.724404][T19939] ================================================================== [ 1372.070730][T19939] Disabling lock debugging due to kernel taint [ 1372.077037][T19939] ================================================================== [ 1372.085101][T19939] BUG: KASAN: slab-use-after-free in dvb_media_device_free+0x5d1/0x650 [ 1372.093373][T19939] Read of size 8 at addr ffff88802d0b86b0 by task syz.2.3852/19939 [ 1372.101274][T19939] [ 1372.103610][T19939] CPU: 1 UID: 0 PID: 19939 Comm: syz.2.3852 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1372.103672][T19939] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1372.103688][T19939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1372.103712][T19939] Call Trace: [ 1372.103725][T19939] [ 1372.103739][T19939] dump_stack_lvl+0x100/0x190 [ 1372.103793][T19939] print_report+0x13d/0x4b0 [ 1372.103853][T19939] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1372.103902][T19939] ? __virt_addr_valid+0x239/0x430 [ 1372.103960][T19939] ? dvb_media_device_free+0x5d1/0x650 [ 1372.104005][T19939] kasan_report+0xdf/0x1c0 [ 1372.104058][T19939] ? dvb_media_device_free+0x5d1/0x650 [ 1372.104109][T19939] dvb_media_device_free+0x5d1/0x650 [ 1372.104153][T19939] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1372.104200][T19939] ? up_write+0x2dc/0x5b0 [ 1372.104265][T19939] dvb_remove_device.part.0+0xa4/0x270 [ 1372.104313][T19939] dvb_remove_device+0x1f/0x30 [ 1372.104357][T19939] dvb_unregister_frontend+0x7a/0x150 [ 1372.104402][T19939] vidtv_bridge_remove+0x84/0x140 [ 1372.104459][T19939] ? __pfx_vidtv_bridge_remove+0x10/0x10 [ 1372.104516][T19939] platform_remove+0x5f/0x80 [ 1372.104565][T19939] ? __pfx_platform_remove+0x10/0x10 [ 1372.104607][T19939] device_remove+0xcb/0x180 [ 1372.104662][T19939] device_release_driver_internal+0x44e/0x620 [ 1372.104731][T19939] unbind_store+0xf8/0x110 [ 1372.104777][T19939] ? __pfx_unbind_store+0x10/0x10 [ 1372.104826][T19939] drv_attr_store+0x74/0xb0 [ 1372.104866][T19939] ? __pfx_drv_attr_store+0x10/0x10 [ 1372.104906][T19939] sysfs_kf_write+0xf2/0x150 [ 1372.104957][T19939] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1372.104996][T19939] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1372.105046][T19939] vfs_write+0x6af/0x1050 [ 1372.105087][T19939] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1372.105131][T19939] ? __pfx_vfs_write+0x10/0x10 [ 1372.105173][T19939] ? find_held_lock+0x2b/0x80 [ 1372.105231][T19939] ksys_write+0x12a/0x250 [ 1372.105269][T19939] ? __pfx_ksys_write+0x10/0x10 [ 1372.105311][T19939] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1372.105363][T19939] do_syscall_64+0x123/0x790 [ 1372.105430][T19939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.105471][T19939] RIP: 0033:0x7f389859e0d9 [ 1372.105501][T19939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.105545][T19939] RSP: 002b:00007f389949b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1372.105583][T19939] RAX: ffffffffffffffda RBX: 00007f3898826090 RCX: 00007f389859e0d9 [ 1372.105610][T19939] RDX: 0000000000000007 RSI: 0000200000000300 RDI: 0000000000000004 [ 1372.105636][T19939] RBP: 00007f3898635024 R08: 0000000000000000 R09: 0000000000000000 [ 1372.105661][T19939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1372.105686][T19939] R13: 00007f3898826128 R14: 00007f3898826090 R15: 00007ffcaefe2f58 [ 1372.105726][T19939] [ 1372.105739][T19939] [ 1372.391096][T19939] Allocated by task 1: [ 1372.395169][T19939] kasan_save_stack+0x30/0x50 [ 1372.399873][T19939] kasan_save_track+0x14/0x30 [ 1372.404574][T19939] __kasan_kmalloc+0xaa/0xb0 [ 1372.409186][T19939] __kmalloc_cache_noprof+0x2e7/0x6b0 [ 1372.414599][T19939] dvb_register_device+0x1d6/0x1e20 [ 1372.419818][T19939] dvb_register_frontend+0x552/0x820 [ 1372.425120][T19939] vidtv_bridge_probe+0x44b/0xa30 [ 1372.430183][T19939] platform_probe+0x106/0x1d0 [ 1372.434883][T19939] really_probe+0x241/0xa60 [ 1372.439419][T19939] __driver_probe_device+0x210/0x460 [ 1372.444739][T19939] driver_probe_device+0x4a/0x140 [ 1372.449796][T19939] __driver_attach+0x21f/0x5b0 [ 1372.454597][T19939] bus_for_each_dev+0x13e/0x1d0 [ 1372.459469][T19939] bus_add_driver+0x305/0x5b0 [ 1372.464177][T19939] driver_register+0x1e2/0x360 [ 1372.468976][T19939] vidtv_bridge_init+0x52/0x80 [ 1372.473760][T19939] do_one_initcall+0x11c/0x6f0 [ 1372.478565][T19939] kernel_init_freeable+0x6ea/0x7b0 [ 1372.483799][T19939] kernel_init+0x21/0x1e0 [ 1372.488150][T19939] ret_from_fork+0x730/0xd60 [ 1372.492774][T19939] ret_from_fork_asm+0x1a/0x30 [ 1372.497578][T19939] [ 1372.499896][T19939] Freed by task 19939: [ 1372.503958][T19939] kasan_save_stack+0x30/0x50 [ 1372.508657][T19939] kasan_save_track+0x14/0x30 [ 1372.513354][T19939] kasan_save_free_info+0x3b/0x70 [ 1372.518415][T19939] __kasan_slab_free+0x5f/0x80 [ 1372.523203][T19939] kfree+0x22b/0x6c0 [ 1372.527133][T19939] dvb_device_put.part.0+0x57/0x90 [ 1372.532266][T19939] dvb_remove_device.part.0+0x90/0x270 [ 1372.537750][T19939] dvb_remove_device+0x1f/0x30 [ 1372.542534][T19939] dvb_unregister_frontend+0x7a/0x150 [ 1372.547930][T19939] vidtv_bridge_remove+0x84/0x140 [ 1372.552999][T19939] platform_remove+0x5f/0x80 [ 1372.557610][T19939] device_remove+0xcb/0x180 [ 1372.562141][T19939] device_release_driver_internal+0x44e/0x620 [ 1372.568247][T19939] unbind_store+0xf8/0x110 [ 1372.572684][T19939] drv_attr_store+0x74/0xb0 [ 1372.577203][T19939] sysfs_kf_write+0xf2/0x150 [ 1372.581818][T19939] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1372.587117][T19939] vfs_write+0x6af/0x1050 [ 1372.591461][T19939] ksys_write+0x12a/0x250 [ 1372.595801][T19939] do_syscall_64+0x123/0x790 [ 1372.600430][T19939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.606341][T19939] [ 1372.608661][T19939] The buggy address belongs to the object at ffff88802d0b8600 [ 1372.608661][T19939] which belongs to the cache kmalloc-256 of size 256 [ 1372.622725][T19939] The buggy address is located 176 bytes inside of [ 1372.622725][T19939] freed 256-byte region [ffff88802d0b8600, ffff88802d0b8700) [ 1372.636543][T19939] [ 1372.638863][T19939] The buggy address belongs to the physical page: [ 1372.645272][T19939] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d0b8 [ 1372.654040][T19939] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1372.662553][T19939] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1372.670107][T19939] page_type: f5(slab) [ 1372.674104][T19939] raw: 00fff00000000040 ffff88801c027b40 dead000000000100 dead000000000122 [ 1372.682703][T19939] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1372.691300][T19939] head: 00fff00000000040 ffff88801c027b40 dead000000000100 dead000000000122 [ 1372.699986][T19939] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1372.708674][T19939] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1372.717358][T19939] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1372.726027][T19939] page dumped because: kasan: bad access detected [ 1372.732436][T19939] page_owner tracks the page as allocated [ 1372.738145][T19939] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17636490537 [ 1372.756929][T19939] post_alloc_hook+0xfd/0x120 [ 1372.761647][T19939] get_page_from_freelist+0x110d/0x35b0 [ 1372.767208][T19939] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1372.773121][T19939] new_slab+0xa5/0x640 [ 1372.777198][T19939] refill_objects+0xe3/0x410 [ 1372.781798][T19939] __pcs_replace_empty_main+0x372/0x680 [ 1372.787383][T19939] __kmalloc_cache_noprof+0x47b/0x6b0 [ 1372.792794][T19939] dvb_register_device+0x1d6/0x1e20 [ 1372.798015][T19939] dvb_register_frontend+0x552/0x820 [ 1372.803319][T19939] vidtv_bridge_probe+0x44b/0xa30 [ 1372.808374][T19939] platform_probe+0x106/0x1d0 [ 1372.813077][T19939] really_probe+0x241/0xa60 [ 1372.817610][T19939] __driver_probe_device+0x210/0x460 [ 1372.822926][T19939] driver_probe_device+0x4a/0x140 [ 1372.827982][T19939] __driver_attach+0x21f/0x5b0 [ 1372.832774][T19939] bus_for_each_dev+0x13e/0x1d0 [ 1372.837645][T19939] page_owner free stack trace missing [ 1372.843007][T19939] [ 1372.845326][T19939] Memory state around the buggy address: [ 1372.850954][T19939] ffff88802d0b8580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1372.859023][T19939] ffff88802d0b8600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1372.867094][T19939] >ffff88802d0b8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1372.875161][T19939] ^ [ 1372.880795][T19939] ffff88802d0b8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1372.888863][T19939] ffff88802d0b8780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1372.896925][T19939] ================================================================== [ 1372.905980][T19939] ================================================================== [ 1372.914044][T19939] BUG: KASAN: slab-use-after-free in dvb_media_device_free+0x5eb/0x650 [ 1372.922311][T19939] Read of size 8 at addr ffff88802d0b86c0 by task syz.2.3852/19939 [ 1372.930209][T19939] [ 1372.932551][T19939] CPU: 1 UID: 0 PID: 19939 Comm: syz.2.3852 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1372.932613][T19939] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1372.932629][T19939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1372.932653][T19939] Call Trace: [ 1372.932667][T19939] [ 1372.932681][T19939] dump_stack_lvl+0x100/0x190 [ 1372.932734][T19939] print_report+0x13d/0x4b0 [ 1372.932794][T19939] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1372.932843][T19939] ? __virt_addr_valid+0x239/0x430 [ 1372.932901][T19939] ? dvb_media_device_free+0x5eb/0x650 [ 1372.932946][T19939] kasan_report+0xdf/0x1c0 [ 1372.933000][T19939] ? dvb_media_device_free+0x5eb/0x650 [ 1372.933050][T19939] dvb_media_device_free+0x5eb/0x650 [ 1372.933094][T19939] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1372.933141][T19939] ? up_write+0x2dc/0x5b0 [ 1372.933207][T19939] dvb_remove_device.part.0+0xa4/0x270 [ 1372.933254][T19939] dvb_remove_device+0x1f/0x30 [ 1372.933299][T19939] dvb_unregister_frontend+0x7a/0x150 [ 1372.933344][T19939] vidtv_bridge_remove+0x84/0x140 [ 1372.933401][T19939] ? __pfx_vidtv_bridge_remove+0x10/0x10 [ 1372.933458][T19939] platform_remove+0x5f/0x80 [ 1372.933500][T19939] ? __pfx_platform_remove+0x10/0x10 [ 1372.933548][T19939] device_remove+0xcb/0x180 [ 1372.933603][T19939] device_release_driver_internal+0x44e/0x620 [ 1372.933671][T19939] unbind_store+0xf8/0x110 [ 1372.933717][T19939] ? __pfx_unbind_store+0x10/0x10 [ 1372.933765][T19939] drv_attr_store+0x74/0xb0 [ 1372.933805][T19939] ? __pfx_drv_attr_store+0x10/0x10 [ 1372.933846][T19939] sysfs_kf_write+0xf2/0x150 [ 1372.933895][T19939] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1372.933935][T19939] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1372.933985][T19939] vfs_write+0x6af/0x1050 [ 1372.934024][T19939] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1372.934068][T19939] ? __pfx_vfs_write+0x10/0x10 [ 1372.934105][T19939] ? find_held_lock+0x2b/0x80 [ 1372.934164][T19939] ksys_write+0x12a/0x250 [ 1372.934203][T19939] ? __pfx_ksys_write+0x10/0x10 [ 1372.934245][T19939] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1372.934297][T19939] do_syscall_64+0x123/0x790 [ 1372.934364][T19939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.934404][T19939] RIP: 0033:0x7f389859e0d9 [ 1372.934434][T19939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.934473][T19939] RSP: 002b:00007f389949b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1372.934509][T19939] RAX: ffffffffffffffda RBX: 00007f3898826090 RCX: 00007f389859e0d9 [ 1372.934537][T19939] RDX: 0000000000000007 RSI: 0000200000000300 RDI: 0000000000000004 [ 1372.934566][T19939] RBP: 00007f3898635024 R08: 0000000000000000 R09: 0000000000000000 [ 1372.934592][T19939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1372.934616][T19939] R13: 00007f3898826128 R14: 00007f3898826090 R15: 00007ffcaefe2f58 [ 1372.934656][T19939] [ 1372.934670][T19939] [ 1373.219872][T19939] Allocated by task 1: [ 1373.223932][T19939] kasan_save_stack+0x30/0x50 [ 1373.228624][T19939] kasan_save_track+0x14/0x30 [ 1373.233309][T19939] __kasan_kmalloc+0xaa/0xb0 [ 1373.237908][T19939] __kmalloc_cache_noprof+0x2e7/0x6b0 [ 1373.243304][T19939] dvb_register_device+0x1d6/0x1e20 [ 1373.248516][T19939] dvb_register_frontend+0x552/0x820 [ 1373.253811][T19939] vidtv_bridge_probe+0x44b/0xa30 [ 1373.258856][T19939] platform_probe+0x106/0x1d0 [ 1373.263546][T19939] really_probe+0x241/0xa60 [ 1373.268066][T19939] __driver_probe_device+0x210/0x460 [ 1373.273370][T19939] driver_probe_device+0x4a/0x140 [ 1373.278412][T19939] __driver_attach+0x21f/0x5b0 [ 1373.283192][T19939] bus_for_each_dev+0x13e/0x1d0 [ 1373.288049][T19939] bus_add_driver+0x305/0x5b0 [ 1373.292736][T19939] driver_register+0x1e2/0x360 [ 1373.297519][T19939] vidtv_bridge_init+0x52/0x80 [ 1373.302292][T19939] do_one_initcall+0x11c/0x6f0 [ 1373.307082][T19939] kernel_init_freeable+0x6ea/0x7b0 [ 1373.312304][T19939] kernel_init+0x21/0x1e0 [ 1373.316645][T19939] ret_from_fork+0x730/0xd60 [ 1373.321254][T19939] ret_from_fork_asm+0x1a/0x30 [ 1373.326041][T19939] [ 1373.328352][T19939] Freed by task 19939: [ 1373.332412][T19939] kasan_save_stack+0x30/0x50 [ 1373.337099][T19939] kasan_save_track+0x14/0x30 [ 1373.341783][T19939] kasan_save_free_info+0x3b/0x70 [ 1373.346829][T19939] __kasan_slab_free+0x5f/0x80 [ 1373.351601][T19939] kfree+0x22b/0x6c0 [ 1373.355520][T19939] dvb_device_put.part.0+0x57/0x90 [ 1373.360642][T19939] dvb_remove_device.part.0+0x90/0x270 [ 1373.366108][T19939] dvb_remove_device+0x1f/0x30 [ 1373.370879][T19939] dvb_unregister_frontend+0x7a/0x150 [ 1373.376257][T19939] vidtv_bridge_remove+0x84/0x140 [ 1373.381299][T19939] platform_remove+0x5f/0x80 [ 1373.385892][T19939] device_remove+0xcb/0x180 [ 1373.390413][T19939] device_release_driver_internal+0x44e/0x620 [ 1373.396505][T19939] unbind_store+0xf8/0x110 [ 1373.400933][T19939] drv_attr_store+0x74/0xb0 [ 1373.405437][T19939] sysfs_kf_write+0xf2/0x150 [ 1373.410037][T19939] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1373.415330][T19939] vfs_write+0x6af/0x1050 [ 1373.419666][T19939] ksys_write+0x12a/0x250 [ 1373.423998][T19939] do_syscall_64+0x123/0x790 [ 1373.428612][T19939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.434509][T19939] [ 1373.436825][T19939] The buggy address belongs to the object at ffff88802d0b8600 [ 1373.436825][T19939] which belongs to the cache kmalloc-256 of size 256 [ 1373.450874][T19939] The buggy address is located 192 bytes inside of [ 1373.450874][T19939] freed 256-byte region [ffff88802d0b8600, ffff88802d0b8700) [ 1373.464671][T19939] [ 1373.466983][T19939] The buggy address belongs to the physical page: [ 1373.473381][T19939] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d0b8 [ 1373.482137][T19939] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1373.490630][T19939] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1373.498170][T19939] page_type: f5(slab) [ 1373.502152][T19939] raw: 00fff00000000040 ffff88801c027b40 dead000000000100 dead000000000122 [ 1373.510736][T19939] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1373.519323][T19939] head: 00fff00000000040 ffff88801c027b40 dead000000000100 dead000000000122 [ 1373.527998][T19939] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1373.536675][T19939] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1373.545349][T19939] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1373.554009][T19939] page dumped because: kasan: bad access detected [ 1373.560411][T19939] page_owner tracks the page as allocated [ 1373.566111][T19939] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17636490537 [ 1373.584876][T19939] post_alloc_hook+0xfd/0x120 [ 1373.589580][T19939] get_page_from_freelist+0x110d/0x35b0 [ 1373.595127][T19939] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1373.601024][T19939] new_slab+0xa5/0x640 [ 1373.605093][T19939] refill_objects+0xe3/0x410 [ 1373.609688][T19939] __pcs_replace_empty_main+0x372/0x680 [ 1373.615261][T19939] __kmalloc_cache_noprof+0x47b/0x6b0 [ 1373.620669][T19939] dvb_register_device+0x1d6/0x1e20 [ 1373.625877][T19939] dvb_register_frontend+0x552/0x820 [ 1373.631170][T19939] vidtv_bridge_probe+0x44b/0xa30 [ 1373.636213][T19939] platform_probe+0x106/0x1d0 [ 1373.640900][T19939] really_probe+0x241/0xa60 [ 1373.645418][T19939] __driver_probe_device+0x210/0x460 [ 1373.650721][T19939] driver_probe_device+0x4a/0x140 [ 1373.655762][T19939] __driver_attach+0x21f/0x5b0 [ 1373.660549][T19939] bus_for_each_dev+0x13e/0x1d0 [ 1373.665409][T19939] page_owner free stack trace missing [ 1373.670761][T19939] [ 1373.673072][T19939] Memory state around the buggy address: [ 1373.678691][T19939] ffff88802d0b8580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1373.686748][T19939] ffff88802d0b8600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1373.694807][T19939] >ffff88802d0b8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1373.702873][T19939] ^ [ 1373.709013][T19939] ffff88802d0b8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1373.717071][T19939] ffff88802d0b8780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1373.725123][T19939] ================================================================== [ 1373.794956][T19627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1373.805614][T19627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1373.840686][T19939] ==================================================================