last executing test programs: 12.28499279s ago: executing program 2 (id=60): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r2, &(0x7f0000004900), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="4dc07f94716330", 0x7) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)}}], 0x1, 0x24008804) sendmmsg$alg(r6, &(0x7f0000003b80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/65}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x410001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000019080)={0x6, 0x7, 0x0, 'queue0\x00', 0x7fff}) 11.544116782s ago: executing program 3 (id=66): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365cfe54a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0xfffe}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5, 0x0, 0x0, 0x41020000}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) 10.190958377s ago: executing program 4 (id=70): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000500)=0x1) sendmmsg(r2, 0x0, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x7ff, @private0, 0x6}, 0x20) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x6, @loopback, 0x7}, {0xa, 0x0, 0x4, @loopback}, 0x0, {[0x0, 0x6, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x10000]}}, 0x5c) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x1c2) 10.099854374s ago: executing program 3 (id=71): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2006c006f1d2c620b5f4898576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb7005033ac2dfc060115003901000000000000ea598deb2c001da5b190a67d03d30e66000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa964f3c63e5a1b47b63a6323ded241482c", 0xb8) 9.164281799s ago: executing program 3 (id=73): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000001800)=[{0x200, 0x2800, 0x4e, &(0x7f0000000180)="6a76c1b175920a71f6191f9737343e385b6d1ff480e12dd63c7ed3fa0f835bcc00bab83ec0ba50c32ab216d8fe44aa662fb97e72db483d1e5e62d03cb5ec22a28b6d388c5d70e05a8c58c38ab960"}, {0x8, 0x1011, 0x0, 0x0}], 0x2}) 8.458973503s ago: executing program 2 (id=75): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 8.295580986s ago: executing program 2 (id=76): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x400c0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000000)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xfb}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 7.958716125s ago: executing program 4 (id=78): r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x6, 0x6, @scatter={0x0, 0x0, 0x0}, &(0x7f00000001c0)="35b2ffdc39dc", 0x0, 0xffffffee, 0x14, 0x3, 0x0}) 7.916821207s ago: executing program 1 (id=79): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x356}, &(0x7f00000008c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x70a, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r5, &(0x7f0000003d40), 0x0, 0x40010020, 0x0) recvmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/88, 0x58}], 0x1}}], 0x1, 0x0, 0x0) 7.70426194s ago: executing program 4 (id=80): ptrace(0x4208, 0x0) r0 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x100}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902", @ANYRES16=r1], 0x0) r3 = inotify_init1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) symlink(0x0, &(0x7f0000000100)='./file0\x00') lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ppoll(&(0x7f0000000000)=[{r6, 0x200}], 0x1, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x0) 7.070842516s ago: executing program 3 (id=81): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaae480c200000286dd602a8435001406000000000000000000000000000000000000000000aa00001f"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 6.602394759s ago: executing program 1 (id=82): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 5.305550934s ago: executing program 1 (id=85): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x1000, 0x7f, 0xfffffd95, 0x4, 0xfca}, 0x14) 4.878583979s ago: executing program 0 (id=87): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x81, 0x2, 0x8, 0xff, 0x1, 0x39, 0x7, 0x4, 0x23, 0x1, 0x2, 0xb6, 0x40, 0x0, 0xa8, 0x1}}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x1, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x40, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 4.878288499s ago: executing program 1 (id=88): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000500)=0x1) sendmmsg(r2, 0x0, 0x0, 0x0) bind$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x7ff, @private0, 0x6}, 0x20) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x6, @loopback, 0x7}, {0xa, 0x0, 0x4, @loopback}, 0x0, {[0x0, 0x6, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x10000]}}, 0x5c) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x1c2) 4.644826584s ago: executing program 0 (id=89): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000580), 0x0, 0x4040040, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f00000001c0)) 4.642526666s ago: executing program 2 (id=90): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x1a3) write$ppp(r3, &(0x7f0000000040)="1d2e", 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="a00000441149338648e6244a4df7af628b39023e4e5dea2d312e7d142ee9e1f1e182d7042f47fb546194de434bc97f108e13c6f14c5ebaa7a6e488f29059e6e8d6", @ANYRES16=r4, @ANYBLOB="000227bd7000fedbdf25090000002c00028008000100010000000400040008000200ff7f00000800010070000000080002000000000004000400600006800800010007000000080001000100000004000200040005004300040067636d28616573290000000000000000000000000000000000000000000000001b000000f0ca26d4a0d9f829384a49f07908389fabc0bd55d08e97d0d7736c00"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x8004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x420242, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r8 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r9, &(0x7f0000000300)="5af9", 0x2) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 4.421103088s ago: executing program 3 (id=91): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@x25={0x805, {0x0, 0x8, 0xfb, "a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca453482522b4556c46525a96e82073a9b6b5f9dba7f68e1ecd9b71d2615886c26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626ddac800b260e2f6292f759b1c6d9"}}}}, &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x120) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r3) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 4.371895529s ago: executing program 4 (id=92): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x356}, &(0x7f00000008c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x70a, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r5, &(0x7f0000003d40), 0x0, 0x40010020, 0x0) recvmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/88, 0x58}], 0x1}}], 0x1, 0x0, 0x0) 4.1241349s ago: executing program 0 (id=93): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365cfe54a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0xfffe}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5, 0x0, 0x0, 0x41020000}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) 3.466786637s ago: executing program 0 (id=94): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) syz_open_dev$vim2m(0x0, 0x20003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) r3 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000002393ed9900030000004800018044000400200001000a000004000000020000000000000000000000000000000100000000200002000a00000000000000000000bb000000"], 0x5c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040800) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x80, 0xa, 0xf, 0xd, 0x0, 0xb021, 0x0}) socket(0x10, 0x803, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x0, 0xffffffff, 0xfa000, 0x1a5e00}) 3.05599657s ago: executing program 4 (id=95): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x28820}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x44801}, 0x48000) 2.565783327s ago: executing program 4 (id=96): ptrace(0x4208, 0x0) r0 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x100}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902", @ANYRES16=r1], 0x0) r3 = inotify_init1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) symlink(0x0, &(0x7f0000000100)='./file0\x00') lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 2.040814582s ago: executing program 1 (id=97): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 1.14460677s ago: executing program 2 (id=98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="18000000700001000000000000000000070000000804"], 0x18}}, 0x0) 409.685781ms ago: executing program 0 (id=99): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x81, 0x2, 0x8, 0xff, 0x1, 0x39, 0x7, 0x4, 0x23, 0x1, 0x2, 0xb6, 0x40, 0x0, 0xa8, 0x1}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x1, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x40, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 76.234975ms ago: executing program 0 (id=100): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x7bca, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x10800000, 0xbc}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x18101) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 0s ago: executing program 2 (id=101): socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x673119c074b3a761, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0xfa, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x6c2}}, {{{0x9, 0x5, 0x81, 0x3, 0x600, 0x0, 0xaa, 0x6}}}}}]}}]}}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. [ 79.202632][ T5824] cgroup: Unknown subsys name 'net' [ 79.359397][ T5824] cgroup: Unknown subsys name 'cpuset' [ 79.369027][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.089069][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.821028][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.828899][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.836737][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.845871][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.853646][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.858368][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.863783][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.875364][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.876996][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.884742][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.898293][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.906566][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.908539][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.914101][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.921771][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.928474][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.935936][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.944286][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.957793][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.967123][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.976064][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.986441][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.994757][ T5158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.003686][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.018322][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.786849][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 84.836218][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 84.849874][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 84.950242][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 85.039409][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 85.173655][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.181269][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.190926][ T5855] bridge_slave_0: entered allmulticast mode [ 85.198851][ T5855] bridge_slave_0: entered promiscuous mode [ 85.241006][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.248240][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.255671][ T5852] bridge_slave_0: entered allmulticast mode [ 85.262738][ T5852] bridge_slave_0: entered promiscuous mode [ 85.270943][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.278650][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.286533][ T5855] bridge_slave_1: entered allmulticast mode [ 85.293721][ T5855] bridge_slave_1: entered promiscuous mode [ 85.335482][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.342610][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.350623][ T5852] bridge_slave_1: entered allmulticast mode [ 85.358357][ T5852] bridge_slave_1: entered promiscuous mode [ 85.381064][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.388490][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.395840][ T5854] bridge_slave_0: entered allmulticast mode [ 85.402988][ T5854] bridge_slave_0: entered promiscuous mode [ 85.471807][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.479482][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.487626][ T5854] bridge_slave_1: entered allmulticast mode [ 85.495821][ T5854] bridge_slave_1: entered promiscuous mode [ 85.515112][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.522331][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.529787][ T5853] bridge_slave_0: entered allmulticast mode [ 85.537612][ T5853] bridge_slave_0: entered promiscuous mode [ 85.546606][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.553719][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.561249][ T5853] bridge_slave_1: entered allmulticast mode [ 85.569266][ T5853] bridge_slave_1: entered promiscuous mode [ 85.579640][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.592939][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.604951][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.684890][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.710196][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.717627][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.724791][ T5851] bridge_slave_0: entered allmulticast mode [ 85.732978][ T5851] bridge_slave_0: entered promiscuous mode [ 85.742773][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.781553][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.793518][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.801260][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.811143][ T5851] bridge_slave_1: entered allmulticast mode [ 85.818517][ T5851] bridge_slave_1: entered promiscuous mode [ 85.840926][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.865953][ T5852] team0: Port device team_slave_0 added [ 85.891165][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.917952][ T5852] team0: Port device team_slave_1 added [ 85.941394][ T5855] team0: Port device team_slave_0 added [ 85.951701][ T5855] team0: Port device team_slave_1 added [ 85.986763][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.999068][ T5854] team0: Port device team_slave_0 added [ 86.016060][ T5842] Bluetooth: hci0: command tx timeout [ 86.022252][ T5842] Bluetooth: hci1: command tx timeout [ 86.033416][ T5853] team0: Port device team_slave_0 added [ 86.043168][ T5853] team0: Port device team_slave_1 added [ 86.064013][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.089160][ T5854] team0: Port device team_slave_1 added [ 86.096282][ T5842] Bluetooth: hci2: command tx timeout [ 86.096651][ T5837] Bluetooth: hci4: command tx timeout [ 86.101772][ T5844] Bluetooth: hci3: command tx timeout [ 86.183586][ T5851] team0: Port device team_slave_0 added [ 86.191119][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.198222][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.224658][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.250874][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.260387][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.287266][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.314470][ T5851] team0: Port device team_slave_1 added [ 86.321185][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.328604][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.354691][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.373170][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.382604][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.409266][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.421388][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.428654][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.455011][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.468328][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.475549][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.501837][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.543766][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.551094][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.577611][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.597445][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.604420][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.631366][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.681634][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.688751][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.715205][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.733380][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.740437][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.767100][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.822242][ T5852] hsr_slave_0: entered promiscuous mode [ 86.833246][ T5852] hsr_slave_1: entered promiscuous mode [ 87.040694][ T5854] hsr_slave_0: entered promiscuous mode [ 87.048477][ T5854] hsr_slave_1: entered promiscuous mode [ 87.054903][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.069866][ T5854] Cannot create hsr debugfs directory [ 87.083123][ T5851] hsr_slave_0: entered promiscuous mode [ 87.091093][ T5851] hsr_slave_1: entered promiscuous mode [ 87.097621][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.105217][ T5851] Cannot create hsr debugfs directory [ 87.119274][ T5853] hsr_slave_0: entered promiscuous mode [ 87.126263][ T5853] hsr_slave_1: entered promiscuous mode [ 87.132785][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.140569][ T5853] Cannot create hsr debugfs directory [ 87.190320][ T5855] hsr_slave_0: entered promiscuous mode [ 87.198363][ T5855] hsr_slave_1: entered promiscuous mode [ 87.204803][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.221612][ T5855] Cannot create hsr debugfs directory [ 87.851011][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.877848][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.890363][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.911440][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.979606][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.993959][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.019508][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.030886][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.095609][ T5844] Bluetooth: hci0: command tx timeout [ 88.101098][ T5844] Bluetooth: hci1: command tx timeout [ 88.134500][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.172790][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.180193][ T5844] Bluetooth: hci4: command tx timeout [ 88.180243][ T5844] Bluetooth: hci2: command tx timeout [ 88.185391][ T5844] Bluetooth: hci3: command tx timeout [ 88.218667][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.232092][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.325676][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.343833][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.367712][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.383194][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.528584][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.549212][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.560783][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.574250][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.602767][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.663083][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.713774][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.721105][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.736566][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.776832][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.797917][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.805137][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.835163][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.842375][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.862440][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.916908][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.924022][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.020753][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.079110][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.103831][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.111003][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.193937][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.201186][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.218349][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.231882][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.259237][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.266395][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.277670][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.284924][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.324483][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.380917][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.394266][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.424013][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.431266][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.480247][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.487486][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.551271][ T5852] veth0_vlan: entered promiscuous mode [ 89.611795][ T5852] veth1_vlan: entered promiscuous mode [ 89.633843][ T5851] veth0_vlan: entered promiscuous mode [ 89.681970][ T5851] veth1_vlan: entered promiscuous mode [ 89.703108][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.784963][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.802322][ T5852] veth0_macvtap: entered promiscuous mode [ 89.826161][ T5852] veth1_macvtap: entered promiscuous mode [ 89.853139][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.905153][ T5851] veth0_macvtap: entered promiscuous mode [ 89.931742][ T5854] veth0_vlan: entered promiscuous mode [ 89.943501][ T5851] veth1_macvtap: entered promiscuous mode [ 89.958718][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.992969][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.009583][ T5854] veth1_vlan: entered promiscuous mode [ 90.031447][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.041045][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.050220][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.059346][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.115113][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.129689][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.151877][ T5853] veth0_vlan: entered promiscuous mode [ 90.175898][ T5844] Bluetooth: hci1: command tx timeout [ 90.176170][ T5837] Bluetooth: hci0: command tx timeout [ 90.193795][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.203201][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.212252][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.221590][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.255933][ T5837] Bluetooth: hci3: command tx timeout [ 90.256302][ T5844] Bluetooth: hci2: command tx timeout [ 90.261396][ T5837] Bluetooth: hci4: command tx timeout [ 90.276351][ T5853] veth1_vlan: entered promiscuous mode [ 90.335605][ T5854] veth0_macvtap: entered promiscuous mode [ 90.342591][ T5855] veth0_vlan: entered promiscuous mode [ 90.368384][ T5854] veth1_macvtap: entered promiscuous mode [ 90.375727][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.389200][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.460020][ T5855] veth1_vlan: entered promiscuous mode [ 90.477416][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.489192][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.499653][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.532063][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.549373][ T5854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.560008][ T5854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.570365][ T5854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.587595][ T5854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.649865][ T5853] veth0_macvtap: entered promiscuous mode [ 90.672377][ T5853] veth1_macvtap: entered promiscuous mode [ 90.675456][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.699153][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.729995][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.788118][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.818271][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.826858][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.827787][ T5855] veth0_macvtap: entered promiscuous mode [ 90.881972][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.893930][ T5855] veth1_macvtap: entered promiscuous mode [ 90.947091][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.947506][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.954947][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.982451][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.000772][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.009596][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.125089][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.183806][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.206490][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.225643][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.261203][ T5855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.284714][ T5855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.302475][ T5855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.311675][ T5855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.442587][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.476243][ T1211] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.479073][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.502467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.569002][ T5936] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.652918][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.662962][ T1211] usb 1-1: Using ep0 maxpacket: 8 [ 91.708348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.775547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 91.810879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.855622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 91.915694][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.922091][ T1211] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 91.933266][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.949843][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.959274][ T24] cfg80211: failed to load regulatory.db [ 91.985939][ T1211] usb 1-1: Product: syz [ 91.990527][ T1211] usb 1-1: Manufacturer: syz [ 92.005207][ T5936] bridge_slave_1: left allmulticast mode [ 92.011992][ T5936] bridge_slave_1: left promiscuous mode [ 92.022890][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.047739][ T1211] usb 1-1: SerialNumber: syz [ 92.052846][ T5936] bridge_slave_0: left allmulticast mode [ 92.059855][ T5936] bridge_slave_0: left promiscuous mode [ 92.068533][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.080547][ T1211] usb 1-1: config 0 descriptor?? [ 92.093648][ T1211] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 92.102228][ T1211] usb 1-1: setting power ON [ 92.107180][ T1211] dvb-usb: bulk message failed: -22 (2/0) [ 92.130026][ T1211] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.184260][ T1211] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 92.194620][ T1211] usb 1-1: media controller created [ 92.267300][ T5837] Bluetooth: hci0: command tx timeout [ 92.275583][ T5842] Bluetooth: hci1: command tx timeout [ 92.294453][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 92.300997][ T5932] cxusb: i2c wr: len=80 is too big! [ 92.300997][ T5932] [ 92.333698][ T1211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.342348][ T5842] Bluetooth: hci4: command tx timeout [ 92.346307][ T5842] Bluetooth: hci2: command tx timeout [ 92.349777][ T5837] Bluetooth: hci3: command tx timeout [ 92.362455][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.390856][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.403134][ T1211] usb 1-1: selecting invalid altsetting 6 [ 92.424949][ T1211] usb 1-1: digital interface selection failed (-22) [ 92.447038][ T1211] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 92.519661][ T1211] usb 1-1: setting power OFF [ 92.542567][ T1211] dvb-usb: bulk message failed: -22 (2/0) [ 92.576781][ T1211] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 92.605839][ T1211] (NULL device *): no alternate interface [ 92.634477][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.724385][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.770740][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 92.866640][ T1211] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 92.926894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.937954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.946562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.955995][ T1211] usb 1-1: USB disconnect, device number 2 [ 93.445685][ T1211] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 93.755689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 93.926077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.947153][ T1211] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.975521][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.043915][ T1211] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.076594][ T1211] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 94.110321][ T1211] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.144348][ T1211] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.171680][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.183796][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.202183][ T1211] usb 1-1: Product: syz [ 94.209191][ T5908] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 94.218488][ T1211] usb 1-1: Manufacturer: syz [ 94.224420][ T1211] usb 1-1: SerialNumber: syz [ 94.233363][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.258779][ T5953] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.262156][ T5908] usb 4-1: config 0 descriptor?? [ 94.487946][ T5908] usbhid 4-1:0.0: can't add hid device: -71 [ 94.527720][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 94.556201][ T5908] usb 4-1: USB disconnect, device number 2 [ 94.725648][ T1211] cdc_ncm 1-1:1.0: bind() failure [ 94.770879][ T1211] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 94.813537][ T1211] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 94.847283][ T1211] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 94.857399][ T5964] Zero length message leads to an empty skb [ 94.932561][ T1211] usb 1-1: USB disconnect, device number 3 [ 95.065388][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.166096][ T5937] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.237411][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.268706][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 95.292697][ T5908] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.342655][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.346804][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 95.379266][ T5973] netlink: 'syz.4.12': attribute type 10 has an invalid length. [ 95.395057][ T5937] usb 2-1: config 0 has no interfaces? [ 95.399683][ T5973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12'. [ 95.411673][ T5908] usb 4-1: config 0 descriptor?? [ 95.517198][ T5937] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 95.526471][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.534646][ T5937] usb 2-1: Product: syz [ 95.539718][ T5937] usb 2-1: Manufacturer: syz [ 95.544866][ T5937] usb 2-1: SerialNumber: syz [ 95.561755][ T5937] usb 2-1: config 0 descriptor?? [ 95.692611][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 95.794309][ T5973] team0: Port device geneve0 added [ 96.290889][ T5908] usbhid 4-1:0.0: can't add hid device: -71 [ 96.309103][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 96.351534][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.434849][ T5908] usb 4-1: USB disconnect, device number 3 [ 96.553033][ T10] usb 3-1: config 0 has no interfaces? [ 96.570782][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 96.580279][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.659891][ T10] usb 3-1: Product: syz [ 96.666423][ T10] usb 3-1: Manufacturer: syz [ 96.671169][ T10] usb 3-1: SerialNumber: syz [ 96.762492][ T5990] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17'. [ 96.866475][ T10] usb 3-1: config 0 descriptor?? [ 98.630821][ T10] usb 2-1: USB disconnect, device number 2 [ 99.227109][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 99.236259][ T6013] bridge_slave_1: left allmulticast mode [ 99.242719][ T6013] bridge_slave_1: left promiscuous mode [ 99.249265][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.327609][ T6013] bridge_slave_0: left allmulticast mode [ 99.333471][ T6013] bridge_slave_0: left promiscuous mode [ 99.345063][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.513498][ T6018] process 'syz.4.26' launched './file0' with NULL argv: empty string added [ 100.560923][ T6024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.37'. [ 100.655746][ T10] usb 3-1: USB disconnect, device number 2 [ 101.625724][ T5835] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.830327][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.865580][ T5835] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 101.885580][ T5908] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.954647][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.036755][ T5835] usb 3-1: config 0 descriptor?? [ 102.061275][ T5908] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 102.094582][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.259832][ T5937] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.286833][ T5835] usbhid 3-1:0.0: can't add hid device: -71 [ 102.292896][ T5835] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 102.314925][ T5835] usb 3-1: USB disconnect, device number 3 [ 102.401166][ T5908] usb 2-1: config 0 descriptor?? [ 102.501092][ T5908] gspca_main: spca508-2.14.0 probing 8086:0110 [ 102.673152][ T5937] usb 1-1: config 0 has no interfaces? [ 102.742994][ T6033] loop8: detected capacity change from 0 to 8 [ 102.896449][ T6033] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 102.912905][ T6033] loop8: p1 start 669833711 is beyond EOD, truncated [ 102.923887][ T6033] loop8: p2 start 422213120 is beyond EOD, truncated [ 102.931016][ T5835] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.998778][ T6033] loop8: p3 start 3833721018 is beyond EOD, truncated [ 103.062257][ T5937] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 103.082511][ T5908] gspca_spca508: reg_read err -110 [ 103.093903][ T5908] gspca_spca508: reg_read err -32 [ 103.100457][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.109457][ T5908] gspca_spca508: reg_read err -32 [ 103.127801][ T6033] loop8: p4 start 1945720663 is beyond EOD, truncated [ 103.135600][ T5908] gspca_spca508: reg_read err -32 [ 103.143723][ T5937] usb 1-1: Product: syz [ 103.155110][ T5908] gspca_spca508: reg_read err -32 [ 103.197185][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.214516][ T6033] loop8: p5 start 3662658880 is beyond EOD, truncated [ 103.232031][ T5937] usb 1-1: Manufacturer: syz [ 103.234793][ T5835] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.237879][ T5908] gspca_spca508: reg write: error -32 [ 103.289216][ T5937] usb 1-1: SerialNumber: syz [ 103.303571][ T5937] usb 1-1: config 0 descriptor?? [ 103.319117][ T5908] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 103.327998][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.337645][ T6033] loop8: p6 start 514366226 is beyond EOD, truncated [ 103.356681][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.422702][ T6033] loop8: p7 start 4087642507 is beyond EOD, truncated [ 103.436653][ T5835] usb 3-1: config 0 descriptor?? [ 103.462788][ T6033] loop8: p8 start 963101659 is beyond EOD, truncated [ 103.587091][ T6033] loop8: p9 start 3468131593 is beyond EOD, truncated [ 103.614109][ T6033] loop8: p10 start 2597257774 is beyond EOD, truncated [ 103.679413][ T6033] loop8: p11 start 3140533928 is beyond EOD, truncated [ 103.686861][ T6033] loop8: p12 start 3028492062 is beyond EOD, truncated [ 103.750348][ T10] usb 4-1: config 0 has no interfaces? [ 103.769378][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 103.833320][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.885209][ T6039] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.935431][ T10] usb 4-1: Product: syz [ 104.125297][ T10] usb 4-1: Manufacturer: syz [ 104.143050][ T10] usb 4-1: SerialNumber: syz [ 104.168042][ T10] usb 4-1: config 0 descriptor?? [ 104.252231][ T6048] netlink: 'syz.0.32': attribute type 21 has an invalid length. [ 104.260362][ T6048] netlink: 128 bytes leftover after parsing attributes in process `syz.0.32'. [ 104.273491][ T6048] netlink: 'syz.0.32': attribute type 4 has an invalid length. [ 104.281592][ T6048] netlink: 'syz.0.32': attribute type 3 has an invalid length. [ 104.289658][ T6048] netlink: 3 bytes leftover after parsing attributes in process `syz.0.32'. [ 104.385692][ T5835] usbhid 3-1:0.0: can't add hid device: -71 [ 104.524578][ T5835] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 104.687402][ T5835] usb 3-1: USB disconnect, device number 4 [ 105.198382][ T5908] usb 2-1: USB disconnect, device number 3 [ 105.936455][ T5926] usb 4-1: USB disconnect, device number 4 [ 106.473548][ T5908] usb 1-1: USB disconnect, device number 4 [ 110.185704][ T6095] syz.3.52 uses obsolete (PF_INET,SOCK_PACKET) [ 110.347136][ T5835] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.725376][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 111.315450][ T5926] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.647210][ T5926] usb 5-1: config 0 has no interfaces? [ 111.667596][ T5926] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 111.693502][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.733744][ T5926] usb 5-1: Product: syz [ 111.754840][ T5926] usb 5-1: Manufacturer: syz [ 111.764082][ T5926] usb 5-1: SerialNumber: syz [ 111.797230][ T5926] usb 5-1: config 0 descriptor?? [ 111.965524][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.155560][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 112.296926][ T10] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 112.306768][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.525872][ T10] usb 4-1: Product: syz [ 112.563883][ T10] usb 4-1: Manufacturer: syz [ 112.572475][ T10] usb 4-1: SerialNumber: syz [ 112.624424][ T10] usb 4-1: config 0 descriptor?? [ 112.666551][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 112.806914][ T10] usb 4-1: setting power ON [ 112.932394][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 112.983314][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.137347][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 113.140869][ T5835] usb 3-1: unable to get BOS descriptor or descriptor too short [ 113.146130][ T10] usb 4-1: media controller created [ 113.180219][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.181555][ T5835] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 113.248910][ T5835] usb 3-1: can't read configurations, error -71 [ 113.321539][ T10] usb 4-1: selecting invalid altsetting 6 [ 113.365451][ T10] usb 4-1: digital interface selection failed (-22) [ 113.375355][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 113.421803][ T10] usb 4-1: setting power OFF [ 113.451856][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 113.550855][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 113.683323][ T10] (NULL device *): no alternate interface [ 113.925415][ T5835] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.972201][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 114.186170][ T10] usb 4-1: USB disconnect, device number 5 [ 114.310473][ T5835] usb 3-1: config 0 has no interfaces? [ 114.346791][ T5835] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 114.396139][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.426971][ T5835] usb 3-1: Product: syz [ 114.444889][ T5835] usb 3-1: Manufacturer: syz [ 114.475201][ T5835] usb 3-1: SerialNumber: syz [ 114.893609][ T5835] usb 3-1: config 0 descriptor?? [ 114.987825][ T30] audit: type=1326 audit(1749341901.109:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 115.125861][ T1211] usb 5-1: USB disconnect, device number 2 [ 115.355312][ T30] audit: type=1326 audit(1749341901.109:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 115.647251][ T30] audit: type=1326 audit(1749341901.109:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 115.676457][ T30] audit: type=1326 audit(1749341901.119:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 115.724035][ T30] audit: type=1326 audit(1749341901.119:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 115.798378][ T30] audit: type=1326 audit(1749341901.119:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 115.820656][ T30] audit: type=1326 audit(1749341901.119:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 115.843400][ T30] audit: type=1326 audit(1749341901.119:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 115.957236][ T30] audit: type=1326 audit(1749341901.119:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 116.129785][ T30] audit: type=1326 audit(1749341901.119:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 116.999055][ T5908] usb 3-1: USB disconnect, device number 6 [ 117.075392][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.266313][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 117.342746][ T10] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 117.352923][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.361810][ T10] usb 4-1: Product: syz [ 117.366280][ T10] usb 4-1: Manufacturer: syz [ 117.370907][ T10] usb 4-1: SerialNumber: syz [ 117.388774][ T10] usb 4-1: config 0 descriptor?? [ 117.414010][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 117.429427][ T10] usb 4-1: setting power ON [ 117.434157][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 117.452720][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.476038][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 117.595348][ T10] usb 4-1: media controller created [ 117.619209][ T6152] dvb-usb: bulk message failed: -22 (3/0) [ 117.646449][ T6152] cxusb: i2c wr: len=80 is too big! [ 117.646449][ T6152] [ 117.763019][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.857694][ T10] usb 4-1: selecting invalid altsetting 6 [ 117.865420][ T5926] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.938805][ T10] usb 4-1: digital interface selection failed (-22) [ 117.945857][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 118.067887][ T10] usb 4-1: setting power OFF [ 118.073351][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 118.093958][ T5926] usb 3-1: config 0 has no interfaces? [ 118.156809][ T5926] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 118.233034][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.241494][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 118.255000][ T10] (NULL device *): no alternate interface [ 118.335367][ T1211] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.336887][ T5926] usb 3-1: Product: syz [ 118.376349][ T5926] usb 3-1: Manufacturer: syz [ 118.381012][ T5926] usb 3-1: SerialNumber: syz [ 118.389801][ T5926] usb 3-1: config 0 descriptor?? [ 118.504294][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 118.542970][ T10] usb 4-1: USB disconnect, device number 6 [ 118.580016][ T1211] usb 5-1: config 0 has no interfaces? [ 118.618501][ T1211] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 118.629541][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.639901][ T1211] usb 5-1: Product: syz [ 118.644145][ T1211] usb 5-1: Manufacturer: syz [ 118.668903][ T1211] usb 5-1: SerialNumber: syz [ 118.681353][ T1211] usb 5-1: config 0 descriptor?? [ 118.811653][ T6162] netlink: 'syz.2.76': attribute type 21 has an invalid length. [ 118.822440][ T6162] netlink: 128 bytes leftover after parsing attributes in process `syz.2.76'. [ 118.832139][ T6162] netlink: 'syz.2.76': attribute type 4 has an invalid length. [ 118.839566][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 118.848543][ T6162] netlink: 'syz.2.76': attribute type 3 has an invalid length. [ 118.848580][ T6162] netlink: 3 bytes leftover after parsing attributes in process `syz.2.76'. [ 119.015095][ T6176] netlink: 190 bytes leftover after parsing attributes in process `syz.3.81'. [ 119.149181][ T6180] loop8: detected capacity change from 0 to 16384 [ 119.464819][ T6183] netlink: 3 bytes leftover after parsing attributes in process `syz.1.82'. [ 119.586637][ T6183] 0ªX¹¦À: renamed from caif0 [ 119.645555][ T6181] loop8: detected capacity change from 16384 to 0 [ 119.731941][ T6183] 0ªX¹¦À: entered allmulticast mode [ 119.740494][ T6183] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 119.766170][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.917638][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 119.925120][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.934131][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 119.947051][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.957517][ T10] usb 4-1: Product: syz [ 119.973142][ T10] usb 4-1: Manufacturer: syz [ 119.984250][ T10] usb 4-1: SerialNumber: syz [ 120.007224][ T10] usb 4-1: config 0 descriptor?? [ 120.048188][ T10] gs_usb 4-1:0.0: Required endpoints not found [ 120.316771][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.329610][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.412591][ T10] usb 4-1: USB disconnect, device number 7 [ 120.818156][ T10] usb 3-1: USB disconnect, device number 7 [ 121.100967][ T5937] usb 5-1: USB disconnect, device number 3 [ 122.288680][ T6223] overlayfs: missing 'lowerdir' [ 122.553339][ T6225] sit0: entered promiscuous mode [ 122.564357][ T6225] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 122.572427][ T6225] netlink: 1 bytes leftover after parsing attributes in process `syz.3.91'. [ 122.642058][ T6230] CIFS: VFS: Malformed UNC in devname [ 123.955402][ T5928] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.184857][ T5928] usb 5-1: config 0 has no interfaces? [ 124.207843][ T5928] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 124.217248][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.237575][ T5928] usb 5-1: Product: syz [ 124.241777][ T5928] usb 5-1: Manufacturer: syz [ 124.307983][ T5928] usb 5-1: SerialNumber: syz [ 124.339137][ T5928] usb 5-1: config 0 descriptor?? [ 124.512552][ T6249] netlink: 3 bytes leftover after parsing attributes in process `syz.2.98'. [ 125.197871][ T6249] 0ªX¹¦À: renamed from caif0 [ 125.206215][ T5960] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.237862][ T6249] 0ªX¹¦À: entered allmulticast mode [ 125.243279][ T6249] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 125.436730][ T5960] usb 2-1: config 0 has no interfaces? [ 125.452025][ T5960] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 125.480419][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.514082][ T5960] usb 2-1: Product: syz [ 125.535000][ T5960] usb 2-1: Manufacturer: syz [ 125.549565][ T5960] usb 2-1: SerialNumber: syz [ 125.575176][ T5960] usb 2-1: config 0 descriptor?? [ 125.814507][ T6224] ------------[ cut here ]------------ [ 125.820244][ T6224] WARNING: CPU: 0 PID: 6224 at kernel/kcov.c:872 kcov_remote_start+0x55a/0x7f0 [ 125.829203][ T6224] Modules linked in: [ 125.833403][ T6224] CPU: 0 UID: 0 PID: 6224 Comm: syz.3.91 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 125.844871][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.854930][ T6224] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 125.860667][ T6224] Code: ff 4c 89 ff be 03 00 00 00 e8 b2 ca 00 03 e9 eb fa ff ff e8 98 8e a5 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 4e a7 a5 09 89 c0 48 c7 c7 68 67 9d 92 48 03 3c c5 60 [ 125.880376][ T6224] RSP: 0018:ffffc9001b6f7290 EFLAGS: 00010002 [ 125.886470][ T6224] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 125.894442][ T6224] RDX: 0000000000030000 RSI: ffffffff8db6e2e9 RDI: ffffffff8be28200 [ 125.902410][ T6224] RBP: ffffc9001b6f74f0 R08: ffffc9001b6f7010 R09: 0000000000000020 [ 125.910386][ T6224] R10: dffffc0000000000 R11: ffffffff819ea610 R12: ffff8880b8628768 [ 125.918357][ T6224] R13: ffffffff81c065c7 R14: ffff8880315c3c00 R15: 0000000000000000 [ 125.926345][ T6224] FS: 0000000000000000(0000) GS:ffff888125c52000(0063) knlGS:00000000f50d4b40 [ 125.935276][ T6224] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 125.942041][ T6224] CR2: 0000000080000280 CR3: 0000000078420000 CR4: 00000000003526f0 [ 125.950011][ T6224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.957977][ T6224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 125.965942][ T6224] Call Trace: [ 125.969228][ T6224] [ 125.972156][ T6224] ieee80211_rx_list+0x53a/0x2d80 [ 125.977189][ T6224] ? __d_instantiate+0x197/0x740 [ 125.982125][ T6224] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 125.987599][ T6224] ? __lock_acquire+0xab9/0xd20 [ 125.992449][ T6224] ? ieee80211_rx_napi+0xca/0x3d0 [ 125.997473][ T6224] ? ieee80211_rx_napi+0xca/0x3d0 [ 126.002512][ T6224] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 126.008408][ T6224] ? ieee80211_rx_napi+0xca/0x3d0 [ 126.013431][ T6224] ieee80211_rx_napi+0x1a8/0x3d0 [ 126.018375][ T6224] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 126.023840][ T6224] ? skb_dequeue+0x10e/0x150 [ 126.028428][ T6224] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 126.034413][ T6224] ? ieee80211_stop_device+0x29/0xf0 [ 126.039693][ T6224] ieee80211_stop_device+0x3e/0xf0 [ 126.044802][ T6224] ieee80211_do_stop+0x17dd/0x1fa0 [ 126.049915][ T6224] ? __lock_acquire+0xab9/0xd20 [ 126.054781][ T6224] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.060148][ T6224] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 126.065607][ T6224] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 126.071501][ T6224] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.076786][ T6224] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 126.083113][ T6224] ? wiphy_work_cancel+0x1eb/0x3c0 [ 126.088221][ T6224] ieee80211_stop+0x1b1/0x220 [ 126.092897][ T6224] ? __pfx_ieee80211_stop+0x10/0x10 [ 126.098106][ T6224] __dev_close_many+0x364/0x6f0 [ 126.102960][ T6224] ? __pfx___dev_close_many+0x10/0x10 [ 126.108430][ T6224] ? __mutex_trylock_common+0x153/0x260 [ 126.113975][ T6224] dev_close_many+0x225/0x410 [ 126.118650][ T6224] ? __pfx_dev_close_many+0x10/0x10 [ 126.123856][ T6224] ? __mutex_lock+0x330/0xe80 [ 126.128539][ T6224] netif_close+0x158/0x210 [ 126.132948][ T6224] ? __pfx_netif_close+0x10/0x10 [ 126.137903][ T6224] ? __pfx___mutex_lock+0x10/0x10 [ 126.142944][ T6224] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 126.148837][ T6224] dev_close+0x10a/0x220 [ 126.153076][ T6224] cfg80211_shutdown_all_interfaces+0xbb/0x1d0 [ 126.159260][ T6224] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 126.165496][ T6224] cfg80211_rfkill_set_block+0x2d/0x50 [ 126.170950][ T6224] rfkill_set_block+0x1cf/0x440 [ 126.175803][ T6224] rfkill_fop_write+0x44b/0x570 [ 126.180646][ T6224] ? common_file_perm+0x199/0x200 [ 126.185677][ T6224] ? __pfx_rfkill_fop_write+0x10/0x10 [ 126.191041][ T6224] ? security_file_permission+0x20/0x290 [ 126.196670][ T6224] ? rw_verify_area+0x258/0x650 [ 126.201511][ T6224] ? __pfx_rfkill_fop_write+0x10/0x10 [ 126.206896][ T6224] vfs_write+0x27b/0xa90 [ 126.211136][ T6224] ? __pfx_vfs_write+0x10/0x10 [ 126.215904][ T6224] ? __fget_files+0x2a/0x420 [ 126.220488][ T6224] ? __fget_files+0x2a/0x420 [ 126.225074][ T6224] ? __fget_files+0x3a0/0x420 [ 126.229743][ T6224] ? __fget_files+0x2a/0x420 [ 126.234343][ T6224] ksys_write+0x145/0x250 [ 126.238669][ T6224] ? __pfx_ksys_write+0x10/0x10 [ 126.243514][ T6224] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 126.250109][ T6224] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.255317][ T6224] __do_fast_syscall_32+0xb6/0x2b0 [ 126.260438][ T6224] do_fast_syscall_32+0x34/0x80 [ 126.265285][ T6224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.271691][ T6224] RIP: 0023:0xf7ff4539 [ 126.275756][ T6224] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 126.295374][ T6224] RSP: 002b:00000000f50d455c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 126.303808][ T6224] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 126.311776][ T6224] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.319743][ T6224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.327707][ T6224] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 126.335671][ T6224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.343647][ T6224] [ 126.346662][ T6224] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.353934][ T6224] CPU: 0 UID: 0 PID: 6224 Comm: syz.3.91 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 126.365408][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.375460][ T6224] Call Trace: [ 126.378736][ T6224] [ 126.381662][ T6224] dump_stack_lvl+0x99/0x250 [ 126.386276][ T6224] ? __asan_memcpy+0x40/0x70 [ 126.390892][ T6224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.396100][ T6224] ? __pfx__printk+0x10/0x10 [ 126.400695][ T6224] panic+0x2db/0x790 [ 126.404592][ T6224] ? __pfx_panic+0x10/0x10 [ 126.409021][ T6224] __warn+0x31b/0x4b0 [ 126.412999][ T6224] ? kcov_remote_start+0x55a/0x7f0 [ 126.418108][ T6224] ? kcov_remote_start+0x55a/0x7f0 [ 126.423217][ T6224] report_bug+0x2be/0x4f0 [ 126.427895][ T6224] ? kcov_remote_start+0x55a/0x7f0 [ 126.433011][ T6224] ? kcov_remote_start+0x55a/0x7f0 [ 126.438117][ T6224] ? kcov_remote_start+0x55c/0x7f0 [ 126.443236][ T6224] handle_bug+0x84/0x160 [ 126.447498][ T6224] exc_invalid_op+0x1a/0x50 [ 126.452022][ T6224] asm_exc_invalid_op+0x1a/0x20 [ 126.456881][ T6224] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 126.462632][ T6224] Code: ff 4c 89 ff be 03 00 00 00 e8 b2 ca 00 03 e9 eb fa ff ff e8 98 8e a5 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 4e a7 a5 09 89 c0 48 c7 c7 68 67 9d 92 48 03 3c c5 60 [ 126.482329][ T6224] RSP: 0018:ffffc9001b6f7290 EFLAGS: 00010002 [ 126.488404][ T6224] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 126.496384][ T6224] RDX: 0000000000030000 RSI: ffffffff8db6e2e9 RDI: ffffffff8be28200 [ 126.504373][ T6224] RBP: ffffc9001b6f74f0 R08: ffffc9001b6f7010 R09: 0000000000000020 [ 126.512343][ T6224] R10: dffffc0000000000 R11: ffffffff819ea610 R12: ffff8880b8628768 [ 126.520326][ T6224] R13: ffffffff81c065c7 R14: ffff8880315c3c00 R15: 0000000000000000 [ 126.528299][ T6224] ? kcov_remote_start+0x97/0x7f0 [ 126.533323][ T6224] ? __pfx_hlock_conflict+0x10/0x10 [ 126.538526][ T6224] ieee80211_rx_list+0x53a/0x2d80 [ 126.543555][ T6224] ? __d_instantiate+0x197/0x740 [ 126.548493][ T6224] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 126.553983][ T6224] ? __lock_acquire+0xab9/0xd20 [ 126.558865][ T6224] ? ieee80211_rx_napi+0xca/0x3d0 [ 126.563905][ T6224] ? ieee80211_rx_napi+0xca/0x3d0 [ 126.568935][ T6224] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 126.574830][ T6224] ? ieee80211_rx_napi+0xca/0x3d0 [ 126.579881][ T6224] ieee80211_rx_napi+0x1a8/0x3d0 [ 126.584819][ T6224] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 126.590305][ T6224] ? skb_dequeue+0x10e/0x150 [ 126.594904][ T6224] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 126.600886][ T6224] ? ieee80211_stop_device+0x29/0xf0 [ 126.606171][ T6224] ieee80211_stop_device+0x3e/0xf0 [ 126.611283][ T6224] ieee80211_do_stop+0x17dd/0x1fa0 [ 126.616399][ T6224] ? __lock_acquire+0xab9/0xd20 [ 126.621261][ T6224] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.626628][ T6224] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 126.632089][ T6224] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 126.638114][ T6224] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.643342][ T6224] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 126.649831][ T6224] ? wiphy_work_cancel+0x1eb/0x3c0 [ 126.654989][ T6224] ieee80211_stop+0x1b1/0x220 [ 126.659677][ T6224] ? __pfx_ieee80211_stop+0x10/0x10 [ 126.664878][ T6224] __dev_close_many+0x364/0x6f0 [ 126.669757][ T6224] ? __pfx___dev_close_many+0x10/0x10 [ 126.675143][ T6224] ? __mutex_trylock_common+0x153/0x260 [ 126.680697][ T6224] dev_close_many+0x225/0x410 [ 126.685375][ T6224] ? __pfx_dev_close_many+0x10/0x10 [ 126.690588][ T6224] ? __mutex_lock+0x330/0xe80 [ 126.695277][ T6224] netif_close+0x158/0x210 [ 126.699693][ T6224] ? __pfx_netif_close+0x10/0x10 [ 126.704628][ T6224] ? __pfx___mutex_lock+0x10/0x10 [ 126.709648][ T6224] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 126.715552][ T6224] dev_close+0x10a/0x220 [ 126.719795][ T6224] cfg80211_shutdown_all_interfaces+0xbb/0x1d0 [ 126.725948][ T6224] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 126.732102][ T6224] cfg80211_rfkill_set_block+0x2d/0x50 [ 126.737575][ T6224] rfkill_set_block+0x1cf/0x440 [ 126.742446][ T6224] rfkill_fop_write+0x44b/0x570 [ 126.747309][ T6224] ? common_file_perm+0x199/0x200 [ 126.752340][ T6224] ? __pfx_rfkill_fop_write+0x10/0x10 [ 126.757708][ T6224] ? security_file_permission+0x20/0x290 [ 126.763340][ T6224] ? rw_verify_area+0x258/0x650 [ 126.768203][ T6224] ? __pfx_rfkill_fop_write+0x10/0x10 [ 126.773574][ T6224] vfs_write+0x27b/0xa90 [ 126.777839][ T6224] ? __pfx_vfs_write+0x10/0x10 [ 126.782605][ T6224] ? __fget_files+0x2a/0x420 [ 126.787228][ T6224] ? __fget_files+0x2a/0x420 [ 126.791846][ T6224] ? __fget_files+0x3a0/0x420 [ 126.796551][ T6224] ? __fget_files+0x2a/0x420 [ 126.801146][ T6224] ksys_write+0x145/0x250 [ 126.805480][ T6224] ? __pfx_ksys_write+0x10/0x10 [ 126.810329][ T6224] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 126.816933][ T6224] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.822147][ T6224] __do_fast_syscall_32+0xb6/0x2b0 [ 126.827261][ T6224] do_fast_syscall_32+0x34/0x80 [ 126.832109][ T6224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.838510][ T6224] RIP: 0023:0xf7ff4539 [ 126.842602][ T6224] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 126.862267][ T6224] RSP: 002b:00000000f50d455c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 126.870713][ T6224] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 126.878700][ T6224] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.886681][ T6224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.894664][ T6224] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 126.902634][ T6224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.910610][ T6224] [ 126.913926][ T6224] Kernel Offset: disabled [ 126.918256][ T6224] Rebooting in 86400 seconds..