last executing test programs: 19m0.794639506s ago: executing program 0 (id=13): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg(r1, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 19m0.550263774s ago: executing program 0 (id=15): r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000017c0)='\b?\xb4\x1bZ\x89ug\xf8=\x1e\xe3\xca\x0e2\xc1\x83\x90\xea\xa3Dt\xc0.\xfa\x9b\xda\xfe\x8f\xd9\xb5n\x7f\xcf\xfd\v\xed\x1e1\xf6\xee\x88\xe9\xc3\xeb\xc4G\xd5\xed\xf9\xdfE-\xd4\xfb\"\xe8\xf3fh\xc7\x8f\x14!%T\xe1\xea\xc9\xa0\xe4\x11\xce\xb0\xe5\xba\xf8\x95\xaf8\xec\x99Y\xaf\x8cP\xd19)-\xbcN5\\\xfe\\\xbb\x96\xd6\xcf\xb0\x96\xb5x\xa6\x98', &(0x7f0000000180)='mjY\xc9p1\xc1k\xefW\x87\x1c\'\xf8<\xc9\x16\x03m\x06\x99\xec\x97\xc3{\xee\xc1\xfb\x8f\xbc\xa6\xc0\xa9\xd1\xa5\xb5\xb6\x99{\x82\x8f\xb8\xeew\xd0\xb3\xe1Q\xdf\x19\xfd\xdeKS\xf3\x12m\xab@Y\x86Q\x99\xd4\b\x7fK\xd48\a?r\xd8\xc4\x11\x9c\x98jj\xd8 1\xb1\\\xc8{>1Q\xb5!@dRN\xab\x8b\xf0\xf6\f;+!s\xf5\xbf\xd7\x82\x89\xde3~\xf6\xff\x03&\xb1R\xcd\xc1\xbd\xf7~5\x05\x86tfG\xb6\x15\xd5\x03\tM\xee\x90\xac\x94Y!\x8fK0\xa2\xf2\xabXl\x97\xf7l\x94~\xa5\xa8\xda', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mlock(&(0x7f000058f000/0x4000)=nil, 0x4000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) lseek(r0, 0xff, 0x0) getdents64(r0, 0xffffffffffffffff, 0x18) 18m58.840886841s ago: executing program 0 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 18m52.50859021s ago: executing program 0 (id=23): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)='l3', 0x2}], 0x1}], 0x1, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0xd) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="0702000000000000000001000000040008803400048005000300010000000e0003000100000005000300010000000500030000000000050003000000000005000300070000000800010003000000"], 0x5c}}, 0x0) clock_gettime(0x1, &(0x7f0000000000)) syz_clone(0x100, &(0x7f0000000040)="72339a8cbcd434e4864ab5aee0c34e820416c76405c6316445d14b6145c6b607b1901983eb4f27c27059fa535101593d2742c8a0f246a812aa6d1b9605f7398c6b3352f3a3833d08e34f4b58397bb89047daef74c406c4519dc8b880f4ed9e2c1c7e4a4b70e86a812d6bee98258d833e26271710f56306c67d3648f2cad66e28bcb6e6c0882923ea589dbf23fca39d781beeb767f9f8bcd95d7d12b2b3ef0432c80772d1e8617cb8b4757714843b12a13090885e659a58ef252d65e2c36a6e23c717e0d154864a6e1de79fea34b5c90148a48b7f24ffdd98045a19a7449fd0f263559baa08786fdf0503b154d5a8e33d2e46b8b89c7effa1d6d0182a4c0d5e59de51d5fec389fb73c18b382bef815e2a94fbce62d83f58400ccbdab1ad8ba8f1997962d9bd06acdbea24d1af25f3b1ffa2f7549265158eb8a714e7f640b48eed03d40028259144eb3a9b4771f58ad5d016b1cfb952f17bd19f2bca7b5f208ef4e9de6a62a34050f0f418a26b7a6cc324f73e22c513ef5fb20651c6434e6db4084a8c7b3ac0aae3b6cc00aaa36443621cc22e69c2256620b0150fcdffb338bdd4c6ebb50de96607612cc367dab83b4af625e4df971102abc24303801026db9f68011d8ff7d86d02675e7c134cfea71bacb3724dd85a88abeb8c24ce85e95a51f4740995720e18c778d99b3b41f6d25efaf33672aa4f986e24cc15cfe8775bda3690d2d6ddbc560da17bff31fe2dcb20c8e34598d3131e4a53ed21da0030eeadeb702f98ec7a627734be49b83e8498e89fc809fe2c3f08808dcbe46cc96511eecc9324852e49a3a651a43f2a3b1fa617c08d12f9b84dd08e7743fb9c0629b5134703b03d8b8e87d5011b55d9ab3eada2930bb0437028d4a596c13f7ae832307475b410c10e153ab1cf0c00a41844a7aadc4b132d6e8069bc8e23e896b09b9ecfce4f14220d46626f04ff6067067b6cc805aeb6607913aeb8a52ae4435cc7566867756f2f507f7c83d82d329ca69da919c58f192d845ade347f9da66fdd236ccfd7639932d5017e7204884b47ca2886d36ce32b708e6acbf224f5ec4eef31fa04260266075b0ccb502299432a532489fc0ac719303c77144533cee0e1f4699cefe8dfc416ed595d8c673b8c0b0fb6faf0f590fcafbcec58fa7c8ed7f1fcdd548a4bf563b406a4afe886907d394172494f1c124cdd21ac49447c22bc6977497d00f6126311bc4149434f027c278b8887e0a842d21316cae6c7e2cdf5068736e69f3b0c6e8a0077d4b090ba92ee9fdbe330166d09a32623a4f259e4f3f7e5ccd295aeb04c3c5200c554f7296a5a8b3a706ee5801ecd75fec1330e2fc9dbc7260961b1e3191803b9639eacbecd50bdc98b7a5fa598354340df2f8a2af475ea1352b164520b53ee2e3e9501804749d42086899206cd5c573c222e8713564bfb03e55b9a5898385af5722d1ee75dc6062a7cf1290be2fd195db78d94261a54502ec3f1fe27561009a97a7ca3b0e12ddf9b8548a35a2d9c71750549188b0911f56a07ee64ff256ebdd4b3d1d417ca19e7cf3b4e7e82680e039f12d3b49c5f65b09d4c80dfeee9299978baeac07b53bb97436946e43cab3624db8c9d3170dd7d5879367250d8dbbe8e78421b862b85338a201e8667450a9ac908f7627b74275c54b1c9b0c33bf238edc9c9f697980e2f168ce49322c0aa0489238e3d97f2c67183414eb77296bdaa5cfdd3c34e6309741a74c99d6c62268a41d85ef960eb38b583ee3d012f7066a64b7ef2af3b8bce0cba92be2ffd787f79d457ebcdb8e916f7e472f054d8a629daa2baab262de87b5cc767cceb0950b8114c08ae1857032bb98e5c93e367993a327d95e18fbbc6c2c0f2fa4889811755da6ae8defa194920bf504c6b5cac3d8d039ef0e70ad264d3d3397b3d74d19070b4d989c7d7c6c065b94ae1d36250e489c31aceef356cf8c6b28939995647f81f25a1aebdeeb9a15d482533335226a85298908267f3d8bd7ced3352692c034d8797aae673beaa5e1c8211deab6a7bcafa113e79f07ef2f9ae69ce9d00e5c3101814e4360e461854018678948cdaa685d26746d367de40141951f90b21f6fa44a9d47542c4b691446a91ab001305aadaed27011688efb4f3dad890661f546e39148dc9ef714b932f82b3d98c276cdf49b4d27a9aabe2f72343a23255e1d5d4f7749ed864edba56f7c44283d0c87ecf2368bccbafa75ad72553e9821ad7f388ffcf7d735cc46bbab03badd445acaddb8c6b4309a97ddf7a6193f4e0d6d5fd637999e53fc01f6f1e28afced71fd6d7cd6ac9caaa4cb6e6bf23876be4c6d2fd6d32e2a220d15c835b864d17e14d2b977e9d0828cf1b2a619e9bce3de4aa7cd6ac5344c40e96cb7f7fe2ce71573b40ce2b28bb456c5eb747d5747704514c2d29ece3d9fdb1504ca51a515e5e071a1de0d4ad3ab28c9f21cfc26b0f99c9e2db711651bcf642d270984f1d9172cb2f7e71cfd502374cb85e4be11777f4b1c9867b4bb575b72ff9780463dc4f2e8a5917e38f6071015793e508e4a25e993fbd20492d894e3ef509d743d4bd94c7e3800d536b92a2d09bac283b1e606bdeb74d6e35e0f6ada9942aa908460fdad6d7c01b0663efa61afb660c00f688bcf53f9374a9255b063f9af47635c990597867d02baea48c533c9febe74c579a847636a30ae027867c15d358640de9ebdd16c777a93996a7655f380261184a1e473f1129d6acafd3787311ae1643abbe5a1f8a4f0728133a56e3b4f5a09de452b608ed94b0125e9cdd95ce33367e083b2dc1e525ae7e0e76a7f3cca086b99ee004e898a07165d8f3d3db604a8dda701fb334cdfd34011969ea4c78a9c54955cc0ac4c4345c81be576dad1ec07608a9fe9988d35d34024645c6b33020776afd11461ecb8b3fdaf3a875563766d9fe5ce528d72ecc97c6cffff194115ce71758ee0e8ed304770797146618136062b97f88f116dfcb521810cd1daebf1d195efb21e86a3df6158a40777c700a6db29f2f793c958267ff54f3d92e80d946d76d580d338bcd48a6ffa5192a2ca08ca63e441cdc0847ff21d903904347c47bb23b323dd460309e6b32396525d9bcfd6d1bc885cb1c84bdd7b2391a17821c8e8d90a53fb33af5604d6aa2ac2096a3d365bec593218d27c36c7d7c276787e28519f5a290a61288b8221bb1f019c8c52924e140ebf8e635c438ef03e11ca3f78aab2c753f5d97df49d3e1545e2df8e24329452b243d6200050387aa7a9dd90bd5074c7c2002ebd5008620e61f4277047dc591bc5c704d39e96b13872d5a01f658359b696c7ff2ba093dae188bf5336682f43735e961d9be517647dd9a4cb3d071ab44d0f77da3e066469ecd85854da737217d3b4b4f72c454d9a5eab179d403f07596418e127c53a2b12cdd41172489b18aac2aedd4160cda9b119248e9c6d9c9c8c59eaffa9456b53401cfb03ad7726e83f94b0d14ab214ca5ce21e080213fc9fd64a4857b0baff867fc0e3f5ab17792c45621feb71a0b210ef2f6f5e9c0828b20bd584a0a573032a39404f83c3adf469303e080a66e8a32f2b9c3175051ca26416e00882a09100c70e7c27b552d510dce57ebcf5ee8e7e672e71cab41e2ee83e10d98e12d2af6b017612387106c0d41541087aae2e811837f94978d130f188a376472c14508eeaa4e44065a09bb4c8432a6bb1da04cefef0a571702d86edc2ccc4a0340ae250e1ad3359e4a476a73467954436a80500014688ce39438b56d1ea21f8e81691bfe032fcd4d6008b03addeed17b6a664049eb69812bcfd5298071c8e29b387ba71b84e23326f960fd263b82484d90c6da5fa8ce44cfed5ffaf58ccd7e1a347751a236d6e5469d508b8ef1682ddde01afe73ae4c5ad53cc034f84e001c6354898563b120b40b2122894d28c965d935535256510ca624474001b69282c540b5e0d70df5642b1ee9f00d4e37420af4cca4afc7e7beaa02dafe71bbde9e73969e0a5448355014943d41e5b65342a7a1b96e54ee622e93898a0ef2f12737f6a12ebd6aa0339f3085b055d8383d6c784f6aa77bcc269a512522fd0146f7b0a8e518b48095c3d15fb645fbbbb20671f86e41a2ae2a11a27db03b2452407b93f6754556555187354eab260c3c3333b05f7bffcfa3056916b7faa861fe097078583dfb5d214a8799810c21023cac75a8fdcbfc1239f991cbc0cd72ac306fd280533fcb33a740a5479bc9553a0632160908ca6aa73ca67cdbc197bf72547b0487aabbef5d6ea124db2a9ced604ae583fa2a09386b9660fec2b3fcf5e8fb5215ed6814d4c9a9088b53dc575e1fb270398bced354600123b2c4850c9f0b30d64c9ce68f70d753a82fe3ccea5c8b75047f35bf724eb915755728470a7dfdc370d7119af2ac119f8792f7338cc6c5ed39842a1877479d479c92ec6347d50220ff7aab6c007a73b8873d0e5dcd7a504f0f154f9b7844009c6608aaee0af828ea3e931409da9b6c995f4173c604c0a83294948c1ba0572d67d9d01ccddcbf3524c76a972220c108bd4e54ad1d120464ad823c163375de474d1054deb084e58fdf6878c0ac3d79212053ccc76a0b15dd2077e927c3bdbf1b34bba9312b2f020aa725d435988a3386a540d64929219f70ac316ad603152230a6590aa506f97116e1bbad66956384e0861a4332e9ac5cf20f36d55d3bf8dbae2952d6d023c9b658143f3eb8a6024ba50338f9980a235c2a99213e7979c7aa6e4a01f589b909aa9184c3049c9914fbd31cc6960b33692c074aec3a3cead045fe67f093391b7accc77b80bc4a6acd571faa3d01be0b4c38e251574184a038a4293b9f46e81137cbec0b2ead89e63a829849d1b71c3f2b4bdddf3e803bb5c349f05afc8ed5fd5113b29959cb8b2d495ec2ce9b7900a17d31976e6233e2e78cc83cd4e4e8a5d2401005aaa532e4fc4c295edd10e2b395f680a141e5da712feddf284c32f64977a62f681d9c0adf9c0814156dbbf1f8dd513c3f3edbd633b1975ad78b0e568d44d1839d791da9c314fe72437a2df28cb228fcadc25764ab329176bed918e503005c598d62e1b7289d062c82efce99729a7803bd8a2a48478211aa874c8013ba2fca95b1a69ea9e935692418106fdd2026a66af47608bd2fa6d27f92331b8949082951275960d9a251be9aef06f34370907a997f38b50c8a1dbf2e59425d0186caab5768b99df327141010f7d16a8312d26dc340f08b636dfb34f3980ea0f9fe26bc280f4eb64f1b2d61d4e878ecf3c162c31601ec1d84e30275e7a55f6188dc4877805196e80da0e2610080c412f345734d905f14bff5ce5c404dc6c5e5bbd0be8d1e6ae0d5f9e34bcb5978888da5bc4e374e62fcb2282580f4367bef3dd7bed59c876006a873f854729f1725dfbb749f49363120b533dd38f246bf54cf0ca31198b7db163b1810e8acb39612a5df500e153979044b097ae65d22603e9900c4a29c83abe35f60e1d1b6974fc722c93ddcce3a41e21174acff5799cb711b14e41a97bd4cb0246e53932bb206ac774e72f6651c605e2fbe159b2d6dc341ddc3663947d2adbe766db28d686531923cf50ca927d6f189f8176defbe7f5bf9c7f43d1c7cfe4704f528fd81f707105fa4ac2d6752c373fb89f339ec73603cd80c260e3c2e8b9281a868eeb05a9492e360209429805ad1a9d76cadd9878a3b200afa047d3f399c8dc248db09dfd896977c01fafb0a6bfda86010afa794bcb4741663a20d61eae7bbc83d556fdeb70517683e793c0634f6c23a8b5a851caf74fc0e858eb4af", 0x1000, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="2f29625123d03683a2999139f9c0f0ac47fec8d4ffc908ef56f63e7e57150f2ba683fa728f1c3092de16dedbc186b99212792b8d225d1eaf0e0e5f6cb35f8cd488ab719b14f864a7c70c164580") 18m50.749825508s ago: executing program 0 (id=27): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000000)=0x401, 0x4) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000c00)=""/135, 0xfca2, 0x0, 0x0, 0x3}}, 0x36) 18m42.427175913s ago: executing program 0 (id=36): r0 = socket$kcm(0x11, 0x3, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x20002) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80804120, &(0x7f00000022c0)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff86, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) 18m27.199448226s ago: executing program 32 (id=36): r0 = socket$kcm(0x11, 0x3, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x20002) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80804120, &(0x7f00000022c0)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff86, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) 17m32.606836571s ago: executing program 3 (id=130): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9]}, {0x2, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}], &(0x7f00000001c0)=[0x1, 0x3baf, 0x5, 0x3]}, {0x4, 0x1, 0x0, &(0x7f0000005300)=[{0x0}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {0x0}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {0x0}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x8, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 17m32.400657908s ago: executing program 3 (id=133): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0xb09, @none, 0x0, 0x1}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x421, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3ff}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = io_uring_setup(0x5830, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0x1f5, 0x0, r3}) r5 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0x18f9, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x40) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000200)=r6, 0x1) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000340)=0x400008) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r2, &(0x7f00000003c0)=@phonet, 0x0, 0x80800) r7 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) syz_emit_vhci(&(0x7f0000001400)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{}, {0x1, 0xc9, 0xfa}}}, 0x11) 17m29.752882175s ago: executing program 3 (id=137): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac", 0x75}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 17m28.630070202s ago: executing program 3 (id=140): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0xc, 0x7fffffff, 0x8, 0x2002f, 0x4, 0xf1, 0x7, 0x80ffa, 0x2, 0x0, 0x7, 0x1000000, 0x1000004, 0x7, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4005, 0x2, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) 17m28.482643867s ago: executing program 3 (id=141): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r2, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9]}, {0x2, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}], &(0x7f00000001c0)=[0x1, 0x3baf, 0x5, 0x3]}, {0x4, 0x1, 0x0, &(0x7f0000005300)=[{0x0}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {0x0}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {0x0}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x8, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 17m27.365237354s ago: executing program 3 (id=143): prlimit64(0x0, 0xb, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008040) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x5c}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x40800) io_setup(0x2278, &(0x7f0000000180)=0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x2, 0xffffffffffffffff, 0x0}]) 17m11.883669286s ago: executing program 33 (id=143): prlimit64(0x0, 0xb, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008040) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x5c}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x40800) io_setup(0x2278, &(0x7f0000000180)=0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x2, 0xffffffffffffffff, 0x0}]) 5m36.519686727s ago: executing program 1 (id=1441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x4) sched_setaffinity(0x0, 0x6, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}], 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0xa96) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) 5m32.361472965s ago: executing program 1 (id=1448): sendmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}], 0x1, 0x40000050) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125c87080fdd3df257c0000000ea54ae4d509f7001d0000000a000600ffffffffffff00000a000600ad989250f772f20a0a000800ea5cc7bc08021100000100000a000600ffffffffffff"], 0x50}, 0x1, 0x0, 0x0, 0x8cc5}, 0xc00c000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) r2 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 5m29.248221307s ago: executing program 1 (id=1454): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000000680)=""/199, 0x11f, 0x8) io_uring_setup(0x30aa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f00000001c0), 0x0, 0x12122, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) keyctl$session_to_parent(0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001001fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1099a}}, 0x20}}, 0x26040804) 5m27.834179643s ago: executing program 1 (id=1456): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) syz_open_dev$sg(0x0, 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101a02) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fsopen(&(0x7f0000000180)='proc\x00', 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) mmap$snddsp_control(&(0x7f0000003000/0x2000)=nil, 0x1000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x83000000) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) 5m23.653548402s ago: executing program 1 (id=1460): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)='l3', 0x2}], 0x1}], 0x1, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0xd) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x1, &(0x7f0000000000)) syz_clone(0x100, &(0x7f0000000040)="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", 0xfc0, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="2f29625123d03683a2999139f9c0f0ac47fec8d4ffc908ef56f63e7e57150f2ba683fa728f1c3092de16dedbc186b99212792b8d225d1eaf0e0e5f6cb35f8cd488ab719b14f864a7c70c164580") 5m21.486880643s ago: executing program 1 (id=1463): mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = dup(r4) inotify_rm_watch(r5, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5m4.186799804s ago: executing program 34 (id=1463): mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = dup(r4) inotify_rm_watch(r5, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1m27.450885395s ago: executing program 6 (id=1818): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x85}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) writev(r3, &(0x7f0000000200), 0x0) dup3(r1, r3, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 1m25.234071878s ago: executing program 6 (id=1825): syz_ublk_setup_io_uring(0x73c1, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) clock_adjtime(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x100000000000001, r3, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0xe, 0x10000}}) fsopen(0x0, 0x0) getpgrp(r4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001200add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd788}, 0x94) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) munmap$IORING_OFF_SQES(r0, 0xc5059c) 1m20.890453811s ago: executing program 6 (id=1834): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f0000000240)) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) listen(r5, 0x7f) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1m17.718182006s ago: executing program 6 (id=1840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000940)=0x707987cd) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x16, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x2ab72c04e44d3bf5, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xf, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000480)=[{0x0, 0x2, 0xf}, {0x2, 0x3, 0x8, 0x6}, {0x0, 0x2, 0xa, 0x5}], 0x10, 0xe700000}, 0x94) bind$inet6(r7, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m15.575340506s ago: executing program 6 (id=1844): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x420003, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x181) mkdirat(0xffffffffffffff9c, 0x0, 0x140) creat(0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) 1m13.299679601s ago: executing program 6 (id=1848): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000000680)=""/199, 0x11f, 0x8) io_uring_setup(0x30aa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f00000001c0), 0x0, 0x12122, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) keyctl$session_to_parent(0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001001fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1099a}}, 0x20}}, 0x26040804) 57.362002358s ago: executing program 35 (id=1848): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000000680)=""/199, 0x11f, 0x8) io_uring_setup(0x30aa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f00000001c0), 0x0, 0x12122, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) keyctl$session_to_parent(0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001001fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1099a}}, 0x20}}, 0x26040804) 18.385916753s ago: executing program 4 (id=1952): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x5c6f3000) syz_open_dev$video4linux(&(0x7f0000000400), 0xc7c, 0xe03) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) close_range(r0, 0xffffffffffffffff, 0x0) 18.164514421s ago: executing program 4 (id=1954): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000500)="baf80c66b89481a88c66efbafc0ced660f9b1c2e0f8e1200baf80c66b8f430fd8766efbafc0ced0f20e16736660f7c4d40f3aa66b9b80a000066b8e300000066ba000000000f306766c7442400008000006766c7442402000000006766c744240600000000670f011c240f019b57f5", 0x6f}], 0x1, 0x4, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4084) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) setpriority(0x0, 0x1, 0xa7a8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 16.558978064s ago: executing program 4 (id=1958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prlimit64(r0, 0x6, &(0x7f00000003c0)={0x7, 0x100}, &(0x7f0000000480)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x4}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x200000000000002}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000400)=""/6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1a, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 15.522873428s ago: executing program 2 (id=1960): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x13, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1}) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_emit_ethernet(0x46, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) 14.184552622s ago: executing program 2 (id=1963): socket(0x2, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/packet\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 13.154254096s ago: executing program 2 (id=1965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x6, &(0x7f0000000400)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 12.840452276s ago: executing program 4 (id=1966): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x21, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000940)=@hopopts={0x3c, 0xfe, '\x00', [@generic={0xa, 0x2a, "90ea426c077bc48284a6b54693534806ec1c5bf5f273bf3cb8d3fcd432f5d399a84c6d9a4eb6d68b846a"}, @generic={0x6, 0x7c3, "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"}]}, 0x800) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_dest={0x18, 0x114, 0x2, {0x6, 0x6}}], 0x18}, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, &(0x7f00000001c0)) connect$inet6(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x150, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x150, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2000, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x0, 0x0, 0x4, 0x1], 0x2, 0x1}, {0x1, [0x2, 0x2, 0x6, 0x1, 0x6, 0x1], 0x1, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xffffff, 'wlan0\x00', 'vcan0\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2e0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private2, @mcast2, @mcast1, 0x2, 0xc0, 0x4, 0x400, 0x7fff, 0x42100000, r7}) 12.202772527s ago: executing program 5 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prlimit64(r0, 0x6, &(0x7f00000003c0)={0x7, 0x100}, &(0x7f0000000480)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x4}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x200000000000002}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000400)=""/6) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1a, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffff, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 11.296768057s ago: executing program 7 (id=1969): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x420003, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x181) mkdirat(0xffffffffffffff9c, 0x0, 0x140) creat(0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) 11.044743416s ago: executing program 7 (id=1970): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000003c0), 0x0, 0x0, 0x0) 10.762798355s ago: executing program 7 (id=1971): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x403, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pwritev(r2, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f0000000400)="27a78efa5e4b049be48ed8840cecd990243628c0aaf2fe4b97dabf198f157e9c46d2960b82d46d263c175b8451a111ab39ce5c617080d0fbff5b00180739106bf0f795b85e2ff9ae57f3dcbccc0a03386b3a843fcc03b0c843f1c7f405c222a4decd768e351b480e81377ceec9e5d8703a6d2a60", 0x74}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000280)="66660f3a15593702b801008ee8bad104b006ee650f01c50f0f55301c66b92b03000066b80020000066ba000000000f30b800088ee8660fd9200f015933f4", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r7, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x4}) 10.061592228s ago: executing program 5 (id=1972): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x28, 0x1, 0xf7, 0xfffff024}]}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x14, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = msgget(0x2, 0x40) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgrcv(r4, 0x0, 0xfffffffffffffee2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000010400000000fedbdf250000", @ANYRES32=0x0, @ANYBLOB="430d0300eec9fbe914000300776c616e31000000"], 0x40}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) sync_file_range(r3, 0x8000000000000000, 0x9, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, 0x0, 0x0, 0x4, 0xfffffffe) request_key(0x0, 0x0, 0x0, 0x0) 9.860469574s ago: executing program 2 (id=1973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(r1, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x13, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1}) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) syz_emit_ethernet(0x46, 0x0, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 7.303812439s ago: executing program 5 (id=1974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2400c880) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x20000800}, 0x4000042) sendmsg$nl_xfrm(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000340)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000002c80)={0x0, 0x5, 0x3, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ftruncate(0xffffffffffffffff, 0xffffffffffffffff) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setpriority(0x2, 0xffffffffffffffff, 0x7) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000080), 0x8) epoll_create(0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c000000030000000a000000080002002200000c0000000000100000000000005f00"], 0x0, 0x2e, 0x0, 0x0, 0x10000000}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) syz_usb_connect$uac3(0x5, 0x80, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.142894204s ago: executing program 7 (id=1975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prlimit64(r0, 0x6, &(0x7f00000003c0)={0x7, 0x100}, &(0x7f0000000480)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x4}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x200000000000002}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000400)=""/6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1a, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 4.985570145s ago: executing program 7 (id=1976): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000000)=0x401, 0x4) 2.353389102s ago: executing program 7 (id=1977): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) gettid() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) acct(&(0x7f0000000180)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x11}, 0x0) 2.199923007s ago: executing program 5 (id=1978): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x420003, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x181) mkdirat(0xffffffffffffff9c, 0x0, 0x140) creat(0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) 1.806141431s ago: executing program 5 (id=1979): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0) 1.665847815s ago: executing program 2 (id=1980): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, 0x3f9, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x10) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex_waitv(&(0x7f0000002280)=[{0x7, &(0x7f0000000480), 0x2}, {0x480000000, &(0x7f00000004c0)=0x3, 0x2}, {0x6, &(0x7f0000000500)=0x9, 0x2}, {0xfffffffffffffffa, &(0x7f0000000540)=0xfff, 0x2}, {0x4fa740e5, &(0x7f0000000580)=0xee8, 0x2}, {0x7, &(0x7f00000005c0)=0x5, 0x82}, {0xffffffffffffffff, &(0x7f0000000600)=0x3, 0x82}, {0x2, &(0x7f0000000640), 0x2}, {0x9, &(0x7f0000000680)=0x1, 0x82}, {0x8c0, &(0x7f00000006c0)=0x101, 0x2}, {0xffffffff, &(0x7f0000000700)=0x8, 0x82}, {0x8, &(0x7f0000000740)=0xfffffffffffffff8, 0x2}, {0x3, &(0x7f0000000780)=0x401, 0x2}, {0x4, &(0x7f00000007c0)=0x7, 0x82}, {0x0, &(0x7f0000000800)=0x1, 0x82}, {0x6, &(0x7f0000000840)=0x6, 0x82}, {0x0, &(0x7f0000000880)=0x3, 0x82}, {0xec, &(0x7f00000008c0)=0x3, 0x82}, {0x500, &(0x7f0000000900), 0x82}, {0x6a, 0x0, 0x2}, {0x3, &(0x7f0000000980)=0xd, 0x2}, {0xffffffffffffffcc, &(0x7f00000009c0)=0x2, 0x82}, {0x6, &(0x7f0000000a00), 0x82}, {0x71a, &(0x7f0000002e00)=0x8, 0x2}, {0x2, &(0x7f0000000a80)=0x8, 0x82}, {0x8000000000000000, &(0x7f0000000ac0)=0x10000, 0x82}, {0x1, &(0x7f0000000b00)=0x5, 0x2}, {0x8, &(0x7f0000000b40)=0x10000, 0x2}, {0x9, &(0x7f0000000b80)=0x7, 0x82}, {0x8, &(0x7f0000000bc0)=0x8, 0x2}, {0x4, &(0x7f0000000c00)=0x694, 0x82}, {0x100000001, &(0x7f0000000c40)=0x70, 0x82}, {0x9, &(0x7f0000000c80)=0x5, 0x2}, {0x100000000, &(0x7f0000000cc0)=0x30000000000000, 0x82}, {0x5, &(0x7f0000000d00)=0x6bbd}, {0xff, &(0x7f0000000d40)=0x3, 0x2}, {0x3ff, &(0x7f0000000d80)=0xd, 0x82}, {0x1, &(0x7f0000000dc0)=0xfff, 0x82}, {0x5, &(0x7f0000000e00)=0x5, 0x80}, {0x8, &(0x7f0000000e40)=0x8, 0x82}, {0x80, &(0x7f0000000e80)=0x1, 0x82}, {0x800, &(0x7f0000000ec0)=0xc4be, 0x82}, {0x6f72, &(0x7f0000000f00)=0x6, 0x2}, {0x88, &(0x7f0000000f40)=0x6, 0x2}, {0xffffffff00000001, &(0x7f0000000f80)=0xffffffff, 0x82}, {0x28, &(0x7f0000000fc0)=0x8, 0x82}, {0xc00, &(0x7f0000001000)=0x3ff, 0x82}, {0x0, &(0x7f0000001040)=0xf, 0x82}, {0xd, &(0x7f0000001080)=0x9, 0x2}, {0x8001, &(0x7f00000010c0)=0x9, 0x82}, {0x1, &(0x7f0000001100)=0xbe, 0x82}, {0x10000, &(0x7f0000001140)=0xa9, 0x2}, {0x0, &(0x7f0000001180)=0x200, 0x2}, {0x1, &(0x7f00000011c0)=0xec7, 0x82}, {0x8, &(0x7f0000001200)=0x100000001, 0x2}, {0xfffffffffffffff7, &(0x7f0000001240)=0xfffffffffffff323, 0x82}, {0x2, &(0x7f0000001280)=0xa544, 0x2}, {0x7f, &(0x7f00000012c0), 0x2}, {0xffffffffffffffff, &(0x7f0000001300)=0x1, 0x82}, {0x3, &(0x7f0000001340)=0x3, 0x82}, {0x1, &(0x7f0000001380), 0x82}, {0x5, &(0x7f00000013c0)=0xfffffffffffffffc, 0x82}, {0x2, &(0x7f0000001400)=0x4, 0x82}, {0x10, &(0x7f0000001440)=0xed9, 0x82}, {0x3, &(0x7f0000001480)=0x5, 0x2}, {0x3, &(0x7f00000014c0)=0x8, 0x82}, {0xa, &(0x7f0000001500)=0xf11, 0x2}, {0x7fffffffffffffff, &(0x7f0000001540)=0x8, 0x2}, {0x466, &(0x7f0000001580)=0x2, 0x2}, {0xc563f26, &(0x7f00000015c0)=0x7, 0x2}, {0x3, &(0x7f0000001600)=0xff, 0x82}, {0xffffffffffffffff, &(0x7f0000001640)=0x4, 0x82}, {0x8, &(0x7f0000001680)=0x7fffffffffffffff, 0x2}, {0x7f, &(0x7f00000016c0)=0xc09, 0x82}, {0x8, &(0x7f0000001700)=0x9, 0x2}, {0x6, &(0x7f0000001740)=0x56, 0x82}, {0x10001, &(0x7f0000001780)=0x10, 0x2}, {0x9eb, &(0x7f00000017c0)=0x7, 0x82}, {0x800, &(0x7f0000001800)=0x7, 0x82}, {0xfffffffffffffffd, &(0x7f0000001840)=0x4, 0x82}, {0x0, &(0x7f0000001880)=0xf0, 0x82}, {0x7, &(0x7f00000018c0)=0x1, 0x2}, {0xa8d, &(0x7f0000001900)=0x5, 0x82}, {0xdd72, &(0x7f0000001940)=0x8000000000000001, 0x2}, {0x0, &(0x7f0000001980)=0x1, 0x2}, {0x8, &(0x7f00000019c0)=0xee0c, 0x82}, {0x2, &(0x7f0000001a00)=0x9, 0x2}, {0x4, &(0x7f0000001a40)=0x1ff, 0x2}, {0x1, &(0x7f0000001a80)=0x4, 0x2}, {0x7, &(0x7f0000001ac0)=0x8000, 0x82}, {0x2, &(0x7f0000001b00)=0x4fc9, 0x82}, {0xb1c7, &(0x7f0000001b40)=0x7f, 0x82}, {0x4, &(0x7f0000001b80)=0x1ff, 0x82}, {0xf2, &(0x7f0000001bc0)=0x7, 0x82}, {0xfffffffffffff000, &(0x7f0000001c00)=0x66ee, 0x82}, {0x8, &(0x7f0000001c40)=0x8, 0x82}, {0x9, &(0x7f0000001c80)=0xfffffffffffffffb, 0x2}, {0x481, &(0x7f0000001cc0)=0x4, 0x2}, {0x1ff, &(0x7f0000001d00)=0xb4a, 0x2}, {0x6, &(0x7f0000001d40)=0xbb5, 0x2}, {0x9, &(0x7f0000001d80)=0x5, 0x2}, {0x2, &(0x7f0000001dc0)=0x4, 0x82}, {0x1, &(0x7f0000001e00)=0x7, 0x2}, {0x240000000000000, &(0x7f0000001e40)=0x1ff, 0x82}, {0x6, &(0x7f0000001e80)=0x400, 0x82}, {0x0, &(0x7f0000001ec0)=0x111, 0x80}, {0x0, &(0x7f0000001f00)=0x8, 0x82}, {0x5d, &(0x7f0000001f40)=0x6, 0x2}, {0xfffffffffffffff8, &(0x7f0000001f80)=0xfffffffffffffc01, 0x82}, {0x3, &(0x7f0000001fc0)=0x2, 0x2}, {0x8000000000000001, &(0x7f0000002000)=0x200, 0x2}, {0x2, &(0x7f0000002040)=0x415, 0x2}, {0x9, &(0x7f0000002080)=0xff, 0x2}, {0x3, &(0x7f00000020c0)=0x7fffffff, 0x2}, {0x2, &(0x7f0000002100)=0x60a000000000000, 0x82}, {0x8, &(0x7f0000002140)=0x3, 0x2}, {0x7f, &(0x7f0000002180)=0x13f, 0x82}, {0x1b3, &(0x7f00000021c0)=0x5e50, 0x80}, {0x400, &(0x7f0000002200)=0x9, 0x2}, {0xba, &(0x7f0000002240)=0x9, 0x82}], 0x78, 0x0, &(0x7f0000002dc0)={0x77359400}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r4, 0x3007, 0xc485}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 1.534008189s ago: executing program 5 (id=1981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x6, &(0x7f0000000400)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 250.562011ms ago: executing program 2 (id=1982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x4, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x28, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0xfd, 0x2}, {0x2, 0x9, 0x0, '\x00', 0x6f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x2, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xc6, '\x00', 0x5}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x4, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) 130.805426ms ago: executing program 4 (id=1983): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) fsopen(&(0x7f0000000000)='omfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$alg(0x26, 0x5, 0x0) mq_open(&(0x7f0000000040)='\'\x00]\xa5\xdf?\x86\xcf\xfb\xfe\x10\xf5\xcdrGQf\x10:\xce\xb0FeP3\xb2\xd3.\xd0{\x11\xe4\x94\xfd\xaa\xbb\xbc\xe6\x19y\x1f\x92\x0f}\xaf\xa7', 0x8c1, 0xe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 4 (id=1984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prlimit64(r0, 0x6, &(0x7f00000003c0)={0x7, 0x100}, &(0x7f0000000480)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x4}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x200000000000002}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000400)=""/6) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1a, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffff, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) kernel console output (not intermixed with test programs): batadv0 [ 239.141736][ T5780] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 239.181639][ T6908] netlink: 'syz.4.223': attribute type 39 has an invalid length. [ 239.720955][ T6640] veth0_vlan: entered promiscuous mode [ 239.776783][ T6640] veth1_vlan: entered promiscuous mode [ 240.477019][ T6640] veth0_macvtap: entered promiscuous mode [ 240.536889][ T6640] veth1_macvtap: entered promiscuous mode [ 240.642919][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.506675][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.520937][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.531873][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.541782][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.552251][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.564321][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.582277][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.592776][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.611248][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.621760][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.663161][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.694202][ T6640] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.739846][ T6640] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.814847][ T6640] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.847308][ T6640] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.121787][ T5784] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 242.192274][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.200370][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.289413][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.312524][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.361965][ T5784] usb 3-1: Using ep0 maxpacket: 16 [ 242.405771][ T5784] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.471017][ T5780] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 242.725634][ T5784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 242.747782][ T5784] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 242.757034][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.767687][ T5784] usb 3-1: config 0 descriptor?? [ 242.927423][ T6957] netlink: 'syz.1.232': attribute type 39 has an invalid length. [ 243.405412][ T5784] usbhid 3-1:0.0: can't add hid device: -71 [ 243.521184][ T5784] usbhid: probe of 3-1:0.0 failed with error -71 [ 243.530346][ T5784] usb 3-1: USB disconnect, device number 4 [ 244.768249][ T6976] wg1: entered promiscuous mode [ 244.773346][ T6976] wg1: entered allmulticast mode [ 247.605908][ T5780] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 248.151540][ T28] audit: type=1326 audit(1780734838.045:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.4.244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56a959ce59 code=0x0 [ 250.358723][ T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 250.561023][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 250.603422][ T787] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.615092][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 250.802947][ T787] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 250.925724][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.971478][ T787] usb 2-1: config 0 descriptor?? [ 252.583268][ T7036] wg1: entered promiscuous mode [ 252.588305][ T7036] wg1: entered allmulticast mode [ 252.615688][ T787] usbhid 2-1:0.0: can't add hid device: -71 [ 252.706479][ T787] usbhid: probe of 2-1:0.0 failed with error -71 [ 252.901476][ T787] usb 2-1: USB disconnect, device number 4 [ 255.611423][ T7046] QAT: Invalid ioctl 1074304019 [ 256.016575][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.023043][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.013282][ T5780] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 261.351052][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 262.270927][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 262.336049][ T27] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.381384][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 262.442048][ T27] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 262.465568][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.502036][ T27] usb 2-1: config 0 descriptor?? [ 262.850928][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 263.051249][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 263.062084][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.089625][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 263.154081][ T8] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 263.181453][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.212990][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 263.217555][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 263.225769][ T8] usb 3-1: Product: syz [ 263.229981][ T8] usb 3-1: Manufacturer: syz [ 263.240828][ T8] usb 3-1: SerialNumber: syz [ 263.256777][ T8] usb 3-1: config 0 descriptor?? [ 263.288600][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 263.346755][ T27] usb 2-1: USB disconnect, device number 5 [ 264.149061][ T8] usb 3-1: USB disconnect, device number 5 [ 265.109445][ T5780] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 265.518736][ T7136] netlink: 'syz.2.268': attribute type 39 has an invalid length. [ 266.688817][ T7154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.432384][ T5780] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 267.531522][ T7154] batadv_slave_1: entered promiscuous mode [ 268.110863][ T787] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 268.160916][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 268.332035][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 268.364629][ T787] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.380832][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 268.391268][ T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.404718][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 268.415188][ T27] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.424583][ T787] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 268.443793][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.457035][ T27] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 268.479010][ T787] usb 2-1: config 0 descriptor?? [ 268.484096][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.646389][ T27] usb 6-1: Product: syz [ 268.669861][ T27] usb 6-1: Manufacturer: syz [ 268.706191][ T27] usb 6-1: SerialNumber: syz [ 268.735864][ T27] usb 6-1: config 0 descriptor?? [ 269.165200][ T787] usbhid 2-1:0.0: can't add hid device: -71 [ 269.180971][ T787] usbhid: probe of 2-1:0.0 failed with error -71 [ 269.193253][ T27] IPVS: starting estimator thread 0... [ 269.201559][ T787] usb 2-1: USB disconnect, device number 6 [ 269.330915][ T7189] IPVS: using max 26 ests per chain, 62400 per kthread [ 269.344769][ T27] usb 6-1: USB disconnect, device number 2 [ 269.452081][ T5780] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 271.414168][ T7199] netlink: 'syz.5.280': attribute type 39 has an invalid length. [ 272.417808][ T5780] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 275.211224][ T787] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 275.384570][ T5780] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 275.423723][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.094830][ T787] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 276.133415][ T787] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 276.142561][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.150571][ T787] usb 2-1: Product: syz [ 276.154846][ T787] usb 2-1: Manufacturer: syz [ 276.159467][ T787] usb 2-1: SerialNumber: syz [ 276.217718][ T787] usb 2-1: config 0 descriptor?? [ 276.550877][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 276.561155][ T7228] warning: `syz.1.284' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 276.603140][ T5816] usb 2-1: USB disconnect, device number 7 [ 276.614744][ T7245] syz.4.291 (7245): /proc/7245/oom_adj is deprecated, please use /proc/7245/oom_score_adj instead. [ 276.820887][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 276.834620][ T27] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.848319][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 276.856384][ T27] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 276.866303][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.877851][ T27] usb 3-1: config 0 descriptor?? [ 277.658031][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 277.671360][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 277.695450][ T27] usb 3-1: USB disconnect, device number 6 [ 280.515815][ T5780] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 284.494671][ T7329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.511563][ T7329] batadv_slave_1: entered promiscuous mode [ 284.520827][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 285.230811][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 285.321348][ T8] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.340824][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 285.347485][ T8] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 285.356600][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.368617][ T8] usb 2-1: config 0 descriptor?? [ 286.484731][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 286.490960][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 286.509277][ T8] usb 2-1: USB disconnect, device number 8 [ 286.897353][ T5780] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 288.704147][ T7378] netlink: 'syz.5.315': attribute type 39 has an invalid length. [ 290.436964][ T5780] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 291.520825][ T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 291.710865][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 291.738587][ T787] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.760538][ T787] usb 5-1: config 0 interface 0 has no altsetting 0 [ 291.767961][ T787] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 291.783085][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.819931][ T787] usb 5-1: config 0 descriptor?? [ 293.277722][ T787] usbhid 5-1:0.0: can't add hid device: -71 [ 293.286989][ T787] usbhid: probe of 5-1:0.0 failed with error -71 [ 293.305005][ T787] usb 5-1: USB disconnect, device number 2 [ 293.766181][ T7446] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 293.772836][ T7446] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 293.781920][ T7446] vhci_hcd vhci_hcd.0: Device attached [ 293.809814][ T5780] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 294.075647][ T7448] vhci_hcd: connection closed [ 294.162422][ T787] usb 36-1: SetAddress Request (2) to port 0 [ 294.209035][ T1007] vhci_hcd: stop threads [ 294.254580][ T1007] vhci_hcd: release socket [ 294.510799][ T1007] vhci_hcd: disconnect device [ 294.540589][ T787] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 294.580954][ T787] usb 36-1: enqueue for inactive port 0 [ 295.087248][ T787] usb usb36-port1: attempt power cycle [ 295.748389][ T787] usb usb36-port1: unable to enumerate USB device [ 296.501641][ T7473] binder_alloc: 7472: binder_alloc_buf, no vma [ 297.014313][ T7490] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 297.032018][ T7490] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 297.061419][ T5816] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 297.270909][ T5816] usb 5-1: Using ep0 maxpacket: 16 [ 297.286024][ T5816] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.305263][ T7498] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 297.311814][ T7498] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 297.313491][ T5816] usb 5-1: config 0 interface 0 has no altsetting 0 [ 297.330272][ T5816] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 297.339905][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.352946][ T5816] usb 5-1: config 0 descriptor?? [ 297.370472][ T7498] vhci_hcd vhci_hcd.0: Device attached [ 297.408428][ T7499] vhci_hcd: connection closed [ 297.410548][ T33] vhci_hcd: stop threads [ 297.434775][ T33] vhci_hcd: release socket [ 297.443382][ T33] vhci_hcd: disconnect device [ 298.310666][ T5816] usbhid 5-1:0.0: can't add hid device: -71 [ 298.412076][ T5816] usbhid: probe of 5-1:0.0 failed with error -71 [ 298.560844][ T5816] usb 5-1: USB disconnect, device number 3 [ 300.430936][ T27] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 300.621073][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 300.685093][ T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.119958][ T27] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 301.138378][ T27] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 301.148803][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.157045][ T27] usb 6-1: Product: syz [ 301.170824][ T27] usb 6-1: Manufacturer: syz [ 301.184703][ T27] usb 6-1: SerialNumber: syz [ 301.193947][ T27] usb 6-1: config 0 descriptor?? [ 301.211252][ T7564] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 301.217799][ T7564] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 301.252361][ T7564] vhci_hcd vhci_hcd.0: Device attached [ 301.273626][ T7565] vhci_hcd: connection closed [ 301.276175][ T49] vhci_hcd: stop threads [ 301.289311][ T49] vhci_hcd: release socket [ 301.294179][ T49] vhci_hcd: disconnect device [ 301.433998][ T27] usb 6-1: USB disconnect, device number 3 [ 302.731718][ T5816] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 303.040906][ T5816] usb 6-1: Using ep0 maxpacket: 16 [ 303.992758][ T5816] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.031656][ T5816] usb 6-1: config 0 interface 0 has no altsetting 0 [ 304.054585][ T5816] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 304.063784][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.092360][ T5816] usb 6-1: config 0 descriptor?? [ 307.040068][ T5816] usbhid 6-1:0.0: can't add hid device: -71 [ 307.206530][ T5816] usbhid: probe of 6-1:0.0 failed with error -71 [ 307.220106][ T5816] usb 6-1: USB disconnect, device number 4 [ 307.341085][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 307.771824][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 307.797431][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.817765][ T27] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.852884][ T27] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 307.870444][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.898168][ T27] usb 2-1: Product: syz [ 307.982818][ T27] usb 2-1: Manufacturer: syz [ 307.987595][ T27] usb 2-1: SerialNumber: syz [ 307.996422][ T27] usb 2-1: config 0 descriptor?? [ 308.280842][ T27] usb 2-1: USB disconnect, device number 9 [ 310.647432][ T7646] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.371'. [ 311.020790][ T7597] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 311.890783][ T7597] usb 2-1: Using ep0 maxpacket: 16 [ 312.575876][ T7597] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.589108][ T7597] usb 2-1: config 0 interface 0 has no altsetting 0 [ 312.595878][ T7597] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 312.606230][ T7597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.617163][ T7597] usb 2-1: config 0 descriptor?? [ 315.070854][ T7597] usbhid 2-1:0.0: can't add hid device: -71 [ 315.077032][ T7597] usbhid: probe of 2-1:0.0 failed with error -71 [ 315.130543][ T7597] usb 2-1: USB disconnect, device number 10 [ 316.148465][ T7694] vivid-003: disconnect [ 316.742658][ T7686] vivid-003: reconnect [ 316.893195][ T7698] capability: warning: `syz.5.383' uses 32-bit capabilities (legacy support in use) [ 318.431259][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.437681][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.890816][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 336.115171][ T7827] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 336.871370][ T5816] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 337.081053][ T5816] usb 3-1: Using ep0 maxpacket: 16 [ 337.179061][ T5816] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.332133][ T5816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 337.417394][ T5816] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 337.523793][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.663287][ T5816] usb 3-1: config 0 descriptor?? [ 337.965055][ T7851] netlink: 'syz.1.409': attribute type 39 has an invalid length. [ 338.750056][ T5816] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 338.780819][ T5816] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 338.790326][ T5816] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 338.811085][ T5816] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 338.833396][ T5816] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 338.877616][ T5816] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 339.121686][ C0] usb 3-1: input irq status -75 received [ 339.643825][ T5816] usb 3-1: USB disconnect, device number 7 [ 340.343555][ T7863] fido_id[7863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 341.411501][ T5780] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 345.728183][ T7922] netlink: 'syz.5.425': attribute type 39 has an invalid length. [ 345.971928][ T5780] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 347.060813][ T787] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 347.422706][ T787] usb 5-1: Using ep0 maxpacket: 32 [ 347.543241][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.693289][ T787] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.734247][ T787] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 347.961639][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.970203][ T787] usb 5-1: Product: syz [ 347.974935][ T787] usb 5-1: Manufacturer: syz [ 347.979602][ T787] usb 5-1: SerialNumber: syz [ 348.033685][ T787] usb 5-1: config 0 descriptor?? [ 348.939149][ T5816] usb 5-1: USB disconnect, device number 4 [ 351.621011][ T7979] netlink: 'syz.4.440': attribute type 39 has an invalid length. [ 353.487393][ T5780] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 353.966237][ T7993] netlink: 32 bytes leftover after parsing attributes in process `syz.2.441'. [ 355.794296][ T7999] vivid-004: disconnect [ 355.900424][ T7994] vivid-004: reconnect [ 356.528920][ T8004] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 356.535489][ T8004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 356.621561][ T8004] vhci_hcd vhci_hcd.0: Device attached [ 357.195774][ T7597] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 358.207542][ T5780] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 358.993810][ T8037] netlink: 'syz.2.451': attribute type 39 has an invalid length. [ 359.407509][ T8048] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 359.414098][ T8048] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 359.436908][ T8048] vhci_hcd vhci_hcd.0: Device attached [ 359.484426][ T8007] vhci_hcd: connection reset by peer [ 359.492614][ T3456] vhci_hcd: stop threads [ 359.498215][ T3456] vhci_hcd: release socket [ 359.510625][ T3456] vhci_hcd: disconnect device [ 359.526114][ T8049] vhci_hcd: connection closed [ 359.526382][ T56] vhci_hcd: stop threads [ 359.546691][ T56] vhci_hcd: release socket [ 359.558440][ T56] vhci_hcd: disconnect device [ 359.710946][ T787] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 359.910861][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 359.918076][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.935293][ T787] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.953269][ T787] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 359.962774][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.971211][ T787] usb 2-1: Product: syz [ 359.975419][ T787] usb 2-1: Manufacturer: syz [ 359.980572][ T787] usb 2-1: SerialNumber: syz [ 359.993374][ T787] usb 2-1: config 0 descriptor?? [ 360.344824][ T8065] vivid-001: disconnect [ 360.764536][ T5816] usb 2-1: USB disconnect, device number 11 [ 360.921811][ T8060] vivid-001: reconnect [ 362.138304][ T5780] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 362.417351][ T7597] vhci_hcd: vhci_device speed not set [ 363.082930][ T5780] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 363.991814][ T8098] binder: 8097:8098 ioctl c0306201 2000000001c0 returned -14 [ 365.413912][ T8106] usb usb8: usbfs: process 8106 (syz.1.464) did not claim interface 3 before use [ 366.272457][ T5780] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 367.162752][ T5780] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 367.585954][ T5780] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 368.394313][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.470'. [ 372.609755][ T5780] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 373.566434][ T5780] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 374.421207][ T8177] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 375.943061][ T5784] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 376.262543][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 376.273804][ T5784] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.288640][ T5784] usb 2-1: config 0 interface 0 has no altsetting 0 [ 376.332270][ T5786] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 376.340930][ T5784] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 376.491492][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.666172][ T5784] usb 2-1: config 0 descriptor?? [ 377.095715][ T5786] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 377.588432][ T8209] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 377.602058][ T8209] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.770197][ T8209] vhci_hcd vhci_hcd.0: Device attached [ 377.810028][ T5784] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 377.820141][ T5784] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 377.828016][ T5784] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 377.843161][ T5784] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 377.911321][ T5784] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 378.011781][ T8210] vhci_hcd: connection closed [ 378.012954][ T5982] vhci_hcd: stop threads [ 378.044652][ T5982] vhci_hcd: release socket [ 378.050805][ T23] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 378.059760][ T5982] vhci_hcd: disconnect device [ 378.082292][ C1] usb 2-1: input irq status -75 received [ 378.101408][ T23] usb 41-1: enqueue for inactive port 0 [ 378.210874][ T23] vhci_hcd: vhci_device speed not set [ 378.240802][ T7597] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 378.539942][ T7597] usb 3-1: unable to get BOS descriptor or descriptor too short [ 378.612476][ T7597] usb 3-1: not running at top speed; connect to a high speed hub [ 378.806297][ T7597] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.834163][ T7597] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 378.850998][ T7597] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.ff [ 378.865711][ T7597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.886383][ T7597] usb 3-1: Product: syz [ 378.920754][ T7597] usb 3-1: Manufacturer: syz [ 378.935665][ T7597] usb 3-1: SerialNumber: syz [ 378.954096][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.960481][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.483569][ T969] usb 2-1: USB disconnect, device number 12 [ 379.529704][ T8227] bridge1: entered promiscuous mode [ 379.698002][ T8227] bridge1: entered allmulticast mode [ 380.658504][ T7597] usb 3-1: USB disconnect, device number 8 [ 380.982641][ T5786] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 381.687419][ T8245] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 381.700931][ T8245] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 381.731211][ T8245] vhci_hcd vhci_hcd.0: Device attached [ 381.816354][ T8246] vhci_hcd: connection closed [ 381.818618][ T744] vhci_hcd: stop threads [ 381.848344][ T744] vhci_hcd: release socket [ 381.852986][ T744] vhci_hcd: disconnect device [ 381.900790][ T5786] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 382.810421][ T8262] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 382.990763][ T7597] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 385.047672][ T8264] vivid-000: disconnect [ 385.052171][ T8263] vivid-000: reconnect [ 385.120868][ T7597] usb 5-1: Using ep0 maxpacket: 16 [ 385.132815][ T7597] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.144890][ T7597] usb 5-1: config 0 interface 0 has no altsetting 0 [ 385.151718][ T7597] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 385.160810][ T7597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.173353][ T7597] usb 5-1: config 0 descriptor?? [ 385.341434][ T5786] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 385.670025][ T7597] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 385.686370][ T7597] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 385.693984][ T7597] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 385.704263][ T7597] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 385.887360][ C0] usb 5-1: input irq status -75 received [ 386.046063][ T8287] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 386.052656][ T8287] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 386.060905][ T8287] vhci_hcd vhci_hcd.0: Device attached [ 386.105067][ T8288] vhci_hcd: connection closed [ 386.106320][ T744] vhci_hcd: stop threads [ 386.137008][ T744] vhci_hcd: release socket [ 386.154927][ T744] vhci_hcd: disconnect device [ 386.630977][ T5784] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 387.082864][ T8298] vivid-000: disconnect [ 387.087573][ T8297] vivid-000: reconnect [ 388.702671][ T5784] usb 6-1: Using ep0 maxpacket: 32 [ 388.720217][ T5784] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.264257][ T5784] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 389.347886][ T5784] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 389.387734][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.396271][ T23] usb 5-1: USB disconnect, device number 5 [ 389.419688][ T5786] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 389.460792][ T5784] usb 6-1: Product: syz [ 389.510836][ T5784] usb 6-1: Manufacturer: syz [ 389.515445][ T5784] usb 6-1: SerialNumber: syz [ 389.658556][ T5784] usb 6-1: config 0 descriptor?? [ 389.757738][ T5784] usb 6-1: can't set config #0, error -71 [ 389.914325][ T5784] usb 6-1: USB disconnect, device number 5 [ 391.815248][ T8323] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 391.821800][ T8323] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 391.870265][ T8323] vhci_hcd vhci_hcd.0: Device attached [ 391.882949][ T8328] vhci_hcd: connection closed [ 391.883180][ T3456] vhci_hcd: stop threads [ 391.909085][ T3456] vhci_hcd: release socket [ 391.930131][ T3456] vhci_hcd: disconnect device [ 392.046099][ T5786] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 392.171024][ T787] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 392.361366][ T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 393.270875][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 393.290620][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 393.298789][ T787] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.310302][ T787] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.317895][ T787] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 393.328284][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.412755][ T23] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 393.422049][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.441267][ T23] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 393.461586][ T787] usb 5-1: config 0 descriptor?? [ 393.468486][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.570373][ T23] usb 6-1: Product: syz [ 393.591939][ T23] usb 6-1: Manufacturer: syz [ 393.645361][ T23] usb 6-1: SerialNumber: syz [ 393.807418][ T23] usb 6-1: config 0 descriptor?? [ 394.406404][ T787] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 394.620922][ T787] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 394.628410][ T787] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 394.660346][ T787] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 394.746713][ C1] usb 5-1: input irq status -75 received [ 394.761761][ T8356] tmpfs: Bad value for 'mpol' [ 394.923538][ T787] usb 5-1: USB disconnect, device number 6 [ 395.291234][ T5816] usb 6-1: USB disconnect, device number 6 [ 396.221167][ T8358] fido_id[8358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 398.466435][ T8376] netlink: 'syz.5.546': attribute type 39 has an invalid length. [ 398.614455][ T8371] xt_hashlimit: size too large, truncated to 1048576 [ 398.844748][ T8385] netlink: 'syz.2.549': attribute type 39 has an invalid length. [ 400.931059][ T969] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 401.060912][ T787] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 401.286040][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 401.321375][ T969] usb 6-1: Using ep0 maxpacket: 32 [ 401.331348][ T787] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.337768][ T969] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.355828][ T969] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 401.378074][ T787] usb 5-1: config 0 interface 0 has no altsetting 0 [ 401.395322][ T969] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 401.406893][ T969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.416025][ T969] usb 6-1: Product: syz [ 401.421415][ T969] usb 6-1: Manufacturer: syz [ 401.427375][ T787] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 401.427733][ T969] usb 6-1: SerialNumber: syz [ 401.458478][ T969] usb 6-1: config 0 descriptor?? [ 401.496166][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.531948][ T787] usb 5-1: config 0 descriptor?? [ 401.850344][ T969] usb 6-1: USB disconnect, device number 7 [ 402.049960][ T787] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 402.057658][ T787] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 402.066532][ T787] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 402.090069][ T787] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 402.347952][ C1] usb 5-1: input irq status -75 received [ 405.260427][ T787] usb 5-1: USB disconnect, device number 7 [ 407.231999][ T8446] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 407.238581][ T8446] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 407.251469][ T8446] vhci_hcd vhci_hcd.0: Device attached [ 407.280645][ T8447] vhci_hcd: connection closed [ 407.286885][ T11] vhci_hcd: stop threads [ 407.302666][ T11] vhci_hcd: release socket [ 407.307120][ T11] vhci_hcd: disconnect device [ 407.312503][ T8451] vivid-004: disconnect [ 407.501270][ T5816] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 407.740913][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 407.820121][ T5816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.917056][ T5816] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 408.052655][ T5816] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 408.143666][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.187455][ T8440] vivid-004: reconnect [ 408.191657][ T5816] usb 3-1: Product: syz [ 408.196327][ T5816] usb 3-1: Manufacturer: syz [ 408.250195][ T5816] usb 3-1: SerialNumber: syz [ 408.264799][ T5816] usb 3-1: config 0 descriptor?? [ 408.560797][ T969] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 410.270744][ T969] usb 6-1: Using ep0 maxpacket: 16 [ 410.282900][ T969] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.301632][ T969] usb 6-1: config 0 interface 0 has no altsetting 0 [ 410.319282][ T969] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 410.337758][ T969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.364678][ T969] usb 6-1: config 0 descriptor?? [ 410.429818][ T23] usb 3-1: USB disconnect, device number 9 [ 410.877689][ T969] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 411.499971][ T969] usb 6-1: USB disconnect, device number 8 [ 411.982190][ T8476] fido_id[8476]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 412.133735][ T8482] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 412.140293][ T8482] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 412.149433][ T8482] vhci_hcd vhci_hcd.0: Device attached [ 412.210316][ T8483] vhci_hcd: connection closed [ 412.213179][ T6772] vhci_hcd: stop threads [ 412.222764][ T6772] vhci_hcd: release socket [ 412.227390][ T6772] vhci_hcd: disconnect device [ 414.183181][ T8502] vivid-003: disconnect [ 414.474377][ T8488] vivid-003: reconnect [ 414.631666][ T7597] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 414.982811][ T7597] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 52, changing to 4 [ 415.022795][ T7597] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 56, setting to 0 [ 415.037872][ T7597] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 415.052445][ T7597] usb 3-1: string descriptor 0 read error: -22 [ 415.058746][ T7597] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.080724][ T7597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.821900][ T7597] usb 3-1: low speed audio streaming not supported [ 415.829201][ T7597] usb 3-1: low speed audio streaming not supported [ 416.033529][ T8514] netlink: 'syz.4.588': attribute type 39 has an invalid length. [ 416.057233][ T787] usb 3-1: USB disconnect, device number 10 [ 417.566155][ T8527] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 417.572755][ T8527] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 417.587078][ T8527] vhci_hcd vhci_hcd.0: Device attached [ 418.066192][ T8528] vhci_hcd: connection closed [ 418.066458][ T12] vhci_hcd: stop threads [ 418.079069][ T12] vhci_hcd: release socket [ 418.085217][ T12] vhci_hcd: disconnect device [ 419.848391][ T8551] netlink: 'syz.1.600': attribute type 39 has an invalid length. [ 422.311279][ T8578] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 422.317823][ T8578] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 422.334991][ T8578] vhci_hcd vhci_hcd.0: Device attached [ 422.352334][ T8579] vhci_hcd: connection closed [ 422.511564][ T744] vhci_hcd: stop threads [ 422.520746][ T744] vhci_hcd: release socket [ 422.525339][ T744] vhci_hcd: disconnect device [ 425.005653][ T8591] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 425.037115][ T8593] netlink: 'syz.2.611': attribute type 39 has an invalid length. [ 428.938321][ T7597] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 429.133111][ T8628] netlink: 'syz.5.623': attribute type 39 has an invalid length. [ 429.147252][ T7597] usb 2-1: Using ep0 maxpacket: 32 [ 429.302984][ T7597] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.321646][ T7597] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 429.334590][ T7597] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 429.344061][ T7597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.353213][ T7597] usb 2-1: Product: syz [ 429.415923][ T7597] usb 2-1: Manufacturer: syz [ 429.420675][ T7597] usb 2-1: SerialNumber: syz [ 429.898822][ T7597] usb 2-1: config 0 descriptor?? [ 434.938656][ T787] usb 2-1: USB disconnect, device number 13 [ 435.228006][ T5786] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 435.418558][ T8658] vivid-000: disconnect [ 437.432056][ T8649] vivid-000: reconnect [ 437.593628][ T8672] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 437.600170][ T8672] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 437.638909][ T8672] vhci_hcd vhci_hcd.0: Device attached [ 437.702744][ T8674] vhci_hcd: connection closed [ 437.703458][ T3456] vhci_hcd: stop threads [ 437.727353][ T3456] vhci_hcd: release socket [ 437.737638][ T3456] vhci_hcd: disconnect device [ 438.279589][ T7597] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 439.048055][ T7597] usb 2-1: Using ep0 maxpacket: 32 [ 439.096383][ T7597] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.116499][ T5786] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 439.120959][ T7597] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 439.140408][ T7597] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 439.151189][ T7597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.159225][ T7597] usb 2-1: Product: syz [ 439.163558][ T7597] usb 2-1: Manufacturer: syz [ 439.168182][ T7597] usb 2-1: SerialNumber: syz [ 439.192121][ T7597] usb 2-1: config 0 descriptor?? [ 441.014280][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.020627][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.437091][ T9] usb 2-1: USB disconnect, device number 14 [ 443.311254][ T8723] vivid-003: disconnect [ 443.317025][ T5786] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 443.317567][ T8717] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 443.331050][ T8717] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 443.341721][ T8717] vhci_hcd vhci_hcd.0: Device attached [ 443.354578][ T8719] vhci_hcd: connection closed [ 443.877163][ T8710] vivid-003: reconnect [ 444.210780][ T3456] vhci_hcd: stop threads [ 444.215086][ T3456] vhci_hcd: release socket [ 444.230838][ T23] usb 44-1: SetAddress Request (2) to port 0 [ 444.236940][ T23] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 444.260808][ T3456] vhci_hcd: disconnect device [ 444.323504][ T23] usb 44-1: enqueue for inactive port 0 [ 445.612778][ T23] usb usb44-port1: attempt power cycle [ 446.264106][ T23] usb usb44-port1: unable to enumerate USB device [ 447.860026][ T8754] batman_adv: batadv0: Adding interface: dummy0 [ 447.866412][ T8754] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.891649][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.897938][ T8754] batman_adv: batadv0: Interface activated: dummy0 [ 448.830826][ T5786] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 448.956512][ T8765] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 454.009997][ T5786] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 455.965665][ T8821] wg1: entered promiscuous mode [ 455.977680][ T8821] wg1: entered allmulticast mode [ 458.723251][ T8829] vivid-004: disconnect [ 458.836531][ T8814] vivid-004: reconnect [ 459.030890][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 459.096560][ T5786] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 459.221198][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 460.057798][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.238681][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 460.274071][ T9] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 460.284061][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.298122][ T9] usb 2-1: Product: syz [ 460.305235][ T9] usb 2-1: Manufacturer: syz [ 460.322896][ T9] usb 2-1: SerialNumber: syz [ 460.350598][ T9] usb 2-1: config 0 descriptor?? [ 461.354338][ T23] usb 2-1: USB disconnect, device number 15 [ 461.572655][ T8854] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 467.162759][ T5786] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 468.396021][ T8888] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 469.765800][ T8892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.774131][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 469.869672][ T8892] batadv_slave_1: entered promiscuous mode [ 470.191199][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 470.352711][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.399908][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 470.432068][ T9] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 470.449688][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.460695][ T9] usb 3-1: Product: syz [ 470.472084][ T9] usb 3-1: Manufacturer: syz [ 470.476712][ T9] usb 3-1: SerialNumber: syz [ 470.523359][ T9] usb 3-1: config 0 descriptor?? [ 470.774021][ T5786] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 471.942181][ T5786] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 471.961064][ T5786] Bluetooth: hci3: Injecting HCI hardware error event [ 471.969098][ T5780] Bluetooth: hci3: hardware error 0x00 [ 472.963406][ T969] usb 3-1: USB disconnect, device number 11 [ 475.050865][ T5780] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 477.394811][ T5780] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 478.191000][ T27] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 478.961023][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 478.980366][ T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.052839][ T27] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 479.094341][ T27] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 479.110881][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.126801][ T27] usb 6-1: Product: syz [ 479.299257][ T27] usb 6-1: Manufacturer: syz [ 479.304763][ T27] usb 6-1: SerialNumber: syz [ 479.311898][ T27] usb 6-1: config 0 descriptor?? [ 481.887175][ T787] usb 6-1: USB disconnect, device number 9 [ 482.310495][ T8991] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 486.008703][ T9028] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 496.007793][ T9082] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 501.326592][ T9114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.762'. [ 501.778657][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.786394][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.174224][ T9155] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 507.180884][ T9155] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 507.232796][ T9155] vhci_hcd vhci_hcd.0: Device attached [ 507.729594][ T9158] vhci_hcd: connection closed [ 507.729851][ T744] vhci_hcd: stop threads [ 507.740354][ T27] usb 38-1: SetAddress Request (6) to port 0 [ 507.761044][ T744] vhci_hcd: release socket [ 507.785301][ T744] vhci_hcd: disconnect device [ 507.794640][ T27] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 507.861076][ T27] usb 38-1: enqueue for inactive port 0 [ 508.961486][ T27] usb usb38-port1: attempt power cycle [ 509.654414][ T27] usb usb38-port1: unable to enumerate USB device [ 511.510802][ T9193] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 511.517407][ T9193] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 512.001295][ T9193] vhci_hcd vhci_hcd.0: Device attached [ 512.150086][ T9196] vhci_hcd: connection closed [ 512.150421][ T8934] vhci_hcd: stop threads [ 512.159755][ T8934] vhci_hcd: release socket [ 512.220696][ T8934] vhci_hcd: disconnect device [ 517.175375][ T9239] netlink: 'syz.5.803': attribute type 39 has an invalid length. [ 519.512516][ T9275] netlink: 'syz.5.815': attribute type 39 has an invalid length. [ 522.023429][ T9289] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 524.913702][ T9318] netlink: 'syz.2.826': attribute type 39 has an invalid length. [ 526.198831][ T9329] netlink: 32 bytes leftover after parsing attributes in process `syz.5.828'. [ 530.592331][ T9355] netlink: 'syz.1.838': attribute type 39 has an invalid length. [ 532.243107][ T9371] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 532.249657][ T9371] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 532.267635][ T9371] vhci_hcd vhci_hcd.0: Device attached [ 532.304809][ T9372] vhci_hcd: connection closed [ 532.305162][ T49] vhci_hcd: stop threads [ 532.337020][ T49] vhci_hcd: release socket [ 532.345224][ T49] vhci_hcd: disconnect device [ 532.480835][ T9377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.843'. [ 534.691277][ T9383] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 537.585982][ T9406] netlink: 'syz.5.850': attribute type 39 has an invalid length. [ 538.093689][ T9414] wg1: entered promiscuous mode [ 538.098606][ T9414] wg1: entered allmulticast mode [ 545.745344][ T9455] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 555.362874][ T9499] netlink: 32 bytes leftover after parsing attributes in process `syz.5.874'. [ 561.324363][ T9521] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 563.215433][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.221858][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.472984][ T9535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.885'. [ 573.022000][ T9562] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 574.199148][ T9579] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 580.948660][ T9626] vivid-000: disconnect [ 581.543331][ T9618] vivid-000: reconnect [ 583.893518][ T9640] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 583.900064][ T9640] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 584.303301][ T9640] vhci_hcd vhci_hcd.0: Device attached [ 584.365491][ T9641] vhci_hcd: connection closed [ 584.366038][ T11] vhci_hcd: stop threads [ 584.394348][ T11] vhci_hcd: release socket [ 584.399153][ T11] vhci_hcd: disconnect device [ 585.932944][ T9667] vivid-004: disconnect [ 586.540752][ T9657] vivid-004: reconnect [ 589.624737][ T9686] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 589.631306][ T9686] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 589.639188][ T9686] vhci_hcd vhci_hcd.0: Device attached [ 590.080422][ T9687] vhci_hcd: connection closed [ 590.080876][ T5982] vhci_hcd: stop threads [ 590.090105][ T5982] vhci_hcd: release socket [ 590.095213][ T5982] vhci_hcd: disconnect device [ 595.459730][ T9728] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 595.466302][ T9728] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 595.479190][ T9728] vhci_hcd vhci_hcd.0: Device attached [ 595.547195][ T9729] vhci_hcd: connection closed [ 595.547356][ T3456] vhci_hcd: stop threads [ 595.558901][ T3456] vhci_hcd: release socket [ 595.569791][ T3456] vhci_hcd: disconnect device [ 604.080959][ T5815] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 604.384639][ T5815] usb 5-1: Using ep0 maxpacket: 32 [ 604.425092][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.451487][ T5815] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 604.753522][ T5815] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 604.776135][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.795362][ T5815] usb 5-1: Product: syz [ 604.804774][ T5815] usb 5-1: Manufacturer: syz [ 604.814171][ T5815] usb 5-1: SerialNumber: syz [ 604.832299][ T5815] usb 5-1: config 0 descriptor?? [ 607.205971][ T969] usb 5-1: USB disconnect, device number 8 [ 608.586024][ T9821] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 609.491164][ T9823] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 609.497703][ T9823] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 609.560833][ T9823] vhci_hcd vhci_hcd.0: Device attached [ 609.582528][ T9825] vhci_hcd: connection closed [ 609.583307][ T5982] vhci_hcd: stop threads [ 609.605619][ T5982] vhci_hcd: release socket [ 609.610181][ T5982] vhci_hcd: disconnect device [ 616.663528][ T9878] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 616.670100][ T9878] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 616.720821][ T9878] vhci_hcd vhci_hcd.0: Device attached [ 616.778431][ T9879] vhci_hcd: connection closed [ 616.778772][ T1131] vhci_hcd: stop threads [ 616.793575][ T1131] vhci_hcd: release socket [ 616.829267][ T1131] vhci_hcd: disconnect device [ 618.271778][ T9894] netlink: 'syz.5.989': attribute type 39 has an invalid length. [ 618.311658][ T9896] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 623.371766][ T9918] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 623.378316][ T9918] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 623.419339][ T9918] vhci_hcd vhci_hcd.0: Device attached [ 623.437442][ T9919] vhci_hcd: connection closed [ 623.447002][ T3456] vhci_hcd: stop threads [ 623.480053][ T3456] vhci_hcd: release socket [ 623.500377][ T3456] vhci_hcd: disconnect device [ 623.829772][ T9925] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 624.711773][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.718134][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.975969][ T9937] overlayfs: missing 'lowerdir' [ 634.036050][ T9977] Bluetooth: MGMT ver 1.22 [ 634.184739][ T9977] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.863671][ T9976] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 636.810876][ T5786] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 636.822209][ T5786] Bluetooth: hci2: command 0x0401 tx timeout [ 650.300262][T10045] syz.5.1026 uses obsolete (PF_INET,SOCK_PACKET) [ 662.450717][ T23] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 662.791245][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 662.808010][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 662.832453][ T23] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 662.859863][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.870964][ T23] usb 6-1: Product: syz [ 662.875164][ T23] usb 6-1: Manufacturer: syz [ 662.890057][ T23] usb 6-1: SerialNumber: syz [ 663.680067][ T23] usb 6-1: config 0 descriptor?? [ 663.701187][ T23] hub 6-1:0.0: bad descriptor, ignoring hub [ 663.707400][ T23] hub: probe of 6-1:0.0 failed with error -5 [ 663.733405][ T23] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 666.074552][T10113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.254053][ T27] usb 6-1: USB disconnect, device number 10 [ 666.445678][T10150] udevd[10150]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.476137][T10210] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 686.096150][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.291296][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.848737][T10303] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 692.479382][T10328] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 695.910682][ T5784] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 696.210959][ T5784] usb 5-1: Using ep0 maxpacket: 8 [ 696.281325][ T5784] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 696.320683][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.434431][ T5784] pvrusb2: Hardware description: Terratec Grabster AV400 [ 696.470713][ T5784] pvrusb2: ********** [ 696.490990][ T5784] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 696.520846][ T5784] pvrusb2: Important functionality might not be entirely working. [ 696.538885][ T5784] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 696.571073][ T5784] pvrusb2: ********** [ 696.681406][ T2323] pvrusb2: Invalid write control endpoint [ 698.341227][T10360] pvrusb2: Killing an I2C write to 3 that is too large (desired=62 limit=61) [ 698.418370][ T2323] pvrusb2: Invalid write control endpoint [ 698.473473][ T9] usb 5-1: USB disconnect, device number 9 [ 698.530726][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 698.610714][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 698.655955][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 698.695117][ T2323] pvrusb2: Device being rendered inoperable [ 698.732779][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 698.740198][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 698.844072][ T2323] pvrusb2: Attached sub-driver cx25840 [ 698.864445][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 700.730660][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 701.757489][T10375] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 705.822573][T10388] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 712.309632][T10423] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1095'. [ 715.043165][T10425] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 720.926747][T10473] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 721.192872][T10476] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 729.707695][T10518] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1124'. [ 729.825110][T10519] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 736.513405][T10539] syz.2.1132 (10539) used greatest stack depth: 17896 bytes left [ 740.171001][ T5780] Bluetooth: hci2: command 0x0401 tx timeout [ 740.177193][ T5786] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 744.316873][T10585] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 744.861040][T10589] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1135'. [ 747.793143][T10598] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.705419][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.711920][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.137803][ T5815] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 749.358137][ T5815] usb 6-1: config 0 has no interfaces? [ 749.371492][ T5815] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 749.390673][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.408961][ T5815] usb 6-1: Product: syz [ 749.418007][ T5815] usb 6-1: Manufacturer: syz [ 749.435045][ T5815] usb 6-1: SerialNumber: syz [ 749.452522][ T5815] usb 6-1: config 0 descriptor?? [ 755.252125][ T5784] usb 6-1: USB disconnect, device number 11 [ 762.891658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.245938][T10694] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 770.343780][T10719] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1182'. [ 777.670811][ T969] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 778.528491][ T969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.780552][ T969] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 778.821597][ T969] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 778.852459][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.860497][ T969] usb 3-1: Product: syz [ 778.864758][ T969] usb 3-1: Manufacturer: syz [ 778.869387][ T969] usb 3-1: SerialNumber: syz [ 778.890730][ T969] usb 3-1: config 0 descriptor?? [ 779.273935][ T5815] usb 3-1: USB disconnect, device number 12 [ 782.010647][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 784.240622][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 785.273726][ T9] usb 3-1: device descriptor read/all, error -71 [ 805.440867][ T5815] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 805.653960][ T5815] usb 3-1: unable to get BOS descriptor or descriptor too short [ 805.690826][ T5784] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 806.351773][ T5815] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.380712][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 806.392231][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 806.402393][ T5815] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 806.446060][ T5815] usb 3-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 806.460869][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.469065][ T5815] usb 3-1: Product: syz [ 806.473438][ T5815] usb 3-1: Manufacturer: syz [ 806.478067][ T5815] usb 3-1: SerialNumber: syz [ 806.580625][ T5784] usb 5-1: Using ep0 maxpacket: 16 [ 806.590975][ T5784] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 806.652835][ T5784] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 806.667867][ T5784] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.714120][ T5784] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 806.733216][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.764743][ T5784] usb 5-1: config 0 descriptor?? [ 806.778411][T10942] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 806.798336][ T5784] pxrc 5-1:0.0: Could not find endpoint [ 806.827918][ T5784] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 806.901451][ T5815] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 806.923730][ T5815] usb 3-1: MIDIStreaming interface descriptor not found [ 807.135903][ T5815] usb 3-1: USB disconnect, device number 15 [ 808.776771][ T9] usb 5-1: USB disconnect, device number 10 [ 808.975206][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.981819][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.135441][T10979] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1247'. [ 813.370315][T10996] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1253'. [ 818.541760][T11031] random: crng reseeded on system resumption [ 819.106102][T11043] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1263'. [ 822.793177][T11071] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1267'. [ 829.601517][T11099] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 833.402652][T11115] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.515518][T11119] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1273'. [ 835.480207][T11118] autofs4:pid:11118:autofs_fill_super: called with bogus options [ 847.657364][T11198] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.867560][T11240] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1304'. [ 858.669456][T11269] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 863.723018][ T5786] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 863.968647][T11333] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1342'. [ 867.705530][T11377] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1354'. [ 870.416542][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.423890][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.479546][T11422] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1366'. [ 876.643518][T11465] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1379'. [ 878.183849][T11486] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 878.221054][T11486] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 880.575594][T11501] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 881.120585][ T5815] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 881.913921][ T5815] usb 3-1: unable to get BOS descriptor or descriptor too short [ 881.943818][ T5815] usb 3-1: not running at top speed; connect to a high speed hub [ 881.971312][ T5815] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.002043][ T5815] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 882.040554][ T5815] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 882.070058][ T5815] usb 3-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 882.087283][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.160669][ T5815] usb 3-1: Product: syz [ 882.164905][ T5815] usb 3-1: Manufacturer: syz [ 882.169531][ T5815] usb 3-1: SerialNumber: syz [ 883.205033][ T5784] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 883.224352][ T5815] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 883.245306][ T5815] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 883.301259][ T5784] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 884.380919][ T5815] usb 3-1: USB disconnect, device number 16 [ 884.417651][T11542] fido_id[11542]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 884.776890][T11554] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1402'. [ 885.766976][T11560] udevd[11560]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 886.930136][T11575] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1408'. [ 889.105509][T11603] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1415'. [ 890.252328][T11615] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1418'. [ 894.753622][T11629] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1421'. [ 897.432822][T11661] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1430'. [ 900.884713][T11682] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.1435'. [ 901.367902][T11688] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 903.143684][T11712] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1442'. [ 914.579548][T11764] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1452'. [ 918.172462][T11795] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1465'. [ 920.252183][T11804] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1467'. [ 925.493356][T11820] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1471'. [ 926.160670][ T27] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 927.032097][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 927.053368][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.206318][ T27] usb 5-1: config 0 has no interfaces? [ 927.233815][ T27] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 927.254484][T11841] fuse: Unknown parameter 'grou00000000000000000000' [ 927.271830][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.302332][T11843] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1475'. [ 927.967067][ T27] usb 5-1: Product: syz [ 927.980883][ T27] usb 5-1: Manufacturer: syz [ 928.001408][ T27] usb 5-1: SerialNumber: syz [ 928.011660][ T27] usb 5-1: config 0 descriptor?? [ 928.240941][T11826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.023264][T11826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.081886][ T969] usb 5-1: USB disconnect, device number 11 [ 930.641371][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 931.854548][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.710795][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.699778][ T9] usb 3-1: device descriptor read/all, error -71 [ 937.941686][T11874] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 940.202599][T11889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 940.215552][T11889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 940.223358][T11889] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 940.232426][T11889] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 940.240293][T11889] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 940.248998][T11889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 940.445463][T11893] fuse: Unknown parameter 'grou00000000000000000000' [ 942.343669][T11889] Bluetooth: hci0: command tx timeout [ 944.073251][ T744] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.630664][T11889] Bluetooth: hci0: command tx timeout [ 945.072760][T11885] chnl_net:caif_netlink_parms(): no params data found [ 945.133884][T11916] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1483'. [ 946.790644][T11889] Bluetooth: hci0: command tx timeout [ 947.017552][ T744] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.866195][ T744] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.086716][T11889] Bluetooth: hci0: command tx timeout [ 949.210818][ T744] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.476595][T11885] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.484155][T11885] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.493292][T11885] bridge_slave_0: entered allmulticast mode [ 949.500889][T11885] bridge_slave_0: entered promiscuous mode [ 949.513321][T11945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1499'. [ 949.568538][T11885] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.578659][T11885] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.598909][T11885] bridge_slave_1: entered allmulticast mode [ 949.613268][T11885] bridge_slave_1: entered promiscuous mode [ 949.733650][T11885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.769555][T11885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.711172][T11885] team0: Port device team_slave_0 added [ 950.743279][T11885] team0: Port device team_slave_1 added [ 950.911154][T11885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.918286][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.953270][T11885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.143307][T11885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.150319][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.445894][T11885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.281406][T11885] hsr_slave_0: entered promiscuous mode [ 954.351018][T11885] hsr_slave_1: entered promiscuous mode [ 954.401613][T11885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 954.459332][T11885] Cannot create hsr debugfs directory [ 956.766163][T11979] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1505'. [ 959.470636][ T27] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 959.665149][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 959.701687][ T27] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 959.717307][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.762098][ T27] usb 3-1: config 0 descriptor?? [ 959.816291][ T27] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 959.839052][T11885] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 959.855929][ T27] gm12u320: probe of 3-1:0.0 failed with error -5 [ 959.882658][ T27] usb-storage 3-1:0.0: USB Mass Storage device detected [ 959.928452][ T27] usb-storage 3-1:0.0: device ignored [ 959.933965][T11885] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 959.956537][T11885] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 960.009363][T11885] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 960.770973][ T27] usb 3-1: USB disconnect, device number 19 [ 960.962873][ T744] hsr_slave_0: left promiscuous mode [ 960.993252][ T744] hsr_slave_1: left promiscuous mode [ 961.037863][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.050549][ T744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.071176][ T744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.087923][ T744] bridge_slave_1: left allmulticast mode [ 961.100797][ T744] bridge_slave_1: left promiscuous mode [ 961.106623][ T744] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.128843][ T744] bridge_slave_0: left allmulticast mode [ 961.150579][ T744] bridge_slave_0: left promiscuous mode [ 961.156380][ T744] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.092790][ T744] veth1_macvtap: left promiscuous mode [ 963.098404][ T744] veth0_macvtap: left promiscuous mode [ 963.128779][ T744] veth1_vlan: left promiscuous mode [ 963.140964][ T744] veth0_vlan: left promiscuous mode [ 966.625474][ T744] team0 (unregistering): Port device team_slave_1 removed [ 966.679184][ T744] team0 (unregistering): Port device team_slave_0 removed [ 966.723964][ T744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.771588][ T744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.067456][ T744] bond0 (unregistering): Released all slaves [ 967.286015][T12051] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1513'. [ 967.593716][T11885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.675290][T11885] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.718108][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.725344][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.866775][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.873966][ T8934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.139648][ T744] IPVS: stop unused estimator thread 0... [ 970.416120][T12085] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 971.427415][T11885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.443131][T12102] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1521'. [ 974.286284][T12116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1523'. [ 974.582550][T11885] veth0_vlan: entered promiscuous mode [ 974.653848][T11885] veth1_vlan: entered promiscuous mode [ 974.784224][T11885] veth0_macvtap: entered promiscuous mode [ 974.814944][T11885] veth1_macvtap: entered promiscuous mode [ 974.873417][T11885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.902076][T11885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.919044][T11885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.952468][T11885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.969212][T11885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.457287][T11885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.490323][T11885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.613045][T11885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.640942][ T5815] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 976.663738][T11885] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.689654][T11885] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.718143][T11885] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.736067][T11885] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.889486][ T5815] usb 5-1: config 7 descriptor has 1 excess byte, ignoring [ 976.897059][ T5815] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 976.935088][ T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.947222][ T5815] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 976.976904][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.985113][ T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.002695][ T5815] usb 5-1: Product: syz [ 977.006918][ T5815] usb 5-1: Manufacturer: syz [ 977.026704][ T5815] usb 5-1: SerialNumber: syz [ 977.056897][ T5815] cdc_acm 5-1:7.0: Zero length descriptor references [ 977.082928][ T5815] cdc_acm: probe of 5-1:7.0 failed with error -22 [ 977.096014][ T744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.105559][ T5815] option 5-1:7.0: GSM modem (1-port) converter detected [ 977.127273][ T744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.529937][T12152] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 977.594200][ T5815] usb 5-1: USB disconnect, device number 12 [ 977.607639][ T5815] option 5-1:7.0: device disconnected [ 979.321511][T12171] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1531'. [ 983.982767][T12201] netlink: 304 bytes leftover after parsing attributes in process `syz.6.1535'. [ 987.615986][T12241] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1543'. [ 992.602675][T12261] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 993.306971][T12274] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1548'. [ 993.344025][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.350566][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.840614][T12293] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1553'. [ 998.419301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 999.004718][T12330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.060315][T12330] batadv_slave_1: entered promiscuous mode [ 999.815072][T12337] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1001.595918][T12357] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1563'. [ 1004.239879][T12381] vivid-004: disconnect [ 1004.353338][T12358] vivid-004: reconnect [ 1004.472342][T12382] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1570'. [ 1005.150666][ T5815] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1005.340526][ T5815] usb 7-1: Using ep0 maxpacket: 8 [ 1006.011827][ T5815] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1006.030245][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.050575][ T5815] usb 7-1: config 0 descriptor?? [ 1006.066121][ T5815] gm12u320 7-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 1006.087703][ T5815] gm12u320: probe of 7-1:0.0 failed with error -5 [ 1006.099549][ T5815] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1006.138681][ T5815] usb-storage 7-1:0.0: device ignored [ 1008.198004][T12410] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1008.383934][ T969] usb 7-1: USB disconnect, device number 2 [ 1009.555686][T12428] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1577'. [ 1010.902180][T12443] netlink: 'syz.6.1581': attribute type 1 has an invalid length. [ 1011.455834][T12456] vivid-000: disconnect [ 1013.085626][T12442] vivid-000: reconnect [ 1018.842328][T12486] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1020.178982][T12499] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1590'. [ 1025.906567][T12525] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1026.471677][T12548] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1029.770921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1031.220552][ T23] IPVS: starting estimator thread 0... [ 1031.470733][T12564] IPVS: using max 17 ests per chain, 40800 per kthread [ 1033.610026][T12595] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1604'. [ 1034.004435][T12594] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1035.776821][T12612] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1042.645191][ T5784] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1042.730673][T12645] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1043.590528][ T5784] usb 5-1: Using ep0 maxpacket: 16 [ 1043.640880][ T5784] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1043.693033][ T5784] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1043.724394][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.058862][ T5784] usb 5-1: Product: syz [ 1044.063555][ T5784] usb 5-1: Manufacturer: syz [ 1044.068409][ T5784] usb 5-1: SerialNumber: syz [ 1044.920042][ T5784] usb 5-1: config 0 descriptor?? [ 1045.978811][T12676] vivid-001: disconnect [ 1046.162645][T12665] vivid-001: reconnect [ 1046.218266][ T5784] usb 5-1: USB disconnect, device number 13 [ 1048.022802][T12695] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1054.736638][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.743146][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.045464][T12769] vivid-004: disconnect [ 1062.050084][T12768] vivid-004: reconnect [ 1066.109934][T12799] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1067.076409][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1067.192865][T12803] netlink: 'syz.2.1653': attribute type 39 has an invalid length. [ 1080.335025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1082.072112][T12916] netlink: 'syz.4.1675': attribute type 39 has an invalid length. [ 1082.873601][T12923] vivid-000: disconnect [ 1083.063767][T12921] vivid-000: reconnect [ 1090.572325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1093.554792][T12982] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1116.177934][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.184507][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.521314][ T5784] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1124.659499][ T5784] usb 5-1: Using ep0 maxpacket: 8 [ 1124.681955][ T5784] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.760636][ T5784] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1124.780912][ T5784] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1124.811946][ T5784] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1124.852513][ T5784] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1124.870488][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1124.888758][ T5784] usb 5-1: SerialNumber: syz [ 1124.910284][T13175] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1124.920952][ T5784] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1124.959965][ T5784] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1125.021144][ T5784] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1125.039333][ T5784] scsi host1: usb-storage 5-1:1.0 [ 1125.656765][T13173] syz.4.1753[13173]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1128.405452][ T969] usb 5-1: USB disconnect, device number 14 [ 1130.505864][T13225] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1132.520731][T13240] netlink: 'syz.6.1771': attribute type 39 has an invalid length. [ 1133.439375][T13258] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1776'. [ 1135.137380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1135.600496][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1135.648276][T13283] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1135.790726][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1135.801423][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1135.814539][ T9] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1135.826823][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1135.838695][ T9] usb 6-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1135.851230][ T9] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1135.865421][ T9] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1135.879832][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1135.887969][ T9] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1135.910567][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1135.940405][ T9] usb 6-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1135.960507][ T9] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1135.994544][ T9] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1136.030853][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1136.043964][ T9] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1136.202780][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1136.407771][ T9] usb 6-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1136.559018][ T9] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1136.630488][ T9] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1136.828311][ T9] usb 6-1: string descriptor 0 read error: -22 [ 1136.840782][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1136.849871][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.113349][ T9] usb 6-1: can't set config #168, error -71 [ 1139.316799][ T9] usb 6-1: USB disconnect, device number 12 [ 1139.580618][ T27] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 1139.923800][ T27] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1139.955895][ T27] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 1139.979067][ T27] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1140.015576][ T27] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 1140.049396][ T27] usb 5-1: string descriptor 0 read error: -22 [ 1140.065210][ T27] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1140.080426][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.138289][ T27] usb 5-1: low speed audio streaming not supported [ 1140.150656][ T27] usb 5-1: low speed audio streaming not supported [ 1140.171743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1140.283654][T13314] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1140.463010][ T27] usb 5-1: 6:0: failed to get current value for ch 0 (-22) [ 1140.540676][ T27] usb 5-1: 6:0: cannot get min/max values for control 4 (id 6) [ 1141.211035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1141.584696][ T27] usb 5-1: USB disconnect, device number 15 [ 1141.780465][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1142.251271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1142.562392][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.484379][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.494298][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1143.507443][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1143.516799][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.774180][ T9] usb 7-1: config 0 descriptor?? [ 1143.980887][T13328] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1797'. [ 1144.383250][T13342] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1799'. [ 1144.660699][ T9] usb 7-1: can't set config #0, error -71 [ 1145.033067][ T9] usb 7-1: USB disconnect, device number 3 [ 1145.602485][T13358] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1150.841717][T13420] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1152.350609][ T5784] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1152.470594][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1152.552821][ T5784] usb 5-1: Using ep0 maxpacket: 8 [ 1152.629089][ T5784] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1152.715705][ T5784] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 1152.753412][ T5784] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.821829][ T5784] usb 5-1: config 4 has no interface number 0 [ 1152.911982][ T5784] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1153.119381][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.168767][ T5784] usb 5-1: Product: 䞥犌ꦓ탳뷂濿瓖븯鐒ﺓ [ 1153.200670][ T5784] usb 5-1: Manufacturer: ꂞ筨 [ 1153.611581][ T9] usb 6-1: config 0 has no interfaces? [ 1153.617123][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1153.619796][ T5784] usb 5-1: Found UVC 0.00 device 䞥犌ꦓ탳뷂濿瓖븯鐒ﺓ (04f2:b746) [ 1153.635347][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.800221][ T5784] usb 5-1: No valid video chain found. [ 1153.814398][ T9] usb 6-1: config 0 descriptor?? [ 1153.820061][ T5784] usb 5-1: USB disconnect, device number 16 [ 1156.171327][ T5784] usb 6-1: USB disconnect, device number 13 [ 1156.279017][T13471] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1165.016700][T13528] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1165.024550][T13528] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1171.050555][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1172.110793][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1172.370627][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 1172.387915][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.419348][ T23] usb 3-1: config 0 has no interfaces? [ 1172.432296][ T23] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 1174.033402][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.120752][ T23] usb 3-1: Product: syz [ 1174.124981][ T23] usb 3-1: Manufacturer: syz [ 1174.129615][ T23] usb 3-1: SerialNumber: syz [ 1174.201609][ T23] usb 3-1: config 0 descriptor?? [ 1174.207025][ T23] usb 3-1: can't set config #0, error -71 [ 1174.241721][ T23] usb 3-1: USB disconnect, device number 20 [ 1177.621993][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.629130][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.177809][T13612] sctp: [Deprecated]: syz.2.1871 (pid 13612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1181.177809][T13612] Use struct sctp_sack_info instead [ 1185.680992][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1185.690027][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1185.698112][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1185.706359][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1185.714200][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1185.721590][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1186.974201][T13639] chnl_net:caif_netlink_parms(): no params data found [ 1187.239842][T13639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.310498][T13639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.317760][T13639] bridge_slave_0: entered allmulticast mode [ 1187.358679][T13639] bridge_slave_0: entered promiscuous mode [ 1187.379884][T13639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.420570][T13639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.448143][T13639] bridge_slave_1: entered allmulticast mode [ 1187.463876][T13639] bridge_slave_1: entered promiscuous mode [ 1187.595237][T13639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.623143][T13639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.736834][T13639] team0: Port device team_slave_0 added [ 1187.762867][T13639] team0: Port device team_slave_1 added [ 1187.843106][T13639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.850230][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.878057][ T5786] Bluetooth: hci0: command tx timeout [ 1187.984145][T13639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.002768][T13657] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1882'. [ 1188.252695][T13639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.259662][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.318097][T13639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.566425][T13639] hsr_slave_0: entered promiscuous mode [ 1188.757486][T13639] hsr_slave_1: entered promiscuous mode [ 1191.330544][T11889] Bluetooth: hci0: command tx timeout [ 1191.979663][T13677] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1192.154436][T13639] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1192.205578][T13639] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1192.404008][T13639] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1193.197266][T13639] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1193.370541][T11889] Bluetooth: hci0: command tx timeout [ 1194.574224][T13639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.664586][T13639] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.763635][ T744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.770863][ T744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.842359][ T744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.849562][ T744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.022182][T13639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1195.054762][T13639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1195.460477][T11889] Bluetooth: hci0: command tx timeout [ 1196.752131][T13639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.642224][T13639] veth0_vlan: entered promiscuous mode [ 1198.696269][T13639] veth1_vlan: entered promiscuous mode [ 1198.720465][ T9] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 1198.797554][T13639] veth0_macvtap: entered promiscuous mode [ 1198.842010][T13639] veth1_macvtap: entered promiscuous mode [ 1199.022713][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1199.030201][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1199.872423][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1199.900413][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1199.952135][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1199.959580][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1200.010765][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.026332][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1200.043232][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1200.072500][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1200.088514][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1200.099937][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.143991][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1200.157220][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1200.172020][ T9] usb 5-1: string descriptor 0 read error: -22 [ 1200.188546][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.201075][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1200.211156][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1200.231220][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.260415][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.309014][T13639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1200.318395][ T9] adutux 5-1:168.0: interrupt endpoints not found [ 1200.354942][T13639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1200.411354][T13639] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.444186][T13639] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.453499][T13639] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.470510][T13639] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.501413][T13738] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1200.543886][ T9] usb 5-1: USB disconnect, device number 17 [ 1200.851761][ T8934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.859648][ T8934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.917839][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.928113][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.184550][T13754] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1890'. [ 1203.839136][T13769] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1908'. [ 1203.910903][ T5786] Bluetooth: hci0: command tx timeout [ 1203.947697][T13777] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1207.439261][T13809] netlink: 'syz.2.1921': attribute type 1 has an invalid length. [ 1207.452068][T13809] netlink: 'syz.2.1921': attribute type 4 has an invalid length. [ 1207.700716][T13809] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1207.726880][T13809] CIFS mount error: No usable UNC path provided in device string! [ 1207.726880][T13809] [ 1207.737234][T13809] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1207.982275][T13813] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1922'. [ 1208.120419][ T969] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1208.151031][T13816] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1919'. [ 1208.320589][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 1208.419879][ T969] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1208.500283][ T969] usb 3-1: config 0 has no interface number 0 [ 1208.507486][ T969] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1208.536124][ T969] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1208.552144][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.563230][ T969] usb 3-1: Product: syz [ 1208.567458][ T969] usb 3-1: Manufacturer: syz [ 1208.572694][ T969] usb 3-1: SerialNumber: syz [ 1208.582033][ T969] usb 3-1: config 0 descriptor?? [ 1208.590254][ T969] smsc75xx v1.0.0 [ 1208.870067][T13818] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1208.996197][ T969] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1209.070913][ T969] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1209.109604][ T969] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1209.121849][ T969] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 1209.186566][ T969] usb 3-1: USB disconnect, device number 21 [ 1214.161095][ T7597] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1214.550251][ T7597] usb 8-1: config 7 descriptor has 1 excess byte, ignoring [ 1214.651219][ T7597] usb 8-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1214.721496][ T7597] usb 8-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1214.730989][ T7597] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.751716][ T7597] usb 8-1: Product: syz [ 1214.755899][ T7597] usb 8-1: Manufacturer: syz [ 1214.780412][ T7597] usb 8-1: SerialNumber: syz [ 1214.834337][ T7597] cdc_acm 8-1:7.0: Zero length descriptor references [ 1214.850407][ T7597] cdc_acm: probe of 8-1:7.0 failed with error -22 [ 1214.861449][ T7597] option 8-1:7.0: GSM modem (1-port) converter detected [ 1215.043076][ T7597] usb 8-1: USB disconnect, device number 2 [ 1215.074743][ T7597] option 8-1:7.0: device disconnected [ 1216.354989][T13891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1935'. [ 1216.561837][T13892] block device autoloading is deprecated and will be removed. [ 1218.572369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1221.659918][T13927] netlink: 'syz.4.1954': attribute type 39 has an invalid length. [ 1222.850699][ T7597] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1223.227663][ T7597] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1223.410895][ T7597] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1223.489204][ T7597] usb 6-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1223.498846][ T7597] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.574032][ T7597] usb 6-1: config 0 descriptor?? [ 1224.005366][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.016081][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.037943][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.066995][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.087487][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.104529][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.112961][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.133518][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.164046][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.176562][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.186333][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.198455][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.208234][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.228795][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.263316][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.295715][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.320515][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.410776][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.500424][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.602912][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.867191][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.915743][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.955726][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1224.977087][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.018447][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.065738][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.095794][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.137654][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.181311][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.299125][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.325159][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.348581][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.370973][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.395861][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.414630][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.431818][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.450278][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.465851][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.533993][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.545393][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.556172][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.567996][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.585564][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.604947][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.626119][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.647375][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.827673][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.843661][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.864298][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.899640][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.917577][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.932741][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.947525][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.964381][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1225.985894][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.001582][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.017219][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.036679][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.045232][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.053603][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.074936][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.097151][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.114902][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.130586][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.142790][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.160891][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.174858][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.977312][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.985927][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1226.993709][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.001475][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.008910][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.017982][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.025799][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.040453][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.047891][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.063602][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.071381][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.078820][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.086633][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.094407][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.106855][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.115479][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.123258][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.130998][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.138436][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.147049][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.154785][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.162520][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.171051][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.178906][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.187202][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.210529][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.217981][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.271221][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.288901][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.301850][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.309303][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.317762][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.325573][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.333657][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.384387][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.410514][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.440411][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.447878][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.501573][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.509056][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.530453][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.548756][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.567159][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.590501][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.640464][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.647927][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.732049][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.759996][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1227.780305][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1228.430422][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1228.588974][T13985] kvm: pic: non byte write [ 1228.641476][T13985] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 1229.106365][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.672743][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.680234][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.687849][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.696783][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.704418][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.711881][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.719312][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.727806][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.736514][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.744091][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.751557][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.759577][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.767277][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.774900][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.829677][T13991] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1972'. [ 1230.840464][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.847936][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.855447][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.875509][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.896061][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.920230][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.936544][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.945065][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.956626][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1230.976929][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.008306][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.017782][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.044469][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.053769][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.066175][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.075894][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.105806][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.118100][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.129515][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.139534][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.156928][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.211531][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.218995][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.233158][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.257611][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.294587][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.316882][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1231.989717][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.683919][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.691746][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.699187][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.706659][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.714216][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.721719][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.729186][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.736971][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.744571][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.752132][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.759652][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.767345][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.774890][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.782782][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.790220][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.797777][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.805239][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.812743][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.820550][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.828069][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.835626][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.843123][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.850589][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.858035][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.865676][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.903219][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.925590][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.950390][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.967204][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1234.987768][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.137568][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.210101][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.273643][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.314098][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.360566][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.368121][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.417433][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.460486][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.467971][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.527837][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.558214][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.581371][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.617067][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.640551][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.648015][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.692056][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.699544][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.757493][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.776713][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.800160][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.809146][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.823588][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.834227][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.848496][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.858879][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.876887][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.902536][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.919166][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.976034][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1236.984882][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1237.014076][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1238.200480][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1238.207976][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1238.262879][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1238.276857][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1238.286010][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1238.294018][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1238.320696][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1238.328149][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1238.358842][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1238.373748][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1238.389166][ T7597] hid-u2fzero 0003:20A0:4287.000B: unknown main item tag 0x0 [ 1238.412205][ T7597] hid-u2fzero 0003:20A0:4287.000B: hidraw0: USB HID v0.06 Device [HID 20a0:4287] on usb-dummy_hcd.5-1/input0 [ 1238.457590][ T7597] hid-u2fzero 0003:20A0:4287.000B: NitroKey U2F LED initialised [ 1238.484741][ T7597] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 1238.496663][ T7597] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 1238.505241][ T7597] CPU: 0 PID: 7597 Comm: kworker/0:7 Not tainted syzkaller #0 [ 1238.512754][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1238.522956][ T7597] Workqueue: usb_hub_wq hub_event [ 1238.528103][ T7597] RIP: 0010:u2fzero_rng_read+0x2a1/0x700 [ 1238.533890][ T7597] Code: 89 cc 80 3c 01 00 74 08 4c 89 ef e8 a9 37 e4 f9 bb a8 00 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 21 38 e4 f9 48 8d 44 24 60 48 89 03 [ 1238.553581][ T7597] RSP: 0018:ffffc9000e2ae780 EFLAGS: 00010202 [ 1238.559771][ T7597] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 1238.567793][ T7597] RDX: 0000000000000000 RSI: ffffc9000e2ae8a0 RDI: ffff888026d0a268 [ 1238.575840][ T7597] RBP: ffffc9000e2ae998 R08: 0000000000000000 R09: 0000000000000000 [ 1238.583860][ T7597] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1100a062606 [ 1238.591880][ T7597] R13: ffff888050313030 R14: 1ffff1100a062683 R15: 1ffff92001c55cf8 [ 1238.599902][ T7597] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1238.608872][ T7597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1238.615517][ T7597] CR2: 00007f56a97e8158 CR3: 00000000258c2000 CR4: 00000000003506f0 [ 1238.623534][ T7597] Call Trace: [ 1238.626919][ T7597] [ 1238.629951][ T7597] ? u2fzero_brightness_set+0x2e0/0x2e0 [ 1238.635608][ T7597] ? set_current_rng+0x3a0/0x3d0 [ 1238.640637][ T7597] ? mutex_unlock+0x10/0x10 [ 1238.645268][ T7597] ? u2fzero_brightness_set+0x2e0/0x2e0 [ 1238.650858][ T7597] add_early_randomness+0x7a/0x1a0 [ 1238.656022][ T7597] hwrng_register+0x3db/0x4a0 [ 1238.660755][ T7597] devm_hwrng_register+0x47/0xb0 [ 1238.665744][ T7597] u2fzero_probe+0x348/0x460 [ 1238.670394][ T7597] hid_device_probe+0x293/0x5b0 [ 1238.675406][ T7597] ? hid_uevent+0x350/0x350 [ 1238.679962][ T7597] really_probe+0x25b/0xb20 [ 1238.684554][ T7597] ? pm_runtime_barrier+0x14b/0x1c0 [ 1238.689825][ T7597] __driver_probe_device+0x1ef/0x390 [ 1238.695182][ T7597] driver_probe_device+0x4f/0x420 [ 1238.700259][ T7597] __device_attach_driver+0x2ca/0x510 [ 1238.705689][ T7597] bus_for_each_drv+0x252/0x2e0 [ 1238.710586][ T7597] ? coredump_store+0x90/0x90 [ 1238.715312][ T7597] ? bus_find_device+0x300/0x300 [ 1238.720309][ T7597] __device_attach+0x2c2/0x420 [ 1238.725127][ T7597] ? device_attach+0x20/0x20 [ 1238.729773][ T7597] ? do_raw_spin_unlock+0x121/0x230 [ 1238.735085][ T7597] bus_probe_device+0x180/0x260 [ 1238.739985][ T7597] device_add+0x88e/0xc50 [ 1238.744365][ T7597] hid_add_device+0x38d/0x530 [ 1238.749109][ T7597] usbhid_probe+0xe02/0x1220 [ 1238.753830][ T7597] usb_probe_interface+0x5c9/0xb20 [ 1238.758997][ T7597] ? usb_register_driver+0x3d0/0x3d0 [ 1238.764330][ T7597] really_probe+0x25b/0xb20 [ 1238.768879][ T7597] ? pm_runtime_barrier+0x14b/0x1c0 [ 1238.774123][ T7597] __driver_probe_device+0x1ef/0x390 [ 1238.779462][ T7597] driver_probe_device+0x4f/0x420 [ 1238.784535][ T7597] __device_attach_driver+0x2ca/0x510 [ 1238.789965][ T7597] bus_for_each_drv+0x252/0x2e0 [ 1238.794866][ T7597] ? coredump_store+0x90/0x90 [ 1238.799585][ T7597] ? bus_find_device+0x300/0x300 [ 1238.804568][ T7597] __device_attach+0x2c2/0x420 [ 1238.809383][ T7597] ? device_attach+0x20/0x20 [ 1238.814013][ T7597] ? __kmem_cache_free+0xba/0x1e0 [ 1238.819311][ T7597] ? do_raw_spin_unlock+0x121/0x230 [ 1238.824578][ T7597] bus_probe_device+0x180/0x260 [ 1238.829471][ T7597] device_add+0x88e/0xc50 [ 1238.833854][ T7597] usb_set_configuration+0x1a79/0x20c0 [ 1238.839379][ T7597] usb_generic_driver_probe+0x8d/0x150 [ 1238.844986][ T7597] usb_probe_device+0x13d/0x270 [ 1238.849880][ T7597] ? usb_register_device_driver+0x230/0x230 [ 1238.855811][ T7597] really_probe+0x25b/0xb20 [ 1238.860355][ T7597] ? pm_runtime_barrier+0x14b/0x1c0 [ 1238.865594][ T7597] __driver_probe_device+0x1ef/0x390 [ 1238.870929][ T7597] driver_probe_device+0x4f/0x420 [ 1238.876017][ T7597] __device_attach_driver+0x2ca/0x510 [ 1238.881444][ T7597] bus_for_each_drv+0x252/0x2e0 [ 1238.886341][ T7597] ? coredump_store+0x90/0x90 [ 1238.891061][ T7597] ? bus_find_device+0x300/0x300 [ 1238.896051][ T7597] __device_attach+0x2c2/0x420 [ 1238.900864][ T7597] ? device_attach+0x20/0x20 [ 1238.905930][ T7597] ? __kmem_cache_free+0xba/0x1e0 [ 1238.911012][ T7597] ? do_raw_spin_unlock+0x121/0x230 [ 1238.916279][ T7597] bus_probe_device+0x180/0x260 [ 1238.921442][ T7597] device_add+0x88e/0xc50 [ 1238.925836][ T7597] usb_new_device+0xa3c/0x1660 [ 1238.930663][ T7597] ? usb_disconnect+0x8a0/0x8a0 [ 1238.935560][ T7597] ? _raw_spin_unlock_irq+0x23/0x50 [ 1238.940813][ T7597] ? lockdep_hardirqs_on+0x98/0x150 [ 1238.946562][ T7597] hub_event+0x29bf/0x49f0 [ 1238.951059][ T7597] ? hub_post_resume+0x120/0x120 [ 1238.956048][ T7597] ? read_lock_is_recursive+0x20/0x20 [ 1238.961486][ T7597] ? _raw_spin_unlock_irq+0x23/0x50 [ 1238.966745][ T7597] ? process_scheduled_works+0x96f/0x15d0 [ 1238.972556][ T7597] ? process_scheduled_works+0x96f/0x15d0 [ 1238.978323][ T7597] process_scheduled_works+0xa5d/0x15d0 [ 1238.983930][ T7597] ? worker_attach_to_pool+0x380/0x380 [ 1238.989436][ T7597] ? assign_work+0x3d2/0x5d0 [ 1238.994075][ T7597] worker_thread+0xa55/0xfc0 [ 1238.998732][ T7597] kthread+0x2fa/0x390 [ 1239.002842][ T7597] ? pr_cont_work+0x560/0x560 [ 1239.007564][ T7597] ? kthread_blkcg+0xd0/0xd0 [ 1239.012235][ T7597] ret_from_fork+0x48/0x80 [ 1239.016745][ T7597] ? kthread_blkcg+0xd0/0xd0 [ 1239.021418][ T7597] ret_from_fork_asm+0x11/0x20 [ 1239.026274][ T7597] [ 1239.029325][ T7597] Modules linked in: [ 1239.057261][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.064237][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.074238][ T7597] ---[ end trace 0000000000000000 ]--- [ 1239.079835][ T7597] RIP: 0010:u2fzero_rng_read+0x2a1/0x700 [ 1239.088291][ T7597] Code: 89 cc 80 3c 01 00 74 08 4c 89 ef e8 a9 37 e4 f9 bb a8 00 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 21 38 e4 f9 48 8d 44 24 60 48 89 03 [ 1239.113145][ T7597] RSP: 0018:ffffc9000e2ae780 EFLAGS: 00010202 [ 1239.250892][ T7597] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 1239.259581][ T7597] RDX: 0000000000000000 RSI: ffffc9000e2ae8a0 RDI: ffff888026d0a268 [ 1239.267669][ T7597] RBP: ffffc9000e2ae998 R08: 0000000000000000 R09: 0000000000000000 [ 1239.275700][ T7597] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1100a062606 [ 1239.287351][ T7597] R13: ffff888050313030 R14: 1ffff1100a062683 R15: 1ffff92001c55cf8 [ 1239.298703][ T7597] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1239.307735][ T7597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1239.320345][ T7597] CR2: 00007f56aa385ff8 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 1239.328448][ T7597] Kernel panic - not syncing: Fatal exception [ 1239.334690][ T7597] Kernel Offset: disabled [ 1239.339019][ T7597] Rebooting in 86400 seconds..