last executing test programs: 14m56.586631042s ago: executing program 32 (id=21): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="180300", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000b40002800800020003000000a80005008fdd35f77bfcc7fe5d3708c8e4a42a33758b61c694c2d1c714ea18da2ab44cd7784c00361b390b9e9e7fa4f8f4f67ee844a7faceac62559bbd89257d20fa378a4109e2626bd4119fe693f708f63075200e69491a14c5919f3cecf3537943bc3bb3ce36aacfee6da8dd654d982714c898827ee86bb3c7dfd210a20491c48d5676f09d7a0f16a186c228ab713af93ded16a83efc49b7f4045d300001800800030001000000080003000100000014000200", @ANYRESHEX=r1, @ANYBLOB="3c0102800400050034010380480001800d0002005e23232f1c245b9b00000000040003000b00020026232e47294000000a0002005b402b2b230000000800010005000000080001000900000008000100090000003c0001800400030008000100010001000800010006000000120002005e3a5b5d28292e195b297d592c0000000d0002005ef4273a2c292f280000000048000180110002002f6465762f6e65742f74756e000000000400030008000100000000800d0002005e5d2928232e245c000000000400030009000200aaaaaaaaaa000000040003000c000180060002007b00000044000180110002002f6465762f6e65742f74756e000000000a000200bbbbbbbbbbbb00000600020028000000080001000400000009000200aaaaaaaaaa00000004000300140001800800010000000000070002003ac00000200001801400020076657468305f746f5f6261746164760008000300010000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468315f766c616e", @ANYRES32=0x0, @ANYBLOB="040002801400", @ANYRES32=r5, @ANYBLOB="080003000200"], 0x318}}, 0x4040010) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB]) socket$unix(0x1, 0x1, 0x0) setpriority(0x0, 0x0, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r9, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 14m35.984395892s ago: executing program 33 (id=52): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r4}, &(0x7f0000000500), &(0x7f00000001c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x800000000d2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x54, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89b1, &(0x7f0000000040)={'macvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x44e3763ac5239ba7}}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) 14m29.791869368s ago: executing program 34 (id=62): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) pipe2$watch_queue(0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000010006010800000000000000c7e686471800ef80e2053c8147ec4597c524a3cb1000000914000780080011400000000005001500000a10000005000100070000000500040000000000090002000000eb8f017e7419ccbafedd7c0ff8790c5949b3"], 0x4c}}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0286429, &(0x7f0000000580)={0x0, 0x8, &(0x7f0000000300)=[0x3ff, 0x4, 0x3af, 0x7, 0x4, 0x8, 0x4, 0xa], &(0x7f00000004c0), 0x66, 0x6, 0x100, &(0x7f0000000500)=[0x1, 0x3, 0x1d, 0x4, 0xe0c6, 0x7], &(0x7f0000000540)=[0x7ff, 0xa]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0xef, 0xb0}}]}}]}}, 0x0) 12m28.307948938s ago: executing program 35 (id=252): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="09000000010000", 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000180)={@loopback, @broadcast, 0xffffffffffffffff, "793fbacefe489b1245d664b7ebf1e172ccc481a1a6b33b4f86ed56c39d44f43d", 0x1, 0x7, 0xff, 0xb}, 0x3c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000f80900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) 11m49.541373511s ago: executing program 36 (id=339): ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)=0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc60040011", 0x17}], 0x1}, 0x24040004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtfilter={0x40, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0x0, 0x101, 0xff]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x2009, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x14dfdfe3}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000ac0)={{}, "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"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r4, 0x409, 0x8) pwrite64(r4, &(0x7f0000000000), 0x0, 0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, 0x0, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="290029bd0000080003000000000000000000", @ANYRES32=r11, @ANYBLOB='\b\x00,\x00\t\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8=r8], 0x0) setrlimit(0xb, &(0x7f0000000180)={0x1, 0x64147927}) 11m35.151901094s ago: executing program 2 (id=364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 11m34.084769459s ago: executing program 2 (id=365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x5, 0xe7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xfffffffd, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x2, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x6, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0x7, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x80000002, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 11m32.563840323s ago: executing program 37 (id=358): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200)=0x100, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x20, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x2, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb8391372c9ef937d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f4892559f334d436138406b699de69db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d", 0x4b}, {0x0}, {&(0x7f0000000f00)}], 0x3}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(0xffffffffffffffff) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 11m32.518724872s ago: executing program 2 (id=367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @local, @local}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x1d, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 11m30.863019432s ago: executing program 38 (id=359): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) rt_sigqueueinfo(0x0, 0x1d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0x6]}, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 11m16.551701009s ago: executing program 39 (id=367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @local, @local}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x1d, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 10m19.497549937s ago: executing program 40 (id=385): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r9 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r3, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) unshare(0x2c020400) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c200000ef4000000ed03080045e700282068000007069078ac1414aaffffffff4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2000b75becb4ecd371317a4f63ff00000000000038c4c9edd8407e33067d7f3cb78ab02c1e34d853c92edac6bac2ed3a076bcb0cf5c125a35f177f2f61ce651f05eb234178eb56eb3a23c553554eaa820c885ea4c2bdbbc2d7"], 0x0) unshare(0x200) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, 0x0) r10 = syz_open_dev$vcsn(&(0x7f0000000000), 0xb5dc, 0x480000) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000000640)=0x200) 9m22.44413913s ago: executing program 41 (id=499): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) select(0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) r4 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', r1, 0x29, 0x4, 0xa, 0x0, 0x46, @local, @mcast1, 0x10, 0x0, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socketpair(0x3, 0x0, 0x28, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}}, 0x4000010) 9m17.104919948s ago: executing program 42 (id=510): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023f000/0x3000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1c3, 0x4a, 0x1b, 0x62, 0x2c}) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0) 7m47.35811209s ago: executing program 3 (id=697): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 7m45.675926138s ago: executing program 3 (id=700): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}}, 0x2010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=@getneigh={0x14, 0x1e, 0x8, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x4000) socket$inet6(0xa, 0x802, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000004c0)) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_clone(0x1208000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x95, 0xf, 0x8}) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) 7m43.282608951s ago: executing program 3 (id=702): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 7m42.103702921s ago: executing program 3 (id=704): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 7m41.212000798s ago: executing program 3 (id=706): pipe2$watch_queue(&(0x7f00000002c0), 0x80) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) 7m40.304880646s ago: executing program 3 (id=708): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0xa, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) listen(r3, 0x80) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000240)=r6, 0x4) 7m38.046164368s ago: executing program 5 (id=713): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000680)) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000002000000181800000f201d", @ANYRES32=0x1, @ANYBLOB="000000000000000000270900090000001854000004000000000000000000000018230000", @ANYRES32=0x1, @ANYBLOB="000000000c00000018110000", @ANYRES32=0x1], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0xa, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000800)=[{0x1, 0x5, 0xd, 0x4}, {0x0, 0x5, 0xb, 0x4}, {0x1, 0x2, 0x4, 0x9}, {0x4, 0x1, 0x10, 0x8}]}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000900), 0x78203, 0x0) r1 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000001080)={{0xc, 0xf}, {0xc, 0xa}, 0x1, 0x4}) syz_open_dev$amidi(&(0x7f0000000940), 0x3ff, 0x90000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) read$FUSE(r2, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, r3, 0x0, 0x0, 'syz1\x00', 0x0}) socket(0x2, 0x80805, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000040)) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000009c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7m35.735375703s ago: executing program 5 (id=717): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000370400000000efffffff00000000", @ANYRES32=r2, @ANYBLOB="8704050044800000240012800b000100677265746170000014000280060010004e21000008000700ac"], 0x44}}, 0x20008884) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2008c0c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xf}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m35.330163382s ago: executing program 43 (id=689): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa4) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) set_mempolicy(0x6, 0x0, 0xe0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) setxattr$incfs_metadata(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x7feff, 0x20008, 0x0, 0x1}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000000c0)=0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x24, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000004) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x14, r5, 0x70f236388c95af3b, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040010) 7m34.070532356s ago: executing program 5 (id=721): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000005c0)={0xc4, 0x0, 0xc}) 7m33.726711808s ago: executing program 4 (id=722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000180)={0x5000, 0x6000, 0x2, 0x1, 0x75}) 7m32.603598477s ago: executing program 4 (id=724): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r3, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xc060, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}]}, 0x44}}, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x9, 0x7}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) 7m32.343722561s ago: executing program 5 (id=725): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 7m30.917089236s ago: executing program 5 (id=727): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x2b, 0x107, 0xfffffffd, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 7m30.609368775s ago: executing program 4 (id=728): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 7m30.007489328s ago: executing program 5 (id=729): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1b2e}) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7m29.815087506s ago: executing program 4 (id=730): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000370400000000efffffff00000000", @ANYRES32=r2, @ANYBLOB="8704050044800000240012800b000100677265746170000014000280060010004e21000008000700ac"], 0x44}}, 0x20008884) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2008c0c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xf}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m27.627158227s ago: executing program 4 (id=733): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb) 7m26.394798877s ago: executing program 4 (id=735): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) syz_open_dev$char_usb(0xc, 0xb4, 0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 7m24.762463223s ago: executing program 44 (id=708): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0xa, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) listen(r3, 0x80) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000240)=r6, 0x4) 7m14.709225868s ago: executing program 45 (id=729): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1b2e}) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7m11.155617203s ago: executing program 46 (id=735): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) syz_open_dev$char_usb(0xc, 0xb4, 0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 6m30.249252635s ago: executing program 2 (id=736): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) 6m29.514761174s ago: executing program 2 (id=760): set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100)) timerfd_create(0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x39) syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, &(0x7f0000000300), {0x15}, 0x0, 0x0, &(0x7f00000003c0)=""/172, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r6}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0}) 6m27.152719948s ago: executing program 2 (id=761): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x3, 0x60}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xdf}, 0x4ac2d78a}}, 0x0, 0x0, 0x4a, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b931651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df600"}, 0xd8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 6m11.390738014s ago: executing program 47 (id=761): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x3, 0x60}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xdf}, 0x4ac2d78a}}, 0x0, 0x0, 0x4a, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b931651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df600"}, 0xd8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 6m6.386728753s ago: executing program 0 (id=785): r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0x40044102, 0x0) 6m5.301429084s ago: executing program 0 (id=787): userfaultfd(0x80001) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) 6m4.052184083s ago: executing program 0 (id=790): 6m3.071286861s ago: executing program 0 (id=791): getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211e, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x22) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) syz_io_uring_complete(r1) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 6m1.642936639s ago: executing program 0 (id=793): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="df", 0x1}], 0x1, 0x0) 6m0.364829927s ago: executing program 0 (id=796): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 5m44.602134607s ago: executing program 48 (id=796): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 13.28218757s ago: executing program 1 (id=1358): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000080)=0x4) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000101030000000000000000000700000920001640000000050000040000000e4d0000000500000001000008000000000014001880080002400000000708000240000527b125e97ed2bde8f50080017f570fd73c3bc4d491a5f2006bd9980387f3584be04f84891afcf9e4625f9f444fe56b98be0b6a2610deb75f1c1d41fcf6835953c0b13b914f1359a73d1d626d2a8b4e000000000000000000000000005567f6e550c99c952f3b0c60d6d31cb2898ec87ddaa30600f235ea7101eb728ff94471987fa15761efedb60d556ec7129c2f26222d1bca190725fda1f3062bb470babeb3ff631f284ea098bbf4aec758555dfb90578b1b9e3c5d88aed91552ee42bec886c9e4185e6085994836bd51fa70e3d7284afce4022ab215b534cef7b2e246d14c3124a4edbfaa0841179ecc525d6144d0e72b472554f65210f4192fb3834236adf5e33bce75a6db853fd77e69a8da51bd9a39f6a585e6e13af0f3b33507e7c3945b719bfaf62f0844"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x48000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f040000000000000000008500000005000000850000007d"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 12.05267599s ago: executing program 7 (id=1362): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x104) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f00000006c0)=""/68, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 11.82826784s ago: executing program 1 (id=1363): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 11.305710122s ago: executing program 9 (id=1365): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe40102030109021200"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 10.608142765s ago: executing program 7 (id=1366): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0xfffffffffffffffd, 0x200, 0x4, 0x2c, 0x80000005, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000600)) 8.983501792s ago: executing program 7 (id=1371): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000680)) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000002000000181800000f201d", @ANYRES32=0x1, @ANYBLOB="00000000000000000027090009000000185400000400000000000000000000001823", @ANYRES32=0x1, @ANYBLOB="000000000c00000018110000", @ANYRES32=0x1], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0xa, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000800)=[{0x1, 0x5, 0xd, 0x4}, {0x0, 0x5, 0xb, 0x4}, {0x1, 0x2, 0x4, 0x9}, {0x4, 0x1, 0x10, 0x8}]}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000900), 0x78203, 0x0) r1 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000001080)={{0xc, 0xf}, {0xc, 0xa}, 0x1, 0x4}) syz_open_dev$amidi(&(0x7f0000000940), 0x3ff, 0x90000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) read$FUSE(r2, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, r3, 0x0, 0x0, 'syz1\x00', 0x0}) socket(0x2, 0x80805, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000040)) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000009c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7.855394301s ago: executing program 1 (id=1374): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.437463917s ago: executing program 9 (id=1376): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x104) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f00000006c0)=""/68, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 7.304054477s ago: executing program 7 (id=1378): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000300)=ANY=[], 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) msgsnd(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="01"], 0x12f, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x1800) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/29) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) 6.468523179s ago: executing program 9 (id=1379): openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$netlink(0x10, 0x3, 0xb) socket$isdn_base(0x22, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000040000800060000fcffff08000900fc0000000800110007000000", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000840}, 0x140cc014) 6.31521617s ago: executing program 6 (id=1380): socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x608783, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 6.236744244s ago: executing program 8 (id=1381): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0xfffffffffffffffd, 0x200, 0x4, 0x2c, 0x80000005, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000600)) 4.976489549s ago: executing program 6 (id=1382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x24, r1, 0x1, 0x70bd2b, 0xfffffffb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) 4.793236228s ago: executing program 9 (id=1383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffffc, 0x4, 0x0, 0xddb0, 0x4, 0xf2e, 0xfffffffc}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 4.275564785s ago: executing program 8 (id=1384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x1c, r1, 0x101, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 3.825115565s ago: executing program 1 (id=1385): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2e, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 3.706513997s ago: executing program 7 (id=1386): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.658814622s ago: executing program 6 (id=1387): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 3.42774751s ago: executing program 9 (id=1388): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000680)) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000002000000181800000f201d", @ANYRES32=0x1, @ANYBLOB="00000000000000000027090009000000185400000400000000000000000000001823", @ANYRES32=0x1, @ANYBLOB="000000000c00000018110000", @ANYRES32=0x1], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0xa, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000800)=[{0x1, 0x5, 0xd, 0x4}, {0x0, 0x5, 0xb, 0x4}, {0x1, 0x2, 0x4, 0x9}, {0x4, 0x1, 0x10, 0x8}]}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000900), 0x78203, 0x0) r1 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000001080)={{0xc, 0xf}, {0xc, 0xa}, 0x1, 0x4}) syz_open_dev$amidi(&(0x7f0000000940), 0x3ff, 0x90000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) read$FUSE(r2, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, r3, 0x0, 0x0, 'syz1\x00', 0x0}) socket(0x2, 0x80805, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000040)) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000009c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.244414635s ago: executing program 8 (id=1389): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x104) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f00000006c0)=""/68, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3.058669831s ago: executing program 6 (id=1390): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000300)=[0x0], &(0x7f00000000c0), 0x1, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000240)=[r1], &(0x7f0000000040)=[0xffffff7f], &(0x7f0000000680)=[r5], &(0x7f0000000340)}) 2.917993251s ago: executing program 1 (id=1391): socket(0x2, 0x2, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x90, 0x0, &(0x7f0000000580)=[@clear_death, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x1}, @exit_looper, @dead_binder_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@flat=@binder={0x73622a85, 0x2100, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/114, 0x72, 0x1, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/212, 0xd4, 0x2, 0x30}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}, @increfs], 0x0, 0x0, 0x0}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 2.548412345s ago: executing program 8 (id=1392): socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x608783, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 2.326005946s ago: executing program 6 (id=1393): openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$netlink(0x10, 0x3, 0xb) socket$isdn_base(0x22, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000040000800060000fcffff08000900fc0000000800110007000000", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000840}, 0x140cc014) 1.766270234s ago: executing program 8 (id=1394): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0xfffffffffffffffd, 0x200, 0x4, 0x2c, 0x80000005, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000600)) 1.54314141s ago: executing program 9 (id=1395): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000108c0d140000000000000109022d00010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.415077984s ago: executing program 1 (id=1396): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="20013400"], 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="050003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x3, "a343ed"}, 0xfffffffffffffffd}) 1.202949025s ago: executing program 6 (id=1397): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r1, 0x708, 0x9) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0xf8, 0x4, &(0x7f0000000040)={0x11, "c9424a2ef7d4b4f043c07e3efe66dd00aeffac04a3461d1b6213a647540764c7fd"}}) 174.935529ms ago: executing program 8 (id=1398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffffc, 0x4, 0x0, 0xddb0, 0x4, 0xf2e, 0xfffffffc}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 0s ago: executing program 7 (id=1399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x1c, r1, 0x101, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) kernel console output (not intermixed with test programs): rhport(1) sockfd(7) [ 825.001789][T10085] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 825.017703][T10085] vhci_hcd vhci_hcd.0: Device attached [ 825.116948][ T41] vhci_hcd: vhci_device speed not set [ 825.194267][ T5814] Bluetooth: hci1: command tx timeout [ 825.235008][ T41] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 825.295074][T10084] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 825.301938][T10084] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 825.310186][T10084] vhci_hcd vhci_hcd.0: Device attached [ 825.353356][T10080] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13) [ 825.360244][T10080] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 825.368895][T10080] vhci_hcd vhci_hcd.0: Device attached [ 825.388054][T10018] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.395672][T10018] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.403467][T10018] bridge_slave_0: entered allmulticast mode [ 825.412596][T10018] bridge_slave_0: entered promiscuous mode [ 825.485015][T10089] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16) [ 825.491889][T10089] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 825.501142][T10089] vhci_hcd vhci_hcd.0: Device attached [ 825.568831][T10018] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.577369][T10018] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.585464][T10018] bridge_slave_1: entered allmulticast mode [ 825.594766][T10018] bridge_slave_1: entered promiscuous mode [ 825.693475][T10092] vhci_hcd: connection closed [ 825.694994][T10088] vhci_hcd: connection closed [ 825.697701][T10086] vhci_hcd: connection closed [ 825.706145][T10091] vhci_hcd: connection closed [ 825.716947][ T35] vhci_hcd: stop threads [ 825.732597][ T35] vhci_hcd: release socket [ 825.741856][ T35] vhci_hcd: disconnect device [ 825.755361][T10082] vhci_hcd: connection reset by peer [ 825.875216][ T35] vhci_hcd: stop threads [ 825.879670][ T35] vhci_hcd: release socket [ 825.885187][ T35] vhci_hcd: disconnect device [ 826.042202][ T35] vhci_hcd: stop threads [ 826.048506][ T35] vhci_hcd: release socket [ 826.053309][ T35] vhci_hcd: disconnect device [ 826.145692][ T35] vhci_hcd: stop threads [ 826.150373][ T35] vhci_hcd: release socket [ 826.155450][ T35] vhci_hcd: disconnect device [ 826.249435][ T35] vhci_hcd: stop threads [ 826.254224][ T35] vhci_hcd: release socket [ 826.258919][ T35] vhci_hcd: disconnect device [ 826.487835][T10018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.686345][T10018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.269552][ T5814] Bluetooth: hci1: command tx timeout [ 827.298522][T10018] team0: Port device team_slave_0 added [ 827.434534][T10018] team0: Port device team_slave_1 added [ 827.993460][ T5866] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 828.066753][ T9825] veth0_vlan: entered promiscuous mode [ 828.099027][T10018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.107159][T10018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.133562][T10018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.301264][ T5866] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 828.310774][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.359016][ T9825] veth1_vlan: entered promiscuous mode [ 828.440359][ T5866] usb 2-1: config 0 descriptor?? [ 828.558525][T10018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.566243][T10018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.599512][T10018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.836763][ T5866] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 829.126621][ T5866] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 829.133507][ T5866] [drm] Initialized udl on minor 2 [ 829.367206][ T5866] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 829.378636][ T5866] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 829.391520][ T7704] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 829.453114][ T7704] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 829.462103][ T7704] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 829.583301][ T5866] usb 2-1: USB disconnect, device number 9 [ 829.740298][ T9825] veth0_macvtap: entered promiscuous mode [ 829.792482][T10018] hsr_slave_0: entered promiscuous mode [ 829.803634][T10018] hsr_slave_1: entered promiscuous mode [ 829.813016][T10018] debugfs: 'hsr0' already exists in 'hsr' [ 829.826217][T10018] Cannot create hsr debugfs directory [ 829.942314][ T9825] veth1_macvtap: entered promiscuous mode [ 830.074837][ T8497] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 830.179406][ T8497] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 830.218508][ T8497] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 830.259516][ T8497] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 830.339659][ T8497] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 830.451439][ T41] vhci_hcd: vhci_device speed not set [ 830.560238][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.795368][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.004958][ T4126] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.017074][ T753] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.214843][ T753] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.224736][ T753] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.060162][ T3936] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.383893][T10126] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 832.390471][T10126] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 832.440033][ T3936] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.487414][ T8497] Bluetooth: hci3: command tx timeout [ 832.501146][T10126] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 832.508977][T10126] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 832.679174][T10126] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 832.782109][T10126] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 832.795894][T10126] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 832.818903][ T3936] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.919070][T10126] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 833.020890][T10126] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 833.029856][T10126] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 833.043619][ T30] audit: type=1326 audit(1755579893.491:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49b8ebe9 code=0x7ffc0000 [ 833.147060][T10126] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 833.184769][ T30] audit: type=1326 audit(1755579893.531:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49b8ebe9 code=0x7ffc0000 [ 833.213032][ T30] audit: type=1326 audit(1755579893.541:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f1c49b8ebe9 code=0x7ffc0000 [ 833.237735][ T30] audit: type=1326 audit(1755579893.541:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49b8ebe9 code=0x7ffc0000 [ 833.261810][ T30] audit: type=1326 audit(1755579893.541:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49b8ebe9 code=0x7ffc0000 [ 833.284954][ T30] audit: type=1326 audit(1755579893.571:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f1c49b8ebe9 code=0x7ffc0000 [ 833.313445][ T30] audit: type=1326 audit(1755579893.571:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49b8ebe9 code=0x7ffc0000 [ 833.343342][T10126] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 833.352318][T10126] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 833.380000][ T3936] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.449258][T10126] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 833.487770][T10126] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 833.494438][T10126] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 833.647060][T10126] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 833.727880][ T5814] Bluetooth: hci7: command 0x0406 tx timeout [ 834.525908][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 834.896647][ T3936] bridge_slave_1: left allmulticast mode [ 834.902539][ T3936] bridge_slave_1: left promiscuous mode [ 834.913439][ T3936] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.027501][ T3936] bridge_slave_0: left allmulticast mode [ 835.033424][ T3936] bridge_slave_0: left promiscuous mode [ 835.050093][ T3936] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.095062][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 835.405591][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 835.566567][ T5814] Bluetooth: hci3: command 0x040f tx timeout [ 835.827973][ T5814] Bluetooth: hci7: command 0x0406 tx timeout [ 836.163619][ T3936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.226498][ T3936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.253304][ T3936] bond0 (unregistering): Released all slaves [ 836.288137][ T3936] bond1 (unregistering): Released all slaves [ 836.610904][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 837.167297][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 837.503636][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 837.606961][T10018] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 837.655087][ T5814] Bluetooth: hci3: command 0x040f tx timeout [ 837.818481][ T3936] hsr_slave_0: left promiscuous mode [ 837.845343][ T3936] hsr_slave_1: left promiscuous mode [ 837.853730][ T3936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.862544][ T3936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.937547][ T3936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.945495][ T3936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.056272][ T3936] veth1_macvtap: left promiscuous mode [ 838.062043][ T3936] veth0_macvtap: left promiscuous mode [ 838.069993][ T3936] veth1_vlan: left promiscuous mode [ 838.075798][ T3936] veth0_vlan: left promiscuous mode [ 838.386164][T10183] block nbd1: shutting down sockets [ 838.687437][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 838.962314][ T30] audit: type=1326 audit(1755579899.401:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49b8ebe9 code=0x7ffc0000 [ 839.114656][ T30] audit: type=1326 audit(1755579899.501:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f1c49b8ebe9 code=0x7ffc0000 [ 839.142162][ T30] audit: type=1326 audit(1755579899.501:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49b8ebe9 code=0x7ffc0000 [ 839.166379][ T30] audit: type=1326 audit(1755579899.511:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49b8ebe9 code=0x7ffc0000 [ 839.189254][ T30] audit: type=1326 audit(1755579899.511:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f1c49b8ebe9 code=0x7ffc0000 [ 839.213165][ T30] audit: type=1326 audit(1755579899.511:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49b8ebe9 code=0x7ffc0000 [ 839.294706][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 839.310724][ T3936] team0 (unregistering): Port device team_slave_1 removed [ 839.382187][ T3936] team0 (unregistering): Port device team_slave_0 removed [ 839.633840][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 839.764711][ T5814] Bluetooth: hci3: command 0x040f tx timeout [ 839.960882][T10018] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 840.148355][T10018] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 840.295054][T10117] chnl_net:caif_netlink_parms(): no params data found [ 840.357287][T10018] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 840.926682][T10201] fuse: Bad value for 'fd' [ 841.007835][T10196] pim6reg1: entered promiscuous mode [ 841.013516][T10196] pim6reg1: entered allmulticast mode [ 841.161896][ T4424] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.462940][ T4424] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.669820][ T4424] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.815240][ T8497] Bluetooth: hci3: command 0x040f tx timeout [ 841.828432][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.9.853'. [ 841.839353][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz.9.853'. [ 842.122461][ T4424] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.339844][T10212] tipc: Enabling not permitted [ 842.345793][T10212] tipc: Enabling of bearer rejected, failed to enable media [ 842.676896][T10214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.287383][ T4424] bridge_slave_1: left allmulticast mode [ 843.293272][ T4424] bridge_slave_1: left promiscuous mode [ 843.300771][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.400806][ T4424] bridge_slave_0: left allmulticast mode [ 843.407100][ T4424] bridge_slave_0: left promiscuous mode [ 843.413881][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.890507][ T8497] Bluetooth: hci3: command 0x040f tx timeout [ 843.896365][ T30] audit: type=1326 audit(1755579904.321:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.9.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 843.920633][ T30] audit: type=1326 audit(1755579904.331:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.9.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 844.004625][ T30] audit: type=1326 audit(1755579904.401:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.9.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 844.027372][ T30] audit: type=1326 audit(1755579904.411:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.9.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 844.450440][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.529925][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.573326][ T4424] bond0 (unregistering): Released all slaves [ 844.696373][T10117] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.704468][T10117] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.712391][T10117] bridge_slave_0: entered allmulticast mode [ 844.722481][T10117] bridge_slave_0: entered promiscuous mode [ 844.832119][T10018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.906158][T10117] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.914300][T10117] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.922206][T10117] bridge_slave_1: entered allmulticast mode [ 844.932442][T10117] bridge_slave_1: entered promiscuous mode [ 845.411248][T10018] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.529687][ T4424] hsr_slave_0: left promiscuous mode [ 845.592293][ T4424] hsr_slave_1: left promiscuous mode [ 845.601334][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.609318][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.727864][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.735942][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.920065][ T4424] veth1_macvtap: left promiscuous mode [ 845.926400][ T4424] veth0_macvtap: left promiscuous mode [ 845.932333][ T4424] veth1_vlan: left promiscuous mode [ 845.938201][ T4424] veth0_vlan: left promiscuous mode [ 847.236741][ T4424] team0 (unregistering): Port device team_slave_1 removed [ 847.358027][ T4424] team0 (unregistering): Port device team_slave_0 removed [ 847.989369][T10117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.026361][T10252] pim6reg1: entered promiscuous mode [ 848.032053][T10252] pim6reg1: entered allmulticast mode [ 848.200808][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.208460][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.396711][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.404437][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.788520][T10117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.393787][T10018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 849.407317][T10018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 849.438178][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 849.445032][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 851.065552][T10267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.315105][T10117] team0: Port device team_slave_0 added [ 851.439555][T10117] team0: Port device team_slave_1 added [ 852.130608][T10117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.138599][T10117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.170354][T10117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.295062][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 852.316467][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 852.332833][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 852.357658][T10117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.365884][T10117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.393484][T10117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.410827][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 852.499394][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 853.263901][T10117] hsr_slave_0: entered promiscuous mode [ 853.284867][T10117] hsr_slave_1: entered promiscuous mode [ 854.274759][T10018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.607143][ T8497] Bluetooth: hci2: command tx timeout [ 855.270046][T10295] 9pnet_fd: Insufficient options for proto=fd [ 856.703006][ T8497] Bluetooth: hci2: command tx timeout [ 857.063197][T10279] chnl_net:caif_netlink_parms(): no params data found [ 857.245737][ T3936] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.511095][ T3936] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.591683][T10313] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 857.871401][ T3936] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.900964][T10117] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 857.993911][ T3936] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.060812][T10315] pim6reg1: entered promiscuous mode [ 858.068444][T10315] pim6reg1: entered allmulticast mode [ 858.355605][T10117] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 858.466239][T10117] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 858.534261][T10117] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 858.774644][ T8497] Bluetooth: hci2: command tx timeout [ 859.047543][ T3936] bridge_slave_1: left allmulticast mode [ 859.053514][ T3936] bridge_slave_1: left promiscuous mode [ 859.060365][ T3936] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.147825][ T3936] bridge_slave_0: left allmulticast mode [ 859.153733][ T3936] bridge_slave_0: left promiscuous mode [ 859.161310][ T3936] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.889622][ T3936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.943487][ T3936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.001768][ T3936] bond0 (unregistering): Released all slaves [ 860.240367][T10331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.328129][T10018] veth0_vlan: entered promiscuous mode [ 860.420211][ T3936] hsr_slave_0: left promiscuous mode [ 860.463405][ T3936] hsr_slave_1: left promiscuous mode [ 860.473950][ T3936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.481831][ T3936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.587488][ T3936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.595222][ T3936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.707144][ T3936] veth1_macvtap: left promiscuous mode [ 860.712941][ T3936] veth0_macvtap: left promiscuous mode [ 860.719091][ T3936] veth1_vlan: left promiscuous mode [ 860.724784][ T3936] veth0_vlan: left promiscuous mode [ 860.934728][ T8497] Bluetooth: hci2: command tx timeout [ 862.021439][ T3936] team0 (unregistering): Port device team_slave_1 removed [ 862.096657][ T3936] team0 (unregistering): Port device team_slave_0 removed [ 863.433479][T10279] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.441215][T10279] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.449331][T10279] bridge_slave_0: entered allmulticast mode [ 863.495797][T10365] netlink: 'syz.1.880': attribute type 4 has an invalid length. [ 863.548162][T10366] netlink: 'syz.1.880': attribute type 4 has an invalid length. [ 863.579219][T10279] bridge_slave_0: entered promiscuous mode [ 863.726538][T10279] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.735417][T10279] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.743327][T10279] bridge_slave_1: entered allmulticast mode [ 863.754773][T10279] bridge_slave_1: entered promiscuous mode [ 863.871164][T10018] veth1_vlan: entered promiscuous mode [ 864.493202][T10279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.705839][T10279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.947530][T10279] team0: Port device team_slave_0 added [ 865.995609][T10371] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 866.002392][T10371] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 866.010889][T10371] vhci_hcd vhci_hcd.0: Device attached [ 866.046393][T10018] veth0_macvtap: entered promiscuous mode [ 866.162822][T10279] team0: Port device team_slave_1 added [ 866.196394][ T11] vhci_hcd: vhci_device speed not set [ 866.308147][ T7704] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 866.316561][T10018] veth1_macvtap: entered promiscuous mode [ 866.344918][ T11] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 866.515057][T10279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.522205][T10279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.549017][T10279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.577556][ T7704] usb 2-1: config 0 has no interfaces? [ 866.587848][ T7704] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 866.598869][ T7704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.648701][ T7704] usb 2-1: config 0 descriptor?? [ 866.701629][T10279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.708940][T10279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.735616][T10279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.882071][T10018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.352876][T10372] vhci_hcd: connection reset by peer [ 869.359007][ T41] usb 2-1: USB disconnect, device number 10 [ 869.393024][T10117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.457070][T10279] hsr_slave_0: entered promiscuous mode [ 869.466621][T10279] hsr_slave_1: entered promiscuous mode [ 869.474823][T10279] debugfs: 'hsr0' already exists in 'hsr' [ 869.480682][T10279] Cannot create hsr debugfs directory [ 869.495163][ T753] vhci_hcd: stop threads [ 869.499595][ T753] vhci_hcd: release socket [ 869.504435][ T753] vhci_hcd: disconnect device [ 869.573402][T10018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.649672][T10117] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.810981][ T1110] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.829660][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.837330][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.854664][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.862189][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.914966][ T1110] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.116345][ T1110] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.143519][ T1110] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.184806][T10384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 871.505361][ T11] vhci_hcd: vhci_device speed not set [ 872.687264][T10411] loop4: detected capacity change from 0 to 7 [ 872.761759][T10411] Dev loop4: unable to read RDB block 7 [ 872.767957][T10411] loop4: AHDI p1 [ 872.771959][T10411] loop4: partition table partially beyond EOD, truncated [ 872.884713][T10279] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 873.069494][T10279] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 873.286781][T10279] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 873.436100][T10279] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 873.569258][T10117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.415623][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.9.891'. [ 875.431240][T10279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.586800][T10436] bridge_slave_0: left allmulticast mode [ 875.603948][T10436] bridge_slave_0: left promiscuous mode [ 875.610979][T10436] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.717865][T10436] bridge_slave_1: left allmulticast mode [ 875.723952][T10436] bridge_slave_1: left promiscuous mode [ 875.733003][T10436] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.036925][T10436] bond0: (slave bond_slave_0): Releasing backup interface [ 876.144545][T10436] bond0: (slave bond_slave_1): Releasing backup interface [ 876.198649][T10436] team0: Port device team_slave_0 removed [ 876.289276][T10436] team0: Port device team_slave_1 removed [ 876.300989][T10436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.315545][T10436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.404399][T10436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.421505][T10436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.020146][T10279] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.173640][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.181494][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.345182][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.352589][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.315662][T10451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.979362][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 879.034906][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 879.086177][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 879.152029][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 879.169084][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 879.391388][T10117] veth0_vlan: entered promiscuous mode [ 879.822546][T10117] veth1_vlan: entered promiscuous mode [ 880.593049][T10117] veth0_macvtap: entered promiscuous mode [ 880.725769][T10117] veth1_macvtap: entered promiscuous mode [ 881.336781][T10279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.345475][ T8497] Bluetooth: hci0: command tx timeout [ 881.369461][T10117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.581688][T10117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.760493][ T3568] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.841287][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.979184][ T3474] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.034655][ T3474] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.205368][T10458] chnl_net:caif_netlink_parms(): no params data found [ 883.404823][ T8497] Bluetooth: hci0: command tx timeout [ 883.660942][ T3936] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.868067][ T3936] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.138192][ T3936] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.414969][ T3936] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.047786][T10458] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.056922][T10458] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.065172][T10458] bridge_slave_0: entered allmulticast mode [ 885.075534][T10458] bridge_slave_0: entered promiscuous mode [ 885.310940][T10458] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.328802][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.337058][T10458] bridge_slave_1: entered allmulticast mode [ 885.494881][ T8497] Bluetooth: hci0: command tx timeout [ 885.537105][T10458] bridge_slave_1: entered promiscuous mode [ 885.822556][ T3936] bridge_slave_1: left allmulticast mode [ 885.835268][ T3936] bridge_slave_1: left promiscuous mode [ 885.845628][ T3936] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.911183][ T3936] bridge_slave_0: left allmulticast mode [ 885.918461][ T3936] bridge_slave_0: left promiscuous mode [ 885.927895][ T3936] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.763599][T10517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.791665][ T3936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.836685][ T3936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.869188][ T3936] bond0 (unregistering): Released all slaves [ 887.246540][T10514] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 887.271511][T10514] bond1: (slave macvlan3): Enslaving as a backup interface with a down link [ 887.355420][ T3936] hsr_slave_0: left promiscuous mode [ 887.381002][ T3936] hsr_slave_1: left promiscuous mode [ 887.391822][ T3936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.399731][ T3936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.475175][ T3936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.482891][ T3936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.555561][ T3936] veth1_macvtap: left promiscuous mode [ 887.561448][ T3936] veth0_macvtap: left promiscuous mode [ 887.580835][ T3936] veth1_vlan: left promiscuous mode [ 887.586747][ T3936] veth0_vlan: left promiscuous mode [ 887.603348][ T8497] Bluetooth: hci0: command tx timeout [ 888.361492][T10525] block nbd9: shutting down sockets [ 888.773313][ T3936] team0 (unregistering): Port device team_slave_1 removed [ 888.833493][ T3936] team0 (unregistering): Port device team_slave_0 removed [ 889.433637][T10458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.607931][T10458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.865204][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 889.907951][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 889.921440][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 889.969101][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 889.996193][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 890.410126][T10279] veth0_vlan: entered promiscuous mode [ 890.435465][T10458] team0: Port device team_slave_0 added [ 890.664534][T10458] team0: Port device team_slave_1 added [ 891.642927][T10279] veth1_vlan: entered promiscuous mode [ 891.775195][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.9.905'. [ 891.791215][T10549] netlink: 'syz.9.905': attribute type 10 has an invalid length. [ 891.828840][T10549] team0: Port device macvlan0 added [ 892.125660][ T8497] Bluetooth: hci1: command tx timeout [ 892.339193][T10458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.346636][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.373170][T10458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.925610][T10279] veth0_macvtap: entered promiscuous mode [ 893.185761][T10458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.193147][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.225033][T10458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.246817][T10279] veth1_macvtap: entered promiscuous mode [ 893.894384][T10279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.206034][ T8497] Bluetooth: hci1: command tx timeout [ 894.292289][T10279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.761101][T10458] hsr_slave_0: entered promiscuous mode [ 894.776805][T10458] hsr_slave_1: entered promiscuous mode [ 894.786284][T10458] debugfs: 'hsr0' already exists in 'hsr' [ 894.792223][T10458] Cannot create hsr debugfs directory [ 894.830748][T10557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.890738][ T3568] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.967115][ T3568] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.025181][ T3568] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.074641][ T3568] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.384916][T10534] chnl_net:caif_netlink_parms(): no params data found [ 896.141256][ T3474] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.295891][ T8497] Bluetooth: hci1: command tx timeout [ 896.360541][ T3474] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.621641][ T3474] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.103300][ T3474] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.786887][T10579] team0: Port device macvlan0 removed [ 898.394682][ T8497] Bluetooth: hci1: command tx timeout [ 900.007198][ T3474] bridge_slave_1: left allmulticast mode [ 900.013171][ T3474] bridge_slave_1: left promiscuous mode [ 900.020036][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.115831][ T3474] bridge_slave_0: left allmulticast mode [ 900.122038][ T3474] bridge_slave_0: left promiscuous mode [ 900.130528][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.767401][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.837154][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.905628][ T3474] bond0 (unregistering): Released all slaves [ 901.531154][T10534] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.539762][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.550139][T10534] bridge_slave_0: entered allmulticast mode [ 901.560347][T10534] bridge_slave_0: entered promiscuous mode [ 901.748002][ T3474] hsr_slave_0: left promiscuous mode [ 901.786433][ T3474] hsr_slave_1: left promiscuous mode [ 901.796243][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.811223][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.004681][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.018290][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.384836][ T3474] veth1_macvtap: left promiscuous mode [ 902.390619][ T3474] veth0_macvtap: left promiscuous mode [ 902.396812][ T3474] veth1_vlan: left promiscuous mode [ 902.405036][ T3474] veth0_vlan: left promiscuous mode [ 903.587957][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 903.760763][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 904.115643][T10534] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.123229][T10534] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.131992][T10534] bridge_slave_1: entered allmulticast mode [ 904.142022][T10534] bridge_slave_1: entered promiscuous mode [ 905.244509][T10534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.716597][T10534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.375928][T10458] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 906.583532][T10458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 906.682915][T10534] team0: Port device team_slave_0 added [ 906.799542][T10458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 906.964787][T10534] team0: Port device team_slave_1 added [ 907.017459][T10458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 907.797395][T10534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.805310][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.832800][T10534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.990276][T10621] netlink: 16 bytes leftover after parsing attributes in process `syz.9.921'. [ 908.138938][T10534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.146433][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.186674][T10534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.167415][T10534] hsr_slave_0: entered promiscuous mode [ 910.179332][T10534] hsr_slave_1: entered promiscuous mode [ 910.807350][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.814429][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 910.845307][T10458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.222290][T10458] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.397128][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.404806][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.571571][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.579257][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.648270][T10458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 912.664353][T10458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 913.239982][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 913.249778][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 913.260661][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 913.281333][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 913.425977][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 915.402190][T10534] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 915.560617][T10534] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 915.570145][ T8497] Bluetooth: hci3: command tx timeout [ 915.646837][T10534] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 915.797712][T10534] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 916.564963][T10458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.978206][ T753] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.220003][ T753] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.305116][T10642] chnl_net:caif_netlink_parms(): no params data found [ 917.420644][ T753] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.644699][ T8497] Bluetooth: hci3: command tx timeout [ 917.742357][ T753] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.155948][T10680] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 918.531003][T10534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.539739][ T753] bridge_slave_1: left allmulticast mode [ 918.546215][ T753] bridge_slave_1: left promiscuous mode [ 918.552890][ T753] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.657193][ T753] bridge_slave_0: left allmulticast mode [ 918.663086][ T753] bridge_slave_0: left promiscuous mode [ 918.673025][ T753] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.359762][ T753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.431053][ T753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.459167][ T753] bond0 (unregistering): Released all slaves [ 919.687895][T10534] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.733907][ T8497] Bluetooth: hci3: command tx timeout [ 919.792244][ T9935] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.792628][ T9935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.898527][ T9935] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.898922][ T9935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.038391][ T753] hsr_slave_0: left promiscuous mode [ 920.044315][ T41] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 920.047225][ T753] hsr_slave_1: left promiscuous mode [ 920.051973][ T753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.052135][ T753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.098917][ T753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.099084][ T753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.234636][ T753] veth1_macvtap: left promiscuous mode [ 920.234801][ T753] veth0_macvtap: left promiscuous mode [ 920.235126][ T753] veth1_vlan: left promiscuous mode [ 920.241077][ T753] veth0_vlan: left promiscuous mode [ 920.254242][ T41] usb 10-1: Using ep0 maxpacket: 32 [ 920.712347][ T41] usb 10-1: config 0 has an invalid interface number: 135 but max is 0 [ 920.721153][ T41] usb 10-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 920.732467][ T41] usb 10-1: config 0 has no interface number 0 [ 920.739015][ T41] usb 10-1: config 0 interface 135 altsetting 89 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 920.756948][ T41] usb 10-1: config 0 interface 135 has no altsetting 0 [ 920.806895][ T41] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 920.816621][ T41] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.825159][ T41] usb 10-1: Product: syz [ 920.829611][ T41] usb 10-1: Manufacturer: syz [ 920.835988][ T41] usb 10-1: SerialNumber: syz [ 920.900463][ T41] usb 10-1: config 0 descriptor?? [ 921.352744][ T753] team0 (unregistering): Port device team_slave_1 removed [ 921.434583][ T30] audit: type=1326 audit(1755579981.751:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10689 comm="syz.9.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 921.457866][ T30] audit: type=1326 audit(1755579981.751:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10689 comm="syz.9.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 921.496344][ T30] audit: type=1326 audit(1755579981.751:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10689 comm="syz.9.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 921.519194][ T30] audit: type=1326 audit(1755579981.751:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10689 comm="syz.9.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 921.548511][ T30] audit: type=1326 audit(1755579981.751:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10689 comm="syz.9.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 921.577028][ T30] audit: type=1326 audit(1755579981.751:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10689 comm="syz.9.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 921.627980][ T30] audit: type=1326 audit(1755579981.751:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10689 comm="syz.9.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 921.659039][ T30] audit: type=1326 audit(1755579981.751:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10689 comm="syz.9.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 921.691048][ T30] audit: type=1326 audit(1755579981.761:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10689 comm="syz.9.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 921.719187][ T30] audit: type=1326 audit(1755579981.761:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10689 comm="syz.9.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439e78ebe9 code=0x7ffc0000 [ 921.840760][ T753] team0 (unregistering): Port device team_slave_0 removed [ 922.129008][ T8497] Bluetooth: hci3: command tx timeout [ 923.559897][T10642] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.570515][T10642] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.579863][T10642] bridge_slave_0: entered allmulticast mode [ 923.595621][T10642] bridge_slave_0: entered promiscuous mode [ 924.779010][T10642] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.791636][T10642] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.800867][T10642] bridge_slave_1: entered allmulticast mode [ 924.814851][T10642] bridge_slave_1: entered promiscuous mode [ 925.983633][ T41] em28xx 10-1:0.135: audio device (0ccd:10af): interface 135, class 1 [ 926.313613][ T41] usb 10-1: USB disconnect, device number 2 [ 926.511219][T10458] veth0_vlan: entered promiscuous mode [ 926.538945][T10642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.672691][T10642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.707939][T10458] veth1_vlan: entered promiscuous mode [ 927.362659][T10642] team0: Port device team_slave_0 added [ 927.473172][T10642] team0: Port device team_slave_1 added [ 927.903433][T10642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.910937][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.945026][T10642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.082688][T10458] veth0_macvtap: entered promiscuous mode [ 928.177228][T10642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.184570][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.213519][T10642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.273217][T10458] veth1_macvtap: entered promiscuous mode [ 928.509784][T10458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.697397][T10458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.991579][ T753] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.059227][T10642] hsr_slave_0: entered promiscuous mode [ 929.070810][T10642] hsr_slave_1: entered promiscuous mode [ 929.080070][T10642] debugfs: 'hsr0' already exists in 'hsr' [ 929.086357][T10642] Cannot create hsr debugfs directory [ 929.096275][ T753] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.194530][ T753] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.209041][ T753] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.510655][T10722] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 929.615494][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 929.990126][T10534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.044584][ T5908] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 930.264738][ T5908] usb 10-1: Using ep0 maxpacket: 32 [ 930.297341][ T5908] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 930.307991][ T5908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.316566][ T5908] usb 10-1: Product: syz [ 930.321041][ T5908] usb 10-1: Manufacturer: syz [ 930.326320][ T5908] usb 10-1: SerialNumber: syz [ 930.471075][ T5908] usb 10-1: config 0 descriptor?? [ 930.625030][ T5908] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 931.955873][T10642] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 932.037165][T10642] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 932.122642][T10642] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 932.225636][T10642] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 932.378986][ T5908] gspca_ov534_9: reg_r err -71 [ 932.654579][ T5908] gspca_ov534_9: Unknown sensor 0000 [ 932.654988][ T5908] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 932.724900][ T5908] usb 10-1: USB disconnect, device number 3 [ 934.109354][T10642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.338634][T10642] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.405137][T10534] veth0_vlan: entered promiscuous mode [ 934.493600][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.501317][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.624046][T10534] veth1_vlan: entered promiscuous mode [ 934.669764][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.677439][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.827254][T10768] netlink: 28 bytes leftover after parsing attributes in process `syz.9.950'. [ 935.673670][T10642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 935.816654][T10534] veth0_macvtap: entered promiscuous mode [ 935.953013][T10534] veth1_macvtap: entered promiscuous mode [ 936.268943][T10534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.465063][T10534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.558788][ T4126] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.633763][T10378] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.687211][T10378] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.768964][T10378] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.643929][T10642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.515617][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 939.556624][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 939.609537][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 939.658371][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 939.702640][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 940.444433][ T5866] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 940.674789][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 940.749910][ T5866] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 940.759509][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.768895][ T5866] usb 2-1: Product: syz [ 940.773282][ T5866] usb 2-1: Manufacturer: syz [ 940.778682][ T5866] usb 2-1: SerialNumber: syz [ 940.957465][ T5866] usb 2-1: config 0 descriptor?? [ 940.991647][ T5866] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 941.886571][ T8497] Bluetooth: hci2: command tx timeout [ 942.618039][ T5866] gspca_ov534_9: reg_r err -71 [ 942.657402][T10642] veth0_vlan: entered promiscuous mode [ 942.707683][T10820] chnl_net:caif_netlink_parms(): no params data found [ 942.904999][ T5866] gspca_ov534_9: Unknown sensor 0000 [ 942.905353][ T5866] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 942.930174][T10642] veth1_vlan: entered promiscuous mode [ 943.028396][ T5866] usb 2-1: USB disconnect, device number 11 [ 943.746240][T10378] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.869894][T10861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.959'. [ 944.035130][ T8497] Bluetooth: hci2: command tx timeout [ 944.162821][T10861] bond1: (slave macvlan3): Releasing backup interface [ 944.338178][T10378] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.427407][T10862] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 944.448695][T10862] bond1: (slave macvlan4): Enslaving as a backup interface with a down link [ 944.618499][T10378] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.835951][T10378] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.978297][T10642] veth0_macvtap: entered promiscuous mode [ 945.075553][T10642] veth1_macvtap: entered promiscuous mode [ 945.506832][T10642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.659957][T10642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.687505][T10378] bridge_slave_1: left allmulticast mode [ 945.693395][T10378] bridge_slave_1: left promiscuous mode [ 945.702725][T10378] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.842354][T10378] bridge_slave_0: left allmulticast mode [ 945.848523][T10378] bridge_slave_0: left promiscuous mode [ 945.855908][T10378] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.051056][ T8497] Bluetooth: hci2: command tx timeout [ 946.895123][T10378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.056425][T10378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.131164][T10378] bond0 (unregistering): Released all slaves [ 947.506027][T10378] hsr_slave_0: left promiscuous mode [ 947.544156][T10378] hsr_slave_1: left promiscuous mode [ 947.552538][T10378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.560389][T10378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.653482][T10378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 947.666576][T10378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.817706][T10378] veth1_macvtap: left promiscuous mode [ 947.823474][T10378] veth0_macvtap: left promiscuous mode [ 947.831281][T10378] veth1_vlan: left promiscuous mode [ 947.837131][T10378] veth0_vlan: left promiscuous mode [ 948.125818][ T8497] Bluetooth: hci2: command tx timeout [ 948.744548][ T5866] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 948.904491][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 948.958832][ T5866] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 948.968551][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.977127][ T5866] usb 2-1: Product: syz [ 948.981553][ T5866] usb 2-1: Manufacturer: syz [ 948.986540][ T5866] usb 2-1: SerialNumber: syz [ 949.108555][ T5866] usb 2-1: config 0 descriptor?? [ 949.194369][ T5866] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 949.225472][T10378] team0 (unregistering): Port device team_slave_1 removed [ 949.286684][T10378] team0 (unregistering): Port device team_slave_0 removed [ 949.975918][ T3474] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.988214][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.996037][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.004304][T10820] bridge_slave_0: entered allmulticast mode [ 950.014404][T10820] bridge_slave_0: entered promiscuous mode [ 950.057535][ T3474] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.134728][ T3474] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.224217][ T3474] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.258122][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.265873][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.273803][T10820] bridge_slave_1: entered allmulticast mode [ 950.284286][T10820] bridge_slave_1: entered promiscuous mode [ 950.657187][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 950.693378][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 950.706467][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 950.939375][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 950.965701][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 951.054895][ T5866] gspca_ov534_9: reg_r err -71 [ 951.238125][T10820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.360983][ T5866] gspca_ov534_9: Unknown sensor 0000 [ 951.361354][ T5866] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 951.491875][ T5866] usb 2-1: USB disconnect, device number 12 [ 951.861610][T10820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.376040][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.968'. [ 952.549457][T10820] team0: Port device team_slave_0 added [ 952.639183][T10820] team0: Port device team_slave_1 added [ 953.030673][ T5814] Bluetooth: hci0: command tx timeout [ 953.088946][T10932] bond1: (slave macvlan4): Releasing backup interface [ 953.333468][T10935] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 953.352472][T10935] bond1: (slave macvlan5): Enslaving as a backup interface with a down link [ 953.834370][T10820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.841615][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.873512][T10820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.105731][T10820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.112892][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.144584][T10820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.960531][T10921] chnl_net:caif_netlink_parms(): no params data found [ 955.096223][T10820] hsr_slave_0: entered promiscuous mode [ 955.107722][T10820] hsr_slave_1: entered promiscuous mode [ 955.117247][ T8497] Bluetooth: hci0: command tx timeout [ 955.117404][T10820] debugfs: 'hsr0' already exists in 'hsr' [ 955.128776][T10820] Cannot create hsr debugfs directory [ 956.145121][ T4424] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.352424][ T4424] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.562248][ T4424] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.772877][ T4424] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.165859][ T8497] Bluetooth: hci0: command tx timeout [ 957.320013][ T7704] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 957.524745][ T7704] usb 10-1: Using ep0 maxpacket: 32 [ 957.604954][ T7704] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 957.620234][ T7704] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.630564][ T7704] usb 10-1: Product: syz [ 957.635389][ T7704] usb 10-1: Manufacturer: syz [ 957.640357][ T7704] usb 10-1: SerialNumber: syz [ 957.788665][ T7704] usb 10-1: config 0 descriptor?? [ 957.995717][ T7704] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 958.151345][ T4424] bridge_slave_1: left allmulticast mode [ 958.158995][ T4424] bridge_slave_1: left promiscuous mode [ 958.166424][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.266268][ T4424] bridge_slave_0: left allmulticast mode [ 958.272306][ T4424] bridge_slave_0: left promiscuous mode [ 958.280293][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.080962][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.136088][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.178891][ T4424] bond0 (unregistering): Released all slaves [ 959.244469][ T8497] Bluetooth: hci0: command tx timeout [ 959.485315][ T7704] gspca_ov534_9: reg_r err -71 [ 959.583623][T10921] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.591662][T10921] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.600638][T10921] bridge_slave_0: entered allmulticast mode [ 959.610990][T10921] bridge_slave_0: entered promiscuous mode [ 959.697921][ T4424] hsr_slave_0: left promiscuous mode [ 959.728995][ T4424] hsr_slave_1: left promiscuous mode [ 959.739603][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.747520][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.814331][ T7704] gspca_ov534_9: Unknown sensor 0000 [ 959.814700][ T7704] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 959.860308][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.869918][ T7704] usb 10-1: USB disconnect, device number 4 [ 959.882192][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.105047][ T4424] veth1_macvtap: left promiscuous mode [ 960.110802][ T4424] veth0_macvtap: left promiscuous mode [ 960.116992][ T4424] veth1_vlan: left promiscuous mode [ 960.122573][ T4424] veth0_vlan: left promiscuous mode [ 961.295016][ T4424] team0 (unregistering): Port device team_slave_1 removed [ 961.332426][ T4424] team0 (unregistering): Port device team_slave_0 removed [ 962.575859][T10921] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.583601][T10921] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.591727][T10921] bridge_slave_1: entered allmulticast mode [ 962.601802][T10921] bridge_slave_1: entered promiscuous mode [ 963.273537][T10921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.512069][T10921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.035853][T10921] team0: Port device team_slave_0 added [ 964.115305][T10921] team0: Port device team_slave_1 added [ 964.129345][T10820] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 964.669364][T10820] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 964.751819][T10921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.759286][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.790668][T10921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.831185][T10820] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 964.888904][T10820] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 964.926128][T10921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.933406][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.960210][T10921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.778554][T10921] hsr_slave_0: entered promiscuous mode [ 965.789583][T10921] hsr_slave_1: entered promiscuous mode [ 965.839011][ T4205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.847498][ T4205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.189170][ T41] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 966.233109][ T4424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.241487][ T4424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.395259][ T41] usb 2-1: Using ep0 maxpacket: 32 [ 966.501903][ T41] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 966.511668][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.520284][ T41] usb 2-1: Product: syz [ 966.531224][ T41] usb 2-1: Manufacturer: syz [ 966.537840][ T41] usb 2-1: SerialNumber: syz [ 966.657206][ T41] usb 2-1: config 0 descriptor?? [ 966.708301][ T41] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 967.600426][T10820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.180419][ T41] gspca_ov534_9: reg_r err -71 [ 968.332715][T10820] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.464793][ T41] gspca_ov534_9: Unknown sensor 0000 [ 968.465160][ T41] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 968.493529][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.501269][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.577012][ T41] usb 2-1: USB disconnect, device number 13 [ 968.682868][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.690616][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.512738][T10921] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 969.621525][T10921] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 969.667819][T10921] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 969.826723][T10921] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 970.030622][T11058] can0: slcan on ptm0. [ 970.405338][ T7511] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 970.656672][ T7511] usb 9-1: config 0 has no interfaces? [ 970.662583][ T7511] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 970.672474][ T7511] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.876772][ T7511] usb 9-1: config 0 descriptor?? [ 971.184809][ T7689] usb 9-1: USB disconnect, device number 2 [ 971.215892][T10627] udevd[10627]: setting owner of /dev/bus/usb/009/002 to uid=0, gid=0 failed: No such file or directory [ 971.316407][T11056] can0 (unregistered): slcan off ptm0. [ 972.083478][T10921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.265355][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 972.272029][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 972.441444][T10820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.631793][T10921] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.788207][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.795884][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.990125][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.997835][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.677740][T11114] tipc: Started in network mode [ 975.682926][T11114] tipc: Node identity ff, cluster identity 4711 [ 975.691088][T11114] tipc: Enabling of bearer rejected, failed to enable media [ 975.966748][T10921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.541057][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1002'. [ 977.182650][T11125] veth5: entered promiscuous mode [ 977.634823][T10820] veth0_vlan: entered promiscuous mode [ 977.762945][T11128] overlayfs: failed to resolve './file1': -2 [ 977.801439][T10820] veth1_vlan: entered promiscuous mode [ 978.145768][T10820] veth0_macvtap: entered promiscuous mode [ 978.231804][T10820] veth1_macvtap: entered promiscuous mode [ 978.536939][T10820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.694968][T10820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.758099][T10699] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.869176][T10699] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.949206][T10699] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.012281][T10699] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.800347][T10921] veth0_vlan: entered promiscuous mode [ 980.901077][T10921] veth1_vlan: entered promiscuous mode [ 981.344950][T10921] veth0_macvtap: entered promiscuous mode [ 981.435978][T10921] veth1_macvtap: entered promiscuous mode [ 981.691723][T10921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.875274][T10921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.178103][ T1110] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.265374][ T9935] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.361488][ T9935] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.429444][ T9935] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.736385][T11177] overlayfs: failed to resolve './file1': -2 [ 983.351504][T11186] 9pnet_fd: Insufficient options for proto=fd [ 983.597758][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 985.857490][T11204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 986.850042][T11216] bridge0: port 3(syz_tun) entered blocking state [ 986.857702][T11216] bridge0: port 3(syz_tun) entered disabled state [ 986.865292][T11216] syz_tun: entered allmulticast mode [ 986.874727][T11216] syz_tun: entered promiscuous mode [ 986.882472][T11216] bridge0: port 3(syz_tun) entered blocking state [ 986.889659][T11216] bridge0: port 3(syz_tun) entered forwarding state [ 987.842211][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1023'. [ 988.033866][T11232] overlayfs: failed to resolve './file1': -2 [ 989.186675][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 990.470393][T11254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.562740][T11255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.599127][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.607565][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.838502][ T4424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.847394][ T4424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.548207][T11277] overlayfs: failed to resolve './file1': -2 [ 993.109066][ T5871] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 993.371340][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.382086][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 993.392282][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 993.404258][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 993.415777][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 993.426112][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 993.439568][ T5871] usb 2-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 993.449169][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.778282][ T5871] usb 2-1: config 0 descriptor?? [ 993.924443][ T5871] appledisplay 2-1:0.0: Submitting URB failed [ 993.931237][ T5871] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5 [ 994.081029][ T5871] usb 2-1: USB disconnect, device number 14 [ 994.192083][T11296] bond1: option mode: unable to set because the bond device is up [ 994.498269][T10699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.506860][T10699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.847039][T10699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.855455][T10699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.134569][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1043'. [ 995.686585][T11304] input: syz1 as /devices/virtual/input/input19 [ 997.219928][T11320] overlayfs: failed to resolve './file1': -2 [ 998.085942][ T4126] Bluetooth: hci1: Frame reassembly failed (-84) [ 998.092535][ T4126] Bluetooth: hci1: Frame reassembly failed (-84) [ 998.338448][T11334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 998.362515][T11339] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 999.664853][ T5871] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 999.875854][ T5871] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.889132][ T5871] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 999.992278][ T5871] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1000.002358][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.016798][ T5871] usb 8-1: Product: syz [ 1000.021189][ T5871] usb 8-1: Manufacturer: syz [ 1000.028541][ T5871] usb 8-1: SerialNumber: syz [ 1000.126800][T11333] Bluetooth: hci1: command 0x1003 tx timeout [ 1000.132603][ T8497] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1000.285914][ T5871] cdc_mbim 8-1:1.0: skipping garbage [ 1000.485540][T11354] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1001.326001][T11354] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1001.353151][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1061'. [ 1001.525089][ T5871] cdc_mbim 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1001.532937][ T5871] cdc_mbim 8-1:1.0: setting rx_max = 2048 [ 1001.777908][ T5871] cdc_mbim 8-1:1.0: setting tx_max = 184 [ 1002.015944][ T5871] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 1002.109222][ T5871] wwan wwan0: port wwan0mbim0 attached [ 1002.256440][T11373] overlayfs: failed to resolve './file1': -2 [ 1002.320895][ T5871] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 22:9d:92:51:73:b0 [ 1002.412666][ T5871] usb 8-1: USB disconnect, device number 4 [ 1002.421474][ T5871] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 1002.646961][ T5871] wwan wwan0: port wwan0mbim0 disconnected [ 1003.427786][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1065'. [ 1003.920672][T11385] bond1: option mode: unable to set because the bond device has slaves [ 1004.133014][ T5871] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1004.597495][ T5871] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1004.607046][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.621833][ T5871] usb 8-1: Product: syz [ 1004.628241][ T5871] usb 8-1: Manufacturer: syz [ 1004.633079][ T5871] usb 8-1: SerialNumber: syz [ 1004.750915][T11391] loop4: detected capacity change from 0 to 7 [ 1004.802246][T11391] Dev loop4: unable to read RDB block 7 [ 1004.808677][T11391] loop4: unable to read partition table [ 1004.828706][T11391] loop4: partition table beyond EOD, truncated [ 1004.839817][T11391] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1004.899085][ T5871] usb 8-1: config 0 descriptor?? [ 1005.003626][ T5871] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1005.462901][ T5871] gspca_ov534_9: reg_w failed -71 [ 1005.875547][ T5871] gspca_ov534_9: Unknown sensor 0000 [ 1005.875939][ T5871] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22 [ 1006.023044][ T5871] usb 8-1: USB disconnect, device number 5 [ 1006.740262][T11405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1074'. [ 1008.011953][T11423] bond1: option mode: unable to set because the bond device is up [ 1011.121893][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1079'. [ 1014.607372][T11466] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1090'. [ 1018.534691][ T5871] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1018.695078][T11496] comedi comedi3: bad chanlist[0]=0x80000080 chan=128 range length=9 [ 1018.793399][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 1019.447016][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.458478][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.475067][ T5871] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1019.486638][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.779671][ T5871] usb 9-1: config 0 descriptor?? [ 1020.102560][ T5871] usbhid 9-1:0.0: can't add hid device: -71 [ 1020.110672][ T5871] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1020.202372][ T5871] usb 9-1: USB disconnect, device number 3 [ 1020.243229][ T41] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1020.454304][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 1020.541608][ T41] usb 7-1: config 0 has an invalid interface number: 211 but max is 0 [ 1020.550406][ T41] usb 7-1: config 0 has no interface number 0 [ 1020.557007][ T41] usb 7-1: config 0 interface 211 has no altsetting 0 [ 1020.642776][ T41] usb 7-1: New USB device found, idVendor=2304, idProduct=022c, bcdDevice=3c.89 [ 1020.652357][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.660936][ T41] usb 7-1: Product: syz [ 1020.665437][ T41] usb 7-1: Manufacturer: syz [ 1020.670250][ T41] usb 7-1: SerialNumber: syz [ 1020.787495][ T41] usb 7-1: config 0 descriptor?? [ 1021.122890][ T41] dvb-usb: found a 'Pinnacle PCTV 2000e' in warm state. [ 1021.178411][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1021.263829][ T41] dvbdev: DVB: registering new adapter (Pinnacle PCTV 2000e) [ 1021.273882][ T41] usb 7-1: media controller created [ 1021.443852][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1021.638174][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1105'. [ 1022.266713][T11527] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 1022.415268][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1107'. [ 1022.695355][ T41] DVB: Unable to find symbol dib7000p_attach() [ 1022.701901][ T41] dvb-usb: no frontend was attached by 'Pinnacle PCTV 2000e' [ 1022.710104][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1023.588222][ T41] dvbdev: DVB: registering new adapter (Pinnacle PCTV 2000e) [ 1023.597309][ T41] usb 7-1: media controller created [ 1023.852169][T11545] geneve2: entered promiscuous mode [ 1024.145826][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1024.492150][ T8497] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1024.501255][ T8497] Bluetooth: hci0: Injecting HCI hardware error event [ 1024.533765][ T8497] Bluetooth: hci0: hardware error 0x00 [ 1025.644766][ T5908] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1026.398410][ T41] DVB: Unable to find symbol dib7000p_attach() [ 1026.405213][ T41] dvb-usb: no frontend was attached by 'Pinnacle PCTV 2000e' [ 1026.475640][ T5908] usb 9-1: Using ep0 maxpacket: 32 [ 1026.716238][ T8497] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1026.792254][ T5908] usb 9-1: device descriptor read/all, error -71 [ 1026.822711][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1115'. [ 1027.804883][ T41] rc_core: IR keymap rc-dib0700-rc5 not found [ 1027.811182][ T41] Registered IR keymap rc-empty [ 1027.819417][ T41] dvb-usb: could not initialize remote control. [ 1027.826489][ T41] dvb-usb: Pinnacle PCTV 2000e successfully initialized and connected. [ 1027.915301][ T41] usb 7-1: USB disconnect, device number 9 [ 1027.985381][T11564] netlink: 'syz.8.1117': attribute type 1 has an invalid length. [ 1028.324543][ T5908] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1028.604977][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 1028.629693][ T5908] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1028.638834][ T5908] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1028.649382][ T5908] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1028.659570][ T5908] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1028.669895][ T5908] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.692868][ T5908] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1028.705942][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.319927][ T41] dvb-usb: Pinnacle PCTV 2000e successfully deinitialized and disconnected. [ 1029.537713][ T5908] usb 2-1: usb_control_msg returned -32 [ 1029.543848][ T5908] usbtmc 2-1:16.0: can't read capabilities [ 1029.643512][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1120'. [ 1030.433075][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1122'. [ 1032.395488][T11604] geneve2: entered promiscuous mode [ 1032.972163][ T5908] usb 2-1: USB disconnect, device number 15 [ 1033.732336][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1033.739359][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1034.244633][ T7689] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1034.404933][ T5908] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1034.541277][T11612] netlink: 'syz.6.1132': attribute type 1 has an invalid length. [ 1034.551286][ T7689] usb 9-1: Using ep0 maxpacket: 32 [ 1034.696434][ T7689] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1034.706802][ T7689] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.715584][ T7689] usb 9-1: Product: syz [ 1034.730184][ T7689] usb 9-1: Manufacturer: syz [ 1034.738373][ T7689] usb 9-1: SerialNumber: syz [ 1034.889785][ T5908] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.901962][ T5908] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1034.997783][ T7689] usb 9-1: config 0 descriptor?? [ 1035.038224][ T7689] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1035.097769][ T5908] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1035.107971][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.116657][ T5908] usb 2-1: Product: syz [ 1035.121229][ T5908] usb 2-1: Manufacturer: syz [ 1035.126461][ T5908] usb 2-1: SerialNumber: syz [ 1035.465509][ T5908] cdc_mbim 2-1:1.0: skipping garbage [ 1035.820900][ T8497] Bluetooth: hci3: command 0x0406 tx timeout [ 1035.885328][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1133'. [ 1036.227823][T11610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1036.955723][T11610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1036.966526][ T7689] gspca_ov534_9: reg_r err -71 [ 1037.146488][ T5908] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1037.154488][ T5908] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 1037.296418][T11628] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1135'. [ 1037.333641][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1137'. [ 1037.360472][ T5908] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 1037.374954][ T7689] gspca_ov534_9: Unknown sensor 0000 [ 1037.375335][ T7689] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1037.456044][ T5908] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1037.542989][ T7689] usb 9-1: USB disconnect, device number 6 [ 1037.576981][ T5908] wwan wwan0: port wwan0mbim0 attached [ 1037.671594][ T5908] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 8e:b3:8b:e0:a3:19 [ 1037.862301][ T5908] usb 2-1: USB disconnect, device number 16 [ 1037.870844][ T5908] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1038.196895][ T5908] wwan wwan0: port wwan0mbim0 disconnected [ 1039.454681][ T41] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1039.694635][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 1039.874946][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.886670][ T41] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1039.900024][ T41] usb 7-1: New USB device found, idVendor=1477, idProduct=1023, bcdDevice= 0.00 [ 1039.909629][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.335986][T11664] netlink: 'syz.8.1146': attribute type 1 has an invalid length. [ 1041.386375][ T41] usb 7-1: config 0 descriptor?? [ 1043.006291][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1147'. [ 1044.214493][ T41] usbhid 7-1:0.0: can't add hid device: -71 [ 1044.221274][ T41] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1044.496110][ T41] usb 7-1: USB disconnect, device number 10 [ 1045.703321][ T41] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1045.715974][ T7704] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1045.904418][ T41] usb 9-1: Using ep0 maxpacket: 32 [ 1045.954596][ T7704] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.966259][ T7704] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1046.067948][ T41] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1046.077547][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.092283][ T41] usb 9-1: Product: syz [ 1046.098670][ T41] usb 9-1: Manufacturer: syz [ 1046.103487][ T41] usb 9-1: SerialNumber: syz [ 1046.196630][ T7704] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1046.206263][ T7704] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.215282][ T7704] usb 8-1: Product: syz [ 1046.219670][ T7704] usb 8-1: Manufacturer: syz [ 1046.224683][ T7704] usb 8-1: SerialNumber: syz [ 1046.277737][ T41] usb 9-1: config 0 descriptor?? [ 1046.315852][ T41] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1046.411735][ T7704] cdc_mbim 8-1:1.0: skipping garbage [ 1046.622486][T11682] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1047.398858][T11682] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1047.444495][ T7704] cdc_mbim 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1047.452455][ T7704] cdc_mbim 8-1:1.0: setting rx_max = 2048 [ 1047.817504][ T7704] cdc_mbim 8-1:1.0: setting tx_max = 184 [ 1048.088609][ T7704] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 1048.362643][ T7704] wwan wwan0: port wwan0mbim0 attached [ 1049.322374][ T41] gspca_ov534_9: reg_r err -71 [ 1049.340059][ T7704] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 32:f4:28:d8:f1:b2 [ 1050.125138][ T5908] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1050.345482][ T7704] usb 8-1: USB disconnect, device number 6 [ 1050.353282][ T7704] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 1050.482546][ T5908] usb 10-1: Using ep0 maxpacket: 32 [ 1050.889251][ T5908] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.910604][ T5908] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1050.929738][ T5908] usb 10-1: New USB device found, idVendor=1477, idProduct=1023, bcdDevice= 0.00 [ 1050.939469][ T5908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.171062][ T7704] wwan wwan0: port wwan0mbim0 disconnected [ 1051.212345][ T41] gspca_ov534_9: Unknown sensor 0000 [ 1051.212734][ T41] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1051.318022][ T41] usb 9-1: USB disconnect, device number 7 [ 1051.337312][T11712] netlink: 'syz.7.1161': attribute type 1 has an invalid length. [ 1051.398199][ T5908] usb 10-1: config 0 descriptor?? [ 1051.805348][ T5871] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1051.918463][ T5908] hid_parser_main: 1261 callbacks suppressed [ 1051.918575][ T5908] hid-generic 0003:1477:1023.0003: unknown main item tag 0x0 [ 1051.954092][ T5908] hid-generic 0003:1477:1023.0003: unknown main item tag 0x0 [ 1051.961898][ T5908] hid-generic 0003:1477:1023.0003: item fetching failed at offset 2/5 [ 1052.099676][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 1052.207239][ T5871] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1052.217666][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.217681][ T5908] hid-generic 0003:1477:1023.0003: probe with driver hid-generic failed with error -22 [ 1052.243036][ T5871] usb 2-1: Product: syz [ 1052.249697][ T5871] usb 2-1: Manufacturer: syz [ 1052.254748][ T5871] usb 2-1: SerialNumber: syz [ 1052.275112][ T5908] usb 10-1: USB disconnect, device number 5 [ 1052.373372][ T5871] usb 2-1: config 0 descriptor?? [ 1052.592177][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1164'. [ 1053.623586][ T5871] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1054.536682][ T5871] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1054.676806][ T5871] usb 2-1: USB disconnect, device number 17 [ 1055.674379][ T5908] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1055.811474][ T7689] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1055.924913][ T5908] usb 9-1: Using ep0 maxpacket: 32 [ 1055.984970][ T5908] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1055.994860][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.003103][ T5908] usb 9-1: Product: syz [ 1056.007889][ T5908] usb 9-1: Manufacturer: syz [ 1056.012836][ T5908] usb 9-1: SerialNumber: syz [ 1056.081245][ T7689] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.093064][ T7689] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1056.171950][ T5908] usb 9-1: config 0 descriptor?? [ 1056.321817][ T5908] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1056.574941][ T7689] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1056.584861][ T7689] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.593464][ T7689] usb 10-1: Product: syz [ 1056.598516][ T7689] usb 10-1: Manufacturer: syz [ 1056.603575][ T7689] usb 10-1: SerialNumber: syz [ 1057.834539][ T7689] cdc_mbim 10-1:1.0: skipping garbage [ 1057.881334][T11750] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1059.829229][ T5908] gspca_ov534_9: reg_w failed -110 [ 1061.899353][ T7689] cdc_mbim 10-1:1.0: bind() failure [ 1061.952795][ T7689] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1062.180619][ T5908] gspca_ov534_9: Unknown sensor 0000 [ 1062.180993][ T5908] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1062.234973][ T7689] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1062.344484][ T7689] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1062.365416][ T5908] usb 9-1: USB disconnect, device number 8 [ 1062.565226][ T7689] usb 10-1: USB disconnect, device number 6 [ 1062.584353][T11770] netlink: 'syz.8.1176': attribute type 1 has an invalid length. [ 1062.818433][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.265502][ T7689] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1063.755743][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.848834][ T7689] usb 10-1: Using ep0 maxpacket: 32 [ 1063.871907][ T7689] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.885343][ T7689] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1063.898976][ T7689] usb 10-1: New USB device found, idVendor=1477, idProduct=1023, bcdDevice= 0.00 [ 1063.917123][ T7689] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.036785][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1064.102961][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1064.392202][ T7689] usb 10-1: config 0 descriptor?? [ 1064.946809][ T7689] hid-generic 0003:1477:1023.0004: unknown main item tag 0x0 [ 1064.955407][ T7689] hid-generic 0003:1477:1023.0004: item fetching failed at offset 2/5 [ 1065.125397][ T7689] hid-generic 0003:1477:1023.0004: probe with driver hid-generic failed with error -22 [ 1065.320688][ T7689] usb 10-1: USB disconnect, device number 7 [ 1065.735924][ T5871] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1065.990685][ T5871] usb 7-1: Using ep0 maxpacket: 8 [ 1066.114922][ T5871] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1066.124641][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.132892][ T5871] usb 7-1: Product: syz [ 1066.137616][ T5871] usb 7-1: Manufacturer: syz [ 1066.142623][ T5871] usb 7-1: SerialNumber: syz [ 1066.243372][ T5871] usb 7-1: config 0 descriptor?? [ 1066.425663][ T7689] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1066.445302][T11333] Bluetooth: hci2: command 0x0406 tx timeout [ 1066.447724][ T5908] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1066.550446][ T5871] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1066.704414][ T7689] usb 2-1: Using ep0 maxpacket: 32 [ 1066.761931][ T5908] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.782280][ T5908] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1066.905597][ T7689] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1066.915540][ T7689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.923784][ T7689] usb 2-1: Product: syz [ 1066.928873][ T7689] usb 2-1: Manufacturer: syz [ 1066.933694][ T7689] usb 2-1: SerialNumber: syz [ 1067.146490][ T5908] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1067.156429][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.165454][ T5908] usb 9-1: Product: syz [ 1067.169831][ T5908] usb 9-1: Manufacturer: syz [ 1067.174772][ T5908] usb 9-1: SerialNumber: syz [ 1067.316893][ T7689] usb 2-1: config 0 descriptor?? [ 1067.434821][ T7689] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1068.533007][ T5871] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1068.587871][ T5908] cdc_mbim 9-1:1.0: skipping garbage [ 1068.868491][T11805] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1069.499475][ T7689] gspca_ov534_9: reg_w failed -110 [ 1069.560115][ T5871] usb 7-1: USB disconnect, device number 11 [ 1070.876480][T11805] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1071.185901][ T5908] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1071.193643][ T5908] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 1071.376846][ T7689] gspca_ov534_9: Unknown sensor 0000 [ 1071.377395][ T7689] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1071.476583][ T7689] usb 2-1: USB disconnect, device number 18 [ 1071.665054][ T5908] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 1071.747451][T11831] netlink: 'syz.1.1192': attribute type 1 has an invalid length. [ 1071.749455][ T5908] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 1071.856171][ T5908] wwan wwan0: port wwan0mbim0 attached [ 1072.025641][ T5908] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, be:c3:b4:62:80:1a [ 1072.147704][ T5908] usb 9-1: USB disconnect, device number 9 [ 1072.156662][ T5908] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 1072.215990][T11836] binder: 11833:11836 ioctl c0306201 200000000240 returned -11 [ 1072.383486][ T5908] wwan wwan0: port wwan0mbim0 disconnected [ 1073.797236][T11848] fuse: Bad value for 'fd' [ 1074.786060][ T5871] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1075.028597][T11863] geneve2: entered promiscuous mode [ 1077.125849][ T5871] usb 8-1: Using ep0 maxpacket: 8 [ 1077.202441][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1202'. [ 1077.537717][ T5908] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1077.690581][ T5871] usb 8-1: device descriptor read/all, error -71 [ 1077.793585][ T5908] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.805505][ T5908] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1078.017682][ T5908] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1078.027232][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.043550][ T5908] usb 2-1: Product: syz [ 1078.052070][ T5908] usb 2-1: Manufacturer: syz [ 1078.057111][ T5908] usb 2-1: SerialNumber: syz [ 1078.163773][ T5908] cdc_mbim 2-1:1.0: skipping garbage [ 1078.686748][ T5871] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1078.789518][ T5908] cdc_mbim 2-1:1.0: bind() failure [ 1078.807727][ T5908] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1078.815039][ T5908] cdc_ncm 2-1:1.1: bind() failure [ 1078.889618][T11877] netlink: 'syz.8.1207': attribute type 1 has an invalid length. [ 1078.988092][ T5871] usb 8-1: Using ep0 maxpacket: 32 [ 1079.023615][ T5871] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.035179][ T5871] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1079.048487][ T5871] usb 8-1: New USB device found, idVendor=1477, idProduct=1023, bcdDevice= 0.00 [ 1079.064347][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.195974][ T5908] usb 2-1: USB disconnect, device number 19 [ 1079.328254][ T5871] usb 8-1: config 0 descriptor?? [ 1079.886956][ T5871] hid-generic 0003:1477:1023.0005: unknown main item tag 0x0 [ 1079.894940][ T5871] hid-generic 0003:1477:1023.0005: item fetching failed at offset 2/5 [ 1079.970355][ T5871] hid-generic 0003:1477:1023.0005: probe with driver hid-generic failed with error -22 [ 1080.216479][ T5871] usb 8-1: USB disconnect, device number 8 [ 1083.110351][T11919] geneve2: entered promiscuous mode [ 1083.152852][ T5908] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1084.238185][ T5908] usb 9-1: Using ep0 maxpacket: 8 [ 1084.458213][ T5908] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1084.468049][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.476986][ T5908] usb 9-1: Product: syz [ 1084.481460][ T5908] usb 9-1: Manufacturer: syz [ 1084.494921][ T5908] usb 9-1: SerialNumber: syz [ 1084.917447][ T5908] usb 9-1: config 0 descriptor?? [ 1085.987069][ T5908] usb 9-1: can't set config #0, error -71 [ 1086.062205][ T5908] usb 9-1: USB disconnect, device number 10 [ 1086.138861][ T7511] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1086.165615][T10627] udevd[10627]: setting mode of /dev/bus/usb/009/010 to 020664 failed: No such file or directory [ 1086.265052][T10627] udevd[10627]: setting owner of /dev/bus/usb/009/010 to uid=0, gid=0 failed: No such file or directory [ 1086.416605][ T7511] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.428156][ T7511] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1086.588296][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1220'. [ 1086.988997][ T7511] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1086.998730][ T7511] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.007185][ T7511] usb 2-1: Product: syz [ 1087.011553][ T7511] usb 2-1: Manufacturer: syz [ 1087.016484][ T7511] usb 2-1: SerialNumber: syz [ 1087.191253][T11937] netlink: 'syz.7.1223': attribute type 1 has an invalid length. [ 1087.654630][ T7511] cdc_mbim 2-1:1.0: skipping garbage [ 1087.821929][T11926] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1088.600235][T11926] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1088.711463][ T7511] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1088.715206][ T5871] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1088.719571][ T7511] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 1088.982765][ T7511] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 1089.044526][ T5871] usb 10-1: Using ep0 maxpacket: 32 [ 1089.086571][ T7511] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1089.166463][ T5871] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.178065][ T5871] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1089.192194][ T5871] usb 10-1: New USB device found, idVendor=1477, idProduct=1023, bcdDevice= 0.00 [ 1089.207745][ T5871] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.246232][ T7511] wwan wwan0: port wwan0mbim0 attached [ 1089.426715][ T5871] usb 10-1: config 0 descriptor?? [ 1089.438341][ T7511] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 12:aa:7f:49:1d:3c [ 1089.580369][ T7511] usb 2-1: USB disconnect, device number 20 [ 1089.588534][ T7511] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1089.903496][T11959] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1226'. [ 1089.939222][T11958] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1226'. [ 1089.984284][ T5871] hid-generic 0003:1477:1023.0006: item fetching failed at offset 2/5 [ 1090.038132][ T5871] hid-generic 0003:1477:1023.0006: probe with driver hid-generic failed with error -22 [ 1090.038644][ T7511] wwan wwan0: port wwan0mbim0 disconnected [ 1090.228767][ T5871] usb 10-1: USB disconnect, device number 8 [ 1091.225148][ T5871] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1091.474390][ T5871] usb 8-1: Using ep0 maxpacket: 8 [ 1091.662314][ T5871] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1091.672014][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.680553][ T5871] usb 8-1: Product: syz [ 1091.685325][ T5871] usb 8-1: Manufacturer: syz [ 1091.690129][ T5871] usb 8-1: SerialNumber: syz [ 1092.722820][ T5871] usb 8-1: config 0 descriptor?? [ 1093.573085][T11983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.731591][ T5871] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1094.458767][T11990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.509546][ T5871] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1094.593392][T11987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.638982][ T5871] usb 8-1: USB disconnect, device number 9 [ 1094.793133][T11998] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 1094.883811][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1236'. [ 1094.974259][T11983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.185888][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1095.192773][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1097.304653][ T7689] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1097.451098][T12021] netlink: 'syz.9.1245': attribute type 27 has an invalid length. [ 1097.574268][ T7689] usb 8-1: Using ep0 maxpacket: 32 [ 1097.633123][ T7689] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.645009][ T7689] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1097.658880][ T7689] usb 8-1: New USB device found, idVendor=1477, idProduct=1023, bcdDevice= 0.00 [ 1097.668353][ T7689] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.685176][T12021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1097.839933][ C0] hrtimer: interrupt took 339478 ns [ 1097.952795][ T7689] usb 8-1: config 0 descriptor?? [ 1098.134302][T12027] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1098.499532][ T7689] hid-generic 0003:1477:1023.0007: item fetching failed at offset 2/5 [ 1098.574530][ T7689] hid-generic 0003:1477:1023.0007: probe with driver hid-generic failed with error -22 [ 1098.671309][ T5871] usb 8-1: USB disconnect, device number 10 [ 1099.147190][ T41] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1099.475448][ T41] usb 7-1: Using ep0 maxpacket: 8 [ 1099.716255][ T41] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1099.726014][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.734652][ T41] usb 7-1: Product: syz [ 1099.739432][ T41] usb 7-1: Manufacturer: syz [ 1099.750135][ T41] usb 7-1: SerialNumber: syz [ 1100.778045][ T41] usb 7-1: config 0 descriptor?? [ 1101.467873][T12048] netlink: 'syz.8.1252': attribute type 1 has an invalid length. [ 1102.241377][ T41] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1102.855988][ T41] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1102.961789][ T41] usb 7-1: USB disconnect, device number 12 [ 1103.393215][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1255'. [ 1106.153420][ T41] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1106.760226][T12109] netlink: 'syz.6.1265': attribute type 1 has an invalid length. [ 1107.095186][ T41] usb 10-1: Using ep0 maxpacket: 32 [ 1107.109977][ T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.126660][ T41] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1107.141657][ T41] usb 10-1: New USB device found, idVendor=1477, idProduct=1023, bcdDevice= 0.00 [ 1107.151208][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.952229][ T41] usb 10-1: config 0 descriptor?? [ 1108.205235][ T5871] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1108.634342][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 1108.742045][ T5871] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1108.829286][ T41] hid-generic 0003:1477:1023.0008: item fetching failed at offset 2/5 [ 1109.041191][ T5871] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1109.051730][ T5871] usb 2-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1109.060730][ T5871] usb 2-1: Product: syz [ 1109.071914][ T5871] usb 2-1: Manufacturer: syz [ 1109.078296][ T5871] usb 2-1: SerialNumber: syz [ 1109.127480][ T41] hid-generic 0003:1477:1023.0008: probe with driver hid-generic failed with error -22 [ 1109.416263][ T41] usb 10-1: USB disconnect, device number 9 [ 1109.638739][ T5871] usb 2-1: config 0 descriptor?? [ 1110.001563][ T5871] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1110.022769][T12123] overlayfs: overlapping lowerdir path [ 1111.090136][ T5871] gspca_sunplus: reg_w_riv err -71 [ 1111.096166][ T5871] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1111.152302][ T5871] usb 2-1: USB disconnect, device number 21 [ 1111.515941][ T7689] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1111.795308][ T7689] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1111.808357][ T7689] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1111.819807][ T7689] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1111.839110][ T7689] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1111.851636][ T7689] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.207922][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1273'. [ 1112.404485][T12138] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1113.624998][T12157] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1114.296943][T12163] netlink: 'syz.9.1278': attribute type 1 has an invalid length. [ 1115.490553][ T7689] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1115.502749][ T7689] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input21 [ 1116.720316][ C0] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1116.728954][ T7689] usb 7-1: USB disconnect, device number 13 [ 1116.817521][T12180] overlayfs: overlapping lowerdir path [ 1119.282421][T12197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.445359][ T7689] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 1119.683723][ T7689] usb 8-1: no configurations [ 1119.688760][ T7689] usb 8-1: can't read configurations, error -22 [ 1119.905287][ T7689] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 1120.140206][ T7689] usb 8-1: no configurations [ 1120.145972][ T7689] usb 8-1: can't read configurations, error -22 [ 1120.234529][ T7689] usb usb8-port1: attempt power cycle [ 1120.652558][ T7689] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1120.743491][ T7689] usb 8-1: no configurations [ 1120.748966][ T7689] usb 8-1: can't read configurations, error -22 [ 1120.797305][T12213] netlink: 'syz.8.1292': attribute type 1 has an invalid length. [ 1120.975112][ T7689] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1121.082920][ T7689] usb 8-1: no configurations [ 1121.088120][ T7689] usb 8-1: can't read configurations, error -22 [ 1121.129620][ T7689] usb usb8-port1: unable to enumerate USB device [ 1121.226058][T12215] binder: 12214:12215 ioctl c0306201 200000000240 returned -11 [ 1125.842244][T12258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1126.177017][T12262] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 1126.366293][T12266] binder: 12264:12266 ioctl c0306201 200000000240 returned -11 [ 1127.065135][ T7689] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1127.320034][ T7689] usb 7-1: no configurations [ 1127.325012][ T7689] usb 7-1: can't read configurations, error -22 [ 1127.514529][ T7689] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1127.731953][ T7689] usb 7-1: no configurations [ 1127.737407][ T7689] usb 7-1: can't read configurations, error -22 [ 1127.841706][ T7689] usb usb7-port1: attempt power cycle [ 1128.321730][ T7689] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1128.399891][ T7689] usb 7-1: no configurations [ 1128.405406][ T7689] usb 7-1: can't read configurations, error -22 [ 1128.628026][ T7689] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1128.733125][ T7689] usb 7-1: no configurations [ 1128.738233][ T7689] usb 7-1: can't read configurations, error -22 [ 1128.845785][ T7689] usb usb7-port1: unable to enumerate USB device [ 1132.299442][T12317] binder: 12315:12317 ioctl c0306201 200000000240 returned -11 [ 1132.461614][T12319] netlink: 'syz.1.1320': attribute type 1 has an invalid length. [ 1134.191920][ T7511] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1134.435972][ T7511] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.447765][ T7511] usb 10-1: config 0 has no interfaces? [ 1134.547081][ T7511] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1134.556942][ T7511] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.571940][ T7511] usb 10-1: Product: syz [ 1134.578544][ T7511] usb 10-1: Manufacturer: syz [ 1134.583582][ T7511] usb 10-1: SerialNumber: syz [ 1135.401736][ T7511] usb 10-1: config 0 descriptor?? [ 1137.770314][ T7511] usb 10-1: USB disconnect, device number 10 [ 1138.408470][T12370] binder: 12367:12370 ioctl c0306201 200000000240 returned -11 [ 1138.574880][ T41] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1138.900520][ T41] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1138.913661][ T41] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1138.925982][ T41] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1138.937733][ T41] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1138.947205][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.265771][T12371] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1140.585993][ T41] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 1140.598368][ T41] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input22 [ 1142.521216][ T7511] usb 9-1: USB disconnect, device number 11 [ 1142.521448][ C1] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1142.600093][T12398] binder_alloc: 12396: binder_alloc_buf, no vma [ 1143.305469][ T41] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1143.562522][ T41] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.579690][ T41] usb 9-1: config 0 has no interfaces? [ 1143.906316][ T41] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1143.916043][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.924651][ T41] usb 9-1: Product: syz [ 1143.929022][ T41] usb 9-1: Manufacturer: syz [ 1143.933823][ T41] usb 9-1: SerialNumber: syz [ 1144.133728][ T41] usb 9-1: config 0 descriptor?? [ 1144.606052][T12423] binder: 12422:12423 ioctl c0306201 200000000240 returned -11 [ 1144.808698][ T7511] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 1145.125128][ T7511] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1145.134875][ T7511] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.246537][ T7511] usb 7-1: config 0 descriptor?? [ 1146.415023][T12438] input: syz1 as /devices/virtual/input/input23 [ 1146.506256][T12437] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1353'. [ 1146.674612][ T7689] usb 9-1: USB disconnect, device number 12 [ 1146.987156][ T7511] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1146.997931][ T7511] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1147.009346][ T7511] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1147.202917][ T7511] usb 7-1: USB disconnect, device number 18 [ 1147.324758][ T41] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1147.591273][ T41] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1147.604073][ T41] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1147.615700][ T41] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1147.627405][ T41] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1147.636985][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.849933][T12444] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1148.395729][T12460] binder: 12459:12460 ioctl c0306201 200000000240 returned -11 [ 1148.823332][ T41] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 1148.836206][ T41] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input24 [ 1150.516237][ T7511] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1150.669344][ T5908] usb 9-1: USB disconnect, device number 13 [ 1150.669534][ C1] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1150.833695][ T7511] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.852934][ T7511] usb 10-1: config 0 has no interfaces? [ 1150.977535][ T7511] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1150.987209][ T7511] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.995823][ T7511] usb 10-1: Product: syz [ 1151.000280][ T7511] usb 10-1: Manufacturer: syz [ 1151.005942][ T7511] usb 10-1: SerialNumber: syz [ 1151.121964][ T7511] usb 10-1: config 0 descriptor?? [ 1151.183441][T12486] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1367'. [ 1152.298277][T12501] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1153.326491][ T41] usb 10-1: USB disconnect, device number 11 [ 1153.531392][ T7511] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1153.694840][ T7511] usb 2-1: device descriptor read/64, error -71 [ 1153.976543][ T7511] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1154.204285][ T7511] usb 2-1: device descriptor read/64, error -71 [ 1154.350277][ T7511] usb usb2-port1: attempt power cycle [ 1155.379459][T12534] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1379'. [ 1156.610340][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1156.617381][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1157.105235][ T7511] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1157.335816][ T7511] usb 2-1: device not accepting address 24, error -71 [ 1157.456178][T12549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1385'. [ 1157.644479][ T5908] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 1157.855449][ T5908] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.866207][ T5908] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1157.880280][T12557] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1158.006069][ T5908] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1158.021913][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.032359][ T5908] usb 8-1: Product: syz [ 1158.036847][ T5908] usb 8-1: Manufacturer: syz [ 1158.041655][ T5908] usb 8-1: SerialNumber: syz [ 1158.201220][ T5908] usb 8-1: config 0 descriptor?? [ 1159.067234][T12572] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1393'. [ 1159.995380][ T41] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1160.046208][ T5871] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1160.125781][ T7704] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1160.184527][ T41] usb 10-1: Using ep0 maxpacket: 16 [ 1160.197431][ T41] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.208349][ T41] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1160.218245][ T41] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1160.227983][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.247963][ T41] usb 10-1: config 0 descriptor?? [ 1160.273335][ T5871] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1160.285670][ T5871] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1160.297228][ T5871] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1160.309015][ T5871] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1160.318582][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.345776][ T7704] usb 7-1: Using ep0 maxpacket: 32 [ 1160.425724][ T7704] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1160.435520][ T7704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.508287][ T7704] usb 7-1: config 0 descriptor?? [ 1160.544983][T12586] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1160.736343][ T7704] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1160.756229][ T7511] usb 8-1: USB disconnect, device number 15 [ 1160.758558][ T7704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1160.899255][ T7704] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1160.908005][ T7704] usb 7-1: media controller created [ 1160.940917][T12588] ===================================================== [ 1160.949193][T12588] BUG: KMSAN: uninit-value in __i2c_smbus_xfer+0x23e7/0x2f60 [ 1160.957251][T12588] __i2c_smbus_xfer+0x23e7/0x2f60 [ 1160.962739][T12588] i2c_smbus_xfer+0x31d/0x4d0 [ 1160.968466][T12588] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1160.974045][T12588] i2cdev_ioctl+0xa14/0xf40 [ 1160.978751][T12588] __se_sys_ioctl+0x23c/0x400 [ 1160.989807][T12588] __x64_sys_ioctl+0x97/0xe0 [ 1160.996583][T12588] x64_sys_call+0x1cbc/0x3e20 [ 1161.001722][T12588] do_syscall_64+0xd9/0x210 [ 1161.007451][T12588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.013770][T12588] [ 1161.016525][T12588] Local variable msgbuf1.i created at: [ 1161.022483][T12588] __i2c_smbus_xfer+0x86a/0x2f60 [ 1161.028031][T12588] i2c_smbus_xfer+0x31d/0x4d0 [ 1161.033123][T12588] [ 1161.035980][T12588] CPU: 1 UID: 0 PID: 12588 Comm: syz.6.1397 Not tainted syzkaller #0 PREEMPT(none) [ 1161.045926][T12588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1161.057227][T12588] ===================================================== [ 1161.064764][T12588] Disabling lock debugging due to kernel taint [ 1161.071228][T12588] Kernel panic - not syncing: kmsan.panic set ... [ 1161.077822][T12588] CPU: 1 UID: 0 PID: 12588 Comm: syz.6.1397 Tainted: G B syzkaller #0 PREEMPT(none) [ 1161.089001][T12588] Tainted: [B]=BAD_PAGE [ 1161.093266][T12588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1161.103483][T12588] Call Trace: [ 1161.106911][T12588] [ 1161.110052][T12588] __dump_stack+0x26/0x30 [ 1161.114702][T12588] dump_stack_lvl+0x53/0x270 [ 1161.119532][T12588] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1161.125586][T12588] dump_stack+0x1e/0x25 [ 1161.129975][T12588] vpanic+0x361/0xc50 [ 1161.134190][T12588] panic+0x15d/0x160 [ 1161.138351][T12588] kmsan_report+0x31c/0x320 [ 1161.143070][T12588] ? __msan_warning+0x1b/0x30 [ 1161.147930][T12588] ? __i2c_smbus_xfer+0x23e7/0x2f60 [ 1161.153380][T12588] ? i2c_smbus_xfer+0x31d/0x4d0 [ 1161.158473][T12588] ? i2cdev_ioctl_smbus+0x4a1/0x660 [ 1161.163886][T12588] ? i2cdev_ioctl+0xa14/0xf40 [ 1161.168765][T12588] ? __se_sys_ioctl+0x23c/0x400 [ 1161.173809][T12588] ? __x64_sys_ioctl+0x97/0xe0 [ 1161.178764][T12588] ? x64_sys_call+0x1cbc/0x3e20 [ 1161.183854][T12588] ? do_syscall_64+0xd9/0x210 [ 1161.188755][T12588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.195030][T12588] ? az6027_i2c_xfer+0x2bdf/0x2c40 [ 1161.200672][T12588] ? kmsan_get_metadata+0xfb/0x160 [ 1161.206039][T12588] ? kmsan_get_metadata+0xfb/0x160 [ 1161.211479][T12588] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1161.217700][T12588] ? i2c_smbus_msg_pec+0x678/0x6c0 [ 1161.223030][T12588] __msan_warning+0x1b/0x30 [ 1161.227743][T12588] __i2c_smbus_xfer+0x23e7/0x2f60 [ 1161.233064][T12588] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1161.239498][T12588] ? rt_mutex_lock+0x3e/0x70 [ 1161.244448][T12588] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1161.250441][T12588] i2c_smbus_xfer+0x31d/0x4d0 [ 1161.255392][T12588] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1161.260691][T12588] i2cdev_ioctl+0xa14/0xf40 [ 1161.265407][T12588] ? kmsan_get_metadata+0x28/0x160 [ 1161.270745][T12588] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1161.275995][T12588] __se_sys_ioctl+0x23c/0x400 [ 1161.280891][T12588] __x64_sys_ioctl+0x97/0xe0 [ 1161.285698][T12588] x64_sys_call+0x1cbc/0x3e20 [ 1161.290627][T12588] do_syscall_64+0xd9/0x210 [ 1161.295351][T12588] ? clear_bhb_loop+0x40/0x90 [ 1161.300241][T12588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.306443][T12588] RIP: 0033:0x7f0afbd8ebe9 [ 1161.311040][T12588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1161.330849][T12588] RSP: 002b:00007f0afcb64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1161.339537][T12588] RAX: ffffffffffffffda RBX: 00007f0afbfb5fa0 RCX: 00007f0afbd8ebe9 [ 1161.347670][T12588] RDX: 0000200000000080 RSI: 0000000000000720 RDI: 0000000000000004 [ 1161.355859][T12588] RBP: 00007f0afbe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1161.363975][T12588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1161.372092][T12588] R13: 00007f0afbfb6038 R14: 00007f0afbfb5fa0 R15: 00007ffdc06e3a58 [ 1161.380261][T12588] [ 1161.383911][T12588] Kernel Offset: disabled [ 1161.388309][T12588] Rebooting in 86400 seconds..