last executing test programs: 12.694366741s ago: executing program 0 (id=48): r0 = syz_io_uring_setup(0x3d12, &(0x7f0000000040)={0x0, 0xdd68, 0x10100, 0xffffffff, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x1, 0xfffffffffffffffe, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 12.473246047s ago: executing program 0 (id=49): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r0, 0x0, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) 10.92309502s ago: executing program 0 (id=57): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000007c0)={0x2, @pix_mp={0x0, 0x0, 0x33524742}}) r1 = io_uring_setup(0x5fa6, &(0x7f0000000000)={0x0, 0x5, 0x20, 0x3, 0x9a}) io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d, 0x0, r1}) r2 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) fdatasync(r3) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r5 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$lock(r5, 0x26, &(0x7f0000000800)={0x0, 0x1, 0x7, 0x7fffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0x40, &(0x7f0000000000)={0x40, 0x14, 0xf801, 0x220}, 0x8, 0x8001, 0x0, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) socket$tipc(0x1e, 0x2, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) syz_usb_connect(0x2, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="120101f5b94c6120c80a23038fa7010203010902"], &(0x7f0000008700)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xfff1, 0xfff3}, {0x9, 0x8}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r8, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0xa, 0x6, 0x4, 0x7, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0xfec00000, 0x3000, 0x8, 0x13, 0x1, 0x8, 0x7, 0x8, 0x3, 0x42, 0x2}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x6, 0xc3, 0xe7, 0x3, 0x6, 0x7, 0x3}, {0x2, 0x0, 0xe, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x40000, 0x8000000, 0xe, 0xd, 0x59, 0x5, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xfc}, {0x2, 0xeeef0000, 0x8, 0xbe, 0x6, 0x7, 0x10, 0x1, 0x0, 0x18, 0x2, 0x4}, {0x5000, 0x8000000, 0x4, 0x9, 0xff, 0xf, 0x0, 0x3, 0x8, 0x4, 0x80, 0x2}, {0x8000000, 0x4, 0x10, 0x4, 0x8, 0x1, 0x0, 0xf9, 0x3, 0x7, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x60050018, 0x0, 0x0, 0x222, 0x100000002, 0x0, 0xdddd1000, [0x6, 0x4, 0x4000000000000009, 0x7]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 7.501276303s ago: executing program 0 (id=75): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) close(r2) syz_open_dev$video4linux(0x0, 0x0, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000314000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r6, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) 6.833817315s ago: executing program 1 (id=81): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3d) r8 = syz_clone3(&(0x7f0000000540)={0x200, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x16}, &(0x7f00000003c0)=""/182, 0xb6, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) rt_tgsigqueueinfo(0x0, r8, 0x2b, &(0x7f00000005c0)={0x2, 0x1, 0x8}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x107, 0x4) ptrace$pokeuser(0x6, r9, 0x118, 0x20000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="010028bd7000fddbdf25000400000400f400"/33], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x40) setrlimit(0x2, &(0x7f00000000c0)) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x90) 6.138149375s ago: executing program 1 (id=82): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 5.922695726s ago: executing program 1 (id=83): r0 = syz_create_resource$binfmt(&(0x7f0000000140)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)='\t', 0x27) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 5.917991382s ago: executing program 2 (id=84): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6020400) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f0000000240)={r1, &(0x7f00000000c0)='\xa3\x00', 0xa2202, &(0x7f0000000100)={@align=0x80, {0x1000, 0x9, 0x9, 0xf2}}, 0x4535, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x3}) r3 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000280)={0x48}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0xd, 0x1, 0x1, "3a8e2ba75088c20500ca55e21f0000000400b2b679d200", 0x7206113d}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x7, 0x3, 0x101, 0x80, 0x5]}, &(0x7f0000000000)=0x54) 5.651191902s ago: executing program 3 (id=85): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_DEBUG(r5, 0x227e, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000005180)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002f80)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$kcm(0x29, 0xc, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 5.627264283s ago: executing program 1 (id=86): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000007c0)={0x2, @pix_mp={0x0, 0x0, 0x33524742}}) r1 = io_uring_setup(0x5fa6, &(0x7f0000000000)={0x0, 0x5, 0x20, 0x3, 0x9a}) r2 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d, 0x0, r1}) r3 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) fdatasync(r4) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r6 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$lock(r6, 0x26, &(0x7f0000000800)={0x0, 0x1, 0x7, 0x7fffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_SUBMITURB(r5, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0x40, &(0x7f0000000000)={0x40, 0x14, 0xf801, 0x220}, 0x8, 0x8001, 0x0, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) socket$tipc(0x1e, 0x2, 0x0) r7 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) syz_usb_connect(0x2, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="120101f5b94c6120c80a23038fa7010203010902"], &(0x7f0000008700)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xfff1, 0xfff3}, {0x9, 0x8}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r9, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0xa, 0x6, 0x4, 0x7, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0xfec00000, 0x3000, 0x8, 0x13, 0x1, 0x8, 0x7, 0x8, 0x3, 0x42, 0x2}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x6, 0xc3, 0xe7, 0x3, 0x6, 0x7, 0x3}, {0x2, 0x0, 0xe, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x40000, 0x8000000, 0xe, 0xd, 0x59, 0x5, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xfc}, {0x2, 0xeeef0000, 0x8, 0xbe, 0x6, 0x7, 0x10, 0x1, 0x0, 0x18, 0x2, 0x4}, {0x5000, 0x8000000, 0x4, 0x9, 0xff, 0xf, 0x0, 0x3, 0x8, 0x4, 0x80, 0x2}, {0x8000000, 0x4, 0x10, 0x4, 0x8, 0x1, 0x0, 0xf9, 0x3, 0x7, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x60050018, 0x0, 0x0, 0x222, 0x100000002, 0x0, 0xdddd1000, [0x6, 0x4, 0x4000000000000009, 0x7]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.953109873s ago: executing program 0 (id=87): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(r2, 0xffffffffffffffff, 0x2) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x49, 0x0, 0x6}]}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$netlink(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$autofs(0xffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x20004080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 4.621731447s ago: executing program 4 (id=88): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f00000005c0)=[{0x1, 0x0, 0x0, 0x0}, {0x1, 0x200, 0x0, 0x0}], 0x2}) 4.087245286s ago: executing program 2 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000640)=""/4086, 0xff6}], 0x4}, 0x40000002) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x1}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x2000, 0x0) 3.98789633s ago: executing program 2 (id=90): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x200) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x4c) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000200)={{0x10}, {0x10}, 0x2, 0x2, 0x82}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x89}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000980)="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", 0x1a7) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000940)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14) 3.736346275s ago: executing program 1 (id=91): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x5761, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000480)='\xbf\x9a', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='test_dummy_encryption', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100"], 0xd8}}, 0x80) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', r4, 0x20, 0x40, 0x1001000, 0x7d, {{0xa, 0x4, 0x2, 0x6, 0x28, 0x68, 0x0, 0xf9, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0xfe, 0x0}, {[@rr={0x7, 0x13, 0xee, [@rand_addr=0x64010102, @remote, @broadcast, @private=0xa010101]}]}}}}}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() alarm(0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT=r4, @ANYBLOB="000000000b39d227000000000000000004000200"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8840) syz_io_uring_setup(0x5304, &(0x7f0000000340)={0x0, 0x2886, 0x2, 0x3, 0x71}, &(0x7f0000000040), &(0x7f0000000140)) getrusage(0x0, &(0x7f00000003c0)) 3.224791014s ago: executing program 3 (id=92): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) 2.955294639s ago: executing program 3 (id=93): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 2.912775423s ago: executing program 4 (id=94): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.712266555s ago: executing program 3 (id=95): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x4) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0xfff}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) 2.535137626s ago: executing program 4 (id=96): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x8, 0x3, 0x0, 0x3}, 0x8) 2.379685762s ago: executing program 3 (id=97): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) close(r2) syz_open_dev$video4linux(0x0, 0x0, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000314000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r6, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) 2.236659724s ago: executing program 4 (id=98): openat$tun(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ad9, &(0x7f0000000300)={0x0, 0x9731, 0x4000, 0x3, 0x145}, &(0x7f00000003c0), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) 1.865112467s ago: executing program 2 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001002abd70000000000014000000", @ANYRES32=0x0, @ANYBLOB="8123010000000000140003006e657464657673696d3000000000000008000d0006000008"], 0x3c}}, 0x4040000) 1.307256946s ago: executing program 2 (id=100): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000050000000000000000000000000000000000000000000000000000000000000000001f0004"], 0x232) 1.150666993s ago: executing program 2 (id=101): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000007c0)={0x2, @pix_mp={0x0, 0x0, 0x33524742}}) r1 = io_uring_setup(0x5fa6, &(0x7f0000000000)={0x0, 0x5, 0x20, 0x3, 0x9a}) r2 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d, 0x0, r1}) r3 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) fdatasync(r4) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r6 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$lock(r6, 0x26, &(0x7f0000000800)={0x0, 0x1, 0x7, 0x7fffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_SUBMITURB(r5, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0x40, &(0x7f0000000000)={0x40, 0x14, 0xf801, 0x220}, 0x8, 0x8001, 0x0, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) socket$tipc(0x1e, 0x2, 0x0) r7 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) syz_usb_connect(0x2, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="120101f5b94c6120c80a23038fa7010203010902"], &(0x7f0000008700)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xfff1, 0xfff3}, {0x9, 0x8}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r9, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 908.326205ms ago: executing program 0 (id=102): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0xc0884123, 0x0) 358.847089ms ago: executing program 1 (id=103): ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x7, @win={{0x3, 0x6, 0x8, 0x68}, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x1}}) syz_open_dev$sndpcmp(0x0, 0x100, 0x100) close(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0xf) wait4(r1, 0x0, 0x2, 0x0) tkill(r1, 0x3) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x1000}) socket(0x400000000010, 0x3, 0x0) 195.904854ms ago: executing program 4 (id=104): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20) 71.492502ms ago: executing program 3 (id=105): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=106): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x6, 0x81, 0x5, 'syz1\x00', 0x9}, 0x0, [0x380, 0xe8af, 0x5, 0xcc0, 0xe, 0x5, 0x11, 0xa6da, 0x2, 0x1, 0x9, 0x3, 0xb, 0xfffffff7, 0x8, 0x6, 0x7, 0x1001, 0x40f, 0x80, 0x962, 0x2, 0x3, 0x3, 0x7fffffff, 0x9c, 0x3ff, 0xb861, 0x60e3, 0x3, 0x8, 0x10000, 0x7, 0x9, 0x7430, 0xffffdeba, 0x15, 0x8609, 0x81, 0x3, 0x6, 0x5, 0x8081, 0xb, 0x80009, 0x1, 0x1, 0x0, 0xffff1684, 0x101, 0x0, 0x1, 0x1000, 0xe96, 0x4, 0x7ff, 0x7, 0x6, 0x4, 0x0, 0x6, 0x7ff, 0x1000, 0x8, 0x4, 0x8, 0x7a, 0x2, 0xd, 0x2, 0x5, 0x7, 0xaf, 0x4007, 0x1, 0x9, 0x8001, 0x8441, 0x3, 0x5, 0x2, 0x7, 0x4000000a, 0x0, 0x0, 0x7, 0x2, 0x800, 0x7ff, 0x3, 0x3b9, 0x6, 0x4, 0x6, 0x487d, 0x0, 0x1, 0x8, 0x3, 0x100, 0x400005, 0xc, 0xe, 0xfffffffe, 0x200007, 0x20000009, 0xc, 0x0, 0x1, 0x9, 0x3ce, 0xa, 0x8, 0xb, 0x1, 0x2, 0x7, 0x9, 0x0, 0x820, 0x2, 0x0, 0xbc41, 0xa, 0x809, 0xc960, 0xff, 0x3]}) r3 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) add_key(&(0x7f0000000680)='pkcs7_test\x00', 0x0, &(0x7f0000000800)="10130611a2c1cda427021111b4652a7698cc5d90c4", 0x15, 0xfffffffffffffffe) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) readahead(r0, 0x58, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 74.837031][ T5828] cgroup: Unknown subsys name 'net' [ 74.941381][ T5828] cgroup: Unknown subsys name 'cpuset' [ 74.949816][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.617002][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.877693][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.890974][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.902415][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.909112][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.913427][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.918629][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.925679][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.935397][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.948191][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.948422][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.957212][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.964153][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.970717][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.986264][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.988202][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.996258][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.001400][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.016999][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.017800][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.025468][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.033503][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.048403][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.048698][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.056022][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.066233][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.785509][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 79.889753][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 79.916123][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 80.121086][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 80.156496][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.163995][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.171751][ T5841] bridge_slave_0: entered allmulticast mode [ 80.179437][ T5841] bridge_slave_0: entered promiscuous mode [ 80.202042][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 80.249169][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.256468][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.263994][ T5841] bridge_slave_1: entered allmulticast mode [ 80.271466][ T5841] bridge_slave_1: entered promiscuous mode [ 80.307348][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.314638][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.323710][ T5843] bridge_slave_0: entered allmulticast mode [ 80.331341][ T5843] bridge_slave_0: entered promiscuous mode [ 80.373362][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.380694][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.388525][ T5844] bridge_slave_0: entered allmulticast mode [ 80.395955][ T5844] bridge_slave_0: entered promiscuous mode [ 80.405054][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.412366][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.419742][ T5843] bridge_slave_1: entered allmulticast mode [ 80.427611][ T5843] bridge_slave_1: entered promiscuous mode [ 80.465399][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.472812][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.480296][ T5844] bridge_slave_1: entered allmulticast mode [ 80.488168][ T5844] bridge_slave_1: entered promiscuous mode [ 80.511093][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.566702][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.620178][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.670215][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.682728][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.721959][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.729560][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.737276][ T5840] bridge_slave_0: entered allmulticast mode [ 80.744730][ T5840] bridge_slave_0: entered promiscuous mode [ 80.768732][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.793835][ T5841] team0: Port device team_slave_0 added [ 80.800228][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.808245][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.815737][ T5840] bridge_slave_1: entered allmulticast mode [ 80.824458][ T5840] bridge_slave_1: entered promiscuous mode [ 80.831905][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.839639][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.847284][ T5842] bridge_slave_0: entered allmulticast mode [ 80.854804][ T5842] bridge_slave_0: entered promiscuous mode [ 80.877291][ T5843] team0: Port device team_slave_0 added [ 80.886759][ T5841] team0: Port device team_slave_1 added [ 80.915319][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.922668][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.930398][ T5842] bridge_slave_1: entered allmulticast mode [ 80.938291][ T5842] bridge_slave_1: entered promiscuous mode [ 80.959845][ T5843] team0: Port device team_slave_1 added [ 81.009314][ T5844] team0: Port device team_slave_0 added [ 81.027906][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.034868][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.062107][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.079245][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.103854][ T5844] team0: Port device team_slave_1 added [ 81.124377][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.131500][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.158797][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.158836][ T5861] Bluetooth: hci3: command tx timeout [ 81.169472][ T5163] Bluetooth: hci1: command tx timeout [ 81.169744][ T5163] Bluetooth: hci0: command tx timeout [ 81.175866][ T5861] Bluetooth: hci4: command tx timeout [ 81.181086][ T5859] Bluetooth: hci2: command tx timeout [ 81.211470][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.225371][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.248194][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.255348][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.281619][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.297045][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.304095][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.330738][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.357350][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.396536][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.403613][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.430169][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.487698][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.494691][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.521135][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.544075][ T5840] team0: Port device team_slave_0 added [ 81.552718][ T5842] team0: Port device team_slave_0 added [ 81.577879][ T5841] hsr_slave_0: entered promiscuous mode [ 81.584687][ T5841] hsr_slave_1: entered promiscuous mode [ 81.598640][ T5840] team0: Port device team_slave_1 added [ 81.607493][ T5842] team0: Port device team_slave_1 added [ 81.682119][ T5843] hsr_slave_0: entered promiscuous mode [ 81.688965][ T5843] hsr_slave_1: entered promiscuous mode [ 81.695435][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 81.701492][ T5843] Cannot create hsr debugfs directory [ 81.781377][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.788398][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.814649][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.827533][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.834509][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.860945][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.874976][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.882208][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.908825][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.941632][ T5844] hsr_slave_0: entered promiscuous mode [ 81.948858][ T5844] hsr_slave_1: entered promiscuous mode [ 81.955818][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 81.961641][ T5844] Cannot create hsr debugfs directory [ 81.968969][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.975964][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.002451][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.320525][ T5842] hsr_slave_0: entered promiscuous mode [ 82.327639][ T5842] hsr_slave_1: entered promiscuous mode [ 82.334107][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 82.340203][ T5842] Cannot create hsr debugfs directory [ 82.359281][ T5840] hsr_slave_0: entered promiscuous mode [ 82.366027][ T5840] hsr_slave_1: entered promiscuous mode [ 82.372874][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 82.378838][ T5840] Cannot create hsr debugfs directory [ 82.778983][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.819176][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.848878][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.881497][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.963002][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.979333][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.999573][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.024401][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.143435][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.156028][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.168856][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.180377][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.217180][ T5847] Bluetooth: hci0: command tx timeout [ 83.217229][ T51] Bluetooth: hci1: command tx timeout [ 83.222732][ T5163] Bluetooth: hci4: command tx timeout [ 83.222805][ T5859] Bluetooth: hci2: command tx timeout [ 83.240996][ T5861] Bluetooth: hci3: command tx timeout [ 83.344941][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.356186][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.381262][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.394323][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.459780][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.515101][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.545472][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.566430][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.574069][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.588521][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.652720][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.660348][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.683250][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.707362][ T4576] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.714578][ T4576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.790734][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.824422][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.880471][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.890473][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.897802][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.941868][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.949106][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.979887][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.987240][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.044414][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.051606][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.094708][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.209250][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.241518][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.286472][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.293834][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.354624][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.361886][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.382922][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.432004][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.439239][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.478031][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.485268][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.555997][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.863625][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.979061][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.993758][ T5841] veth0_vlan: entered promiscuous mode [ 85.070282][ T5841] veth1_vlan: entered promiscuous mode [ 85.297565][ T5861] Bluetooth: hci2: command tx timeout [ 85.298311][ T5847] Bluetooth: hci0: command tx timeout [ 85.303144][ T51] Bluetooth: hci1: command tx timeout [ 85.310099][ T5163] Bluetooth: hci4: command tx timeout [ 85.321714][ T5859] Bluetooth: hci3: command tx timeout [ 85.329075][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.371708][ T5844] veth0_vlan: entered promiscuous mode [ 85.419919][ T5841] veth0_macvtap: entered promiscuous mode [ 85.435766][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.452312][ T5844] veth1_vlan: entered promiscuous mode [ 85.471148][ T5841] veth1_macvtap: entered promiscuous mode [ 85.558799][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.606299][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.669145][ T5842] veth0_vlan: entered promiscuous mode [ 85.675945][ T5844] veth0_macvtap: entered promiscuous mode [ 85.698469][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.708869][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.732062][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.741008][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.754754][ T5844] veth1_macvtap: entered promiscuous mode [ 85.764404][ T5843] veth0_vlan: entered promiscuous mode [ 85.805057][ T5840] veth0_vlan: entered promiscuous mode [ 85.814542][ T5842] veth1_vlan: entered promiscuous mode [ 85.897674][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.909272][ T5843] veth1_vlan: entered promiscuous mode [ 85.918946][ T5840] veth1_vlan: entered promiscuous mode [ 85.961852][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.977136][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.996387][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.005534][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.014822][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.053788][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.062931][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.107304][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.121683][ T5842] veth0_macvtap: entered promiscuous mode [ 86.130681][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.165374][ T5842] veth1_macvtap: entered promiscuous mode [ 86.204162][ T5843] veth0_macvtap: entered promiscuous mode [ 86.236024][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.264644][ T5843] veth1_macvtap: entered promiscuous mode [ 86.314068][ T5840] veth0_macvtap: entered promiscuous mode [ 86.398445][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.412897][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.423263][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.439188][ T5840] veth1_macvtap: entered promiscuous mode [ 86.471298][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.506257][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.522110][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.530063][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.541653][ T4576] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.551494][ T4576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.579189][ T4576] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.628182][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.659484][ T4576] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.699705][ T4576] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.711523][ T4576] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.731464][ T4576] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.751348][ T4576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.820903][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.973490][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.118481][ T78] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.145288][ T78] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.146956][ T5962] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 87.189370][ T78] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.253728][ T78] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.359753][ T5962] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.377718][ T5163] Bluetooth: hci1: command tx timeout [ 87.381712][ T5859] Bluetooth: hci2: command tx timeout [ 87.383279][ T5163] Bluetooth: hci4: command tx timeout [ 87.388774][ T5847] Bluetooth: hci3: command tx timeout [ 87.394139][ T51] Bluetooth: hci0: command tx timeout [ 87.409105][ T5962] usb 3-1: not running at top speed; connect to a high speed hub [ 87.417398][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.450267][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.482227][ T5962] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 87.520937][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.555544][ T5962] usb 3-1: Product: syz [ 87.574786][ T5962] usb 3-1: Manufacturer: syz [ 87.608230][ T5962] usb 3-1: SerialNumber: syz [ 87.644460][ T4576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.678930][ T4576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.878078][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.922074][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.054355][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.080654][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.209912][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.241470][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.474154][ T4576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.496656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 88.511788][ T4576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.710216][ T5984] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5'. [ 90.239221][ T5962] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 90.329053][ T5962] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.403887][ T5962] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 90.492717][ T5962] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 90.520227][ T5962] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.531056][ T5962] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 90.609443][ T5962] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 90.644387][ T5962] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.826910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.056403][ T5962] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 91.150436][ T5962] usb 3-1: USB disconnect, device number 2 [ 91.413445][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.981660][ T808] cfg80211: failed to load regulatory.db [ 92.389980][ T5983] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 92.584357][ T5983] usb 5-1: config 128 interface 0 has no altsetting 0 [ 92.604818][ T5983] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 92.635033][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.967965][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 93.005218][ T29] audit: type=1326 audit(1773807614.068:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dbb9c799 code=0x7ffc0000 [ 93.040574][ T5983] usb 5-1: string descriptor 0 read error: -71 [ 93.100682][ T29] audit: type=1326 audit(1773807614.098:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dbb9c799 code=0x7ffc0000 [ 93.130880][ T5983] usb 5-1: selecting invalid altsetting 3 [ 93.153662][ T6027] process 'syz.3.15' launched './file2' with NULL argv: empty string added [ 93.162990][ T5983] comedi comedi5: could not set alternate setting 3 in high speed [ 93.182861][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.182909][ T5983] usbduxsigma 5-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 93.206893][ T29] audit: type=1326 audit(1773807614.098:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f28dbb9c799 code=0x7ffc0000 [ 93.213167][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 93.303128][ T5983] usbduxsigma 5-1:128.0: probe with driver usbduxsigma failed with error -22 [ 93.321813][ T29] audit: type=1326 audit(1773807614.098:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dbb9c799 code=0x7ffc0000 [ 93.323174][ T10] usb 1-1: config index 0 descriptor too short (expected 28771, got 10) [ 93.394759][ T5983] usb 5-1: USB disconnect, device number 2 [ 93.432088][ T29] audit: type=1326 audit(1773807614.098:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f28dbb9c799 code=0x7ffc0000 [ 93.443125][ T10] usb 1-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 93.534920][ T29] audit: type=1326 audit(1773807614.098:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dbb9c799 code=0x7ffc0000 [ 93.580331][ T10] usb 1-1: config 114 descriptor has 1 excess byte, ignoring [ 93.605589][ T10] usb 1-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 93.637582][ T29] audit: type=1326 audit(1773807614.098:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f28dbb9c799 code=0x7ffc0000 [ 93.649246][ T10] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 93.718344][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.746809][ T10] usb 1-1: Product: syz [ 93.751521][ T10] usb 1-1: Manufacturer: syz [ 93.761354][ T29] audit: type=1326 audit(1773807614.148:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dbb9c799 code=0x7ffc0000 [ 93.763645][ T10] usb 1-1: SerialNumber: syz [ 93.872842][ T29] audit: type=1326 audit(1773807614.148:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dbb9c799 code=0x7ffc0000 [ 93.941933][ T29] audit: type=1326 audit(1773807614.308:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f28dbb9c799 code=0x7ffc0000 [ 94.088139][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.128322][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.190717][ T6022] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.606827][ T5962] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.807523][ T5962] usb 5-1: no configurations [ 94.853758][ T5962] usb 5-1: can't read configurations, error -22 [ 94.998175][ T6052] usb usb8: usbfs: process 6052 (syz.3.23) did not claim interface 0 before use [ 95.028398][ T5962] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.108343][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 95.159983][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 95.209365][ T5962] usb 5-1: no configurations [ 95.227275][ T5962] usb 5-1: can't read configurations, error -22 [ 95.254413][ T5962] usb usb5-port1: attempt power cycle [ 95.606807][ T5962] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.768911][ T5962] usb 5-1: no configurations [ 95.787226][ T5962] usb 5-1: can't read configurations, error -22 [ 95.804890][ T10] usb 1-1: USB disconnect, device number 2 [ 95.926742][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 95.967069][ T5962] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.975866][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25'. [ 96.060277][ T5962] usb 5-1: no configurations [ 96.074083][ T5962] usb 5-1: can't read configurations, error -22 [ 96.104292][ T5962] usb usb5-port1: unable to enumerate USB device [ 97.659330][ T42] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 97.707972][ T6050] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22'. [ 97.861693][ T42] usb 4-1: config 128 interface 0 has no altsetting 0 [ 97.894043][ T42] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 97.918936][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.241419][ T42] usb 4-1: string descriptor 0 read error: -71 [ 98.294991][ T42] usb 4-1: selecting invalid altsetting 3 [ 98.324479][ T42] comedi comedi5: could not set alternate setting 3 in high speed [ 98.343127][ T42] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 98.352616][ T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 98.387726][ T42] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 98.422021][ T42] usb 4-1: USB disconnect, device number 2 [ 98.545798][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.562885][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 98.585841][ T24] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 98.619827][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.651402][ T24] usb 1-1: config 0 descriptor?? [ 98.685306][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 98.693496][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 98.740550][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 98.784302][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 98.803439][ T24] usb 1-1: media controller created [ 98.837633][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.995347][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 99.020170][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 99.079467][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 99.168028][ T6093] usb usb8: usbfs: process 6093 (syz.3.35) did not claim interface 0 before use [ 99.239465][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 99.281260][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 99.395957][ T24] usb 1-1: USB disconnect, device number 3 [ 99.523375][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 99.757721][ T5962] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 99.839091][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 99.864254][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 99.881590][ T6104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.37'. [ 99.909873][ T6110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.39'. [ 100.002190][ T5962] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.031966][ T5962] usb 5-1: not running at top speed; connect to a high speed hub [ 100.053303][ T5962] usb 5-1: config index 0 descriptor too short (expected 28771, got 10) [ 100.071416][ T5962] usb 5-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 100.081695][ T5962] usb 5-1: config 114 descriptor has 1 excess byte, ignoring [ 100.091106][ T5962] usb 5-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 100.105059][ T5962] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 100.116490][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.127104][ T5962] usb 5-1: Product: syz [ 100.131509][ T5962] usb 5-1: Manufacturer: syz [ 100.151162][ T5962] usb 5-1: SerialNumber: syz [ 100.403426][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.426167][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.045493][ T6124] netlink: 76 bytes leftover after parsing attributes in process `syz.3.43'. [ 102.083448][ T6126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.44'. [ 102.473296][ T5962] usb 5-1: USB disconnect, device number 7 [ 102.679487][ T6137] usb usb8: usbfs: process 6137 (syz.4.47) did not claim interface 0 before use [ 102.876784][ T808] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 103.041220][ T808] usb 2-1: config 128 interface 0 has no altsetting 0 [ 103.061632][ T808] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 103.086836][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.207033][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 103.385760][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.422901][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 103.442000][ T808] usb 2-1: string descriptor 0 read error: -71 [ 103.452467][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 103.475199][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.486241][ T808] usb 2-1: selecting invalid altsetting 3 [ 103.495115][ T808] comedi comedi5: could not set alternate setting 3 in high speed [ 103.513754][ T808] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 103.529046][ T9] usb 1-1: config 0 descriptor?? [ 103.545661][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 103.559706][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 103.567712][ T808] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 103.606938][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 103.624142][ T808] usb 2-1: USB disconnect, device number 2 [ 103.634155][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 103.651472][ T9] usb 1-1: media controller created [ 103.701713][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.767004][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 103.805214][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 103.828459][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 103.864269][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 103.877529][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 103.905089][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 103.926160][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 103.951664][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.53'. [ 103.962864][ T6156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.54'. [ 104.003964][ T9] usb 1-1: USB disconnect, device number 4 [ 104.204459][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 104.866699][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 105.079829][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.105283][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 105.122610][ T6174] usb usb8: usbfs: process 6174 (syz.1.60) did not claim interface 0 before use [ 105.141684][ T9] usb 1-1: config index 0 descriptor too short (expected 28771, got 10) [ 105.185518][ T9] usb 1-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 105.215455][ T9] usb 1-1: config 114 descriptor has 1 excess byte, ignoring [ 105.235750][ T9] usb 1-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 105.258934][ T9] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 105.291224][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.318972][ T9] usb 1-1: Product: syz [ 105.337972][ T9] usb 1-1: Manufacturer: syz [ 105.352404][ T9] usb 1-1: SerialNumber: syz [ 105.630257][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.667275][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.884631][ T6169] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 105.995919][ T6189] netlink: 76 bytes leftover after parsing attributes in process `syz.4.65'. [ 106.094215][ T6193] openvswitch: netlink: Key 17 has unexpected len 0 expected 4 [ 106.602553][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 106.623418][ T6201] tipc: Started in network mode [ 106.634518][ T6201] tipc: Node identity 7f000001, cluster identity 4711 [ 106.654667][ T6201] tipc: Enabling of bearer rejected, failed to enable media [ 106.848840][ T6203] usb usb8: usbfs: process 6203 (syz.2.71) did not claim interface 0 before use [ 107.711506][ T9] usb 1-1: USB disconnect, device number 5 [ 108.084323][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 108.157332][ T6212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.73'. [ 108.199619][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 108.295953][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.75'. [ 108.583354][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 108.583371][ T29] audit: type=1326 audit(1773807629.648:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02699c799 code=0x7ffc0000 [ 108.658361][ T29] audit: type=1326 audit(1773807629.688:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02699c799 code=0x7ffc0000 [ 108.756456][ T29] audit: type=1326 audit(1773807629.688:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe02699c799 code=0x7ffc0000 [ 108.857423][ T29] audit: type=1326 audit(1773807629.688:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02699c799 code=0x7ffc0000 [ 108.929143][ T29] audit: type=1326 audit(1773807629.688:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02699c799 code=0x7ffc0000 [ 108.978638][ T6229] mmap: syz.1.81 (6229): VmData 37527552 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 108.997603][ T29] audit: type=1326 audit(1773807629.688:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe02699c799 code=0x7ffc0000 [ 109.073730][ T29] audit: type=1326 audit(1773807629.688:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02699c799 code=0x7ffc0000 [ 109.196661][ T29] audit: type=1326 audit(1773807629.688:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe02699c799 code=0x7ffc0000 [ 109.238100][ T6239] usb usb8: usbfs: process 6239 (syz.1.82) did not claim interface 0 before use [ 109.274275][ T29] audit: type=1326 audit(1773807629.688:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02699c799 code=0x7ffc0000 [ 109.396522][ T29] audit: type=1326 audit(1773807629.698:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fe02699c799 code=0x7ffc0000 [ 110.139476][ T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 110.203390][ T6252] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 110.318877][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.336957][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 110.360441][ T24] usb 2-1: config index 0 descriptor too short (expected 28771, got 10) [ 110.374656][ T24] usb 2-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 110.387306][ T24] usb 2-1: config 114 descriptor has 1 excess byte, ignoring [ 110.394797][ T24] usb 2-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 110.412844][ T24] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 110.424369][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.434574][ T24] usb 2-1: Product: syz [ 110.439423][ T24] usb 2-1: Manufacturer: syz [ 110.444479][ T24] usb 2-1: SerialNumber: syz [ 110.689768][ T6251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.707275][ T6251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.908648][ T24] usb 2-1: USB disconnect, device number 3 [ 110.987021][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 111.177114][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 111.204701][ T9] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 111.242549][ T9] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 111.288149][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.328642][ T9] usb 5-1: Product: syz [ 111.344867][ T9] usb 5-1: Manufacturer: syz [ 111.361772][ T9] usb 5-1: SerialNumber: syz [ 111.384134][ T9] usb 5-1: config 0 descriptor?? [ 111.414637][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 111.436658][ T9] usb 5-1: setting power ON [ 111.454487][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 111.521137][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.549192][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 111.583924][ T9] usb 5-1: media controller created [ 111.586839][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.622164][ T6261] dvb-usb: bulk message failed: -22 (3/0) [ 111.667498][ T6261] dvb-usb: bulk message failed: -22 (3/0) [ 111.738024][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.786780][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 111.801509][ T9] usb 5-1: selecting invalid altsetting 6 [ 111.805744][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 111.808110][ T9] usb 5-1: digital interface selection failed (-22) [ 111.824156][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 111.838244][ T9] usb 5-1: setting power OFF [ 111.844802][ T24] usb 3-1: config 0 has no interface number 0 [ 111.852945][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 111.869758][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 111.879008][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 111.890371][ T9] (NULL device *): no alternate interface [ 111.908504][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.968255][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 111.978470][ T24] usb 3-1: Product: syz [ 111.987268][ T24] usb 3-1: Manufacturer: syz [ 111.992126][ T24] usb 3-1: SerialNumber: syz [ 112.015485][ T9] usb 5-1: USB disconnect, device number 8 [ 112.108091][ T24] usb 3-1: config 0 descriptor?? [ 112.142430][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 112.412348][ T6281] usb usb8: usbfs: process 6281 (syz.3.93) did not claim interface 0 before use [ 112.426499][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 112.514774][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 112.555109][ T6284] netlink: 56 bytes leftover after parsing attributes in process `syz.4.94'. [ 112.775006][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 112.783277][ T24] usb 3-1: USB disconnect, device number 3 [ 112.794828][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 112.890920][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 112.957905][ T24] quatech2 3-1:0.51: device disconnected [ 113.211932][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 113.251729][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.97'. [ 113.714147][ T6300] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 113.737453][ T6300] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 113.831471][ T6300] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 114.636716][ T5962] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 114.696735][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.809345][ T5962] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.844219][ T5962] usb 3-1: not running at top speed; connect to a high speed hub [ 114.861063][ T5962] usb 3-1: config index 0 descriptor too short (expected 28771, got 10) [ 114.873505][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 114.885838][ T5962] usb 3-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 114.904618][ T5962] usb 3-1: config 114 descriptor has 1 excess byte, ignoring [ 114.916149][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.939830][ T5962] usb 3-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 114.950877][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.964559][ T5962] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 114.974791][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.987794][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 115.000254][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.011753][ T5962] usb 3-1: Product: syz [ 115.018328][ T5962] usb 3-1: Manufacturer: syz [ 115.023252][ T10] usb 1-1: Product: syz [ 115.028076][ T5962] usb 3-1: SerialNumber: syz [ 115.036546][ T10] usb 1-1: Manufacturer: syz [ 115.049381][ T10] usb 1-1: SerialNumber: syz [ 115.095978][ T10] usb 1-1: config 0 descriptor?? [ 115.272922][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.301245][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 115.302045][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.329737][ T6317] PKCS7: Unknown OID: [4] 4.2.137581095.2.17.17.6757.42.118.403037(bad) [ 115.342552][ T6317] PKCS7: Only support pkcs7_signedData type [ 115.350386][ T6316] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN PTI [ 115.359957][ T6307] Zero length message leads to an empty skb [ 115.362314][ T6316] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 115.362338][ T6316] CPU: 1 UID: 0 PID: 6316 Comm: syz.3.105 Not tainted syzkaller #0 PREEMPT(full) [ 115.386114][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.396185][ T6316] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 115.401440][ T6316] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 c5 ee e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 a9 ee e4 fe 49 81 3c 24 80 28 09 8c [ 115.421421][ T6316] RSP: 0018:ffffc90005ab7a68 EFLAGS: 00010206 [ 115.427514][ T6316] RAX: 0000000000000009 RBX: ffff888032355c00 RCX: 0000000000080000 [ 115.435491][ T6316] RDX: ffffc9000d5c1000 RSI: 00000000000005c6 RDI: 00000000000005c7 [ 115.443462][ T6316] RBP: dffffc0000000000 R08: ffffffff824b142a R09: ffffffff8e75d6a0 [ 115.451522][ T6316] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 115.459668][ T6316] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802a44ee80 [ 115.467648][ T6316] FS: 00007f28dca906c0(0000) GS:ffff888125535000(0000) knlGS:0000000000000000 [ 115.476578][ T6316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.483266][ T6316] CR2: 00007f28dbb85900 CR3: 0000000026e1c000 CR4: 00000000003526f0 [ 115.491255][ T6316] Call Trace: [ 115.494628][ T6316] [ 115.497561][ T6316] fuse_parse_param+0x69b/0xa80 [ 115.502687][ T6316] ? __pfx_fuse_parse_param+0x10/0x10 [ 115.508332][ T6316] ? static_key_count+0x41/0x70 [ 115.513198][ T6316] vfs_parse_fs_param+0x1a9/0x420 [ 115.518232][ T6316] vfs_parse_monolithic_sep+0x283/0x360 [ 115.523781][ T6316] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 115.529409][ T6316] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 115.535483][ T6316] ? alloc_fs_context+0x9e9/0xd50 [ 115.540511][ T6316] do_new_mount+0x304/0xd30 [ 115.545017][ T6316] ? apparmor_capable+0x126/0x170 [ 115.550044][ T6316] ? security_capable+0x7e/0x2c0 [ 115.554992][ T6316] ? __pfx_do_new_mount+0x10/0x10 [ 115.560118][ T6316] ? ns_capable+0x89/0xe0 [ 115.564464][ T6316] ? path_mount+0x690/0x10e0 [ 115.569161][ T6316] ? user_path_at+0xd4/0x160 [ 115.573856][ T6316] __se_sys_mount+0x31d/0x420 [ 115.578651][ T6316] ? __pfx___se_sys_mount+0x10/0x10 [ 115.583881][ T6316] ? __secure_computing+0xe1/0x2a0 [ 115.589054][ T6316] ? __x64_sys_mount+0x20/0xc0 [ 115.593837][ T6316] do_syscall_64+0x14d/0xf80 [ 115.598528][ T6316] ? trace_irq_disable+0x3b/0x150 [ 115.603557][ T6316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.609641][ T6316] ? clear_bhb_loop+0x40/0x90 [ 115.614508][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.620576][ T6316] RIP: 0033:0x7f28dbb9da0a [ 115.624994][ T6316] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.644780][ T6316] RSP: 002b:00007f28dca8fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.653203][ T6316] RAX: ffffffffffffffda RBX: 00007f28dca8fee0 RCX: 00007f28dbb9da0a [ 115.661306][ T6316] RDX: 0000200000002040 RSI: 0000200000002080 RDI: 0000000000000000 [ 115.669298][ T6316] RBP: 0000200000002040 R08: 00007f28dca8fee0 R09: 0000000000000000 [ 115.677535][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000002080 [ 115.685595][ T6316] R13: 00007f28dca8fea0 R14: 0000000000000000 R15: 0000200000000080 [ 115.693588][ T6316] [ 115.696627][ T6316] Modules linked in: [ 115.704344][ T6316] ---[ end trace 0000000000000000 ]--- [ 115.724034][ T5962] usb 3-1: USB disconnect, device number 4 [ 115.776486][ T6316] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 115.781940][ T6316] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 c5 ee e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 a9 ee e4 fe 49 81 3c 24 80 28 09 8c [ 115.802292][ T6316] RSP: 0018:ffffc90005ab7a68 EFLAGS: 00010206 [ 115.811239][ T6316] RAX: 0000000000000009 RBX: ffff888032355c00 RCX: 0000000000080000 [ 115.819881][ T6316] RDX: ffffc9000d5c1000 RSI: 00000000000005c6 RDI: 00000000000005c7 [ 115.828633][ T6316] RBP: dffffc0000000000 R08: ffffffff824b142a R09: ffffffff8e75d6a0 [ 115.836823][ T6316] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 115.844837][ T6316] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802a44ee80 [ 115.852961][ T6316] FS: 00007f28dca906c0(0000) GS:ffff888125535000(0000) knlGS:0000000000000000 [ 115.863545][ T5983] usb 1-1: USB disconnect, device number 6 [ 115.871862][ T6316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.878829][ T6316] CR2: 00007fe026be92f8 CR3: 0000000026e1c000 CR4: 00000000003526f0 [ 115.887042][ T6316] Kernel panic - not syncing: Fatal exception [ 115.893280][ T6316] Kernel Offset: disabled [ 115.897629][ T6316] Rebooting in 86400 seconds..