last executing test programs: 25m19.634079373s ago: executing program 32 (id=33): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 24m54.214257478s ago: executing program 33 (id=62): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) socket(0x10, 0x3, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000380)=""/196) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 22m12.858006432s ago: executing program 34 (id=251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x2, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 21m7.232453162s ago: executing program 35 (id=324): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) 19m37.737983955s ago: executing program 36 (id=418): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r5, &(0x7f00000005c0), 0x0) read$snapshot(r5, 0x0, 0xffffffbf) read$FUSE(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) listen(r7, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 19m19.610410019s ago: executing program 37 (id=439): gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0xffff, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x10000, 0x3, 0x0, 0x2}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x10, 0x5}}}}]}, 0x78}}, 0x4000) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@ipv6_getaddr={0x20, 0x16, 0x400, 0x70bd27, 0x25dfdbfc, {0xa, 0x18, 0x19, 0xff, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x60}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x801) sendfile(r1, r0, 0x0, 0x578410ed) 16m49.353781038s ago: executing program 38 (id=658): socket(0x10, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x31c8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(0xffffffffffffffff, 0x1) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 16m18.199862828s ago: executing program 39 (id=710): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000000)=0x3, 0x4, 0x1) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000004) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r5, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0xffff000000000000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 16m7.328601523s ago: executing program 40 (id=725): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x400000000e) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) 14m3.355516292s ago: executing program 41 (id=839): socket(0x10, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8b6000, 0x40) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, &(0x7f0000000040)={0x3, 0x8, [0xfffff8a8, 0x5]}) 13m44.071144213s ago: executing program 42 (id=863): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) dup(0xffffffffffffffff) 12m19.515123841s ago: executing program 43 (id=952): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) read$ptp(r3, &(0x7f0000000340)=""/223, 0xdf) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000240)) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xfffd7fff, 0x50323234, 0x0, 0xa, [{0x42, 0x5}, {0xc00, 0x5000000}, {0x21, 0x5de3}, {0x14, 0x4af}, {0x1009, 0x4000069a}, {0x7, 0x3}, {0x80081, 0x5}, {0x200, 0x2000017}], 0x7b, 0x2, 0x3, 0x2, 0x4}}) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000340)={0x0, 0x0, {0x7f, 0x3, 0x300f, 0x0, 0x0, 0x3, 0x2, 0x7}}) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) r7 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0xffffffffffffffb1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) keyctl$update(0x2, r7, &(0x7f0000000040), 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10, 0x0, {0x1}}, 0x18) connect$can_j1939(r9, &(0x7f0000000140)={0x1d, r10, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmsg$nl_route(r8, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRES64=r3, @ANYRES16, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYBLOB="5e60027c600ccf10979c825248f395cbab7f1d07e586c4ba074b0375066a32606f51435ea0cde85ffda7e1a707e7cf30df1eb51548f690ae111252b6dc69fe4dab1d28221eb755802f88970b670647d495d145b333557f0b1dcbc4b5c3c92d5a4963f291d581e356674522ac0e844ae8fa3f2503189533925c8533bcf54486d7918b4e02042d04b663854bf7db8c323bfaea979eb03512700ee51b5e368be9d8bf59ed068774ee905abaa46eaf0ea990d7e9454471ec21f3a1b47af093f495b27a246cc2ba9fac66be4cd491d0a266516577", @ANYRES8=r4], 0x60}, 0x1, 0x0, 0x0, 0x4008004}, 0x204c047) 12m10.312945742s ago: executing program 44 (id=962): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) write(r0, &(0x7f0000000040)="57abfb935bdcf8bb783a2e2419d1c97bb6c1f2", 0x13) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'vxcan1\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0xc91, 0x3, "3e1a0448e5be"}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYRES8=r1], 0x80}}], 0x1, 0x4000004) r3 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r4, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80003, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) getsockname$qrtr(r5, &(0x7f00000001c0), 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x1, 0x87) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x20000000}, 0x80, 0x0}, 0x40810) 11m59.675194773s ago: executing program 45 (id=970): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) write(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0x80000001, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x0, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x73, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0x3, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea5, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x261, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x0, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x225, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'vxcan1\x00', 0x0}) socket(0x11, 0x800000002, 0x0) 10m29.303231496s ago: executing program 5 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214"], 0x58}}, 0x0) 10m28.503231217s ago: executing program 5 (id=1097): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$isdn(0xffffffffffffffff, 0x0, 0x0) 10m27.589671779s ago: executing program 5 (id=1100): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0040ce91bae94d6588340b3900000000000000b5384050da"], 0x1, 0xd99, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) r2 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1ff) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000000000000300"]) 10m25.646609457s ago: executing program 5 (id=1104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x39, 0xba, {0xba, 0x24, "53f59285d9af732c498ddeff80cef10f331e21e7da51c3d624432c8dba0bb43909e3a3b30919c7b8959c95229d4213bfb863df238145e50deb9687c61257bd51cd5d11a2359adb30064b797ee28076f38037c53c551759a4f46ea7e0d378cf58dd099b13f056313cb684b1cbf58cf22995dd87c1c64cb7a826fa721afaff05054444835c62e664251f0487e7274fe79f1078db300e965126725be93cc31d4b06b825262c082a52f57882d054e89f80f7a0b2f91fdf764e5f"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x7, 0xeb, "b64e28c9a2bd9dbf795de951e19f1a95aa9ecc0b36f67e915df33b2caa44beba0252c4b535996538f7ef2055b386acc1050466b1a063b6560adaf373c9a9832d683f2bba31ddbe5933e0fa338c75b1088bb8c29af1b70beca485914bba42ef95f1290ffe39fd5565c50604506cb012f8c953311079881a40cd9996b27784f6e76eb8c5a23bd9da4d42af52ecf89a7c3bfc0d78241854e533aa9fbb0e086fcdd4d295f93c252b9f5acfe4c0ad4904aa84a5e60601b718bd44c3b85459066c307499585a9c8c3e2f074915d33c1623919d39f011c5741408f0177f9a540df5012069dea72b544b5425a38ac2"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0xb2, 0x10, 0xfffffff9, 0x9, 0x3ff, 0x1, 0x1, 0x9, 0x0, 0x40, 0x4, 0x14}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x5}, &(0x7f00000004c0)={0x20, 0x83, 0x2}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x89, 0x2, 0x1}}) 10m21.092768912s ago: executing program 5 (id=1111): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4a802, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000380)={{0x0, 0xcb}, {0x0, 0x6}, 0xe, 0x3, 0x8}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000000c0)) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f00000005c0)={0x9, @capture={0x1000, 0x1, {0x94a1, 0x1}, 0x7, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xff, [0x7, 0xe, 0x5, 0xb, 0x6, 0xb, 0x6, 0x2, 0x0, 0x2, 0x10, 0x6, 0x1, 0x6, 0x7, 0x4], 0x0, [0x9, 0xffff, 0x9, 0x6, 0x7fff, 0x8, 0x5, 0x4, 0x0, 0x0, 0x5, 0xfff2, 0xfff8, 0x8, 0x2, 0x3ff], [0x0, 0x30, 0x6, 0x348e, 0x1, 0x7, 0x7, 0xffee, 0x5, 0x792d, 0x8, 0x6, 0x9, 0x9, 0x9, 0x6]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10m19.764768617s ago: executing program 5 (id=1114): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3742, &(0x7f0000000040)={0x0, 0x81ba, 0x400, 0x107, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x3, 0xfa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000740)=""/252, &(0x7f0000000180)=0xfc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r5, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x86, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010004000000000002000300", @ANYRES32=0x0, @ANYBLOB="020002", @ANYRES32=0x0, @ANYBLOB="040000000000000008000700", @ANYRES32=0x0, @ANYBLOB="08db0400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="5b79f5a7a2c2f81c8ddc7ae8feed555c51386c164b936e680bae03243439602ada510f945470725173496e8c05eee1533518c2d1b3194d2ea85719b59b49c09d5bd9df9af7b15fccb4861bb14bb03d67c5367936cb435a0b6f43cdedd144227a2c9c82a580c9781a30216bd39311e0a70a20b0df47cbe7a66a512d6713299a7a89bd73ef03d02f5750701d1853f5501d89091bac0e55291950baf5d3555edece8a36b9533af7e43874899cba5401c1bdffdaaef79594d39ba8585a4433fa14dac6f393d7d6536ca5593b86c51c56e1971d406d9db55d836989a97357458aa2a02e49c94c38732398d05ea4e696514923457f33186abda7", @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="faff040000200c0020000000"], 0x4, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x6b) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r4], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 10m4.298176597s ago: executing program 46 (id=1114): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3742, &(0x7f0000000040)={0x0, 0x81ba, 0x400, 0x107, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x3, 0xfa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000740)=""/252, &(0x7f0000000180)=0xfc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r5, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x86, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010004000000000002000300", @ANYRES32=0x0, @ANYBLOB="020002", @ANYRES32=0x0, @ANYBLOB="040000000000000008000700", @ANYRES32=0x0, @ANYBLOB="08db0400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="5b79f5a7a2c2f81c8ddc7ae8feed555c51386c164b936e680bae03243439602ada510f945470725173496e8c05eee1533518c2d1b3194d2ea85719b59b49c09d5bd9df9af7b15fccb4861bb14bb03d67c5367936cb435a0b6f43cdedd144227a2c9c82a580c9781a30216bd39311e0a70a20b0df47cbe7a66a512d6713299a7a89bd73ef03d02f5750701d1853f5501d89091bac0e55291950baf5d3555edece8a36b9533af7e43874899cba5401c1bdffdaaef79594d39ba8585a4433fa14dac6f393d7d6536ca5593b86c51c56e1971d406d9db55d836989a97357458aa2a02e49c94c38732398d05ea4e696514923457f33186abda7", @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="faff040000200c0020000000"], 0x4, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x6b) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r4], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 8m54.227829234s ago: executing program 2 (id=1237): r0 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r0, 0x200}], 0x1, 0xdb3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, 0x0, 0x0, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 8m52.625472801s ago: executing program 2 (id=1239): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 8m51.870887359s ago: executing program 2 (id=1241): syz_usb_connect$cdc_ncm(0x0, 0x75, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x15, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0x786, 0x4) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f00000002c0)=[{r0, 0x3000}, {r0, 0x200}], 0x2, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 8m48.232105556s ago: executing program 2 (id=1251): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="08000399071f99c3ba"], 0x44}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 8m47.62475076s ago: executing program 2 (id=1253): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip_tables_matches\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 8m46.989895506s ago: executing program 2 (id=1255): socket$kcm(0x11, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000022c0)=@vmx={0x0, 0x0, 0x2080, {0x6000}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x28000600) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x5000, 0x80000001, @remote}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = fsopen(&(0x7f0000000140)='hfsplus\x00', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c000000f637d70d639e3ad91110c37e8704a85f5a24da629cd8486befc3832332beef918f64dc26bd3d61ca9004f12ffd9347e6c0d55f263b496aac2b0ea3f66f3a5cecb8981af83035ee7fea1a98b93c8c4195f9f7273ba8d063f3514d0e3696b931a9c6ebea9580201be1ec74ee15b2f00dfc2a7acf0e8014464e9300148948da0adf46ee57ec4e6715ffd3270650f82af422", @ANYRES16=r5, @ANYBLOB="000200000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0a00e8000802110000000000040017800a00e80008021100000000001c00e70070fb5ea84838860f3198ed95b50646fadfe678c2e7c1f3e82cad3123545b72459b13296c5568af1c00e7005b542397b465ff125b8291c8a38d479faa69cfe1ff"], 0x7c}, 0x1, 0x0, 0x0, 0x2004c840}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 8m31.466553393s ago: executing program 47 (id=1255): socket$kcm(0x11, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000022c0)=@vmx={0x0, 0x0, 0x2080, {0x6000}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x28000600) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x5000, 0x80000001, @remote}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = fsopen(&(0x7f0000000140)='hfsplus\x00', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c000000f637d70d639e3ad91110c37e8704a85f5a24da629cd8486befc3832332beef918f64dc26bd3d61ca9004f12ffd9347e6c0d55f263b496aac2b0ea3f66f3a5cecb8981af83035ee7fea1a98b93c8c4195f9f7273ba8d063f3514d0e3696b931a9c6ebea9580201be1ec74ee15b2f00dfc2a7acf0e8014464e9300148948da0adf46ee57ec4e6715ffd3270650f82af422", @ANYRES16=r5, @ANYBLOB="000200000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0a00e8000802110000000000040017800a00e80008021100000000001c00e70070fb5ea84838860f3198ed95b50646fadfe678c2e7c1f3e82cad3123545b72459b13296c5568af1c00e7005b542397b465ff125b8291c8a38d479faa69cfe1ff"], 0x7c}, 0x1, 0x0, 0x0, 0x2004c840}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 7m6.206110305s ago: executing program 6 (id=1414): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x40001, 0xfffffffc, 0x0, 0x6}, 0x10) write(r0, 0x0, 0x0) 7m5.408002376s ago: executing program 6 (id=1416): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x2, 0x40000336}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x103001, 0x0) 6m56.562207311s ago: executing program 9 (id=1427): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 6m55.222353047s ago: executing program 9 (id=1429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) 6m53.998454991s ago: executing program 1 (id=1430): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32, @ANYBLOB="08000399071f99c3ba"], 0x44}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m53.104531163s ago: executing program 1 (id=1431): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 6m52.517300218s ago: executing program 6 (id=1432): r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0x7, 0x2, 0x8, 0x9}, 0x7, 0x4, 0x0, 0x5, 0x0, 0x5}}) 6m52.175813689s ago: executing program 1 (id=1433): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x3, [{@rand_addr=0x64010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x2}]}]}}}], 0x48}, 0x200040c4) 6m51.586310845s ago: executing program 6 (id=1435): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m51.439130621s ago: executing program 1 (id=1436): unshare(0x6a040000) r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0009800800b600884800"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x10}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x40}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x59) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="b805000000b9070000000f01c1460f01bd06000000a70f20c035080000000f22c0b9800000c00f3235000100000f300fc79fea810000c4c2f59cd9c483057d7b001566b82b018ec0470f23e6", 0x4c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x69, 0x0, 0x0, 0x0, 0x10, 0x7, 0x0, 0x88, 0x9, 0x0, 0x0, 0x0, 0x31, 0x83, 0x0, 0x2, 0x0, '\x00', 0x0, 0x200}) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[], 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x4}) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) syz_open_dev$hiddev(&(0x7f0000000040), 0x8, 0x80) 6m51.277237749s ago: executing program 9 (id=1437): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3080000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 6m50.567906523s ago: executing program 9 (id=1440): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) write$P9_RGETATTR(r2, 0x0, 0x0) 6m48.97179933s ago: executing program 9 (id=1443): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r0, 0x0, 0x0, 0x80800) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 6m48.180570592s ago: executing program 6 (id=1445): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0x7, 0x2, 0x8, 0x9}, 0x7, 0x4, 0x0, 0x5, 0x0, 0x5}}) 6m48.160684698s ago: executing program 9 (id=1446): r0 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r4 = socket$netlink(0x10, 0x3, 0x4) io_setup(0x4, &(0x7f0000000140)) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f000001b2c0)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) read$FUSE(r3, &(0x7f0000003000)={0x2020}, 0x2020) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="6f061419813e0f39e95781a33d00d747eb086abded2128fd646b74d423f1b463bb8ff44faec07dc9da960600000000000008252533ea4437ee1e0471004974abc695b7d22ccdcfc916c1f2753ed363fde643f16a647584236eeab283e10356911873a21b5bdb3ff0ae3fb8dbaf", @ANYBLOB="000400000000000000000000a96b0000009ee68e5d00000000000000", @ANYRES8=r5, @ANYRES32], 0x48) r7 = io_uring_setup(0x6ab9, &(0x7f0000000000)={0x0, 0x4, 0x20, 0x3, 0x1b1}) io_uring_enter(r7, 0x7b46, 0x7b7d, 0x20, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(r8, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) recvmsg$unix(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 6m47.474639587s ago: executing program 6 (id=1447): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000940)="89000000120081ae760bb28e030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a3b331dbf9ed7815e381ad6e747033a0093b837dc64417aed433ae77fea3a6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2cab49e33538afa8af92347514f0b56a20ff27fff407eda486a0ee5dfb74f1a2ccc9da9acc0b23d4eabe325468112583ae25a410f3c0e8360e3c913abe399b3f207be817d04cf2b31e590c4561c6c0d9df36874867d619b4b9230e34b1fe4d67c22b4d81c9349a5cf685340798fd812fc7833da2e8f8da5ffbd4f169b9656e9c96d4a8267ee9939dfcae8cf36b8ebf47df226341e51aa2a99aa15a0bc329285130053252e", 0x124}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000680)=@get={0x1, &(0x7f00000006c0)=""/244, 0x8}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) unshare(0x40000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) migrate_pages(0x0, 0x5, 0x0, 0x0) 6m47.393899235s ago: executing program 1 (id=1448): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6m46.380703159s ago: executing program 1 (id=1449): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="1012", 0xfdb9, 0x24000000, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002b, 0x800, 0x1, 0x100020b}, &(0x7f0000000200), &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a0000000600008095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x2d, &(0x7f0000000280)=""/45, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 6m32.110464776s ago: executing program 48 (id=1447): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000940)="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", 0x124}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000680)=@get={0x1, &(0x7f00000006c0)=""/244, 0x8}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) unshare(0x40000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) migrate_pages(0x0, 0x5, 0x0, 0x0) 6m31.769018528s ago: executing program 49 (id=1446): r0 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r4 = socket$netlink(0x10, 0x3, 0x4) io_setup(0x4, &(0x7f0000000140)) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f000001b2c0)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) read$FUSE(r3, &(0x7f0000003000)={0x2020}, 0x2020) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="6f061419813e0f39e95781a33d00d747eb086abded2128fd646b74d423f1b463bb8ff44faec07dc9da960600000000000008252533ea4437ee1e0471004974abc695b7d22ccdcfc916c1f2753ed363fde643f16a647584236eeab283e10356911873a21b5bdb3ff0ae3fb8dbaf", @ANYBLOB="000400000000000000000000a96b0000009ee68e5d00000000000000", @ANYRES8=r5, @ANYRES32], 0x48) r7 = io_uring_setup(0x6ab9, &(0x7f0000000000)={0x0, 0x4, 0x20, 0x3, 0x1b1}) io_uring_enter(r7, 0x7b46, 0x7b7d, 0x20, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(r8, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) recvmsg$unix(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 6m30.995282941s ago: executing program 50 (id=1449): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="1012", 0xfdb9, 0x24000000, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002b, 0x800, 0x1, 0x100020b}, &(0x7f0000000200), &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a0000000600008095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x2d, &(0x7f0000000280)=""/45, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 36.835942006s ago: executing program 0 (id=1981): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) 36.037051442s ago: executing program 0 (id=1984): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x10100, 0x3, 0x8000001, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x40006) accept(r5, 0x0, 0x0) 34.302217902s ago: executing program 0 (id=1988): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000300)={0x0, 0xe, 0xc06, 0x9, 0x42, 0x8, &(0x7f00000001c0)="94a049fa2cbfaf4ad85595818c08e28a294c8bf3d86184b681c074fce16eaa0176c9ab284f0b6da9f197cbd81b52196faacffb35c4a8b831841ea1d14052774764f0"}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0xc001102a, 0x0, 0x6}]}) syz_usb_connect(0x0, 0x5d, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) close(r5) syz_create_resource$binfmt(0x0) sendmsg$inet(r3, 0x0, 0x0) 33.063751447s ago: executing program 0 (id=1991): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r5}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) r9 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r9, 0x9, 0x4) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 31.609604391s ago: executing program 7 (id=1992): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 30.531833949s ago: executing program 7 (id=1993): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2092) chown(&(0x7f0000000000)='./file0\x00', r2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000046c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x403a1810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000005e80)="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", 0x2000, &(0x7f0000004d00)={&(0x7f0000004580)={0x50, 0xffffffffffffffda, 0x4, {0x7, 0x2d, 0x0, 0x20000000, 0x800, 0x5, 0x6, 0x6, 0x0, 0x0, 0x80, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 29.602317431s ago: executing program 7 (id=1995): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc881}, 0x4000) syz_usb_connect(0x4, 0x1b, &(0x7f0000000800)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 25.973419532s ago: executing program 7 (id=1999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 23.29495332s ago: executing program 0 (id=2004): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000001140)={0x400, 0x3, 0x1, 0x8}) keyctl$setperm(0x5, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001140), 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x931766f6319eed44) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xa7df}, &(0x7f00000000c0)=0x8) 22.039900859s ago: executing program 4 (id=2006): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) 21.198013506s ago: executing program 4 (id=2008): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.312612938s ago: executing program 4 (id=2009): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc881}, 0x4000) syz_usb_connect(0x4, 0x1b, &(0x7f0000000800)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 17.289983091s ago: executing program 8 (id=2012): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x4, 0x5, 0x4, 0x7f, 0x4230, 0x500000000000000, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.912931954s ago: executing program 8 (id=2013): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x73, 0x0, 0xee00}, {0x8, 0x9, 0x81, 0x3a4, 0x4, 0x8, 0x6, 0x1}, {0x0, 0xffffffffffff98c9, 0x3ff, 0xffff}, 0x0, 0x6e6bc0, 0x2, 0x0, 0x6, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0xa, @in=@multicast2, 0x3500, 0x2, 0x1, 0x6, 0x0, 0x1, 0x5}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000400)={0x3}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x0, {0x1, 0xf0, 0x2}, 0xfe}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, 0x0, 0x0, 0x700, 0x0) 15.826282806s ago: executing program 4 (id=2014): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r5}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) r9 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r9, 0x9, 0x4) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 12.467386892s ago: executing program 7 (id=2015): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000280)={&(0x7f0000000340)=[{0x5, 0x810, 0x2, &(0x7f00000001c0)="0520"}], 0x1}) 11.544168116s ago: executing program 7 (id=2016): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002040)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000100070000000900020073797a30000000071400078008001240fffffffe080013400800ffff050004000000000010000300686173683a69702c6d616300050005000a", @ANYRESOCT=r1, @ANYRES64=r0, @ANYRESHEX=r2], 0x5c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000280)="120000001200e7ef007b00000000004000a1", 0x12, 0x8044, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000080)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000000)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/185, 0xb9}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffff00}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @empty}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000002100)=ANY=[@ANYBLOB="4dd0b3123a65abb2578a67c2b45e12d8140000120000024e240400000000000000000000000000004b5550a661fc2b6fb163056b8ae5c63df0950a4755ebf66572ba4529936efac967b44eb3", @ANYRES32=r6, @ANYBLOB="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"], 0x14d8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1ce}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 10.973949484s ago: executing program 0 (id=2017): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) r4 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x2, 0x40000336}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 10.359967218s ago: executing program 3 (id=2018): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) 8.983128736s ago: executing program 3 (id=2019): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(0xffffffffffffffff, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) close_range(r0, 0xffffffffffffffff, 0x0) 8.111249677s ago: executing program 3 (id=2020): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x4}, &(0x7f0000000240)=0x8) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@nested_vmresume={0x130, 0x18, 0x1}, @nested_load_code={0x12e, 0x7f, {0x0, "3626f367460f017e4466baf80cb8e850ef83ef66bafc0ced48b84f3e0000000000000f23d00f21f835300000070f23f8b805000000b9ce9c00000f01d967646740fe8a870000002e66410f38816813364e0fc7a9c0000000c4c30949eea7410f01f8c4c2f0f219"}}], 0x97}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r4 = accept$alg(r3, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) readv(r4, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x2) sendmmsg$alg(r4, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="9c98d425afe56f214f063263de94ff9303", 0x11}], 0x1, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x3c, r8, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x41}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000140)={0x110001, 0x0, {[0x4, 0x2, 0x6, 0x9a47, 0x7, 0x80000000, 0x80, 0xe02]}}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3}) 5.834940965s ago: executing program 3 (id=2021): unshare(0xe000600) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) 4.976936077s ago: executing program 3 (id=2022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x464, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0xf, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x2, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4.556617588s ago: executing program 8 (id=2023): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) rmdir(0x0) dup(0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/135], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xfdff) 4.097204144s ago: executing program 4 (id=2024): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc881}, 0x4000) syz_usb_connect(0x4, 0x1b, &(0x7f0000000800)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.721534749s ago: executing program 3 (id=2025): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 3.271834413s ago: executing program 8 (id=2026): syz_usb_connect(0x5, 0x27, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000280)={&(0x7f0000000340)=[{0x5, 0x810, 0x2, &(0x7f00000001c0)="0520"}], 0x1}) 1.89694838s ago: executing program 8 (id=2027): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2}, 0x7f}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}], 0x1}, 0x3}], 0x2, 0x40012100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x0) 319.684502ms ago: executing program 4 (id=2028): syz_open_dev$video(0x0, 0x7, 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) 0s ago: executing program 8 (id=2029): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c010000100033060000000000000000ff020000000000000000000000000001ac14140000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000000003c000000fe88020000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000100000000000000fdffffffffffff0700"/129], 0x13c}}, 0x0) kernel console output (not intermixed with test programs): 0.576296][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.229813][ T29] audit: type=1326 audit(1772442784.360:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz.6.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feaf0b9c502 code=0x7ffc0000 [ 1241.259130][ T29] audit: type=1326 audit(1772442784.370:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz.6.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf0b9c799 code=0x7ffc0000 [ 1241.287707][ T85] bridge_slave_0: left allmulticast mode [ 1241.352643][ T29] audit: type=1326 audit(1772442784.370:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz.6.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf0b9c799 code=0x7ffc0000 [ 1241.579621][ T29] audit: type=1326 audit(1772442784.500:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz.6.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf0b9c799 code=0x7ffc0000 [ 1241.645441][ T29] audit: type=1326 audit(1772442784.500:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz.6.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feaf0b9c502 code=0x7ffc0000 [ 1241.910333][ T85] bridge_slave_0: left promiscuous mode [ 1241.958363][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.983288][ T29] audit: type=1326 audit(1772442784.500:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz.6.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7feaf0b9c597 code=0x7ffc0000 [ 1242.087458][ T29] audit: type=1326 audit(1772442784.570:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz.6.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7feaf0b59491 code=0x7ffc0000 [ 1242.199612][ T29] audit: type=1326 audit(1772442784.570:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz.6.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7feaf0b9d589 code=0x7ffc0000 [ 1242.263863][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 1243.137882][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.197417][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.225716][ T85] bond0 (unregistering): Released all slaves [ 1243.295331][T12781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.316464][T12781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.335059][T12781] bridge_slave_0: entered allmulticast mode [ 1243.389471][T12781] bridge_slave_0: entered promiscuous mode [ 1244.005606][T12781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.038436][T12781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.096091][T12781] bridge_slave_1: entered allmulticast mode [ 1244.148907][T12781] bridge_slave_1: entered promiscuous mode [ 1245.061005][T12781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.235484][T12781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.055806][T12781] team0: Port device team_slave_0 added [ 1246.197428][T12781] team0: Port device team_slave_1 added [ 1246.472168][ T85] hsr_slave_0: left promiscuous mode [ 1246.546104][ T85] hsr_slave_1: left promiscuous mode [ 1246.587158][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1246.662760][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1246.720606][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1246.766327][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1247.033765][ T85] veth1_macvtap: left promiscuous mode [ 1247.048880][ T85] veth0_macvtap: left promiscuous mode [ 1247.119923][ T85] veth1_vlan: left promiscuous mode [ 1247.136371][ T85] veth0_vlan: left promiscuous mode [ 1248.398372][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.405158][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.391715][ T85] team0 (unregistering): Port device team_slave_1 removed [ 1249.497942][ T85] team0 (unregistering): Port device team_slave_0 removed [ 1250.365350][T12781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.401748][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.607914][T12781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.975034][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1301'. [ 1251.007397][T12781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.041351][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1301'. [ 1251.094946][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.202189][T12781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.817089][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1301'. [ 1251.859780][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1301'. [ 1252.132578][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1307'. [ 1252.569881][ T5911] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1252.743163][T12781] hsr_slave_0: entered promiscuous mode [ 1252.796725][T12781] hsr_slave_1: entered promiscuous mode [ 1252.799018][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 1252.822799][T12781] debugfs: 'hsr0' already exists in 'hsr' [ 1252.828698][T12781] Cannot create hsr debugfs directory [ 1252.879858][ T6364] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.912720][ T5911] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1252.947146][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.968399][ T6364] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.006116][ T5911] usb 7-1: Product: syz [ 1253.029774][ T5911] usb 7-1: Manufacturer: syz [ 1253.047750][ T5911] usb 7-1: SerialNumber: syz [ 1253.049628][ T6364] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.106132][ T1151] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.141205][ T5911] usb 7-1: config 0 descriptor?? [ 1253.577651][ T5911] airspy 7-1:0.0: Board ID: 00 [ 1253.619721][ T5911] airspy 7-1:0.0: Firmware version: [ 1254.090035][ T795] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1254.310814][ T795] usb 10-1: Using ep0 maxpacket: 32 [ 1254.358547][ T795] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1254.394336][ T795] usb 10-1: config 0 has no interface number 0 [ 1254.396028][ T5911] airspy 7-1:0.0: usb_control_msg() failed -71 request 0f [ 1254.430899][ T795] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1254.473601][ T5911] airspy 7-1:0.0: Registered as swradio24 [ 1254.489809][ T795] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1254.499100][ T795] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.541390][ T795] usb 10-1: Product: syz [ 1254.545762][ T795] usb 10-1: Manufacturer: syz [ 1254.562760][ T795] usb 10-1: SerialNumber: syz [ 1254.574585][ T5911] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1254.683532][ T795] usb 10-1: config 0 descriptor?? [ 1254.704905][ T5911] usb 7-1: USB disconnect, device number 15 [ 1254.746285][T12963] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1255.007805][T12963] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1256.805722][T12781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1256.974191][T12781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1257.110599][T12781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1257.149517][T12781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1257.751385][ T5837] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1257.796298][ T795] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1257.879734][ T795] asix 10-1:0.188: probe with driver asix failed with error -71 [ 1257.969188][ T795] usb 10-1: USB disconnect, device number 31 [ 1257.975815][ T5837] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1258.039905][ T5837] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1258.099708][ T5837] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1258.209439][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.291374][T12990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1258.475970][ T5837] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1258.594778][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1320'. [ 1258.750513][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1320'. [ 1258.905374][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1320'. [ 1258.980845][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1320'. [ 1259.044819][T12990] dummy0: entered promiscuous mode [ 1259.125630][T12990] vlan2: entered promiscuous mode [ 1259.926339][T12781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.928743][ T5837] usb 5-1: USB disconnect, device number 32 [ 1260.345192][T12781] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.435843][ T660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.443200][ T660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.650133][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.657581][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.072591][T13007] netlink: 'syz.4.1323': attribute type 10 has an invalid length. [ 1261.333807][T13009] netlink: 'syz.6.1324': attribute type 2 has an invalid length. [ 1262.242448][T10336] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1262.469114][T10336] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.561461][T10336] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1262.648035][T10336] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1262.679631][T10336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.740615][T10336] usb 5-1: Product: syz [ 1262.768618][T10336] usb 5-1: Manufacturer: syz [ 1262.789830][T10336] usb 5-1: SerialNumber: syz [ 1262.879201][T10336] usb 5-1: config 0 descriptor?? [ 1263.148572][ T5837] usb 5-1: USB disconnect, device number 33 [ 1263.706500][T12781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.265039][T12781] veth0_vlan: entered promiscuous mode [ 1264.433414][T12781] veth1_vlan: entered promiscuous mode [ 1264.948995][T12781] veth0_macvtap: entered promiscuous mode [ 1265.088152][T12781] veth1_macvtap: entered promiscuous mode [ 1265.346547][T12781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.384877][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 1265.405482][ T29] audit: type=1326 audit(1772442809.330:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.8.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1265.560650][ T29] audit: type=1326 audit(1772442809.330:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.8.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1265.645618][T13030] loop5: detected capacity change from 0 to 7 [ 1265.694119][ T29] audit: type=1326 audit(1772442809.340:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.8.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1265.785906][ T29] audit: type=1326 audit(1772442809.340:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.8.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1265.834285][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1265.889623][ T29] audit: type=1326 audit(1772442809.340:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.8.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1265.931397][T13030] Dev loop5: unable to read RDB block 7 [ 1265.937152][T13030] loop5: unable to read partition table [ 1265.970727][ T29] audit: type=1326 audit(1772442809.340:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.8.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1266.043163][ T29] audit: type=1326 audit(1772442809.350:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.8.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1266.114459][T13030] loop5: partition table beyond EOD, truncated [ 1266.126054][T12781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.133208][ T29] audit: type=1326 audit(1772442809.350:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.8.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1266.170029][T13030] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1266.320123][ T29] audit: type=1326 audit(1772442809.350:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.8.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1266.482688][ T8053] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.499799][ T29] audit: type=1326 audit(1772442809.360:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.8.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1266.517848][ T8053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.679211][ T8053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.766136][ T8053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.571822][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 1267.701840][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 1267.850269][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 1267.867052][ T6364] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1267.876154][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 1267.986638][ T6364] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1268.106927][ T6364] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1268.155197][ T8053] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1269.574195][T13049] netlink: 'syz.4.1334': attribute type 10 has an invalid length. [ 1269.819745][T13052] netlink: 'syz.9.1335': attribute type 2 has an invalid length. [ 1275.759582][ T6364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.767597][ T6364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.324704][ T8041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.403374][ T8041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.481447][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1343'. [ 1276.491362][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1343'. [ 1276.504692][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1343'. [ 1276.517875][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1343'. [ 1278.292779][T13113] netlink: 'syz.1.1346': attribute type 2 has an invalid length. [ 1279.039827][ T5837] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1279.277248][ T5837] usb 7-1: Using ep0 maxpacket: 8 [ 1279.299530][ T5837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.376083][ T5837] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1279.449472][ T5837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1279.541204][ T5837] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1279.589627][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1279.597927][ T5837] usb 7-1: Product: syz [ 1279.671345][ T5837] usb 7-1: Manufacturer: syz [ 1279.676121][ T5837] usb 7-1: SerialNumber: syz [ 1279.775762][ T5837] usb 7-1: config 0 descriptor?? [ 1281.240702][ T5837] rc_core: IR keymap rc-imon-rsc not found [ 1281.306765][ T5837] Registered IR keymap rc-empty [ 1281.332810][ T5837] rc rc0: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1281.611187][ T5837] input: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input40 [ 1281.949398][ T5837] usb 7-1: USB disconnect, device number 16 [ 1282.650005][ T5837] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1282.869904][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 1282.939877][ T5837] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1282.948278][ T5837] usb 2-1: config 0 has no interface number 0 [ 1283.009599][ T5837] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1283.088136][ T5837] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1283.176913][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.219544][ T5837] usb 2-1: Product: syz [ 1283.223920][ T5837] usb 2-1: Manufacturer: syz [ 1283.252507][ T5837] usb 2-1: SerialNumber: syz [ 1283.318852][ T5837] usb 2-1: config 0 descriptor?? [ 1283.361716][T13138] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1283.748333][T13138] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1284.793017][T13147] binder: 13141:13147 ioctl 40045701 2000000002c0 returned -22 [ 1285.476788][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1357'. [ 1285.486649][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1357'. [ 1285.542385][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1357'. [ 1285.551821][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1357'. [ 1285.639993][ T1151] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.724312][ T1151] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.799640][ T8041] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.831051][ T8041] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1286.330569][ T5837] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 1286.391423][ T5837] asix 2-1:0.188: probe with driver asix failed with error -71 [ 1286.501950][ T5837] usb 2-1: USB disconnect, device number 10 [ 1287.961640][ T5837] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1288.161399][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 1288.204246][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.277635][ T5837] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1289.375112][T13194] loop4: detected capacity change from 0 to 512 [ 1289.846052][T13194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1289.970343][T13194] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1290.844335][T11243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1293.469603][ T5837] usb 2-1: string descriptor 0 read error: -32 [ 1293.476356][ T5837] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1293.587211][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.719755][ T5837] usb 2-1: can't set config #1, error -32 [ 1295.116250][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 1295.142100][T13005] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1295.152766][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'. [ 1295.349093][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 1295.449818][T13005] usb 9-1: Using ep0 maxpacket: 32 [ 1295.464189][T13005] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1295.503666][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'. [ 1295.688424][T13005] usb 9-1: config 0 has no interface number 0 [ 1295.751167][T13005] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1295.837683][T13005] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1295.888620][T13005] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.935047][T13005] usb 9-1: Product: syz [ 1295.979593][T13005] usb 9-1: Manufacturer: syz [ 1295.984464][T13005] usb 9-1: SerialNumber: syz [ 1296.041981][T13005] usb 9-1: config 0 descriptor?? [ 1296.092322][T13239] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1296.461450][T13239] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1299.030392][T13005] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 1299.133033][T13005] asix 9-1:0.188: probe with driver asix failed with error -71 [ 1299.234335][T13005] usb 9-1: USB disconnect, device number 25 [ 1299.292240][T13256] loop6: detected capacity change from 0 to 512 [ 1299.540217][T13256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1299.665426][T13256] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1300.706060][T13005] usb 2-1: USB disconnect, device number 11 [ 1300.934575][T11130] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1302.164686][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1383'. [ 1302.175214][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1383'. [ 1302.189036][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1383'. [ 1302.198402][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1383'. [ 1303.276411][T13299] tipc: Failed to obtain node identity [ 1303.282536][T13299] tipc: Enabling of bearer rejected, failed to enable media [ 1303.432715][T13005] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1303.659527][T13005] usb 2-1: Using ep0 maxpacket: 32 [ 1303.717789][T13005] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1303.790116][T13005] usb 2-1: config 0 has no interface number 0 [ 1303.796438][T13005] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1303.839822][ T5837] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1303.983234][T13005] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1304.036718][T13005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.078275][T13005] usb 2-1: Product: syz [ 1304.095838][ T5837] usb 7-1: Using ep0 maxpacket: 32 [ 1304.099447][T13005] usb 2-1: Manufacturer: syz [ 1304.137367][T13310] loop4: detected capacity change from 0 to 512 [ 1304.159576][T13005] usb 2-1: SerialNumber: syz [ 1304.164319][ T5837] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1304.164458][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.249552][ T5837] usb 7-1: Product: syz [ 1304.266388][ T5837] usb 7-1: Manufacturer: syz [ 1304.305613][ T5837] usb 7-1: SerialNumber: syz [ 1304.326293][T13005] usb 2-1: config 0 descriptor?? [ 1304.351938][T13298] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1304.378021][ T5837] usb 7-1: config 0 descriptor?? [ 1304.505686][T13310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1304.521069][T13310] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1304.615811][T13298] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1305.066105][ T5837] airspy 7-1:0.0: Board ID: 00 [ 1305.078705][ T5837] airspy 7-1:0.0: Firmware version: [ 1305.539549][T11243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1306.096353][ T5837] airspy 7-1:0.0: usb_control_msg() failed -71 request 10 [ 1306.145613][ T5837] airspy 7-1:0.0: Registered as swradio24 [ 1306.171567][ T5837] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1306.290354][ T5837] usb 7-1: USB disconnect, device number 17 [ 1307.221603][T13005] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 1307.306296][T13005] asix 2-1:0.188: probe with driver asix failed with error -71 [ 1307.451855][T13005] usb 2-1: USB disconnect, device number 12 [ 1308.360043][T13346] netlink: 'syz.9.1398': attribute type 30 has an invalid length. [ 1309.843133][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.860256][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.091881][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1403'. [ 1310.152454][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1403'. [ 1310.297914][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1403'. [ 1310.486194][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1403'. [ 1311.560264][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1311.839632][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1311.896610][ T9] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1311.937154][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.956426][ T9] usb 7-1: Product: syz [ 1311.989910][ T9] usb 7-1: Manufacturer: syz [ 1312.016001][ T9] usb 7-1: SerialNumber: syz [ 1312.070010][ T9] usb 7-1: config 0 descriptor?? [ 1312.085139][T11100] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1312.850264][T11100] usb 5-1: Using ep0 maxpacket: 32 [ 1312.876830][T11100] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.909540][T11100] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1312.945757][T11100] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1313.329533][T11100] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1313.343223][ T9] airspy 7-1:0.0: usb_control_msg() failed -110 request 09 [ 1313.343342][ T9] airspy 7-1:0.0: Could not detect board [ 1313.343719][ T9] airspy 7-1:0.0: probe with driver airspy failed with error -110 [ 1313.535403][T11100] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1313.567373][T11100] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.590988][T11100] usb 5-1: Product: syz [ 1313.595365][T11100] usb 5-1: Manufacturer: syz [ 1313.782218][T11100] usb 5-1: SerialNumber: syz [ 1313.878328][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1313.957963][T11100] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input41 [ 1314.344595][T11100] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1314.373899][T11100] (id 0x00) [ 1314.539035][ T8134] usb 7-1: USB disconnect, device number 18 [ 1314.969437][T11100] rc_core: IR keymap rc-imon-pad not found [ 1314.975433][T11100] Registered IR keymap rc-empty [ 1315.029685][T11100] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1315.092912][T11100] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1315.157042][T11100] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1315.227198][T11100] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input42 [ 1315.402970][T11100] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:34> initialized [ 1316.351041][ T9] usb 5-1: USB disconnect, device number 34 [ 1320.259760][ T9] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1320.497726][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1320.584891][ T9] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1320.662054][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.789399][ T9] usb 10-1: Product: syz [ 1320.822747][ T9] usb 10-1: Manufacturer: syz [ 1320.827670][ T9] usb 10-1: SerialNumber: syz [ 1320.900937][ T9] usb 10-1: config 0 descriptor?? [ 1321.441747][ T9] airspy 10-1:0.0: Board ID: 00 [ 1321.446950][ T9] airspy 10-1:0.0: Firmware version: [ 1322.471094][ T9] airspy 10-1:0.0: usb_control_msg() failed -71 request 10 [ 1322.600918][ T9] airspy 10-1:0.0: Registered as swradio24 [ 1322.607109][ T9] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1322.790574][ T9] usb 10-1: USB disconnect, device number 32 [ 1325.946222][T13473] xt_hashlimit: size too large, truncated to 1048576 [ 1329.640938][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1329.867035][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1329.920004][ T9] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1329.929197][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.014472][ T9] usb 7-1: Product: syz [ 1330.018916][ T9] usb 7-1: Manufacturer: syz [ 1330.069853][ T9] usb 7-1: SerialNumber: syz [ 1330.161705][ T9] usb 7-1: config 0 descriptor?? [ 1330.660838][ T9] airspy 7-1:0.0: Board ID: 00 [ 1330.665870][ T9] airspy 7-1:0.0: Firmware version: [ 1331.684451][ T9] airspy 7-1:0.0: usb_control_msg() failed -71 request 10 [ 1331.774144][ T9] airspy 7-1:0.0: Registered as swradio24 [ 1331.808498][ T9] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1331.898136][ T9] usb 7-1: USB disconnect, device number 19 [ 1333.460972][T11100] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 1333.945972][T11100] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1334.019635][T11100] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1334.177783][T13547] netlink: 'syz.6.1447': attribute type 4 has an invalid length. [ 1334.285026][T11100] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1334.479817][T11100] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1334.653530][T11100] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1334.752038][T11100] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1335.334394][T11100] usb 10-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1335.620161][T11100] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.791568][T11100] usb 10-1: Product: syz [ 1335.859461][T11100] usb 10-1: Manufacturer: syz [ 1335.874914][T11100] usb 10-1: SerialNumber: syz [ 1336.003181][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1336.056532][T11100] usb 10-1: config 0 descriptor?? [ 1336.109820][T13005] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1336.329730][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1336.357305][T13005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.434209][ T9] usb 7-1: config 0 has no interfaces? [ 1336.473641][T13005] usb 5-1: config 0 has no interfaces? [ 1336.517352][T13005] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1336.641512][T13005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.885733][T13005] usb 5-1: config 0 descriptor?? [ 1339.743022][T13005] usb 5-1: USB disconnect, device number 35 [ 1340.779752][ T8134] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1341.089567][ T8134] usb 9-1: Using ep0 maxpacket: 32 [ 1341.181573][T11100] usb 10-1: can't set config #0, error -110 [ 1341.210053][ T8134] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1341.287615][ T8134] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.359783][ T8134] usb 9-1: Product: syz [ 1341.409850][ T8134] usb 9-1: Manufacturer: syz [ 1341.414657][ T8134] usb 9-1: SerialNumber: syz [ 1341.717925][ T8134] usb 9-1: config 0 descriptor?? [ 1342.299115][ T8134] airspy 9-1:0.0: Board ID: 00 [ 1342.329480][ T8134] airspy 9-1:0.0: Firmware version: [ 1343.319803][ T8134] airspy 9-1:0.0: usb_control_msg() failed -71 request 10 [ 1343.375518][ T8134] airspy 9-1:0.0: Registered as swradio24 [ 1343.449847][ T8134] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1343.572922][ T8134] usb 9-1: USB disconnect, device number 26 [ 1346.631170][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1346.669732][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1346.723799][ T9] usb 7-1: config 0 descriptor?? [ 1346.829715][ T9] usb 7-1: can't set config #0, error -32 [ 1349.197449][T13005] usb 10-1: USB disconnect, device number 33 [ 1350.814717][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1350.840502][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1350.849853][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1350.862985][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1350.880379][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1351.121628][T13636] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1351.239966][T13636] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1351.641556][T13005] IPVS: starting estimator thread 0... [ 1351.812308][T12084] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1351.821584][T12084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1351.843238][T13641] IPVS: using max 240 ests per chain, 12000 per kthread [ 1351.854013][T12084] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1351.866798][T12084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1351.878865][T12084] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1352.702395][T12084] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1352.717413][T12084] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1352.735079][T12084] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1352.753502][T12084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1352.773324][T12084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1352.939750][T12084] Bluetooth: hci2: command tx timeout [ 1353.986595][T12084] Bluetooth: hci6: command tx timeout [ 1354.456019][T13630] chnl_net:caif_netlink_parms(): no params data found [ 1354.859695][T12084] Bluetooth: hci7: command tx timeout [ 1355.029456][T12084] Bluetooth: hci2: command tx timeout [ 1355.775232][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1355.807281][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.060106][T12084] Bluetooth: hci6: command tx timeout [ 1356.593160][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1356.667173][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.939557][T12084] Bluetooth: hci7: command tx timeout [ 1356.972652][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1357.013838][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.101592][T12084] Bluetooth: hci2: command tx timeout [ 1357.252416][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1357.299561][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.632478][T13639] chnl_net:caif_netlink_parms(): no params data found [ 1357.673935][T13005] usb 7-1: USB disconnect, device number 20 [ 1358.149746][T12084] Bluetooth: hci6: command tx timeout [ 1358.933048][T13630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.960447][T13630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.968495][T13630] bridge_slave_0: entered allmulticast mode [ 1359.021532][T12084] Bluetooth: hci7: command tx timeout [ 1359.054284][T13630] bridge_slave_0: entered promiscuous mode [ 1359.197215][T12084] Bluetooth: hci2: command tx timeout [ 1359.247056][T13651] chnl_net:caif_netlink_parms(): no params data found [ 1359.349053][T13630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.365339][T13630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.402030][T13630] bridge_slave_1: entered allmulticast mode [ 1359.424348][T13630] bridge_slave_1: entered promiscuous mode [ 1360.156738][T13630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1360.228526][T12084] Bluetooth: hci6: command tx timeout [ 1360.537932][ T13] bridge_slave_1: left allmulticast mode [ 1360.560404][ T13] bridge_slave_1: left promiscuous mode [ 1360.566957][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.630794][ T13] bridge_slave_0: left allmulticast mode [ 1360.636634][ T13] bridge_slave_0: left promiscuous mode [ 1360.647077][ T5835] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1360.680300][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.847305][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 1360.872798][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.889032][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1360.904050][ T5835] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1360.915160][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.990891][ T5835] usb 5-1: config 0 descriptor?? [ 1361.099680][T12084] Bluetooth: hci7: command tx timeout [ 1361.427351][ T5835] corsair 0003:1B1C:1B02.0006: unbalanced delimiter at end of report description [ 1361.492749][ T5835] corsair 0003:1B1C:1B02.0006: parse failed [ 1361.499822][ T5835] corsair 0003:1B1C:1B02.0006: probe with driver corsair failed with error -22 [ 1361.625205][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1361.661072][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1361.695062][ T13] bond0 (unregistering): Released all slaves [ 1361.714716][ T13] bond1 (unregistering): Released all slaves [ 1361.756561][T13630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.836471][T13639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.873354][T13639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.890849][T13639] bridge_slave_0: entered allmulticast mode [ 1361.901303][T13639] bridge_slave_0: entered promiscuous mode [ 1361.919138][T13715] netlink: 'syz.8.1480': attribute type 2 has an invalid length. [ 1361.975325][T13723] netlink: 'syz.4.1479': attribute type 1 has an invalid length. [ 1362.079684][T13639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.094904][T13639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.108937][T13639] bridge_slave_1: entered allmulticast mode [ 1362.128479][T13639] bridge_slave_1: entered promiscuous mode [ 1362.334149][T13630] team0: Port device team_slave_0 added [ 1362.516992][T13630] team0: Port device team_slave_1 added [ 1362.649789][ T9] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1362.774498][T13639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.843427][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1362.892083][ T9] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1362.914972][ T9] usb 9-1: config 0 has no interface number 0 [ 1362.921224][T13639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.939980][ T9] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1362.960059][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.987140][ T13] hsr_slave_0: left promiscuous mode [ 1363.003002][ T9] usb 9-1: Product: syz [ 1363.008384][ T13] hsr_slave_1: left promiscuous mode [ 1363.024875][ T9] usb 9-1: Manufacturer: syz [ 1363.033824][ T9] usb 9-1: SerialNumber: syz [ 1363.038912][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1363.056394][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1363.065758][ T9] usb 9-1: config 0 descriptor?? [ 1363.092349][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1363.118380][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1363.130782][ T9] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1363.158958][ T13] veth1_macvtap: left promiscuous mode [ 1363.165455][ T13] veth0_macvtap: left promiscuous mode [ 1363.178229][ T13] veth1_vlan: left promiscuous mode [ 1363.184625][ T13] veth0_vlan: left promiscuous mode [ 1363.536266][ T8134] usb 5-1: USB disconnect, device number 36 [ 1364.378486][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1364.378553][ T29] audit: type=1326 audit(1772442908.210:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13737 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409199c799 code=0x7ffc0000 [ 1364.532764][ T29] audit: type=1326 audit(1772442908.210:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13737 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409199c799 code=0x7ffc0000 [ 1364.659123][ T29] audit: type=1326 audit(1772442908.210:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13737 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f409199c799 code=0x7ffc0000 [ 1364.769605][ T29] audit: type=1326 audit(1772442908.210:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13737 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409199c799 code=0x7ffc0000 [ 1364.892249][ T29] audit: type=1326 audit(1772442908.220:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13737 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f409199c799 code=0x7ffc0000 [ 1365.069638][ T29] audit: type=1326 audit(1772442908.220:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13737 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409199c799 code=0x7ffc0000 [ 1365.097585][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1365.171675][ T29] audit: type=1326 audit(1772442908.220:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13737 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f409199c799 code=0x7ffc0000 [ 1365.237969][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1365.275246][ T29] audit: type=1326 audit(1772442908.220:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13737 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409199c799 code=0x7ffc0000 [ 1365.389526][ T29] audit: type=1326 audit(1772442908.220:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13737 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f409199c799 code=0x7ffc0000 [ 1365.455755][ T29] audit: type=1326 audit(1772442908.220:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13737 comm="syz.4.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409199c799 code=0x7ffc0000 [ 1365.575415][ T9] usb 9-1: qt2_attach - failed to power on unit: -71 [ 1365.620740][ T9] quatech2 9-1:0.51: probe with driver quatech2 failed with error -71 [ 1365.751573][ T9] usb 9-1: USB disconnect, device number 27 [ 1366.402531][T13630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.419615][T13630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.462349][T13630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.485972][T13630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.494253][T13630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.582414][T13630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.608598][T13651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.630418][T13651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.666769][T13651] bridge_slave_0: entered allmulticast mode [ 1366.702159][T13651] bridge_slave_0: entered promiscuous mode [ 1366.743959][T13651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.030571][T13651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.038341][T13651] bridge_slave_1: entered allmulticast mode [ 1367.082424][T13651] bridge_slave_1: entered promiscuous mode [ 1367.717682][T13651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.014375][T13651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.122446][T13639] team0: Port device team_slave_0 added [ 1368.536542][T13639] team0: Port device team_slave_1 added [ 1368.672511][T13630] hsr_slave_0: entered promiscuous mode [ 1368.733449][T13630] hsr_slave_1: entered promiscuous mode [ 1368.780577][T13630] debugfs: 'hsr0' already exists in 'hsr' [ 1368.831822][T13630] Cannot create hsr debugfs directory [ 1368.868031][T13651] team0: Port device team_slave_0 added [ 1369.049105][T13651] team0: Port device team_slave_1 added [ 1369.540064][T13639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.578226][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.659653][T13639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1370.013995][T13639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1370.049637][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1370.169625][T13639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1370.224942][T13651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1370.264019][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1370.433399][T13651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1370.632019][T13651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1370.639136][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1370.722070][T13651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1370.865734][ T8041] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1370.884562][ T8041] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.168145][ T8041] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1371.190025][ T8041] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.280151][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.286748][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.863765][T13639] hsr_slave_0: entered promiscuous mode [ 1371.930620][T13639] hsr_slave_1: entered promiscuous mode [ 1371.938145][T13639] debugfs: 'hsr0' already exists in 'hsr' [ 1371.999833][T13639] Cannot create hsr debugfs directory [ 1372.325271][ T8041] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1372.367151][ T8041] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.513417][T13651] hsr_slave_0: entered promiscuous mode [ 1372.542325][T13651] hsr_slave_1: entered promiscuous mode [ 1372.567018][T13651] debugfs: 'hsr0' already exists in 'hsr' [ 1372.573540][T13651] Cannot create hsr debugfs directory [ 1372.783737][ T8041] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1372.820109][ T8041] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.613778][T13788] netlink: 'syz.8.1488': attribute type 2 has an invalid length. [ 1374.771460][ T8041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.074225][ T8041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.048086][ T8041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.201961][ T8041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.661091][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1376.661169][ T29] audit: type=1326 audit(1772442920.560:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.8.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1376.729721][ T29] audit: type=1326 audit(1772442920.560:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.8.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1376.839188][ T29] audit: type=1326 audit(1772442920.570:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.8.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1376.979676][ T29] audit: type=1326 audit(1772442920.570:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.8.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1377.140234][ T29] audit: type=1326 audit(1772442920.570:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.8.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1377.242032][ T29] audit: type=1326 audit(1772442920.570:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.8.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1377.299783][ T29] audit: type=1326 audit(1772442920.570:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.8.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1377.400148][ T29] audit: type=1326 audit(1772442920.570:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.8.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1377.564576][ T29] audit: type=1326 audit(1772442920.570:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.8.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1377.689586][ T29] audit: type=1326 audit(1772442920.570:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.8.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385179c799 code=0x7ffc0000 [ 1377.863723][ T8041] bridge_slave_1: left allmulticast mode [ 1377.879779][ T8041] bridge_slave_1: left promiscuous mode [ 1377.886573][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.950436][ T8041] bridge_slave_0: left allmulticast mode [ 1377.956270][ T8041] bridge_slave_0: left promiscuous mode [ 1378.009923][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.072594][ T8041] bridge_slave_1: left allmulticast mode [ 1378.103782][ T8041] bridge_slave_1: left promiscuous mode [ 1378.144024][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.212394][ T8041] bridge_slave_0: left allmulticast mode [ 1378.233048][ T8041] bridge_slave_0: left promiscuous mode [ 1378.260282][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.364965][ T8041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.403637][ T8041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.449864][ T8041] bond0 (unregistering): Released all slaves [ 1380.025418][ T8041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1380.140021][ T8041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.234590][ T8041] bond0 (unregistering): Released all slaves [ 1380.588056][T13630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1380.852091][T13630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1381.350252][T13630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1381.650782][T13630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1382.809555][T13841] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1383.130192][ T8041] hsr_slave_0: left promiscuous mode [ 1383.148613][ T8041] hsr_slave_1: left promiscuous mode [ 1383.165316][ T8041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.190039][ T8041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.212498][ T8041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.229584][ T8041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1383.299433][ T8041] hsr_slave_0: left promiscuous mode [ 1383.319990][ T8041] hsr_slave_1: left promiscuous mode [ 1383.327796][ T8041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.369428][ T8041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.392277][ T8041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.409540][ T8041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1383.530052][ T8041] veth1_macvtap: left promiscuous mode [ 1383.554470][ T8041] veth0_macvtap: left promiscuous mode [ 1383.560731][ T8041] veth1_vlan: left promiscuous mode [ 1383.569664][ T8041] veth0_vlan: left promiscuous mode [ 1383.589598][ T8041] veth1_macvtap: left promiscuous mode [ 1383.595267][ T8041] veth0_macvtap: left promiscuous mode [ 1383.619664][ T8041] veth1_vlan: left promiscuous mode [ 1383.625121][ T8041] veth0_vlan: left promiscuous mode [ 1385.771312][ T8041] team0 (unregistering): Port device team_slave_1 removed [ 1385.880569][ T8041] team0 (unregistering): Port device team_slave_0 removed [ 1386.741728][ T8041] team0 (unregistering): Port device team_slave_1 removed [ 1386.784745][ T8041] team0 (unregistering): Port device team_slave_0 removed [ 1387.498739][T13651] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1387.699052][T13651] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1387.765487][T13651] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1387.948368][T13651] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1388.201668][T13639] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1388.342084][T13639] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1388.497972][T13639] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1388.668364][T13639] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1388.782270][T13630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.067481][T13630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.297787][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.305354][ T8049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.449198][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.456925][ T8049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.766559][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1501'. [ 1389.792749][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1501'. [ 1389.846941][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1501'. [ 1389.960643][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1501'. [ 1390.758934][T13651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.141856][T13651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1391.363963][T13639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.413645][ T8053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.421017][ T8053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.617558][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.625116][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.117108][T13639] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.385383][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.392901][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.673910][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.681459][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.056179][T13630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1393.841699][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1509'. [ 1393.870036][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1509'. [ 1393.928283][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1509'. [ 1393.960057][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1509'. [ 1394.318609][T13630] veth0_vlan: entered promiscuous mode [ 1394.570321][T13630] veth1_vlan: entered promiscuous mode [ 1395.144936][T13630] veth0_macvtap: entered promiscuous mode [ 1395.268807][T13630] veth1_macvtap: entered promiscuous mode [ 1395.714204][T13651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.816322][T13630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.952004][T13639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.066389][T13630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.273824][ T8049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.293801][ T8049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.434339][ T8049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.490605][ T8049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.108478][T13651] veth0_vlan: entered promiscuous mode [ 1399.487707][T13651] veth1_vlan: entered promiscuous mode [ 1400.310568][T13651] veth0_macvtap: entered promiscuous mode [ 1400.513039][T13651] veth1_macvtap: entered promiscuous mode [ 1400.805270][T13651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.882075][T13651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.974207][ T1097] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.984758][ T1097] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.024974][ T1097] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.043619][ T1097] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.633437][T13639] veth0_vlan: entered promiscuous mode [ 1401.804294][T13639] veth1_vlan: entered promiscuous mode [ 1402.610468][T13639] veth0_macvtap: entered promiscuous mode [ 1402.689990][T13639] veth1_macvtap: entered promiscuous mode [ 1403.367201][T13639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.594374][T13639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.759088][ T8041] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.796432][ T8041] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.885433][ T8041] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.997488][ T8041] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.111750][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1517'. [ 1404.152012][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1517'. [ 1404.246436][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1517'. [ 1404.323137][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1517'. [ 1406.029798][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.081374][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.421521][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.438196][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.391183][T14056] netlink: 'syz.4.1524': attribute type 2 has an invalid length. [ 1412.183537][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1412.192730][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1412.211953][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1412.249754][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1412.284692][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1412.855020][T12084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1412.874365][T12084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1412.884461][T12084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1412.901119][T12084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1412.920527][T12084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1414.381461][T12084] Bluetooth: hci0: command tx timeout [ 1415.106984][T12084] Bluetooth: hci1: command tx timeout [ 1416.103628][ T8049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.462111][T12084] Bluetooth: hci0: command tx timeout [ 1416.475271][ T8049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.574882][T14061] chnl_net:caif_netlink_parms(): no params data found [ 1417.170722][ T8049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.181726][T12084] Bluetooth: hci1: command tx timeout [ 1417.731012][ T8049] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.543832][T12084] Bluetooth: hci0: command tx timeout [ 1418.865439][T14066] chnl_net:caif_netlink_parms(): no params data found [ 1419.054183][ T8049] bridge_slave_1: left allmulticast mode [ 1419.069968][ T8049] bridge_slave_1: left promiscuous mode [ 1419.076231][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.206726][ T8049] bridge_slave_0: left allmulticast mode [ 1419.226852][ T8049] bridge_slave_0: left promiscuous mode [ 1419.256455][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.263523][T12084] Bluetooth: hci1: command tx timeout [ 1420.624821][T12084] Bluetooth: hci0: command tx timeout [ 1420.874753][ T8049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.945216][ T8049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.997009][ T8049] bond0 (unregistering): Released all slaves [ 1421.340313][T12084] Bluetooth: hci1: command tx timeout [ 1421.489513][ T8049] hsr_slave_0: left promiscuous mode [ 1421.529562][ T8049] hsr_slave_1: left promiscuous mode [ 1421.552639][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1421.619613][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.650922][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1421.658398][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.887494][ T8049] veth1_macvtap: left promiscuous mode [ 1421.919550][ T8049] veth0_macvtap: left promiscuous mode [ 1421.925340][ T8049] veth1_vlan: left promiscuous mode [ 1421.980146][ T8049] veth0_vlan: left promiscuous mode [ 1424.451729][ T8049] team0 (unregistering): Port device team_slave_1 removed [ 1424.557666][ T8049] team0 (unregistering): Port device team_slave_0 removed [ 1425.811360][T14061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.862040][T14061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.882780][T14061] bridge_slave_0: entered allmulticast mode [ 1425.917085][T14061] bridge_slave_0: entered promiscuous mode [ 1425.975563][T14061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.025030][T14061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.056957][T14061] bridge_slave_1: entered allmulticast mode [ 1426.116657][T14061] bridge_slave_1: entered promiscuous mode [ 1426.628371][T14061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1426.934826][T14061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1427.196851][ T8049] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.636405][ T8049] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.677879][T14061] team0: Port device team_slave_0 added [ 1427.807126][T14061] team0: Port device team_slave_1 added [ 1428.082791][ T8049] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.388964][T14066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.428740][T14066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.493354][T14066] bridge_slave_0: entered allmulticast mode [ 1428.556565][T14066] bridge_slave_0: entered promiscuous mode [ 1428.703485][ T8049] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.800519][T14061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.815352][T14061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.894754][T14061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.932356][T14066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.949076][T14066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.980031][T14066] bridge_slave_1: entered allmulticast mode [ 1428.997651][T14066] bridge_slave_1: entered promiscuous mode [ 1429.125268][T14061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1429.147448][T14061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1429.238196][T14061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1429.316288][T14193] tipc: Started in network mode [ 1429.341026][T14193] tipc: Node identity 6a129bc04b67, cluster identity 4711 [ 1429.348933][T14193] tipc: Enabled bearer , priority 0 [ 1429.409855][ T8134] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1429.463457][T14194] syzkaller0: entered promiscuous mode [ 1429.469153][T14194] syzkaller0: entered allmulticast mode [ 1429.510677][ T9] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1429.519682][T14192] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1429.597314][ T8134] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.625699][ T8134] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1429.663093][ T8134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.698407][T14066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1429.711989][ T8134] usb 1-1: config 0 descriptor?? [ 1429.752123][ T9] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1429.762045][T14066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.778564][ T8134] pwc: Askey VC010 type 2 USB webcam detected. [ 1429.794927][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1429.833660][ T9] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1429.877419][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1429.909929][ T9] usb 9-1: SerialNumber: syz [ 1430.156061][ T8134] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1430.176484][ T8134] pwc: recv_control_msg error -32 req 02 val 2700 [ 1430.203035][ T8134] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1430.227112][ T8134] pwc: recv_control_msg error -32 req 04 val 1000 [ 1430.256516][ T8134] pwc: recv_control_msg error -32 req 04 val 1300 [ 1430.275293][ T8134] pwc: recv_control_msg error -32 req 04 val 1400 [ 1430.275864][ T9] usb 9-1: invalid UAC_HEADER (v1) [ 1430.291738][ T8134] pwc: recv_control_msg error -32 req 02 val 2000 [ 1430.318518][ T8134] pwc: recv_control_msg error -32 req 02 val 2100 [ 1430.344817][ T8134] pwc: recv_control_msg error -32 req 04 val 1500 [ 1430.524040][T14066] team0: Port device team_slave_0 added [ 1430.576854][ T8134] pwc: recv_control_msg error -71 req 02 val 2400 [ 1430.588737][ T8134] pwc: recv_control_msg error -71 req 02 val 2600 [ 1430.601919][T14066] team0: Port device team_slave_1 added [ 1430.618963][ T8134] pwc: recv_control_msg error -71 req 02 val 2900 [ 1430.627827][ T8134] pwc: recv_control_msg error -71 req 02 val 2800 [ 1430.643141][ T8134] pwc: recv_control_msg error -71 req 04 val 1100 [ 1430.671188][ T8134] pwc: recv_control_msg error -71 req 04 val 1200 [ 1430.713651][ T8134] pwc: Registered as video103. [ 1430.743628][ T8134] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45 [ 1430.806263][ T5835] tipc: Node number set to 561355712 [ 1430.809924][ T8134] usb 1-1: USB disconnect, device number 12 [ 1430.954602][ T9] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1431.074545][ T9] usb 9-1: USB disconnect, device number 28 [ 1431.288787][T12106] udevd[12106]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1431.427197][T14192] tipc: Resetting bearer [ 1431.507513][T14192] tipc: Disabling bearer [ 1431.710351][T14061] hsr_slave_0: entered promiscuous mode [ 1431.749884][T14061] hsr_slave_1: entered promiscuous mode [ 1431.758537][T14061] debugfs: 'hsr0' already exists in 'hsr' [ 1431.816316][T14061] Cannot create hsr debugfs directory [ 1431.921776][ T8049] bridge_slave_1: left allmulticast mode [ 1431.943923][ T8049] bridge_slave_1: left promiscuous mode [ 1431.970388][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.006207][ T8049] bridge_slave_0: left allmulticast mode [ 1432.025795][ T8049] bridge_slave_0: left promiscuous mode [ 1432.040428][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.716355][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.728916][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.140494][ T8049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1433.183024][ T8049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1433.202946][ T8049] bond0 (unregistering): Released all slaves [ 1433.265804][T14066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1433.288216][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.384339][T14066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1433.495653][T14066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1433.506264][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1433.542852][T14066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.657988][ T8049] hsr_slave_0: left promiscuous mode [ 1433.673846][ T8049] hsr_slave_1: left promiscuous mode [ 1433.720523][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1433.758521][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.793323][ T8049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1433.814959][ T8049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.941263][ T8049] veth1_macvtap: left promiscuous mode [ 1433.954667][ T8049] veth0_macvtap: left promiscuous mode [ 1433.978054][ T8049] veth1_vlan: left promiscuous mode [ 1434.001257][ T8049] veth0_vlan: left promiscuous mode [ 1434.966908][ T8134] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1435.157363][T14220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1571'. [ 1435.178071][ T8134] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.223343][ T8134] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1435.243162][ T8134] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.301928][ T8134] usb 9-1: config 0 descriptor?? [ 1435.352131][ T8134] pwc: Askey VC010 type 2 USB webcam detected. [ 1435.459692][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1435.664997][ T8049] team0 (unregistering): Port device team_slave_1 removed [ 1435.713165][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1435.743025][ T8049] team0 (unregistering): Port device team_slave_0 removed [ 1435.745621][ T9] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1435.761682][ T8134] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1435.791603][ T8134] pwc: recv_control_msg error -32 req 02 val 2700 [ 1435.808899][ T9] usb 5-1: config 0 has no interface number 0 [ 1435.814569][ T8134] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1435.823531][ T9] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1435.831431][ T8134] pwc: recv_control_msg error -32 req 04 val 1000 [ 1435.861138][ T8134] pwc: recv_control_msg error -32 req 04 val 1300 [ 1435.883205][ T8134] pwc: recv_control_msg error -32 req 04 val 1400 [ 1435.896221][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1435.922582][ T8134] pwc: recv_control_msg error -32 req 02 val 2000 [ 1435.927257][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.936454][ T8134] pwc: recv_control_msg error -32 req 02 val 2100 [ 1435.955004][ T9] usb 5-1: Product: syz [ 1435.959873][ T8134] pwc: recv_control_msg error -32 req 04 val 1500 [ 1435.966726][ T9] usb 5-1: Manufacturer: syz [ 1435.975605][ T8134] pwc: recv_control_msg error -32 req 02 val 2500 [ 1435.997165][ T8134] pwc: recv_control_msg error -71 req 02 val 2400 [ 1436.049217][ T9] usb 5-1: SerialNumber: syz [ 1436.050431][ T8134] pwc: recv_control_msg error -71 req 02 val 2600 [ 1436.094972][ T9] usb 5-1: config 0 descriptor?? [ 1436.130807][T14222] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1436.141405][ T8134] pwc: recv_control_msg error -71 req 02 val 2900 [ 1436.150068][ T8134] pwc: recv_control_msg error -71 req 02 val 2800 [ 1436.170561][ T8134] pwc: recv_control_msg error -71 req 04 val 1100 [ 1436.193226][ T8134] pwc: recv_control_msg error -71 req 04 val 1200 [ 1436.259951][ T8134] pwc: Registered as video103. [ 1436.290427][ T8134] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input46 [ 1436.419664][ T8134] usb 9-1: USB disconnect, device number 29 [ 1436.431122][T14222] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1437.628377][T14066] hsr_slave_0: entered promiscuous mode [ 1437.668688][T14066] hsr_slave_1: entered promiscuous mode [ 1437.685620][T14066] debugfs: 'hsr0' already exists in 'hsr' [ 1437.696342][T14066] Cannot create hsr debugfs directory [ 1438.920604][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 1438.974110][ T9] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1439.045562][ T9] usb 5-1: USB disconnect, device number 37 [ 1440.196760][T14061] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1440.345963][T14061] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1440.454917][T14061] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1440.528384][T14061] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1443.721977][T14066] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1443.842417][T14066] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1443.949643][T14066] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1444.042645][T14066] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1444.836333][T14061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.014336][T14061] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.040118][T12995] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1445.212639][ T660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.220178][ T660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1445.270499][T12995] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.288018][ T660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.295660][ T660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1445.319575][T12995] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1445.340419][T12995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.377742][T12995] usb 1-1: config 0 descriptor?? [ 1445.440090][T12995] pwc: Askey VC010 type 2 USB webcam detected. [ 1445.856298][T12995] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1445.880659][T12995] pwc: recv_control_msg error -32 req 02 val 2700 [ 1445.892999][T12995] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1445.938399][T12995] pwc: recv_control_msg error -32 req 04 val 1000 [ 1445.957608][T12995] pwc: recv_control_msg error -32 req 04 val 1300 [ 1445.977627][T12995] pwc: recv_control_msg error -32 req 04 val 1400 [ 1445.994957][T12995] pwc: recv_control_msg error -32 req 02 val 2000 [ 1446.028166][T12995] pwc: recv_control_msg error -32 req 02 val 2100 [ 1446.058740][T12995] pwc: recv_control_msg error -32 req 04 val 1500 [ 1446.107319][T12995] pwc: recv_control_msg error -32 req 02 val 2500 [ 1446.164301][T12995] pwc: recv_control_msg error -71 req 02 val 2400 [ 1446.178269][T12995] pwc: recv_control_msg error -71 req 02 val 2600 [ 1446.210148][T12995] pwc: recv_control_msg error -71 req 02 val 2900 [ 1446.250969][T12995] pwc: recv_control_msg error -71 req 02 val 2800 [ 1446.305310][T12995] pwc: recv_control_msg error -71 req 04 val 1100 [ 1446.341244][T12995] pwc: recv_control_msg error -71 req 04 val 1200 [ 1446.392208][T12995] pwc: Registered as video103. [ 1446.489781][T12995] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input47 [ 1446.583868][T12995] usb 1-1: USB disconnect, device number 13 [ 1446.932582][T14066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.308833][T14066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.485559][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.493197][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.643604][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.651066][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.729573][ T5835] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1447.913533][ T5835] usb 5-1: Using ep0 maxpacket: 32 [ 1447.992945][ T5835] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1448.030196][ T5835] usb 5-1: config 0 has no interface number 0 [ 1448.036506][ T5835] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1448.135200][ T5835] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1448.180440][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.217257][ T5835] usb 5-1: Product: syz [ 1448.234228][ T5835] usb 5-1: Manufacturer: syz [ 1448.279041][ T5835] usb 5-1: SerialNumber: syz [ 1448.297750][ T5835] usb 5-1: config 0 descriptor?? [ 1448.365364][T14257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1448.653521][T14257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1449.040602][T14061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1452.341947][T14061] veth0_vlan: entered promiscuous mode [ 1452.546667][T14061] veth1_vlan: entered promiscuous mode [ 1452.618556][ T5835] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 1452.743578][ T5835] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1452.862122][ T5835] usb 5-1: USB disconnect, device number 38 [ 1453.161382][T14066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.381874][T14061] veth0_macvtap: entered promiscuous mode [ 1453.553651][T14061] veth1_macvtap: entered promiscuous mode [ 1453.818321][T14061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1453.889991][T12995] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1454.015058][T14061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1454.139041][T12995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.149038][ T8041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.179489][T12995] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1454.181802][ T8041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.188727][T12995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.261339][ T8041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.266820][T12995] usb 5-1: config 0 descriptor?? [ 1454.300034][ T8041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.387656][T12995] pwc: Askey VC010 type 2 USB webcam detected. [ 1454.784782][T12995] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1454.815635][T12995] pwc: recv_control_msg error -32 req 02 val 2700 [ 1454.895382][T12995] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1454.932249][T12995] pwc: recv_control_msg error -32 req 04 val 1000 [ 1454.973179][T12995] pwc: recv_control_msg error -32 req 04 val 1300 [ 1455.009937][T12995] pwc: recv_control_msg error -32 req 04 val 1400 [ 1455.084497][T12995] pwc: recv_control_msg error -32 req 02 val 2000 [ 1455.139580][T12995] pwc: recv_control_msg error -32 req 02 val 2100 [ 1455.238580][T12995] pwc: recv_control_msg error -32 req 04 val 1500 [ 1455.260956][T12995] pwc: recv_control_msg error -32 req 02 val 2500 [ 1455.282692][T12995] pwc: recv_control_msg error -71 req 02 val 2400 [ 1455.345329][T12995] pwc: recv_control_msg error -71 req 02 val 2600 [ 1455.377311][T12995] pwc: recv_control_msg error -71 req 02 val 2900 [ 1455.421451][T12995] pwc: recv_control_msg error -71 req 02 val 2800 [ 1455.453155][T12995] pwc: recv_control_msg error -71 req 04 val 1100 [ 1455.491362][T12995] pwc: recv_control_msg error -71 req 04 val 1200 [ 1455.561010][T12995] pwc: Registered as video103. [ 1455.636668][T12995] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input48 [ 1455.811463][T12995] usb 5-1: USB disconnect, device number 39 [ 1456.519050][T14066] veth0_vlan: entered promiscuous mode [ 1456.716107][T14066] veth1_vlan: entered promiscuous mode [ 1457.326820][T14066] veth0_macvtap: entered promiscuous mode [ 1458.077163][T14066] veth1_macvtap: entered promiscuous mode [ 1458.673927][T14066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.825886][T14066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.143094][ T85] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.197789][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.379092][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.512452][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.929531][T13005] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1462.130950][T13005] usb 5-1: Using ep0 maxpacket: 32 [ 1462.178594][T13005] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1462.217920][T13005] usb 5-1: config 0 has no interface number 0 [ 1462.268753][T13005] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1462.328172][T13005] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1462.412815][T13005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.479528][T13005] usb 5-1: Product: syz [ 1462.483896][T13005] usb 5-1: Manufacturer: syz [ 1462.529668][T13005] usb 5-1: SerialNumber: syz [ 1462.566363][T13005] usb 5-1: config 0 descriptor?? [ 1462.616840][T14326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1462.963093][T14326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1464.016836][T13005] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1464.063985][T13005] asix 5-1:0.188: probe with driver asix failed with error -32 [ 1465.396893][T10336] usb 5-1: USB disconnect, device number 40 [ 1465.742907][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.813502][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.970165][T14363] input: syz0 as /devices/virtual/input/input49 [ 1466.145827][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.209505][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.202870][ T660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.325533][ T660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.535089][T14414] input: syz0 as /devices/virtual/input/input50 [ 1473.566692][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1473.603584][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1473.613842][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1473.627069][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1473.639746][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1475.740387][T14416] Bluetooth: hci2: command 0x0406 tx timeout [ 1475.823140][ T49] Bluetooth: hci4: command tx timeout [ 1476.974350][T14415] chnl_net:caif_netlink_parms(): no params data found [ 1477.302608][T14044] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.900798][ T49] Bluetooth: hci4: command tx timeout [ 1478.011350][T14044] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.358618][T14044] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.676252][T14044] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.781466][T14044] bridge_slave_1: left allmulticast mode [ 1479.787234][T14044] bridge_slave_1: left promiscuous mode [ 1479.890247][T14044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.989546][ T49] Bluetooth: hci4: command tx timeout [ 1480.066701][T14044] bridge_slave_0: left allmulticast mode [ 1480.073129][T14044] bridge_slave_0: left promiscuous mode [ 1480.087280][T14044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.005794][T14044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1482.065549][ T49] Bluetooth: hci4: command tx timeout [ 1482.083358][T14044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1482.118275][T14044] bond0 (unregistering): Released all slaves [ 1482.578185][T14415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.618998][T14415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.650929][T14415] bridge_slave_0: entered allmulticast mode [ 1482.670198][T14415] bridge_slave_0: entered promiscuous mode [ 1482.696330][T14415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.706571][T14415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.736887][T14415] bridge_slave_1: entered allmulticast mode [ 1482.756259][T14415] bridge_slave_1: entered promiscuous mode [ 1483.166384][T14415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.376838][T14415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.944620][T14044] hsr_slave_0: left promiscuous mode [ 1483.997325][T14044] hsr_slave_1: left promiscuous mode [ 1484.036201][T14044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1484.067791][T14044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1484.147495][T14044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1484.180431][T14044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1484.343329][T14044] veth1_macvtap: left promiscuous mode [ 1484.349035][T14044] veth0_macvtap: left promiscuous mode [ 1484.397238][T14044] veth1_vlan: left promiscuous mode [ 1484.407487][T14044] veth0_vlan: left promiscuous mode [ 1485.756286][T14489] input: syz0 as /devices/virtual/input/input51 [ 1487.066323][T14044] team0 (unregistering): Port device team_slave_1 removed [ 1487.133455][T14044] team0 (unregistering): Port device team_slave_0 removed [ 1487.886712][T14415] team0: Port device team_slave_0 added [ 1487.943915][T14415] team0: Port device team_slave_1 added [ 1488.538355][T14415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.559838][T14415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.713581][T14415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.808942][T14415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.884639][T14415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1489.039605][T14415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1489.955927][T14415] hsr_slave_0: entered promiscuous mode [ 1489.984939][T14415] hsr_slave_1: entered promiscuous mode [ 1490.005984][T14415] debugfs: 'hsr0' already exists in 'hsr' [ 1490.037489][T14415] Cannot create hsr debugfs directory [ 1494.158533][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.165506][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.186996][T14415] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1494.297826][T14415] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1494.621073][T14415] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1494.912703][T14415] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1497.070036][T14415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.396005][T14415] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.594379][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.601781][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.697278][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.704778][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.614931][T14415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1505.454022][T14415] veth0_vlan: entered promiscuous mode [ 1505.585685][T14415] veth1_vlan: entered promiscuous mode [ 1506.138706][T14415] veth0_macvtap: entered promiscuous mode [ 1506.223878][T14415] veth1_macvtap: entered promiscuous mode [ 1506.588633][T14415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1506.789147][T14415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1506.967805][T14043] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.015979][T14043] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.131115][T14043] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.166847][T14043] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.360776][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.368699][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.727632][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.754479][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1522.030451][T14729] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1522.037959][T14729] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1525.724650][T14747] capability: warning: `syz.7.1672' uses deprecated v2 capabilities in a way that may be insecure [ 1527.601428][T12995] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1527.895293][T12995] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1527.960931][T12995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.992653][T12995] usb 8-1: Product: syz [ 1527.996933][T12995] usb 8-1: Manufacturer: syz [ 1528.019629][T12995] usb 8-1: SerialNumber: syz [ 1528.121988][T12995] usb 8-1: config 0 descriptor?? [ 1529.291324][T12995] usb 8-1: f81604_read: reg: 100f failed: -EPROTO [ 1529.437049][T12995] usb 8-1: f81604_read: reg: 200f failed: -EPROTO [ 1529.487075][T12995] usb 8-1: USB disconnect, device number 16 [ 1529.613105][T12995] usb 8-1: f81604_read: reg: 100f failed: -ENODEV [ 1529.767748][T12995] usb 8-1: f81604_read: reg: 200f failed: -ENODEV [ 1537.179723][T14416] Bluetooth: hci0: command 0x0406 tx timeout [ 1545.120093][T14870] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1545.155375][T14870] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1550.406657][T14912] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1550.460783][T14912] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1555.611339][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.617935][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1560.145815][T14969] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1560.245378][T14969] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1565.434071][T15006] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1565.500112][T15006] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1569.347292][T15031] binder: 15028:15031 ioctl c0306201 0 returned -14 [ 1571.052721][T15031] syz.8.1741 (15031): drop_caches: 2 [ 1575.482004][T15068] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1575.567294][T15068] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1577.168977][T15082] input: syz0 as /devices/virtual/input/input52 [ 1581.533726][T15125] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1581.600443][T15125] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1584.020081][ T5837] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1584.229574][ T5837] usb 8-1: Using ep0 maxpacket: 32 [ 1584.284721][ T5837] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1584.365663][ T5837] usb 8-1: config 0 has no interface number 0 [ 1584.423519][ T5837] usb 8-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1584.509781][ T5837] usb 8-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1584.595669][ T5837] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1584.605527][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.630753][ T5837] usb 8-1: Product: syz [ 1584.646367][ T5837] usb 8-1: Manufacturer: syz [ 1584.688138][ T5837] usb 8-1: SerialNumber: syz [ 1584.777572][ T5837] usb 8-1: config 0 descriptor?? [ 1584.885993][ T5837] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1585.091041][ T5837] usb 8-1: qt2_setup_urbs - submit read urb failed -90 [ 1585.117335][ T5837] quatech2 8-1:0.51: probe with driver quatech2 failed with error -90 [ 1585.308683][ T9] usb 8-1: USB disconnect, device number 17 [ 1585.903879][T15145] input: syz0 as /devices/virtual/input/input53 [ 1589.101436][T15167] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1589.869770][ T5837] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1589.906605][T15173] netlink: 'syz.4.1770': attribute type 8 has an invalid length. [ 1590.080354][ T5837] usb 9-1: Using ep0 maxpacket: 8 [ 1590.290755][ T5837] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.404998][ T5837] usb 9-1: config 0 has no interfaces? [ 1590.848149][ T5837] usb 9-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1590.941205][ T5837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.976750][ T5837] usb 9-1: Product: syz [ 1591.041806][ T5837] usb 9-1: Manufacturer: syz [ 1591.071403][ T5837] usb 9-1: SerialNumber: syz [ 1591.134912][ T5837] usb 9-1: config 0 descriptor?? [ 1594.169863][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1594.333925][T15206] input: syz0 as /devices/virtual/input/input54 [ 1594.369889][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1594.436919][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1594.488833][ T9] usb 1-1: config 0 has no interface number 0 [ 1594.524768][ T9] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1594.577880][ T9] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1594.670545][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1594.726128][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.781439][ T9] usb 1-1: Product: syz [ 1594.785867][ T9] usb 1-1: Manufacturer: syz [ 1594.840116][ T9] usb 1-1: SerialNumber: syz [ 1594.873904][ T9] usb 1-1: config 0 descriptor?? [ 1594.974876][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1595.166206][ T9] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 1595.188585][ T9] quatech2 1-1:0.51: probe with driver quatech2 failed with error -90 [ 1595.398028][ T9] usb 1-1: USB disconnect, device number 14 [ 1598.250743][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1786'. [ 1598.621286][T14416] Bluetooth: hci4: command 0x0406 tx timeout [ 1600.418866][ T5837] usb 9-1: USB disconnect, device number 30 [ 1601.385670][ T5911] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1601.654850][ T5911] usb 8-1: Using ep0 maxpacket: 32 [ 1601.685879][ T5911] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1601.715935][ T5911] usb 8-1: config 0 has no interface number 0 [ 1601.749542][ T5911] usb 8-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1601.793577][ T5911] usb 8-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1601.857235][ T5911] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1601.917614][ T5911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.959711][ T5911] usb 8-1: Product: syz [ 1601.964080][ T5911] usb 8-1: Manufacturer: syz [ 1602.024276][ T5911] usb 8-1: SerialNumber: syz [ 1602.065325][ T5911] usb 8-1: config 0 descriptor?? [ 1602.138627][ T5911] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1602.354017][ T5911] usb 8-1: qt2_setup_urbs - submit read urb failed -90 [ 1602.375221][ T5911] quatech2 8-1:0.51: probe with driver quatech2 failed with error -90 [ 1602.562289][ T5911] usb 8-1: USB disconnect, device number 18 [ 1608.022377][ T5911] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1608.253055][ T5911] usb 8-1: Using ep0 maxpacket: 32 [ 1608.294961][ T5911] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1608.332670][ T5911] usb 8-1: config 0 has no interface number 0 [ 1608.358560][ T5911] usb 8-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1608.408234][ T5911] usb 8-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1608.494247][ T5911] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1608.558697][ T5911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.582534][ T5911] usb 8-1: Product: syz [ 1608.595127][ T5911] usb 8-1: Manufacturer: syz [ 1608.608664][ T5911] usb 8-1: SerialNumber: syz [ 1608.645049][ T5911] usb 8-1: config 0 descriptor?? [ 1608.708150][ T5911] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1608.919869][ T5911] usb 8-1: qt2_setup_urbs - submit read urb failed -90 [ 1608.970265][ T5911] quatech2 8-1:0.51: probe with driver quatech2 failed with error -90 [ 1609.116321][ T5837] usb 8-1: USB disconnect, device number 19 [ 1610.318817][T15364] tipc: Enabled bearer , priority 10 [ 1610.745830][T15364] tipc: Enabling of bearer rejected, failed to enable media [ 1616.161058][T15436] syzkaller0: entered promiscuous mode [ 1616.213877][T15436] syzkaller0: entered allmulticast mode [ 1617.062652][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.069408][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.578255][T15455] netlink: 'syz.4.1837': attribute type 27 has an invalid length. [ 1625.191402][T15522] syzkaller0: entered promiscuous mode [ 1625.197132][T15522] syzkaller0: entered allmulticast mode [ 1632.362635][T15593] loop2: detected capacity change from 0 to 7 [ 1632.446663][T15593] loop2: p1 [ 1632.460015][T15593] loop2: partition table partially beyond EOD, truncated [ 1632.560531][T15593] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1632.989017][T14570] udevd[14570]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1633.912791][T10336] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1634.254259][T10336] usb 8-1: Using ep0 maxpacket: 8 [ 1634.290039][T10336] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1634.310780][T10336] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1634.438843][T10336] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1634.489819][T10336] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1634.542972][T10336] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1634.563053][T10336] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.999697][T10336] usb 8-1: GET_CAPABILITIES returned 2f [ 1635.072195][T10336] usbtmc 8-1:16.0: can't read capabilities [ 1635.203819][T10336] usb 8-1: USB disconnect, device number 20 [ 1644.010066][T10336] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1644.235283][T10336] usb 1-1: Using ep0 maxpacket: 8 [ 1644.256930][T10336] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1644.350141][T10336] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1644.399777][T10336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.408008][T10336] usb 1-1: Product: syz [ 1644.487160][T10336] usb 1-1: Manufacturer: syz [ 1644.509795][T10336] usb 1-1: SerialNumber: syz [ 1644.588565][T10336] usb 1-1: config 0 descriptor?? [ 1644.667167][T10336] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1645.467889][T10336] gspca_sonixj: reg_r err -32 [ 1645.480120][T10336] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 1647.255814][T10336] usb 1-1: USB disconnect, device number 15 [ 1647.939998][T10336] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1648.148491][T10336] usb 1-1: Using ep0 maxpacket: 32 [ 1648.196220][T10336] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1648.214695][T10336] usb 1-1: config 0 has no interface number 0 [ 1648.266843][T10336] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1648.306401][T10336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.332127][T10336] usb 1-1: Product: syz [ 1648.352124][T10336] usb 1-1: Manufacturer: syz [ 1648.387728][T10336] usb 1-1: SerialNumber: syz [ 1648.514364][T10336] usb 1-1: config 0 descriptor?? [ 1648.603447][T10336] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1648.829193][T10336] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1648.933683][T10336] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1649.189798][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1649.203449][T10336] usb 1-1: USB disconnect, device number 16 [ 1649.323463][T10336] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1649.414446][T10336] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1649.454336][T10336] quatech2 1-1:0.51: device disconnected [ 1650.269538][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1650.470621][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1650.500568][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1650.577066][ T9] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1650.648448][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1650.731949][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1650.788298][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.842122][ T9] usb 5-1: Product: syz [ 1650.864033][ T9] usb 5-1: Manufacturer: syz [ 1650.887318][ T9] usb 5-1: SerialNumber: syz [ 1650.927669][ T9] usb 5-1: config 0 descriptor?? [ 1651.502104][ T9] gs_usb 5-1:0.0: Configuring for 158 interfaces [ 1651.956736][ T9] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1652.029611][T15751] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1652.079178][ T9] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1652.220710][T15751] usb 9-1: Using ep0 maxpacket: 8 [ 1652.231201][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 1652.243420][T15751] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1652.306078][ T9] usb 5-1: USB disconnect, device number 41 [ 1652.331186][T15751] usb 9-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1652.373805][T15751] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.406232][T15751] usb 9-1: Product: syz [ 1652.416736][T15751] usb 9-1: Manufacturer: syz [ 1652.458894][T15751] usb 9-1: SerialNumber: syz [ 1652.505973][T15751] usb 9-1: config 0 descriptor?? [ 1652.595237][T15751] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1653.365367][T15751] gspca_sonixj: reg_r err -32 [ 1653.409199][T15751] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 1653.979928][T10336] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1654.214467][T10336] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1654.269843][T10336] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1654.304230][T10336] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.382652][T10336] usb 8-1: config 0 descriptor?? [ 1654.432469][T10336] cdc_ncm 8-1:0.0: CDC Union missing and no IAD found [ 1654.465027][T10336] cdc_ncm 8-1:0.0: bind() failure [ 1654.555574][T10336] cp210x 8-1:0.0: cp210x converter detected [ 1654.840135][T10336] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1654.955523][T10336] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1655.151270][T15772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.201375][T15772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.230791][T15751] usb 9-1: USB disconnect, device number 31 [ 1655.384192][T15772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.466074][T15772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.517750][ T9] usb 8-1: USB disconnect, device number 21 [ 1655.591910][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1655.758567][ T9] cp210x 8-1:0.0: device disconnected [ 1656.260196][T10336] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1656.492475][T10336] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.580617][T10336] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.631894][T10336] usb 9-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1656.685884][T10336] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.742186][T10336] usb 9-1: config 0 descriptor?? [ 1657.252544][T10336] logitech-djreceiver 0003:046D:C71F.0007: unknown main item tag 0x7 [ 1657.381945][T10336] logitech-djreceiver 0003:046D:C71F.0007: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.8-1/input0 [ 1657.620617][T10336] usb 9-1: USB disconnect, device number 32 [ 1657.960912][ T5837] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1658.185136][ T5837] usb 8-1: Using ep0 maxpacket: 32 [ 1658.251774][ T5837] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1658.282188][ T5837] usb 8-1: config 0 has no interface number 0 [ 1658.369499][ T5837] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1658.406680][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.459633][ T5837] usb 8-1: Product: syz [ 1658.471834][T15792] fido_id[15792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1658.502326][ T5837] usb 8-1: Manufacturer: syz [ 1658.507129][ T5837] usb 8-1: SerialNumber: syz [ 1658.634854][ T5837] usb 8-1: config 0 descriptor?? [ 1658.676576][ T5837] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1658.945140][ T5837] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1659.056768][ T5837] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1659.100800][T15691] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1659.381142][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1659.391028][ T5837] usb 8-1: USB disconnect, device number 22 [ 1659.395872][T15691] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1659.510128][T15691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.511104][ T5837] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1659.697947][ T5837] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1659.757807][T15691] usb 1-1: config 0 descriptor?? [ 1659.806729][ T5837] quatech2 8-1:0.51: device disconnected [ 1659.874222][T15691] cp210x 1-1:0.0: cp210x converter detected [ 1660.334196][T15691] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1660.551938][T15691] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1660.668008][T15691] usb 1-1: USB disconnect, device number 17 [ 1660.722699][T15691] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1660.885680][T15691] cp210x 1-1:0.0: device disconnected [ 1661.399563][ T5837] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1661.678477][ T5837] usb 9-1: Using ep0 maxpacket: 16 [ 1661.735161][ T5837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.809500][ T5837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.888177][ T5837] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1661.939458][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.001845][ T5837] usb 9-1: config 0 descriptor?? [ 1663.063659][ T5837] corsair 0003:1B1C:1B02.0008: unbalanced delimiter at end of report description [ 1663.193144][ T5837] corsair 0003:1B1C:1B02.0008: parse failed [ 1663.320105][ T5837] corsair 0003:1B1C:1B02.0008: probe with driver corsair failed with error -22 [ 1663.373617][T15836] input: syz0 as /devices/virtual/input/input55 [ 1663.469531][T10336] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1663.550064][T15839] netlink: 'syz.8.1925': attribute type 1 has an invalid length. [ 1663.621114][T15840] program syz.0.1929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1663.661478][T10336] usb 5-1: Using ep0 maxpacket: 8 [ 1663.692196][T10336] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1663.763116][T10336] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1663.786838][T10336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.800543][T10336] usb 5-1: Product: syz [ 1663.804904][T10336] usb 5-1: Manufacturer: syz [ 1663.811261][T10336] usb 5-1: SerialNumber: syz [ 1663.840446][T10336] usb 5-1: config 0 descriptor?? [ 1663.919510][T10336] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1664.684491][T10336] gspca_sonixj: reg_r err -32 [ 1664.712491][T10336] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 1665.111929][ T9] usb 9-1: USB disconnect, device number 33 [ 1665.849912][T10336] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1666.077836][T10336] usb 9-1: Using ep0 maxpacket: 32 [ 1666.134138][ T5837] usb 5-1: USB disconnect, device number 42 [ 1666.151432][T10336] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1666.203961][T10336] usb 9-1: config 0 has no interface number 0 [ 1666.293635][T10336] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1666.328340][T10336] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.400376][T10336] usb 9-1: Product: syz [ 1666.435665][T10336] usb 9-1: Manufacturer: syz [ 1666.461261][T10336] usb 9-1: SerialNumber: syz [ 1666.554873][T10336] usb 9-1: config 0 descriptor?? [ 1666.627277][T10336] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1666.883590][T10336] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1667.111931][T10336] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1667.259001][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1667.287980][T10336] usb 9-1: USB disconnect, device number 34 [ 1667.380928][T10336] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1667.621554][T10336] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1667.865136][T10336] quatech2 9-1:0.51: device disconnected [ 1671.452404][T15951] input: syz0 as /devices/virtual/input/input56 [ 1672.226630][T15956] syzkaller0: entered promiscuous mode [ 1672.272274][T15956] syzkaller0: entered allmulticast mode [ 1674.282653][T10336] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1674.487638][T10336] usb 4-1: Using ep0 maxpacket: 16 [ 1674.536048][T10336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.614891][T10336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.663478][T10336] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1674.734049][T10336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.808940][T10336] usb 4-1: config 0 descriptor?? [ 1675.267371][T10336] corsair 0003:1B1C:1B02.0009: unbalanced delimiter at end of report description [ 1675.336919][T10336] corsair 0003:1B1C:1B02.0009: parse failed [ 1675.365588][T10336] corsair 0003:1B1C:1B02.0009: probe with driver corsair failed with error -22 [ 1675.811320][T15982] netlink: 'syz.3.1944': attribute type 1 has an invalid length. [ 1677.429730][T10336] usb 4-1: USB disconnect, device number 11 [ 1678.532899][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.539844][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1680.623895][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1951'. [ 1681.059989][ T5837] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1681.340009][ T5837] usb 8-1: Using ep0 maxpacket: 32 [ 1681.358772][ T5837] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1681.389651][ T5837] usb 8-1: config 0 has no interface number 0 [ 1681.451766][ T5837] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1681.523726][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.590182][ T5837] usb 8-1: Product: syz [ 1681.595137][ T5837] usb 8-1: Manufacturer: syz [ 1681.664444][ T5837] usb 8-1: SerialNumber: syz [ 1681.702202][ T5837] usb 8-1: config 0 descriptor?? [ 1682.260266][ T5837] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1682.319964][ T5837] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1684.903665][ T5837] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1684.971130][ T5837] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 1685.066551][ T5837] usb 8-1: USB disconnect, device number 23 [ 1690.429650][T15691] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1690.654706][T15691] usb 8-1: Using ep0 maxpacket: 32 [ 1690.706794][T15691] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.755468][T15691] usb 8-1: config 0 has no interfaces? [ 1690.781683][T15691] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1690.827872][T15691] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.907968][T15691] usb 8-1: Product: syz [ 1691.099627][T15691] usb 8-1: Manufacturer: syz [ 1691.114098][T15691] usb 8-1: SerialNumber: syz [ 1691.697417][T15691] usb 8-1: config 0 descriptor?? [ 1693.316936][ T5837] usb 8-1: USB disconnect, device number 24 [ 1693.639988][T10336] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1693.851940][T10336] usb 9-1: Using ep0 maxpacket: 32 [ 1693.879078][T10336] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1693.914964][T10336] usb 9-1: config 0 has no interface number 0 [ 1693.981943][T10336] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1694.044451][T10336] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.082831][T10336] usb 9-1: Product: syz [ 1694.105934][T10336] usb 9-1: Manufacturer: syz [ 1694.160958][T10336] usb 9-1: SerialNumber: syz [ 1694.214498][T10336] usb 9-1: config 0 descriptor?? [ 1694.814970][T10336] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1694.905660][T10336] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1697.013007][T10336] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 1697.170149][T10336] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1697.262021][T10336] usb 9-1: USB disconnect, device number 35 [ 1701.689788][T10336] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1701.699658][T15691] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1701.926108][T10336] usb 9-1: Using ep0 maxpacket: 32 [ 1701.967206][T10336] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.005424][T15691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.029638][T10336] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1702.079458][T15691] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1702.095811][T10336] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1702.158598][T15691] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1702.178391][T10336] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.204940][T15691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1702.250747][T10336] usb 9-1: Product: syz [ 1702.255037][T10336] usb 9-1: Manufacturer: syz [ 1702.300162][T15691] usb 5-1: SerialNumber: syz [ 1702.307809][T10336] usb 9-1: SerialNumber: syz [ 1702.367955][T10336] usb 9-1: config 0 descriptor?? [ 1702.689012][T15691] usb 5-1: 0:2 : does not exist [ 1703.399686][T15691] usb 5-1: USB disconnect, device number 43 [ 1703.916404][T14570] udevd[14570]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1704.057494][T16142] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1979'. [ 1704.799784][T10336] usb 9-1: USB disconnect, device number 36 [ 1706.297876][T16172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1986'. [ 1706.508732][T16175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1986'. [ 1706.900334][T16175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1986'. [ 1709.635595][T16193] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1992'. [ 1718.167164][T16239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2003'. [ 1722.723331][T16285] syzkaller0: entered promiscuous mode [ 1722.754805][T16285] syzkaller0: entered allmulticast mode [ 1725.586464][T16300] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2013'. [ 1726.225041][T16301] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2013'. [ 1726.288249][T16301] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2013'. [ 1733.707858][T16329] netlink: 'syz.3.2020': attribute type 3 has an invalid length. [ 1736.298345][T16343] syzkaller0: entered promiscuous mode [ 1736.329126][T16343] syzkaller0: entered allmulticast mode [ 1739.918572][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1739.925501][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1741.225898][T16375] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2029'. [ 1741.253016][T15924] ===================================================== [ 1741.262010][T15924] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xe7b/0xc820 [ 1741.270758][T15924] n_tty_receive_buf_standard+0xe7b/0xc820 [ 1741.276840][T15924] n_tty_receive_buf_common+0x1a59/0x2610 [ 1741.282914][T15924] n_tty_receive_buf2+0x4c/0x60 [ 1741.288058][T15924] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1741.296184][T15924] tty_port_default_receive_buf+0xd7/0x1a0 [ 1741.302263][T15924] flush_to_ldisc+0x43e/0xe40 [ 1741.307090][T15924] process_scheduled_works+0xb21/0x1e30 [ 1741.312983][T15924] worker_thread+0xede/0x1580 [ 1741.317745][T15924] kthread+0x53f/0x600 [ 1741.322127][T15924] ret_from_fork+0x20f/0x910 [ 1741.326941][T15924] ret_from_fork_asm+0x1a/0x30 [ 1741.331947][T15924] [ 1741.334305][T15924] Uninit was stored to memory at: [ 1741.346302][T15924] n_tty_receive_buf_standard+0xe74/0xc820 [ 1741.354276][T15924] n_tty_receive_buf_common+0x1a59/0x2610 [ 1741.360377][T15924] n_tty_receive_buf2+0x4c/0x60 [ 1741.365412][T15924] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1741.370845][T15924] tty_port_default_receive_buf+0xd7/0x1a0 [ 1741.376811][T15924] flush_to_ldisc+0x43e/0xe40 [ 1741.381669][T15924] process_scheduled_works+0xb21/0x1e30 [ 1741.387354][T15924] worker_thread+0xede/0x1580 [ 1741.392213][T15924] kthread+0x53f/0x600 [ 1741.396375][T15924] ret_from_fork+0x20f/0x910 [ 1741.401702][T15924] ret_from_fork_asm+0x1a/0x30 [ 1741.406581][T15924] [ 1741.408966][T15924] Uninit was created at: [ 1741.413724][T15924] __kmalloc_noprof+0x486/0x1680 [ 1741.418805][T15924] __tty_buffer_request_room+0x3d4/0x7a0 [ 1741.424777][T15924] __tty_insert_flip_string_flags+0x157/0x6e0 [ 1741.431284][T15924] uart_insert_char+0x368/0x930 [ 1741.436423][T15924] serial8250_read_char+0x1ba/0x670 [ 1741.448735][T15924] serial8250_handle_irq+0x930/0x1110 [ 1741.456592][T15924] serial8250_default_handle_irq+0x116/0x370 [ 1741.462947][T15924] serial8250_interrupt+0xcb/0x420 [ 1741.468210][T15924] __handle_irq_event_percpu+0x13c/0xf90 [ 1741.474299][T15924] handle_irq_event+0xe0/0x2a0 [ 1741.479231][T15924] handle_edge_irq+0x2a9/0xb30 [ 1741.484370][T15924] __common_interrupt+0x9d/0x180 [ 1741.489871][T15924] common_interrupt+0x94/0xb0 [ 1741.494925][T15924] asm_common_interrupt+0x2b/0x40 [ 1741.500278][T15924] [ 1741.502735][T15924] CPU: 1 UID: 0 PID: 15924 Comm: kworker/u8:27 Tainted: G L syzkaller #0 PREEMPT(full) [ 1741.514244][T15924] Tainted: [L]=SOFTLOCKUP [ 1741.518658][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1741.528972][T15924] Workqueue: events_unbound flush_to_ldisc [ 1741.535153][T15924] ===================================================== [ 1741.549461][T15924] Disabling lock debugging due to kernel taint [ 1742.544474][T15924] Kernel panic - not syncing: kmsan.panic set ... [ 1742.551072][T15924] CPU: 1 UID: 0 PID: 15924 Comm: kworker/u8:27 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1742.562475][T15924] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1742.568195][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1742.578382][T15924] Workqueue: events_unbound flush_to_ldisc [ 1742.584415][T15924] Call Trace: [ 1742.587796][T15924] [ 1742.590813][T15924] __dump_stack+0x26/0x30 [ 1742.595254][T15924] dump_stack_lvl+0x50/0x1c0 [ 1742.599926][T15924] ? dump_stack+0x12/0x25 [ 1742.604361][T15924] dump_stack+0x1e/0x25 [ 1742.608690][T15924] vpanic+0x7b4/0x1430 [ 1742.612934][T15924] panic+0x15d/0x160 [ 1742.616950][T15924] kmsan_report+0x31a/0x320 [ 1742.621560][T15924] ? __msan_warning+0x1b/0x30 [ 1742.626329][T15924] ? n_tty_receive_buf_standard+0xe7b/0xc820 [ 1742.632390][T15924] ? n_tty_receive_buf_common+0x1a59/0x2610 [ 1742.638357][T15924] ? n_tty_receive_buf2+0x4c/0x60 [ 1742.643491][T15924] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 1742.648965][T15924] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1742.655049][T15924] ? flush_to_ldisc+0x43e/0xe40 [ 1742.659994][T15924] ? process_scheduled_works+0xb21/0x1e30 [ 1742.665820][T15924] ? worker_thread+0xede/0x1580 [ 1742.670816][T15924] ? kthread+0x53f/0x600 [ 1742.675208][T15924] ? ret_from_fork+0x20f/0x910 [ 1742.680057][T15924] ? ret_from_fork_asm+0x1a/0x30 [ 1742.685092][T15924] ? ret_from_fork_asm+0x1a/0x30 [ 1742.690130][T15924] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1742.696577][T15924] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1742.702739][T15924] ? kmsan_get_metadata+0x146/0x160 [ 1742.708047][T15924] ? kmsan_get_metadata+0xf1/0x160 [ 1742.713284][T15924] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1742.719714][T15924] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1742.725887][T15924] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1742.731869][T15924] ? __wake_up+0x29d/0x2f0 [ 1742.736451][T15924] ? kmsan_get_metadata+0xf1/0x160 [ 1742.741678][T15924] __msan_warning+0x1b/0x30 [ 1742.746277][T15924] n_tty_receive_buf_standard+0xe7b/0xc820 [ 1742.752198][T15924] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1742.758365][T15924] ? kmsan_get_metadata+0xf1/0x160 [ 1742.763587][T15924] ? advisor_target_scan_time_store+0x160/0x180 [ 1742.769963][T15924] n_tty_receive_buf_common+0x1a59/0x2610 [ 1742.775887][T15924] n_tty_receive_buf2+0x4c/0x60 [ 1742.780883][T15924] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1742.786535][T15924] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1742.791839][T15924] tty_port_default_receive_buf+0xd7/0x1a0 [ 1742.797757][T15924] flush_to_ldisc+0x43e/0xe40 [ 1742.802534][T15924] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1742.809053][T15924] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1742.814349][T15924] process_scheduled_works+0xb21/0x1e30 [ 1742.820024][T15924] worker_thread+0xede/0x1580 [ 1742.824813][T15924] kthread+0x53f/0x600 [ 1742.828976][T15924] ? __pfx_worker_thread+0x10/0x10 [ 1742.834195][T15924] ? __pfx_kthread+0x10/0x10 [ 1742.838873][T15924] ret_from_fork+0x20f/0x910 [ 1742.843599][T15924] ? __switch_to+0x51c/0x750 [ 1742.848375][T15924] ? __pfx_kthread+0x10/0x10 [ 1742.853062][T15924] ret_from_fork_asm+0x1a/0x30 [ 1742.857968][T15924] [ 1742.861342][T15924] Kernel Offset: disabled [ 1742.865714][T15924] Rebooting in 86400 seconds..