last executing test programs: 11.794081504s ago: executing program 2 (id=317): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000300)={0x0, 0xd73, 0x80, 0xfffffffd, 0x281}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, [@mark={0xc}]}, 0xcc}}, 0x0) sendmmsg$unix(r1, &(0x7f0000005740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x18, 0x1, 0x1, [r0, r0, r0]}}], 0x18, 0x20000800}}], 0x1, 0x20044014) 10.273835425s ago: executing program 2 (id=324): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) r3 = io_uring_setup(0x497a, &(0x7f00000001c0)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x4, 0x83, @tick, {0xfd}, {}, @note={0xfa}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}], 0x54) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r5, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x4840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000005d0706010100000000000000000600000900000000070000000800000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20008010) 9.787596945s ago: executing program 2 (id=328): syz_emit_ethernet(0x0, 0x0, 0x0) 9.626032417s ago: executing program 2 (id=329): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x8000, 0x3}}]}) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r11 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r11, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x7, 0x1, 0x0, 0x0, 0x1], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0x5], [0xffffffff]], '\x00', [{0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x97f, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x6}], '\x00', 0x4b4}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56549, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x80) 9.086379497s ago: executing program 3 (id=332): r0 = syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @remote}, 0x1c) syz_usb_connect$uac1(0x2, 0xa2, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x120, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5d2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xd, 0xe, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x640, 0x80, 0x6, 0x8}}]}}}]}}]}}, &(0x7f00000001c0)={0x2, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x9, 0xf9, 0x40, 0x7}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44d}}]}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x200, 0x28080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x9e3fa8e44e0a7631, 0x0) io_setup(0x226, &(0x7f0000000000)=0x0) io_submit(r4, 0x47f, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x2, r3, &(0x7f0000000a00)="1c73de19da4e24a4be5c3011d88efffbb251589a5bef61f451a747474f315938cc426a841b78d07b04cc6f2d276323ea48a6fd1c0ba66f5055239df5a21b234315694fd58fe32aeaa543e5fe08ccdf3e689caa8cedec8010f8bb8c59eaa1ecbf0f6f66afde88c010b3138095b6a0116af9c9011f03cc24e087286f2553198568c0aea639920383723c52ce2839b5dcb5ecf2eb92eeb24271354e1719e92347b792d0402fb04bbbf78fbebbf4b4832385561e1010dd612da55e8f738b13288b548d333c1d174ade527cafb3fc6576c16cd2e71f68286e28d5d8a17ef63d253bc56ce36b8d4aef6c0a34d8b9463ce4535f9c1700a5bf7b0f217ae63d3d377ddbcf7d4dd2f3f8f08de60c87b1e07487cae176e2f76ea307fa1693d84328c7f751d6d997555964813b103ea44b6e2e8bcc09609c25e5d1e0f174c44dfed19aa2fc6e6a60c589909709ff6b1a8e3c7462427d11469f81fa4d9a69ee39b8f3824889f3ee0c5838a22832193d9f42bfcff8f1990746da71c109c82f51aaffbc9b33b03fe4993f4bfb59461c5a2e13514072283677447793cfe1e7bf5b48416b80a7e18e22cb13e0370f7bb9bf952c4c5355dbb8fe0d912f88d743c536db4b306075c2dcd59d602e75bb159f71e4f11192631fc338203c136c9efc5f05bf94d2fee1a6ad20f2c7e834e5be49ebedde2d9735f46eb08c6537d24f3f06589a4597f2d9378f", 0x200, 0x200}]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000fdffffff000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000200b0e67b8af8ff00000000070000000000000007020000f8ffffffb703000008000000b70400000200000005000000820000009500"], &(0x7f0000000040)='GPL\x00', 0x5, 0x2d, &(0x7f0000000280)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$BLKRAGET(r2, 0x1263, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwrite64(r7, 0x0, 0x0, 0x5) write$P9_RCLUNK(r6, &(0x7f0000000080)={0x7, 0x79, 0x1}, 0x7) 8.310147697s ago: executing program 2 (id=335): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000080)={0x14, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8000}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4040) r0 = msgget$private(0x0, 0x480) msgsnd(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="01000000"], 0x401, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x3000) msgsnd(r0, &(0x7f0000000dc0)=ANY=[@ANYRES16], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x20000008}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(0xffffffffffffffff, &(0x7f0000000580)="1c0000001a009b8a140000003b9b301f000000000000000000000000ca0aeb0c08f83e4fb9747903f3f821303b8e067824d3180631880000000000000065759904b392c1cadcd0e258d3972d58ecc668777612b03b9cbc66cca25a381ac0b02bf7ffe1d1dd14ff58f9569d99", 0x3) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000040), 0x44) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$IOCTL_START_ACCEL_DEV(r7, 0x40096102, &(0x7f0000000000)={{&(0x7f0000000380)={'Accelerator0\x00', {}, {&(0x7f0000000100)={'GENERAL\x00', {&(0x7f00000002c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x49}, {&(0x7f0000000200)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"0741c78aa0affced865b5dcfad2056d4a995098033ac315806646de880ff5be90b3f92b9c7f4dbc3ff9c142a46d85f99eddd9aa030ce499e1945218a5aabba84"}}}}}}}}}, 0x48}) 7.991578711s ago: executing program 2 (id=336): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x0, 0x11}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 7.407323049s ago: executing program 32 (id=336): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x0, 0x11}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 6.077595115s ago: executing program 3 (id=342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f00000055c0)={&(0x7f0000005540)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}]}, 0x24}, 0x1, 0x0, 0x1000000, 0x10}, 0x800) 5.985398836s ago: executing program 3 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000a54f00000000000000100800010001"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 5.681227741s ago: executing program 3 (id=346): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000080)={0x14, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8000}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4040) r0 = msgget$private(0x0, 0x480) msgsnd(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="01000000"], 0x401, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x3000) msgsnd(r0, &(0x7f0000000dc0)=ANY=[@ANYRES16], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x20000008}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(0xffffffffffffffff, &(0x7f0000000580)="1c0000001a009b8a140000003b9b301f000000000000000000000000ca0aeb0c08f83e4fb9747903f3f821303b8e067824d3180631880000000000000065759904b392c1cadcd0e258d3972d58ecc668777612b03b9cbc66cca25a381ac0b02bf7ffe1d1dd14ff58f9569d99", 0x3) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000040), 0x44) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$IOCTL_START_ACCEL_DEV(r7, 0x40096102, &(0x7f0000000000)={{&(0x7f0000000380)={'Accelerator0\x00', {}, {&(0x7f0000000100)={'GENERAL\x00', {&(0x7f00000002c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x49}, {&(0x7f0000000200)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"0741c78aa0affced865b5dcfad2056d4a995098033ac315806646de880ff5be90b3f92b9c7f4dbc3ff9c142a46d85f99eddd9aa030ce499e1945218a5aabba84"}}}}}}}}}, 0x48}) 5.458926927s ago: executing program 1 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f000000fa80), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f000000fb80)={0x0, 0x0, &(0x7f000000fb40)={&(0x7f0000000040)=ANY=[@ANYBLOB="bbb55eeac7049c3996b7180891b2fe652eb3b306387c870d2302c57e6e75c2a6e68234699af52732dda6636fe87a13f05b882d3bd6e3a3e45a36f216e71bd554acbde45082a7658ca819f501e524a03d48014c43e4059854f43ce6a136804c270b266d7f06ef7abd676c346252f620a2f07993a70d9ebd41157d13f1503ccb1c47e80a543d81595dc7bc35f41302427f1e71d7e823b16cbac211580076cba4cad10566425fbf75ccd6856c883590f72659381fb8b3f673faac1e50c210fd", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf25010000000000000007410000004c0018fffffffb75647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40010) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0) 5.150417436s ago: executing program 1 (id=349): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendto(r1, &(0x7f0000000180)="6c5341811365fe0c04cdb2f4d42862ed3ec24f4e488f44e68b0e57efc53c6daa9d476815f1c6835f3c4c6788ebd4e9d6edab6d114e8ea77569c52cfbdc9f88c1d05088e8dd50b1e2cf2e460a05bc312218440504222f50648be834f35b105097056c65d566abeda6210d25964f692747de1414916ec1dc85c49cac9e05ea940aadb09893e70a0dc851e2a0ee479e2a9f33295222e9cca82e506f1f285991fb49a1b572daa3a06c855000fc0bb5e066347d29d3ad2840eb914968f8b98065b4ea64a67ef76a850b0c1d597418232fd52e824d28c06faea286", 0xd8, 0x8000, &(0x7f00000002c0)=@hci={0x1f, 0x0, 0x3}, 0x80) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x0, 0x80000) 4.743138272s ago: executing program 3 (id=350): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0x2e, 0x9, 0x70bd27, 0x1000000, {0x4}, [@nested={0x25, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d901574"]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3.745700649s ago: executing program 4 (id=351): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000002940)='./file0\x00') syz_emit_ethernet(0x28, &(0x7f0000001140)={@random="713878eb7dd1", @broadcast, @void, {@generic={0x4305, "6017ba806969b519b43f7dd25f0b4914c33849a8dd00db91680d"}}}, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') unshare(0x30010100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) fadvise64(r4, 0xffffffffffffffff, 0x0, 0x4) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 3.446159496s ago: executing program 4 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat64(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="eddbf57267a16d6f7bd01fc8"], 0x14}}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x42100, 0x108) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0xe400000e) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) 3.345471976s ago: executing program 0 (id=353): socket$kcm(0x10, 0x2, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000000c0), 0x40001, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, r3, 0x2, 0x2, 0x2}, 0x50) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ftruncate(r4, 0xc17a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x0, 0x10001, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x67, 0x0, 0x6, 0x2f, 0x0, @broadcast, @loopback}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.116500006s ago: executing program 1 (id=354): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) openat$sndtimer(0xffffffffffffff9c, &(0x7f000009de40), 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000240)={0x1000000, 0x2000000, 0x2, 0xffff, 0x3, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000200)={0x19980330}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) mkdir(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r4, &(0x7f00000000c0)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/212, 0xd4}], 0x1}, 0x33}], 0x1, 0x10040, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000003c0)={r8, 0xcb}, 0x8) r9 = gettid() r10 = epoll_create(0x3fc) r11 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000000)) kcmp$KCMP_EPOLL_TFD(r9, r9, 0x7, r1, 0x0) 2.069998376s ago: executing program 1 (id=355): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRES16=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000800000040a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f00000002c0)={0x0, 0x9, 0x0, 0x1}) io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r7, &(0x7f0000000180), 0x0, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x700, 0x1, 0xfffffdf2, 0x7, {{0x2b, 0x4, 0x1, 0x22, 0xac, 0x65, 0x0, 0x7f, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "ede262d3bc34248acdaf7b07ed01"}, @generic={0x82, 0x3, 'W'}, @cipso={0x86, 0x32, 0x1, [{0x5, 0x8, "2fb17c88d412"}, {0x7, 0x3, "cb"}, {0x0, 0x12, "98eb4f3c4aff7139fe247f2de1a0c5c9"}, {0x5, 0xf, "83c6fab66db66bbcaa492b5026"}]}, @cipso={0x86, 0x35, 0x1, [{0x0, 0x10, "b7496c8ec59ce538ca38be2a38e3"}, {0x3, 0x9, "858713337ce7c5"}, {0x0, 0x4, '>!'}, {0x1, 0x12, "eb960e2e1e2c4e39a1b7db8f01009f7d"}]}, @end, @generic={0x7, 0x2}, @noop, @rr={0x7, 0x13, 0xd6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@multicast2}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe4) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r9, 0xc0045543, &(0x7f0000000100)=0x10) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) 1.986608134s ago: executing program 0 (id=356): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4, 0x0, 0x500}, [@nested={0x9, 0x11, 0x0, 0x1, [@generic="31f9e05e2f"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.957310717s ago: executing program 4 (id=357): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000056068a000001020000040000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e2ffffff840000000600000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xfed, &(0x7f0000001840)=""/4077}, 0x94) 1.894303226s ago: executing program 3 (id=358): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) socket(0x21, 0x2, 0x10000000000002) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfff}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f00000005c0)='GPL\x00', 0x8, 0xd1, &(0x7f0000000600)=""/209, 0x40f00, 0x61}, 0x94) dup(r4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_usb_disconnect(r2) 1.722018542s ago: executing program 4 (id=359): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000080)={0x14, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8000}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4040) r0 = msgget$private(0x0, 0x480) msgsnd(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="01000000"], 0x401, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x3000) msgsnd(r0, &(0x7f0000000dc0)=ANY=[@ANYRES16], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x20000008}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(0xffffffffffffffff, &(0x7f0000000580)="1c0000001a009b8a140000003b9b301f000000000000000000000000ca0aeb0c08f83e4fb9747903f3f821303b8e067824d3180631880000000000000065759904b392c1cadcd0e258d3972d58ecc668777612b03b9cbc66cca25a381ac0b02bf7ffe1d1dd14ff58f9569d99", 0x3) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000040), 0x44) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$IOCTL_START_ACCEL_DEV(r7, 0x40096102, &(0x7f0000000000)={{&(0x7f0000000380)={'Accelerator0\x00', {}, {&(0x7f0000000100)={'GENERAL\x00', {&(0x7f00000002c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x49}, {&(0x7f0000000200)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"0741c78aa0affced865b5dcfad2056d4a995098033ac315806646de880ff5be90b3f92b9c7f4dbc3ff9c142a46d85f99eddd9aa030ce499e1945218a5aabba84"}}}}}}}}}, 0x48}) 1.543888525s ago: executing program 0 (id=360): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x18, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r1, 0x4d) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x28}, 0x20) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, 0x0) 1.182228204s ago: executing program 0 (id=361): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x6) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0xffffffffffffffff, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) (async, rerun: 32) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/157, 0x9d}}, 0x10) (async) io_setup(0x7, &(0x7f0000000280)=0x0) (async, rerun: 64) r7 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) (rerun: 64) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000001c0)='7', 0x1, 0x4}]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r7}, 0x4) (async) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) socket$inet(0x2, 0x3, 0x4) 980.158324ms ago: executing program 1 (id=362): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xefffffff, 0x1120}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 979.398212ms ago: executing program 0 (id=363): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendto(r1, &(0x7f0000000180)="6c5341811365fe0c04cdb2f4d42862ed3ec24f4e488f44e68b0e57efc53c6daa9d476815f1c6835f3c4c6788ebd4e9d6edab6d114e8ea77569c52cfbdc9f88c1d05088e8dd50b1e2cf2e460a05bc312218440504222f50648be834f35b105097056c65d566abeda6210d25964f692747de1414916ec1dc85c49cac9e05ea940aadb09893e70a0dc851e2a0ee479e2a9f33295222e9cca82e506f1f285991fb49a1b572daa3a06c855000fc0bb5e066347d29d3ad2840eb914968f8b98065b4ea64a67ef76a850b0c1d597418232fd52e824d28c06faea286", 0xd8, 0x8000, &(0x7f00000002c0)=@hci={0x1f, 0x0, 0x3}, 0x80) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x0, 0x80000) 758.520064ms ago: executing program 1 (id=364): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x80, 0x5, 0xbfdbfffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000660e89000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=@newtaction={0x4850, 0x30, 0x1, 0x0, 0x4, {}, [{0x9c, 0x1, [@m_csum={0x98, 0x6, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x373a, 0x8001, 0x2, 0x4bc3, 0x4}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x6, 0x4, 0x2}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x3a1, 0x2, 0x8, 0xf2e1}, 0x75}}]}, {0x15, 0x6, "3f2668ce6f7025e6bf46f9f8d809080287"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x2c8, 0x1, [@m_gact={0x168, 0x1, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x22bb, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x7, 0x10000000, 0x5, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x766, 0xfffffffffffffff0}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x7ff, 0x5, 0x4, 0x5}}]}, {0xf1, 0x6, "fd8a4f26441695a0e2b035b563278aed0e31d2f5dad2d367584235169ff3d44523722a875caaa282787ff098e243fcfc40b8ab346d8cb4adaf27b6700a8b556a2ca7313eaf5650e9808f3c50564314b6f3fb2e22ee9ce963428d52122426651c596b82d3e49d7af844c9344c8ecca07b6c13178d02ea11ce1391120f3f23d3336a65c4e40cc7d28b8596d7385cfd078d8277bc815659132ad25e5ce4348a34ca6d53cbb0d191f9f08d58a4e87a1111c34e287f723b553a4bb12ec38888ab2f33a1b096e0123cd97c2c54a18b63768ac2b026c6b3352ba864f1df6b26331ba98907aefc9754ab88fb3e6ce62739"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x15c, 0xd, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0xffff, 0xffffffffffffffff, 0x4b, 0x2}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0xffffffffffffffff, 0x6, 0xf8}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6402, 0x99e, 0x6, 0xa79b, 0x3}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x6, 0x81}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x7, 0x2, 0x1}, 0x31}}]}, {0xa4, 0x6, "bbe2c79c8c6c5577e53472fcace36ce0249f221b60e57f7ace596dc4e613b527183e9836318ef02e2e503012e2a52865d576f4b6fe51b7f7f279f99269c61eddd0db4430873943d73d4d1d9e1e76466142d1642c1a724cbe6ca5ab43bb8e51d63eb396ace578d59d5df8fcee6f5dcbaf1aec87a62e07609359c898adc9e2d63c78869619e1b8decd94988bbed4571c1752fd878a62560b63eeafb87b7a23866c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x16f4, 0x1, [@m_vlan={0x178, 0x18, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfffffff4, 0x8, 0x8}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x10e}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10, 0x6, 0x4, 0x10000, 0x8}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x562}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1e6}]}, {0xe4, 0x6, "276d28f50790d47f642b2993d8c6ec459600d3d5074135e1b741848432fe7aa6a38b4aff5ca6e6a2d566ae3e61db7d15d26f5d6b188216ff6af3913d9cf1544eeebe57678d9720f6d469ddc8e4f4bbc7ce3c25321175082d3a2aed22442aee4d971acc3d1afea586d677167a00088a72354e6a29375d162bf4ecdc0ad7723246145087f921def94582c4cfb5b9c7448b0430bda5c165c80616e357775f7296c3bd505a4a4e253017da8b3e8e623e90a598dc5aca88c1310b47f19400098fcd48bf255adfe1cfd85b3c6926d75a89a35ceea7c06a91735cd4d7e834429ed9233e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xb0, 0x18, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xfff, 0x0, 0x1, 0x3}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa53, 0x4, 0x0, 0x9}, 0x5}}]}, {0x45, 0x6, "afdbba679bb03090bb94a7096cb4400f890ba0820d9e0cf0bbdff7eddecb9722ea11b488b9fcb20753e3490506193040ae28c9ea61aeaed500431916f4f8898567"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xd0, 0x12, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6341db7efe1d371a}}, @TCA_IFE_TYPE={0x6, 0x5, 0x1000}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x63, 0x6, "52d0a4289236078b293e769bfea75821a2c3a1cbbc92df4bca6a5e5bca97dd785df103c740f22d32d0e5128f506f5bab5f774e953d5beb6fe2fc5df5bbb996f4f1c0b288a7a4fa835443e24c93690a6b67533922a7a422f24f71f242039a8e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x103c, 0x7, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x1004, 0x6, "7cbd5f585e031a2be5b4bd0612cf450c079e59d5ba7ae7ed254210440ab696143d9b61a9ba1c67a552eb7fe8363bf96c78cbf19d6c6a625fef8a216bb2fff94a91ca8bf59a6668f94272b869dfe6bfba1c5865599e7ef81f2948066847667e7c81a571a417cf4872a1c5e7ff26868439c883762314ca16661384ecb38f2a7070ec5f9f764e2bda0952d4ab51f4a931ee0325bea79c5493126e961d95d3a72e1da4a0b30f07206ebf3b374fb9985bda162337fec2bd20a11d752ba62b9a52c64bddee31cc3ae889b203b3698b2e66a4468568bef26886a24e703f6e2b42d15f1cadb78e3eb4ef282939a1dcc0b8aae99e716382b0122e4a7e1044f9fdf999c5f8da3f386420eb39cc52b3b2cfeb9bfae1c86006655f78345bda0d7da768c17e1a0c4bb76fcab3036d55eeeddb93691de423c11f97af648edc2d831f6ab42f69286fb0be591ce7eb1c7c32dcd22a5b3d9cac44a3b898afd11caebf12525f80c426b6dce8eb54af9a63bc3c0ca7aed3aaf8ff301a0b48ee6c7a2a45701ec8d5598fc59de9cba21c414015e7732d5d7e72ecd7b0e12b520ae0ea842b0df93454fb02922cb7f5ae287dd1890994c4eef449f1bf705d46ee52ebd81d9702e69610b9cb19eb78f0efeff08730057c168645b23e99732c8cb7aacb8610f96f2222235764f80d0f63edebdae630bdd3d736ae39b255d05e3260a73e9a1b7ca4774fc1820f35bdcca91eaa0c1e66613cdf16060ba7f0d7541108403b55213b3f0dfb30e1ac45c22af240cd41a3fe64b45c6439cd99088fa5d0f0b33ec98fae0ce793a11eedbfca6699a01eebc735a86f1a23bc4dc96ae6f2defbc6508d1ac3647a1a04cfb9590b9d01bcb2dbb6d16bc62522a58dccc510b2a3653c9dc0a5cc80175e44e7e89461dad528b093be66aa2da75ac142d15ab63a5536057c31cb3753252c57c903b762a57c91ba03225d3d94ece0f40f185bf7865673a647a71a8f71db2b6c71cb973015751537c58d9d0596286d1b4a814e900f8cbb0555030b1cb80c41f7b69f9d39e97bb892b31d5abc4b63cb54115a89b7b5acb880fe497c4d52a67e64ccdd5209df6652cf667ad26b363cd229d7a647347f89c9bfc7814a0c8cd732dd51e99622a38ff992f33f088ac76e739f76671503b59278e31bb1e26c90f72dc4567b5096ce5abf18dc776a6b6ec4917d3f8f50427a78c7ea9cfb0b2fa668b4e8b52709a24b12ca3492a341cd934f1615e6971a5f70fd7af10eb5c44e132ee7a1bf99177d7f7c5769a9f3ae93a714807c280ba9b4f88939b68cc1418514e1d6c4eab2811910563d2121f864a7097d806af375485a1b3e2b63d7b1e26f90f46da51ac5f444e3da060d0a04e3263620afd66570fcb13b5d6382b2efd20e235efec6aa0f1e385bb2a9fc466beb7e49168bb3e38e507f653b85997d384868b680b8c756a48641ac63d4355287521012419bc8568c4db04fceb83da78411d452cc4d8bf4f191bf256f78ba46f786c722121de41beb5cc2ae5b39c418033977ace992cb046e752467a27e53c94b6fb543c6a56676ab4cafc82f01feb3f8f40fe2bd86148d744d1dec9822d309035d480fbc6ec08fa5fe5db353520689b3de81da8e80f7c22b5a4452b1cabb940c1978aa7767b43ac729bd4d6f2f953339a1ba7b3bb59f69e8d50f4d98a7247dc269b0a0389e238e549874f70b1c8eaf3cbbc822238250244d81e65cd8f10619a81ca895b299fb72e0d5a6e74917a3ceafd1643e956597befad1d686630df741189affb57e20419705c6588d91b7252e12a23fa4766d54b79bf0f6fbf7f689bbda75dc559674c7e0b29c0c98200a1cdd6c16c4ec3dad0c93edbc622565067dcb4489a7fdbfe8980c4381a04ce075cebe51133fd36309d483b925463e67eeede273bf84db783da4268e252ad11f227c9c4599c15cc22b7244c9b52c161bfe687886632a4cb5e75ebad4a9cca6b558ea55530fe920429ac0aa25c7a2ecade64645913ea5ef4e2ef65fd72f0fd7ca94e66d7679a96fd83cbe308b5ef7180c880c0d9ea4107f0db9f42fba2a4f881583442088f210195520534a97f7e386c240af31f00a4e18383968e83eadf2e3d6c9ffbbddf630d67c5359958a5d55233eb2c0967c427878bf118da267aeca5fc0199ab8829eafe18b430bf3181ed6afcbb3d81e92b9abbc25e060c9fff60c34275acd3a9d4a05d0c33c8f8cd4f67fe79e2e1420c0934de49c14137c8f9ff7c088e8b86d9d53ad06fb8592a72b7cdc52f6ddbc39aad05d555e17ed62d3388a82c3006b252adb750593409448acd0d28da6557503ee56ab02f78b81fe917905face59a5ec895ab5f79a41db4f4c94ce3c1f709ee2dc1a32fb3d27b5ac07e876fd2572ff497f09eb8f82193364d4fc96b1551d5d32dc2cbd6f153eb26a7c3b2726190b3c0401ad87ce062146697cd716e8abe88c477dd102cd8816aff849f5ab37d9c8ca631072e4dd9830fb934282ffa3ae915d0cd556a1a83e318e21be47aac453d3e5f93837beb42d5e7a767877fc6307e5965c22333ee77fafd1608b8d16e2cc5a6215d95bdccf3f7505ae4be552e5252d74755746dfb86abeae6f627bdec8fe42fcc4f125d2e24934d20d4e66255bcd7f29d1089c082b273c1c976d840a6e0a1c0bcedce974d4c3b2ce8853ca3482784cbc469a07310c7a5a2047e4b968f398c232e219b343e9b0031e6fbbf49e6b004c24ea75315775df324e1fd0ece1aeb1ee2ef0f61bed960511aa6ed14d26deeb1254730804e464cd263fc28afecdb5d4d2b9a2cb9e887f9b88827c1fa85143248183c2682bfa3cb564dc1b13497ecc40953ee05767f1446748c0d5c0ebe1581e1f0e5ba1b661330c8f8fd3c3515ac93794fed4857ec679e4fc62197fb560b74d60e0839e48b7cb6e228e34a1c80011e64c051f4f324c9308d2fa68576f13d8227c8b531f28741408a75d435b3dc928ae24e9526c871c5c0bc35338ccb79f1c7abfd979076a9d91f3d7d73abc18c6e6756738ac6fb77e936e323035b54433d521e33a9e8787a69ab5237cce7f60fe5bdc46875a90a0d8f44809e7f53d64a10621ace2f3766797dffdc47fae0eb3b42753b9bac23d223853fa71d9799bad3fd78c6d28d9c054714cadf3747ea75ccfeadf57387f4e7e0977a4626eec925d8c730a49d5a8f876a0800b1d8714f624a3209dca6e0d1c1e22947e91b328b0e1859e3dde781afa8a622f6b1cf4c7bd37e907cb1d688d648d45e44c3ff463cf5902afe694c7db0043eedbb89766df55a6dc79c28964e2312516bdecb48c0a0cb8b0abfa739483f15100d4a9b8cb435d02a7eca1ecdf9cc504050d45033ba0c65ae177ba0c31bfa80e2f5a8e99e41180777cf3f060b911b1c51fcbf06d4e4fb2b87ccdcb0bc45adfad9ffd434092bcc2cc26002f84f813fa6457e50fbad1c7b4d145238950bbdfa0705842b2f77949711b2ca0481e71d3184849e113cfd1ce14340e82a77d8ac25f454e5f90170847fda51b4af3973b04c2352834ff7c7cc749dbde48369b9dd3867f8a83d2c5a953a6fa5024363d2cef5b3c605183298c4209958fa36cc1b4e33f749301c6ccb183159190368d6ccf6e36e8206841168bc615e316d41a1f90719148f1120a8c017e629d0fd682a037927989c389643b138687a6e901fb464ccd0d2b62cc21c9d09f548a84f0413853ebeae396671d6a8d8b2f3f5bc50cb04881522737119cd4d6fef12023180cb9e0b73d6e871457f0b363c7e12ec953d1e3585a68908dee7ea2ef17b2c9621ad12b138c2c41a7cf3da8ea2bd6a5487cbbd7173b6e785f8d6dfd2d057dfaf34873a22867bdcc6406053046001038a7602197783eb6d93cb9eb0a8ee7db1b83e9df29f97addd9bd92c04cbe8b317b3d2d2d36c38c68cfdd587b4afb284737bb8ebef62d735f73d38db9bae7b8480172d11830a256f31b5d1503d89bf5bdbce35d2784f20677c78e72a0454c3155691ca4b5458fc2a734ce5bb5953222e5cdf52b529edff09bc09674797894dcee11192057482f091909cea6eb4f0aaa2bc786cb695468eb2fc0e05dd5f18081d929c2cfb9524d764d12028412324bc3184626e3753ead0e980b84519038a658f3d00aadd394e1fa2c4a40abbecf090aa45af153b8b3157d71257d427b89aea7c85ec3d5ae551d658c01eb5f9b8006ecd3c246355c579c1b417bbd63c80dc387e6f4b50079334b3697185bfeea17b1be7c0429081933483d5d81caaa073abc4663a9e68fad3909a71ada1cfe247c0f8ab231abc125413027e44edf972a43fecc6d6ac10c4a9d979ecca226cb07032b02e5e84a9042ec49ea9fd52f2ce7d1edd004406360e7eae33855d658a57be843f24c9f5db4e0ba07c5eadc334ad87dde0e002d0491c925255f7b1e925b1ecd1f8f2c1247564c47a46c696b8df8332e589f3acf3448804d93dd7f3086ac0e5906121110b62e9f28883697b653180fd8472fd9ec614574e7d0f600ab1510530f9a4467ca52aae4650d6bbdb5af7bbf4457aff4a556389f85c040e03d4746121add392cb89ffc299a3f00fbf41f55ed26af464898cff77dddaac3525318923ac7ffe4aaff006ee03170babeab6f4bb24edf92ec4657faec728db1cdea70484cf6526e10c6c3b7bbc1c635e8c1aa59a70fa8e52ffaae66983d7d9ea043db4c9457487bc761b235af7205546b31a82cfb4d043c3b8d486c27ba2affc4dc8e1a3675b9c8eb8829438ae164c011136818f23a74756e8acc8beaa3477094c735af95d3a52546bcbcc388f69984d34eac4c15058567919ee36087ef9d9787c68190d0cf23165c1e2c5bcc72540aa50ea327f25b8a5b7b2eb46c732eea306b651209ae42fa2dfdcf18b3e453d76bb6961f8f89e7ec895580ebaaf3146f27748c5c9acbc9ee82767a70c08c0871f000c09a1c37929bb763ee88594e76108d12fd78318738eac78d6e7c44352bec43cfd6a5a9cbe11ff3b4b5acd403c22b9d05fe562d1abb5983edde9a0fae01f0fed64a2cebd2fb9d1acdd39c710cd8265337d32145daadfb7ba876300abe3558bf1a5ea7a45a58de2f707c612c68faa89c6cc62f9344ac0b81406495629f70f787808f869555f3bc1c71d118d77c93887e9b2e118d9501c426a7194bf2cd1acb2bbe735f60f293a0139007c806611f946527f919b34f40086a4fdb2e264cd0da3d6cb7f36962be9f2856c07f1445b0aaa9e1fdb31f10364ed6fbd9e294267af3d50d9fb0ea878c50fb5a0160e1d90ab3528a49f13e5ca877189b9dd738f19780d993028490c924682951abc3f10e1fe6f121876da9753ea5adc7191c2781d7ada74466168709cf67c4b4eeb4f02b0621eceee4e7f9b9662587bd065f903a102de953b4791571726a4d29441639956e42d03b1e903f06af35c9d36dcfc50c4cd8214756290e6c8af44314776eaee769f9ab1233f0e26b593d892e71ea425ed9b56647db11e1e1233ff8c7975f81d42d21c572f1d7d38ca862cce23589d39943c871404688b89c3de6f4215580e42f4ab96b6f99c0f4b73b0e6774433c77796673ff96cf261501537d43f7984856e077cf9f1afad22ade1b868bb0800309f5aa71bcbd4a16a55984abbc60c864cd386eeb889d424e45bd2db296b817c5e8d8728f86a136950743e10f08b77ffd5f278f2e08a01492555fed3ac4487e069063622a8bffc4af6004ff9a20db7c858f566c08180d5670c4c904fc6493cda199440371d8830e7370e1a5ef7a08a9b052a5a938a276af4f45de60f5e1c79a04a342075f4291d63bc8d1a26698"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0xbc, 0x1, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x82, 0x6, "a796acbf960045618c636698b98e6a51603f198809d4c9163d1a4d966a7fe3d570a5722102e0c5c6626ac20dd5bda88dfbe8c7d8ff502ea090281d9b38f85cc958809c7e290cebced8aba61daa52d6acba31e70399a9fbfca241d95e40439e801d26086dd8b680bbeae5484b4c5fe4e6a64a2f01cc9bbf937df513ff1591"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x190, 0x0, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x9, 0x3, 0xffffffff, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x7fffffff, 0x8, 0x1, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xeb3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xe1, 0x10000000, 0xffffffff, 0x4}, 0x2}}]}, {0xf5, 0x6, "c365f06a53748775e98d12cba85790ea7ca16f0843bbf05a7de7c5b486dbf8968c7c6d6f85a6d0eb39c58f44f82c3d87c1ffa0e79692be5c109a8ac61287d088f7b1cbc9579f583c434210375d5f8b491af5d2de580703fe2504b0b86e2bdd87ed337df732b77b8fb12860750b153f0931182d23e0374f9f05a40bd2c5931bee75edb3f844795e84b0a1972baa3864dab4fe02d274c3fa12967c12afd41100c5ea1bd343a820da923b12631ab3a9f1102937d4ea79be2491dc93e94f6a7590dd43db08263d5269b085c09eacf3638e80d0bd70009ede1fb6513fdc8f5ec17dd91c55dab5d5e377bc34c17b5f7336bc1c58"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x170, 0x12, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7fffffff, 0x0, 0x5, 0x8001}, @dev={0xac, 0x14, 0x14, 0x10}, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x3, 0x5, 0x8, 0x8}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xb5b, 0x2, 0x6, 0x7fff}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xfffffff7, 0x8, 0xffffffff, 0x730}, @broadcast, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x6, 0x8, 0x80000001, 0x5}, @multicast2, @rand_addr=0x64010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x0, 0x8}, @local, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x3, 0x0, 0x7, 0x2}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}]}, {0x2e, 0x6, "3122df6162356fa48308d6896b4280719938206dabe54a8075bb3cfd29e148186ae0d70ec84a51dc0465"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x26e8, 0x1, [@m_mirred={0x10f0, 0x4, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc75, 0x40, 0x3, 0x8, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1, 0x10000000, 0x4, 0xfff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x1, 0x4, 0x3, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0xff, 0x6, 0x9, 0xfff}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x5, 0x3, 0x4, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x3, 0x4, 0x5, 0x8}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}, @m_nat={0x10c, 0x1d, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x3, 0x0, 0x3, 0xfffffff5}, @private=0xa010100, @multicast1}}]}, {0xbc, 0x6, "ff44bdd633fb3e1807809fdb5df18bb86793f71dd427203fdb239057096d621a47bb5db6ba902e6396a03abb1d78f98e7f0b03ddf46f6be12edc684472cd4a216d7fcc053ca30c6dcc3eb92c45af65907166129a6e5a5e647103ccada055b4cb6d0e89249177425ee87884138983d540cef3c26598964f31247bfbe36562e18ee7169c48146d0198f7d39f28d984765701fa187b8d9adea4b03a75b2872984165e3cbcacfbc15906a354ed664bce255ca666a793a0ed57f7"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x110, 0x1a, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x6, 0x20000000, 0x2, 0x1a}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x38c, 0x1, 0x2, 0x8, 0x8}}]}, {0xa2, 0x6, "9cb4033ff3a1a2fb81ba772f699e6cc4066f4e8dedd7f541c46e806995c345a79eb17155635d37e1b9c343991262a6b5c39f904653607046da8d8a3099d95fdd738ec50a878eea99af86adb9da416a23f9c1a2b08bf915ac7707c62488280eb1597e3e93ee756378160d15a7579711aba302fc80f30c89d65993adc72410ff56d6d6609210c90d969f12fc11d11c8c205b09c400765d86a0714f72499ab0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x1084, 0x0, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7fffffff, 0x7, 0x6, 0x100}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x8000000, 0x0, 0x5, 0x40}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x6, 0x9, 0x787}, 0x74}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0xc8, 0x6, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x96, 0x6, "3a47f25351bda8ef7d8595f57515607e84b86177df2346b66433c223c05c198bd6d4ac1853ffe7871dd87adb59bb8773702c497d5af1f80c18c26d9cf34cfb024331edce675cb010f4b108d306df1f2abd1811ca46b5254ffaa371dc94a77a8c40ae10a2e31dbcff7eef9536e3b0dc4950b4f204652dda942deb43a1a8d12f48e372fedc86d8978d89fb43e914f14f52bc76"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0xf8, 0x11, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1, 0x4, 0xe, 0x2}, @empty, @dev={0xac, 0x14, 0x14, 0x2c}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xa5f, 0x0, 0xfffffff2, 0x8}, @multicast1, @empty, 0xffffff80}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7fffffff, 0x4, 0x3, 0xd67}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x1}}]}, {0x57, 0x6, "c58e6c86af56895fb7b05a1c3e8572af68c0bf35269177d5267ac04c23547c60bdc4d1f0804191e53206d55514d19edd1bbebce395482b27d0f21152de4afb367391533913772a358760618368a77895e14193"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_sample={0xb8, 0x16, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xb92}]}, {0x81, 0x6, "8b355dc09c41abc6ffbbdf4d019df09ff6da6dfebd283d1fe6d3147d988d9967108506165b55872ebd06d25e35258fae2706de9226fef541594720a2923d79f8e4dd6c74b010a2cd6700a2b4e90ad864c9a7aaa12b428115a9430481f0f71264ea3fd0e8d074a24d7685eb8611862a36770bb041a45c5eed8ac17c47a9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x50, 0x16, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x7, 0x20000000, 0xffffffff, 0x8}, 0xe}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x8c, 0x8, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x53, 0x6, "3574508a76180f1fd89c43ff763ab73b060ed0ca25d5d4f7295c137958fbc6b506ea0f1583881af78610a90a6d02198d3e28532f7fba2b7f328cecf98e02c5303715a22e717acbd92cf31703970338"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x1b4, 0x1, [@m_skbedit={0xc0, 0x3, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0xffffff27, 0x10000000, 0xce, 0x800}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7ff}]}, {0x5c, 0x6, "94f0ffffb06f5bc5bf76385414aad72ec7be66ef022c38c9061ee7a7e0af932a75b7050207327e22e6e99880b37136867fb8547eecf509094e5f45a98e7b22daa3dd0eef8385ec1c51d8455e1438259a22719d15b17cb2a7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xf0, 0x17, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}]}, {0xbc, 0x6, "6c927b003297490648e914394f81b47de25360895ea61c8adc29d5bf25cd547c7b985d80f105d2cf505e8ec3526bdf6f3fdb5ef6b66c17472de71a570ae0d7f2eb37c9026f154e026b03fb6795995385084875b0ffba7d012c4979a339e6059f6d4f852ae89c722b1903e220c14bd3a3b0c11996d800a9593bc7585876d0432c1887288bc92a45cbf886d4e9eaa4faf4fa41ed85421ceea7dbf59f912a1fb85fd4d9ac0df0fed7d7658303d5ce40d02717c095528d7f3a01"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x548, 0x1, [@m_police={0x544, 0xc, 0x0, 0x0, {{0xb}, {0x468, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1168}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8, 0xfff, 0x7f, 0x6, 0x5, 0x4, 0x5, 0x6, 0x7, 0xffffffff, 0x4, 0x1, 0x9, 0x4, 0x1, 0x0, 0x2, 0x0, 0x9, 0x7f, 0x2, 0x200, 0x5, 0x8, 0x8000, 0x5, 0x9, 0x9, 0x8, 0x4c90, 0x3, 0x7, 0xfff, 0xfffffff8, 0x7ff, 0xffffff51, 0x0, 0x1, 0x1, 0xc75, 0x0, 0x4901, 0xb9, 0x4, 0x400, 0x6, 0x4, 0x3, 0x1, 0x9, 0x5, 0x8, 0x1, 0x3, 0xe, 0x8000, 0x1c2800, 0x9, 0xd, 0x4, 0xfffffffe, 0x40, 0xc5, 0x9, 0x8, 0x1, 0x4, 0x8, 0xba, 0xffff, 0x6, 0xf, 0x7, 0xc, 0x9, 0x5, 0x0, 0x6, 0x771, 0x7, 0x10000, 0x0, 0x5, 0x4, 0x80000001, 0x401, 0xc6, 0x9, 0x7fff, 0x1, 0x0, 0x2, 0x7453, 0x1, 0x8, 0x6, 0xa1, 0x9, 0x101, 0x401, 0x3, 0x2, 0x5, 0xffffffff, 0x6, 0x3, 0x9, 0xe1, 0x93, 0xa4, 0x1, 0x5, 0x3, 0x8000, 0x3c, 0x1000, 0x40, 0xce, 0xffffffff, 0xe7, 0x7, 0xfffff1ab, 0xd6d, 0xc, 0x1, 0x8000, 0x265, 0x2, 0x4, 0xb, 0x1000, 0x5, 0x15, 0x7, 0x3ff, 0x4, 0xffffffff, 0x8, 0x8, 0x80000000, 0x8000, 0x3, 0x200, 0x7, 0xffffffff, 0x200, 0x2, 0x8, 0x5, 0x6, 0x8, 0x7, 0xa3, 0x2, 0x9, 0x3, 0x7, 0x4, 0xfd, 0x101, 0x0, 0x1825, 0x8, 0x81, 0x9, 0x8001, 0x8e5a, 0x5, 0x0, 0x6, 0x4, 0x3, 0xfff, 0x0, 0x8, 0x5, 0x6, 0x10000, 0x5, 0x4, 0x1b2, 0x5, 0x352e, 0xfffffffb, 0xb40, 0x6, 0x80000000, 0x9, 0x6, 0xe, 0x6, 0xfffffff4, 0x2, 0x8, 0xb, 0x2, 0xffffffcb, 0x0, 0xffffffff, 0xb, 0x8, 0xffffffff, 0x18d49700, 0x2, 0x80000001, 0x5, 0x787, 0x2, 0x7, 0xffffffff, 0xfffff65b, 0x9, 0xffffffff, 0x6, 0x3, 0x3, 0x1, 0x1, 0x7f, 0x1, 0xff, 0x2, 0x5, 0x101, 0xc, 0x300, 0x4, 0x683e, 0x0, 0x5, 0x2, 0x5, 0x6, 0x7fffffff, 0x6, 0x8, 0x2, 0x5, 0x8, 0x1, 0x80000000, 0x401, 0x1, 0x101, 0x8000, 0x8, 0xb, 0x8, 0x5, 0x9, 0x5, 0x4d, 0xb354, 0xfffffff7, 0xf3e6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x80000000, 0x55a3, 0x800, {0x40, 0x1, 0xfffd, 0x7, 0xfff, 0x6}, {0x2, 0x0, 0x1e25, 0x4, 0x7, 0x4}, 0x3ff, 0x7, 0x401}}]]}, {0xb4, 0x6, "85a3bab6842ff1be9941424ff0dc462b82361d847625b1b102a2561cf193be1aeefb068d6664949241daf7ce31e630b4b2ae37b9a0136c1c618e8f7e03a0df76dfe7d03a3f5b7a296e23eeb5d2c389c9dc6540d7712d9335d9d3193d13857c5ae31a0aac5c89e9085588324cf87b6e8be45e2989731668b8cdb5e8c3fa71a9dbb9fa0ebeadffef6ba4d02c40d36bb11f7fa669724f3b24983a760bf9bfc14142db77cefe0e53192272bdffb14afa78fc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x4850}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) io_uring_enter(r0, 0x47f6, 0x40, 0x2, 0x0, 0x0) 728.601084ms ago: executing program 4 (id=365): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x8, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x100000000, 0xfffffffffffffffd, 0x700000000000000, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0xf58) 582.113625ms ago: executing program 0 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) lsetxattr$trusted_overlay_opaque(0x0, &(0x7f0000000200), &(0x7f00000002c0), 0x2, 0x2) close(r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000980), 0xfdef) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4025a729bd7000fddbdf250a0010cdff0000010200b3a792cbb008c53c4a06440100080006000000000014000200fc0000000000000000000000000000010500150002000000"], 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) splice(r6, 0x0, r9, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r6, &(0x7f0000000800)=""/217, 0xd9) read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x202400, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r12, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc53}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000064f3cae600cd1270b7ccac1e5ae8a00000623dd1ffe7cdc845f180d6a5e0e1c18809eccb5c3f320c5867046c12f80671ae69558c6ccbab8ba7e4da6d6f70f123dd089160711c27e44b2bc5fab7b1a2e7c203e2481dc6f2768a9cd58a2a1e4f0e5a9c34a1bff3da870ca8d76d144a346160dfc63ea9dc44d0e77c"]) ioctl$KVM_RUN(r13, 0xae80, 0x0) 6.227337ms ago: executing program 33 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) lsetxattr$trusted_overlay_opaque(0x0, &(0x7f0000000200), &(0x7f00000002c0), 0x2, 0x2) close(r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000980), 0xfdef) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4025a729bd7000fddbdf250a0010cdff0000010200b3a792cbb008c53c4a06440100080006000000000014000200fc0000000000000000000000000000010500150002000000"], 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) splice(r6, 0x0, r9, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r6, &(0x7f0000000800)=""/217, 0xd9) read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x202400, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r12, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc53}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000064f3cae600cd1270b7ccac1e5ae8a00000623dd1ffe7cdc845f180d6a5e0e1c18809eccb5c3f320c5867046c12f80671ae69558c6ccbab8ba7e4da6d6f70f123dd089160711c27e44b2bc5fab7b1a2e7c203e2481dc6f2768a9cd58a2a1e4f0e5a9c34a1bff3da870ca8d76d144a346160dfc63ea9dc44d0e77c"]) ioctl$KVM_RUN(r13, 0xae80, 0x0) 0s ago: executing program 4 (id=368): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x2000000, {0x0, 0x0, 0xffef, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xffffffffffffff4d}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.207' (ED25519) to the list of known hosts. [ 66.723535][ T5810] cgroup: Unknown subsys name 'net' [ 66.878723][ T5810] cgroup: Unknown subsys name 'cpuset' [ 66.887695][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.317780][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.649633][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.658795][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.666559][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.684568][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.694486][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.704782][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.712756][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.721427][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.729308][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.737674][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.741602][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.745453][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.764108][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.772240][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.775837][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.779918][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.789930][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.795551][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.801821][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.815203][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.823353][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.824717][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.833409][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.851978][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.885291][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.389916][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.396585][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.593576][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 71.620952][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 71.663894][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 71.746167][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 71.768682][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 71.953835][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.961375][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.968916][ T5836] bridge_slave_0: entered allmulticast mode [ 71.976522][ T5836] bridge_slave_0: entered promiscuous mode [ 71.989508][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.996817][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.003959][ T5838] bridge_slave_0: entered allmulticast mode [ 72.011171][ T5838] bridge_slave_0: entered promiscuous mode [ 72.034187][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.041639][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.048902][ T5836] bridge_slave_1: entered allmulticast mode [ 72.056086][ T5836] bridge_slave_1: entered promiscuous mode [ 72.068658][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.076486][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.083665][ T5838] bridge_slave_1: entered allmulticast mode [ 72.090841][ T5838] bridge_slave_1: entered promiscuous mode [ 72.097617][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.104733][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.112005][ T5835] bridge_slave_0: entered allmulticast mode [ 72.119014][ T5835] bridge_slave_0: entered promiscuous mode [ 72.184012][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.191808][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.199220][ T5835] bridge_slave_1: entered allmulticast mode [ 72.206208][ T5835] bridge_slave_1: entered promiscuous mode [ 72.212845][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.220380][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.227590][ T5841] bridge_slave_0: entered allmulticast mode [ 72.235092][ T5841] bridge_slave_0: entered promiscuous mode [ 72.283136][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.290432][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.297886][ T5841] bridge_slave_1: entered allmulticast mode [ 72.305495][ T5841] bridge_slave_1: entered promiscuous mode [ 72.315521][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.324771][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.332956][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.340185][ T5839] bridge_slave_0: entered allmulticast mode [ 72.347517][ T5839] bridge_slave_0: entered promiscuous mode [ 72.357648][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.392668][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.402060][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.409523][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.417016][ T5839] bridge_slave_1: entered allmulticast mode [ 72.423932][ T5839] bridge_slave_1: entered promiscuous mode [ 72.432921][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.444643][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.499260][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.511225][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.523772][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.590829][ T5836] team0: Port device team_slave_0 added [ 72.599230][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.610725][ T5838] team0: Port device team_slave_0 added [ 72.641565][ T5836] team0: Port device team_slave_1 added [ 72.650020][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.673121][ T5838] team0: Port device team_slave_1 added [ 72.680876][ T5835] team0: Port device team_slave_0 added [ 72.688643][ T5841] team0: Port device team_slave_0 added [ 72.730087][ T5835] team0: Port device team_slave_1 added [ 72.737573][ T5841] team0: Port device team_slave_1 added [ 72.756150][ T5839] team0: Port device team_slave_0 added [ 72.762943][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.770331][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.796336][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.847435][ T5839] team0: Port device team_slave_1 added [ 72.864008][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.871104][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.898235][ T5826] Bluetooth: hci3: command tx timeout [ 72.898474][ T5826] Bluetooth: hci0: command tx timeout [ 72.903767][ T5824] Bluetooth: hci4: command tx timeout [ 72.910160][ T5826] Bluetooth: hci1: command tx timeout [ 72.915271][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.931988][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.938982][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.964893][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.975951][ T5826] Bluetooth: hci2: command tx timeout [ 72.977973][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.988451][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.015170][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.048794][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.055985][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.082169][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.106790][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.113742][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.139852][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.165822][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.172796][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.198986][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.219789][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.226790][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.252947][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.264501][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.271582][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.297587][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.310074][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.317084][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.343071][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.391321][ T5838] hsr_slave_0: entered promiscuous mode [ 73.398043][ T5838] hsr_slave_1: entered promiscuous mode [ 73.493211][ T5836] hsr_slave_0: entered promiscuous mode [ 73.500552][ T5836] hsr_slave_1: entered promiscuous mode [ 73.507090][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 73.512892][ T5836] Cannot create hsr debugfs directory [ 73.523828][ T5841] hsr_slave_0: entered promiscuous mode [ 73.530565][ T5841] hsr_slave_1: entered promiscuous mode [ 73.536967][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 73.542697][ T5841] Cannot create hsr debugfs directory [ 73.616280][ T5839] hsr_slave_0: entered promiscuous mode [ 73.622592][ T5839] hsr_slave_1: entered promiscuous mode [ 73.629630][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 73.635435][ T5839] Cannot create hsr debugfs directory [ 73.646798][ T5835] hsr_slave_0: entered promiscuous mode [ 73.653081][ T5835] hsr_slave_1: entered promiscuous mode [ 73.659360][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 73.665198][ T5835] Cannot create hsr debugfs directory [ 74.197772][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.216530][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.227800][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.247235][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.304569][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.320558][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.333264][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.360206][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.444405][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.456898][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.469384][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.480945][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.599234][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.610600][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.631414][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.641262][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.711566][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.752756][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.787836][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.800006][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.807313][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.821937][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.837190][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.844288][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.869512][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.882101][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.911667][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.928091][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.977122][ T5824] Bluetooth: hci0: command tx timeout [ 74.982570][ T5824] Bluetooth: hci1: command tx timeout [ 74.988130][ T5833] Bluetooth: hci3: command tx timeout [ 74.993995][ T5826] Bluetooth: hci4: command tx timeout [ 75.004246][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.023969][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.055700][ T5826] Bluetooth: hci2: command tx timeout [ 75.064653][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.071827][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.086746][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.117657][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.124797][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.133707][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.140836][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.172035][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.198728][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.205899][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.224364][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.236364][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.267228][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.274326][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.291302][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.298483][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.403674][ T5838] veth0_vlan: entered promiscuous mode [ 75.445914][ T5838] veth1_vlan: entered promiscuous mode [ 75.482513][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.500277][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.589589][ T5838] veth0_macvtap: entered promiscuous mode [ 75.601067][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.612383][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.622035][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.632856][ T5838] veth1_macvtap: entered promiscuous mode [ 75.653987][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.661130][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.690612][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.697791][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.716535][ T5836] veth0_vlan: entered promiscuous mode [ 75.738986][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.749826][ T5836] veth1_vlan: entered promiscuous mode [ 75.786641][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.821875][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.831920][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.853670][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.862897][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.948066][ T5835] veth0_vlan: entered promiscuous mode [ 75.966368][ T5839] veth0_vlan: entered promiscuous mode [ 75.980349][ T5836] veth0_macvtap: entered promiscuous mode [ 76.007564][ T5835] veth1_vlan: entered promiscuous mode [ 76.028182][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.037314][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.041611][ T5839] veth1_vlan: entered promiscuous mode [ 76.054782][ T5836] veth1_macvtap: entered promiscuous mode [ 76.102587][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.121357][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.136214][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.140179][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.159741][ T5839] veth0_macvtap: entered promiscuous mode [ 76.172420][ T5839] veth1_macvtap: entered promiscuous mode [ 76.188420][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.236827][ T5835] veth0_macvtap: entered promiscuous mode [ 76.258445][ T5835] veth1_macvtap: entered promiscuous mode [ 76.269508][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.281689][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.300233][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.327600][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.350254][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.384691][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.396463][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.450111][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.462747][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.479561][ T5841] veth0_vlan: entered promiscuous mode [ 76.490543][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.505717][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.519970][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.583924][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.599023][ T5841] veth1_vlan: entered promiscuous mode [ 76.612708][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.621287][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.636744][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.650757][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.683949][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.694253][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.725292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.734319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.864153][ T5922] xt_hashlimit: size too large, truncated to 1048576 [ 76.932511][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.952152][ T5922] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 76.960740][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.125824][ T5826] Bluetooth: hci4: command tx timeout [ 77.126221][ T5824] Bluetooth: hci1: command tx timeout [ 77.131262][ T5826] Bluetooth: hci3: command tx timeout [ 77.131291][ T5826] Bluetooth: hci0: command tx timeout [ 77.138800][ T5147] Bluetooth: hci2: command tx timeout [ 77.195469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.205225][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.213588][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.235207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.243957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.252559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.321779][ T5841] veth0_macvtap: entered promiscuous mode [ 77.336264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.379548][ T5841] veth1_macvtap: entered promiscuous mode [ 77.435142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.509008][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.524602][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.602506][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.614919][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.636886][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.732250][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.787378][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.797326][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.814253][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.835797][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.887638][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.908936][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.057734][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.069062][ T5881] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 78.087513][ T5901] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.108099][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.279147][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 78.290669][ T5901] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 78.307533][ T5901] usb 3-1: config 1 has no interface number 0 [ 78.318804][ T5881] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 78.332881][ T5940] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 78.351787][ T5901] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 78.365391][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.377819][ T5901] usb 3-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 78.416257][ T5881] usb 2-1: config 0 descriptor?? [ 78.424222][ T5929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.529729][ T5901] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 78.539070][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.553100][ T5901] usb 3-1: Product: syz [ 78.557414][ T5901] usb 3-1: Manufacturer: syz [ 78.562212][ T5901] usb 3-1: SerialNumber: syz [ 78.595477][ T5930] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 78.615256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.655941][ T5930] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 78.669812][ T5901] usb 3-1: Expected 3 endpoints, found: 2 [ 78.702985][ T5912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.729558][ T5912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.929388][ T24] usb 3-1: USB disconnect, device number 2 [ 79.002805][ T5881] kye 0003:0458:500F.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 79.069214][ T5881] kye 0003:0458:500F.0001: hidraw0: USB HID v0.05 Device [HID 0458:500f] on usb-dummy_hcd.1-1/input0 [ 79.106010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.225008][ T5147] Bluetooth: hci0: command tx timeout [ 79.230458][ T5147] Bluetooth: hci2: command tx timeout [ 79.236236][ T5824] Bluetooth: hci1: command tx timeout [ 79.236256][ T5833] Bluetooth: hci3: command tx timeout [ 79.241633][ T5824] Bluetooth: hci4: command tx timeout [ 79.254396][ T5881] kye 0003:0458:500F.0001: tablet-enabling feature report not found [ 79.290313][ T5881] kye 0003:0458:500F.0001: tablet enabling failed [ 79.342812][ T5881] usb 2-1: USB disconnect, device number 2 [ 79.544371][ T5952] fido_id[5952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 79.894654][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.977556][ T5970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.057965][ T5990] erspan0: entered promiscuous mode [ 81.141169][ T5994] netlink: 'syz.4.20': attribute type 9 has an invalid length. [ 81.158507][ T5994] netlink: 'syz.4.20': attribute type 6 has an invalid length. [ 81.264924][ T5874] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.375231][ T5932] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.406440][ T5908] IPVS: starting estimator thread 0... [ 81.476156][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 81.483543][ T5874] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.523818][ T5874] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.533771][ T5997] IPVS: using max 50 ests per chain, 120000 per kthread [ 81.555252][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 81.561930][ T5874] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 81.578695][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.597059][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.610391][ T5932] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 81.623847][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.636319][ T5874] usb 4-1: config 0 descriptor?? [ 81.649765][ T5932] usb 3-1: Product: syz [ 81.704883][ T5932] usb 3-1: Manufacturer: syz [ 81.726570][ T5932] usb 3-1: SerialNumber: syz [ 81.763561][ T5932] usb 3-1: config 0 descriptor?? [ 81.808142][ T5932] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 81.823746][ T5932] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 82.103418][ T5874] hid (null): invalid report_size 21303 [ 82.109444][ T5874] hid (null): unknown global tag 0xc [ 82.124899][ T5894] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.147090][ T5874] cougar 0003:060B:500A.0002: usage count exceeds max: fixing up report descriptor [ 82.246195][ T5874] cougar 0003:060B:500A.0002: unexpected long global item [ 82.257089][ T5894] usb 1-1: device descriptor read/64, error -71 [ 82.292455][ T5874] cougar 0003:060B:500A.0002: parse failed [ 82.331860][ T5874] cougar 0003:060B:500A.0002: probe with driver cougar failed with error -22 [ 82.407222][ T5874] usb 4-1: USB disconnect, device number 2 [ 82.515726][ T5894] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.664972][ T5894] usb 1-1: device descriptor read/64, error -71 [ 82.785249][ T5894] usb usb1-port1: attempt power cycle [ 83.005118][ T5908] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.124923][ T5894] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.145636][ T5894] usb 1-1: device descriptor read/8, error -71 [ 83.154913][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 83.232280][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.249048][ T5908] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 83.271868][ T5908] usb 2-1: can't read configurations, error -71 [ 83.385240][ T5894] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.406518][ T5894] usb 1-1: device descriptor read/8, error -71 [ 83.515327][ T5894] usb usb1-port1: unable to enumerate USB device [ 84.318587][ T5932] usb 3-1: USB disconnect, device number 3 [ 84.835045][ T981] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.018783][ T5932] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.085300][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 85.103222][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 85.127301][ T981] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.138117][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.151261][ T981] usb 2-1: Product: syz [ 85.155700][ T981] usb 2-1: Manufacturer: syz [ 85.160396][ T981] usb 2-1: SerialNumber: syz [ 85.169184][ T981] usb 2-1: config 0 descriptor?? [ 85.192238][ T981] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 85.205069][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 85.212533][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 85.224652][ T5932] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.237967][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.256333][ T981] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 85.280687][ T5932] usb 3-1: Product: syz [ 85.298191][ T5932] usb 3-1: Manufacturer: syz [ 85.308305][ T5932] usb 3-1: SerialNumber: syz [ 85.318172][ T6048] binder: 6045:6048 ioctl 40096102 80000000 returned -22 [ 85.359926][ T5932] usb 3-1: config 0 descriptor?? [ 85.400950][ T5932] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 85.418215][ T5932] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 85.780590][ T6064] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.883973][ T981] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 85.891785][ T5894] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 85.902899][ T5894] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 85.975491][ T5894] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 85.984158][ T5894] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 86.027487][ T5932] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 86.113255][ T5894] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 86.160182][ T5894] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 86.190355][ T5894] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 86.194921][ T5874] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.294951][ T5894] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 86.320161][ T981] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 86.334165][ T5894] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 86.342967][ T981] em28xx 2-1:0.0: board has no eeprom [ 86.350459][ T5894] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 86.408446][ T5894] hid-generic 00A0:0006:0003.0003: hidraw0: HID v0.05 Device [syz1] on syz0 [ 86.445385][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 86.445389][ T5908] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 86.467378][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 86.479359][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 86.494131][ T5874] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 86.510151][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.534399][ T5874] usb 4-1: Product: syz [ 86.542234][ T5874] usb 4-1: Manufacturer: syz [ 86.547885][ T5874] usb 4-1: SerialNumber: syz [ 86.664724][ T5932] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 86.674976][ T5932] em28xx 3-1:0.0: board has no eeprom [ 86.695282][ T5874] usb 4-1: config 0 descriptor?? [ 86.709553][ T5908] usb 5-1: config 0 has no interfaces? [ 86.715358][ T5908] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 86.719907][ T5874] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 86.724519][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.734803][ T5874] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 86.901607][ T9] cfg80211: failed to load regulatory.db [ 87.045079][ T5908] usb 5-1: config 0 descriptor?? [ 87.312160][ T6064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.37'. [ 87.332573][ T5874] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 87.381842][ T5874] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 87.457445][ T6034] em28xx 2-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 87.524969][ T981] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 87.542473][ T981] em28xx 2-1:0.0: dvb set to bulk mode. [ 87.554731][ T5830] em28xx 2-1:0.0: Binding DVB extension [ 87.657449][ T5830] em28xx 2-1:0.0: Registering input extension [ 87.702260][ T5830] usb 2-1: USB disconnect, device number 5 [ 87.709496][ T5830] em28xx 2-1:0.0: Disconnecting em28xx [ 87.717560][ T5830] em28xx 2-1:0.0: Closing input extension [ 87.835079][ T5932] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 87.842989][ T5932] em28xx 3-1:0.0: dvb set to bulk mode. [ 87.850340][ T5931] em28xx 3-1:0.0: Binding DVB extension [ 88.081231][ T5874] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 88.115083][ T5931] em28xx 3-1:0.0: Registering input extension [ 88.440971][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 88.533004][ T5908] usb 3-1: USB disconnect, device number 4 [ 88.540314][ T5908] em28xx 3-1:0.0: Disconnecting em28xx [ 88.548645][ T5830] em28xx 2-1:0.0: Freeing device [ 88.562235][ T5908] em28xx 3-1:0.0: Closing input extension [ 88.634133][ T5931] usb 5-1: USB disconnect, device number 2 [ 88.636924][ T5908] em28xx 3-1:0.0: Freeing device [ 88.665156][ T5874] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 88.680972][ T5874] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 89.032063][ T5874] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 89.040217][ T6103] netlink: 48 bytes leftover after parsing attributes in process `syz.4.48'. [ 89.053299][ T5874] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 89.065334][ T5874] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 89.100787][ T5874] usb 4-1: USB disconnect, device number 3 [ 89.215700][ T5908] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 89.308546][ T6107] binder: 6106:6107 ioctl 40096102 80000000 returned -22 [ 89.381391][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.403168][ T5908] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 89.424554][ T5908] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 89.435005][ T5908] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 89.445850][ T5908] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 89.455947][ T5908] usb 2-1: config 129 has no interface number 0 [ 89.462270][ T5908] usb 2-1: config 129 has no interface number 1 [ 89.470937][ T5908] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 89.535139][ T5908] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 89.553131][ T5908] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 89.568631][ T6117] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 89.621783][ T5908] usb 2-1: config 129 interface 135 has no altsetting 0 [ 89.634044][ T6115] warning: `syz.0.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.650565][ T6117] netlink: 'syz.4.50': attribute type 10 has an invalid length. [ 89.664917][ T5908] usb 2-1: config 129 interface 5 has no altsetting 0 [ 89.700833][ T6115] binder: 6114:6115 unknown command 0 [ 89.734040][ T5908] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 89.752005][ T6115] binder: 6114:6115 ioctl c0306201 80000080 returned -22 [ 89.759298][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.773991][ T5908] usb 2-1: SerialNumber: Е [ 89.805920][ T6117] team0: Port device dummy0 added [ 89.850723][ T6122] netlink: 'syz.3.52': attribute type 9 has an invalid length. [ 89.875668][ T6122] netlink: 'syz.3.52': attribute type 6 has an invalid length. [ 90.032568][ T5908] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.088491][ T5908] usb 2-1: MIDIStreaming interface descriptor not found [ 90.459873][ T5908] usb 2-1: USB disconnect, device number 6 [ 90.635031][ T5932] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.798559][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 90.809388][ T6135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57'. [ 90.821714][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 90.844004][ T5932] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 90.864964][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.873003][ T5932] usb 3-1: Product: syz [ 90.949241][ T5932] usb 3-1: Manufacturer: syz [ 90.981149][ T5932] usb 3-1: SerialNumber: syz [ 91.016656][ T5932] usb 3-1: config 0 descriptor?? [ 91.043082][ T5932] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 91.087561][ T5932] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 91.258288][ T6144] binder: 6141:6144 ioctl 40096102 80000000 returned -22 [ 91.558701][ T6155] binder: 6154:6155 unknown command 0 [ 91.567343][ T6155] binder: 6154:6155 ioctl c0306201 80000080 returned -22 [ 91.627624][ T5932] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 91.966316][ T6165] netlink: 'syz.1.67': attribute type 10 has an invalid length. [ 91.974607][ T6165] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 92.068961][ T5932] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 92.085489][ T5932] em28xx 3-1:0.0: board has no eeprom [ 92.186609][ T6171] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 92.297771][ T6171] netlink: 'syz.0.68': attribute type 10 has an invalid length. [ 92.315536][ T6171] team0: Port device dummy0 added [ 92.396674][ T5874] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.555320][ T6174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.647882][ T5874] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 92.700320][ T5874] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.931008][ T5874] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.944116][ T5874] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.991233][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 93.003016][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.015154][ T6178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.148846][ T5874] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.166197][ T5874] usb 5-1: invalid MIDI out EP 0 [ 93.284921][ T5932] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 93.292966][ T5932] em28xx 3-1:0.0: dvb set to bulk mode. [ 93.324636][ T5931] em28xx 3-1:0.0: Binding DVB extension [ 93.440710][ T5830] usb 3-1: USB disconnect, device number 5 [ 93.469809][ T6185] syz.1.72 uses obsolete (PF_INET,SOCK_PACKET) [ 93.496892][ T6185] netlink: 168 bytes leftover after parsing attributes in process `syz.1.72'. [ 93.520134][ T5931] em28xx 3-1:0.0: Registering input extension [ 93.532679][ T5830] em28xx 3-1:0.0: Disconnecting em28xx [ 93.614798][ T5830] em28xx 3-1:0.0: Closing input extension [ 93.616107][ T5874] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 93.642288][ T6186] binder: 6183:6186 ioctl 40096102 80000000 returned -22 [ 93.732863][ T5830] em28xx 3-1:0.0: Freeing device [ 94.004956][ T6195] netlink: 'syz.1.75': attribute type 10 has an invalid length. [ 94.173820][ T6199] binder: 6198:6199 unknown command 0 [ 94.179599][ T6199] binder: 6198:6199 ioctl c0306201 80000080 returned -22 [ 94.188165][ T6199] binder: BINDER_SET_CONTEXT_MGR already set [ 94.196155][ T6199] binder: 6198:6199 ioctl 4018620d 80000040 returned -16 [ 94.210867][ T6201] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 94.379778][ T30] audit: type=1326 audit(1762158562.229:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.79" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x0 [ 94.519804][ T6208] bond1: entered promiscuous mode [ 94.580382][ T6208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.776395][ T6214] erspan0: entered promiscuous mode [ 95.124948][ T5874] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 95.205523][ T5830] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.297875][ T5874] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 95.325034][ T5874] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 95.335047][ T981] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 95.345182][ T5874] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.354520][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.372831][ T6217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.375028][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 95.392113][ T6217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.422846][ T5881] hid_parser_main: 5 callbacks suppressed [ 95.422860][ T5881] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 95.453434][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 95.486282][ T5830] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.495908][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.504038][ T5830] usb 2-1: Product: syz [ 95.510573][ T5830] usb 2-1: Manufacturer: syz [ 95.515861][ T5830] usb 2-1: SerialNumber: syz [ 95.521475][ T5881] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 95.530559][ T5874] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.546272][ T5830] usb 2-1: config 0 descriptor?? [ 95.556748][ T5830] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 95.583517][ T981] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 95.603431][ T5881] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 95.605780][ T981] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 95.622666][ T5830] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 95.631508][ T981] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.641232][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.657695][ T6223] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 95.665802][ T6223] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 95.692211][ T5881] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 95.720115][ T5881] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 95.745044][ T5931] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 95.758467][ T981] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.784547][ T5881] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 95.803670][ T5874] usb 3-1: USB disconnect, device number 6 [ 95.901567][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.913153][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.933086][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.944015][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.966942][ T5881] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 96.026099][ T5881] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 96.046512][ T5881] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 96.055252][ T5881] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 96.086750][ T5931] usb 4-1: config 0 has no interfaces? [ 96.092598][ T5931] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 96.103538][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.146419][ T5881] hid-generic 00A0:0006:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 96.174082][ T5830] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 96.189874][ T5931] usb 4-1: config 0 descriptor?? [ 96.205669][ T981] usb 5-1: USB disconnect, device number 3 [ 96.428708][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.87'. [ 96.648933][ T5830] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 96.659960][ T5830] em28xx 2-1:0.0: board has no eeprom [ 96.775718][ T6233] binder: 6230:6233 ioctl 40096102 80000000 returned -22 [ 97.678101][ T6244] binder: 6243:6244 unknown command 0 [ 97.690649][ T6244] binder: 6243:6244 ioctl c0306201 80000080 returned -22 [ 97.835609][ T5830] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 97.918171][ T5830] em28xx 2-1:0.0: dvb set to bulk mode. [ 98.003322][ T981] em28xx 2-1:0.0: Binding DVB extension [ 98.039402][ T6250] QAT: failed to copy from user cfg_data. [ 98.055996][ T5830] usb 2-1: USB disconnect, device number 7 [ 98.087709][ T5830] em28xx 2-1:0.0: Disconnecting em28xx [ 98.095537][ T981] em28xx 2-1:0.0: Registering input extension [ 98.153543][ T5830] em28xx 2-1:0.0: Closing input extension [ 98.322486][ T5874] usb 4-1: USB disconnect, device number 4 [ 98.430586][ T5830] em28xx 2-1:0.0: Freeing device [ 98.577066][ T6255] netlink: 'syz.4.94': attribute type 10 has an invalid length. [ 98.670951][ T6262] netlink: 'syz.3.97': attribute type 6 has an invalid length. [ 98.885128][ T981] usb 1-1: USB disconnect, device number 6 [ 98.987847][ T6266] openvswitch: netlink: Missing valid actions attribute. [ 99.006808][ T6266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.357666][ T6266] loop2: detected capacity change from 0 to 7 [ 99.385413][ T6266] Dev loop2: unable to read RDB block 7 [ 99.391126][ T6266] loop2: unable to read partition table [ 99.465610][ T6266] loop2: partition table beyond EOD, truncated [ 99.515638][ T6266] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 99.621584][ T6272] netlink: 'syz.3.100': attribute type 10 has an invalid length. [ 99.729602][ T6272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.787143][ T6272] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.851820][ T6273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.860350][ T6273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.904641][ T6273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.922821][ T6273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.975277][ T6278] binder: 6274:6278 ioctl 40096102 80000000 returned -22 [ 99.991310][ T6273] bond0: (slave batadv0): Releasing backup interface [ 100.130879][ T6284] binder: 6283:6284 unknown command 0 [ 100.137739][ T6284] binder: 6283:6284 ioctl c0306201 80000080 returned -22 [ 100.167327][ T6284] binder: 6283:6284 ioctl c0306201 0 returned -14 [ 100.276161][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.107'. [ 100.286775][ T6294] Zero length message leads to an empty skb [ 100.358273][ T6296] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 100.454165][ T6296] netlink: 'syz.3.106': attribute type 10 has an invalid length. [ 100.468416][ T6296] team0: Port device dummy0 added [ 100.563333][ T5830] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 100.615556][ T5881] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 100.715308][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 100.722788][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.740185][ T6303] Cannot find set identified by id 3 to match [ 100.742703][ T5830] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.757825][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.779316][ T5830] usb 2-1: Product: syz [ 100.783606][ T5830] usb 2-1: Manufacturer: syz [ 100.791194][ T5830] usb 2-1: SerialNumber: syz [ 100.804311][ T5881] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.813066][ T5881] usb 5-1: not running at top speed; connect to a high speed hub [ 100.822657][ T5830] usb 2-1: config 0 descriptor?? [ 100.828846][ T5830] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 100.839008][ T5830] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 100.857796][ T5881] usb 5-1: config 5 has an invalid interface number: 44 but max is 1 [ 100.888288][ T5881] usb 5-1: config 5 has no interface number 1 [ 100.976644][ T5881] usb 5-1: config 5 interface 44 has no altsetting 0 [ 101.001677][ T5881] usb 5-1: config 5 interface 0 has no altsetting 0 [ 101.192985][ T5881] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 101.208472][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.234479][ T5881] usb 5-1: Product: syz [ 101.253499][ T5881] usb 5-1: Manufacturer: syz [ 101.365161][ T5881] usb 5-1: SerialNumber: syz [ 101.384390][ T6312] program syz.3.114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.401249][ T6312] netlink: 60 bytes leftover after parsing attributes in process `syz.3.114'. [ 101.412445][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.114'. [ 101.471252][ T5830] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 101.880382][ T6316] netlink: 'syz.0.113': attribute type 10 has an invalid length. [ 101.972609][ T5881] usb 5-1: bad CDC descriptors [ 101.992486][ T5881] usb 5-1: USB disconnect, device number 4 [ 102.022153][ T6321] netlink: 'syz.3.115': attribute type 10 has an invalid length. [ 102.069543][ T5830] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 102.079717][ T5830] em28xx 2-1:0.0: board has no eeprom [ 102.115347][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.44/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.716265][ T6327] binder: 6326:6327 unknown command 0 [ 102.753873][ T6327] binder: 6326:6327 ioctl c0306201 80000080 returned -22 [ 102.793251][ T6327] binder: 6326:6327 ioctl c0306201 0 returned -14 [ 103.066637][ T6336] syzkaller1: entered promiscuous mode [ 103.082503][ T6336] syzkaller1: entered allmulticast mode [ 103.209892][ T30] audit: type=1326 audit(1762158571.049:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 103.298358][ T30] audit: type=1326 audit(1762158571.049:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 103.355126][ T5830] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 103.363013][ T5830] em28xx 2-1:0.0: dvb set to bulk mode. [ 103.364945][ T30] audit: type=1326 audit(1762158571.049:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 103.404553][ T30] audit: type=1326 audit(1762158571.049:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 103.409858][ T981] em28xx 2-1:0.0: Binding DVB extension [ 103.450635][ T5881] usb 2-1: USB disconnect, device number 8 [ 103.458460][ T5881] em28xx 2-1:0.0: Disconnecting em28xx [ 103.525287][ T5874] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.629820][ T981] em28xx 2-1:0.0: Registering input extension [ 103.637931][ T5881] em28xx 2-1:0.0: Closing input extension [ 103.649260][ T6345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.124'. [ 103.681302][ T5881] em28xx 2-1:0.0: Freeing device [ 103.686456][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 103.698560][ T5874] usb 5-1: config 0 has no interfaces? [ 103.708172][ T30] audit: type=1326 audit(1762158571.049:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 103.709144][ T5874] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 103.739030][ T30] audit: type=1326 audit(1762158571.049:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 103.739074][ T30] audit: type=1326 audit(1762158571.049:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 103.739112][ T30] audit: type=1326 audit(1762158571.049:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 103.739150][ T30] audit: type=1326 audit(1762158571.049:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 103.739187][ T30] audit: type=1326 audit(1762158571.059:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 103.739871][ T6345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.124'. [ 104.045034][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.090549][ T5874] usb 5-1: config 0 descriptor?? [ 104.494983][ T5881] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 104.831601][ T5881] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 104.839541][ T6366] fuse: root generation should be zero [ 105.038707][ T5881] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.064934][ T5881] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.087686][ T5881] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.130475][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.234087][ T5881] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.265708][ T5881] usb 2-1: invalid MIDI out EP 0 [ 105.714223][ T5881] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 105.739058][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.543030][ T5881] usb 5-1: USB disconnect, device number 5 [ 106.784585][ T6387] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.824493][ T6387] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.904639][ T6387] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.494750][ T6387] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.633062][ T5830] usb 2-1: USB disconnect, device number 9 [ 107.644695][ T6387] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.782057][ T5874] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 108.841571][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.140'. [ 109.024978][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 109.031593][ T5874] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 109.040264][ T5874] usb 3-1: config 0 has no interface number 0 [ 109.227656][ T5874] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 109.263298][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.441466][ T5874] usb 3-1: Product: syz [ 109.464935][ T5874] usb 3-1: Manufacturer: syz [ 109.481840][ T5874] usb 3-1: SerialNumber: syz [ 109.620955][ T5874] usb 3-1: config 0 descriptor?? [ 109.886772][ T5874] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 109.925165][ T5874] dvb-usb: bulk message failed: -22 (2/0) [ 109.964881][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.011222][ T5874] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 110.065459][ T5874] usb 3-1: media controller created [ 110.159457][ T6432] netlink: 'syz.0.143': attribute type 10 has an invalid length. [ 110.505054][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.559487][ T5874] cxusb: set interface failed [ 110.660369][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 110.709635][ T6439] binder: 6437:6439 ioctl 40096102 80000000 returned -22 [ 110.878514][ T6444] process 'syz.2.147' launched './file0' with NULL argv: empty string added [ 110.904801][ T5874] DVB: Unable to find symbol mt352_attach() [ 110.967771][ T6444] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2898581692 (23188653536 ns) > initial count (6059612160 ns). Using initial count to start timer. [ 111.075588][ T6451] netlink: 'syz.2.147': attribute type 41 has an invalid length. [ 111.091778][ T5874] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 111.149922][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 111.225076][ T5874] rc_core: IR keymap rc-dvico-portable not found [ 111.235381][ T5874] Registered IR keymap rc-empty [ 111.249011][ T5874] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 111.297453][ T5908] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 111.308029][ T5874] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11 [ 111.365739][ T5874] dvb-usb: schedule remote query interval to 100 msecs. [ 111.390577][ T5874] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 111.425124][ T5874] usb 3-1: USB disconnect, device number 7 [ 111.620964][ T6460] netlink: 'syz.4.150': attribute type 4 has an invalid length. [ 111.641490][ T6460] netlink: 'syz.4.150': attribute type 4 has an invalid length. [ 111.830999][ T5908] usb 2-1: config 12 has an invalid interface number: 163 but max is 3 [ 111.839996][ T5908] usb 2-1: config 12 contains an unexpected descriptor of type 0x1, skipping [ 111.848364][ T5874] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 111.887699][ T5908] usb 2-1: config 12 has an invalid interface number: 78 but max is 3 [ 111.909821][ T5908] usb 2-1: config 12 has an invalid interface number: 195 but max is 3 [ 111.943477][ T5908] usb 2-1: config 12 has no interface number 0 [ 111.974938][ T5881] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 111.980409][ T5908] usb 2-1: config 12 has no interface number 1 [ 112.024942][ T5908] usb 2-1: config 12 has no interface number 3 [ 112.057737][ T5908] usb 2-1: config 12 interface 163 altsetting 61 endpoint 0x1 has an invalid bInterval 235, changing to 7 [ 112.127320][ T5908] usb 2-1: config 12 interface 163 altsetting 61 endpoint 0x1 has invalid maxpacket 25578, setting to 1024 [ 112.154993][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 112.172901][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.200408][ T5881] usb 1-1: config 0 has no interfaces? [ 112.206630][ T5881] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 112.268373][ T6464] binder: 6463:6464 unknown command 0 [ 112.273927][ T6464] binder: 6463:6464 ioctl c0306201 80000080 returned -22 [ 112.294194][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.299040][ T6464] binder: 6463:6464 ioctl c0306201 0 returned -14 [ 112.326042][ T5908] usb 2-1: config 12 interface 2 altsetting 2 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 112.336400][ T5881] usb 1-1: config 0 descriptor?? [ 112.355585][ T5908] usb 2-1: config 12 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 112.442072][ T5908] usb 2-1: config 12 interface 2 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 112.474007][ T5908] usb 2-1: config 12 interface 78 altsetting 252 has a duplicate endpoint with address 0xB, skipping [ 112.500564][ T5908] usb 2-1: config 12 interface 78 altsetting 252 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 112.515336][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 112.593917][ T6468] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 112.602684][ T6468] team0: Device ipvlan2 is already an upper device of the team interface [ 112.664927][ T5908] usb 2-1: config 12 interface 78 altsetting 252 has a duplicate endpoint with address 0xF, skipping [ 112.695016][ T5908] usb 2-1: config 12 interface 195 altsetting 188 has a duplicate endpoint with address 0x1, skipping [ 112.727164][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.736855][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.747498][ T5908] usb 2-1: config 12 interface 195 altsetting 188 has a duplicate endpoint with address 0x5, skipping [ 112.785475][ T981] usb 1-1: USB disconnect, device number 7 [ 112.834936][ T5908] usb 2-1: config 12 interface 195 altsetting 188 has a duplicate endpoint with address 0x1, skipping [ 112.880165][ T5908] usb 2-1: config 12 interface 195 altsetting 188 has a duplicate endpoint with address 0x5, skipping [ 112.910564][ T5908] usb 2-1: config 12 interface 195 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 112.962706][ T5908] usb 2-1: config 12 interface 195 altsetting 188 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 112.989257][ T5908] usb 2-1: config 12 interface 163 has no altsetting 0 [ 112.999660][ T6472] netlink: 'syz.2.154': attribute type 1 has an invalid length. [ 113.007566][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 113.021872][ T5908] usb 2-1: config 12 interface 2 has no altsetting 0 [ 113.029111][ T5908] usb 2-1: config 12 interface 78 has no altsetting 0 [ 113.037667][ T5908] usb 2-1: config 12 interface 195 has no altsetting 0 [ 113.068885][ T5908] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1010, bcdDevice=96.3b [ 113.081717][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.097641][ T5908] usb 2-1: Product: syz [ 113.112120][ T5908] usb 2-1: Manufacturer: syz [ 113.124967][ T5908] usb 2-1: SerialNumber: syz [ 113.369633][ T6449] openvswitch: netlink: IP tunnel dst address not specified [ 113.385644][ T5908] option 2-1:12.163: GSM modem (1-port) converter detected [ 113.486534][ T981] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 113.515927][ T5908] option 2-1:12.2: GSM modem (1-port) converter detected [ 113.532979][ T5908] option 2-1:12.78: GSM modem (1-port) converter detected [ 113.546401][ T5908] option 2-1:12.195: GSM modem (1-port) converter detected [ 113.636036][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'. [ 113.645751][ T5908] usb 2-1: USB disconnect, device number 10 [ 113.647389][ T6479] pim6reg1: entered promiscuous mode [ 113.654685][ T5908] option 2-1:12.163: device disconnected [ 113.662843][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 113.684968][ T6479] pim6reg1: entered allmulticast mode [ 113.707487][ T981] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 113.727396][ T5908] option 2-1:12.2: device disconnected [ 113.732930][ T981] usb 3-1: config 0 has no interface number 0 [ 113.743469][ T5908] option 2-1:12.78: device disconnected [ 113.749614][ T981] usb 3-1: config 0 interface 12 has no altsetting 0 [ 113.767359][ T981] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 113.777531][ T5908] option 2-1:12.195: device disconnected [ 113.794352][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.813498][ T981] usb 3-1: Product: syz [ 113.823529][ T981] usb 3-1: Manufacturer: syz [ 113.833606][ T981] usb 3-1: SerialNumber: syz [ 113.847763][ T981] usb 3-1: config 0 descriptor?? [ 114.092329][ T6483] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 114.348214][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 114.495497][ T6490] netlink: 'syz.4.159': attribute type 10 has an invalid length. [ 114.518131][ T981] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 114.525983][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 114.532413][ T981] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 114.541754][ T981] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 114.550400][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 114.559343][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.569693][ T981] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 114.582162][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.653512][ T981] usb 3-1: USB disconnect, device number 8 [ 114.664992][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.699022][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.740663][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 114.762959][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.034485][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 115.040391][ T9] usbtmc 2-1:16.0: can't read capabilities [ 115.315951][ T9] usb 2-1: USB disconnect, device number 11 [ 115.325115][ T6483] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 115.366020][ T6501] binder: 6498:6501 ioctl 40096102 80000000 returned -22 [ 115.375130][ T6504] syzkaller1: entered promiscuous mode [ 115.394757][ T6504] syzkaller1: entered allmulticast mode [ 115.817965][ T6518] input: syz1 as /devices/virtual/input/input12 [ 116.448913][ T6525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.168'. [ 116.832112][ T6532] netlink: 72 bytes leftover after parsing attributes in process `syz.2.168'. [ 116.874937][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 117.088830][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 117.288192][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.315056][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.342059][ T24] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.364885][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.394221][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 117.912155][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.946807][ T24] usb 1-1: config 0 descriptor?? [ 118.445239][ T6556] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 118.506283][ T6555] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 118.568511][ T6555] team0: Port device dummy0 added [ 119.021746][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 119.028435][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 119.069795][ T24] usb 1-1: USB disconnect, device number 8 [ 119.421315][ T6566] xt_CT: No such helper "pptp" [ 119.734116][ T6572] binder: 6570:6572 ioctl 40096102 80000000 returned -22 [ 120.177016][ T6589] syzkaller1: entered promiscuous mode [ 120.190539][ T6589] syzkaller1: entered allmulticast mode [ 120.908440][ T6605] fuse: Bad value for 'user_id' [ 121.008600][ T6602] tipc: Started in network mode [ 121.013812][ T6602] tipc: Node identity 9ea1c1560ea7, cluster identity 4711 [ 121.061591][ T6605] fuse: Bad value for 'user_id' [ 121.084764][ T6602] tipc: Enabled bearer , priority 0 [ 121.096201][ T6604] syzkaller0: entered promiscuous mode [ 121.103252][ T6604] syzkaller0: entered allmulticast mode [ 121.280061][ T6602] tipc: Resetting bearer [ 121.309526][ T6601] tipc: Resetting bearer [ 121.321343][ T6601] tipc: Disabling bearer [ 121.335981][ T5830] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 121.526965][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.567985][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.598849][ T5830] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 121.647348][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.691430][ T5830] usb 2-1: config 0 descriptor?? [ 122.391734][ T5830] usbhid 2-1:0.0: can't add hid device: -71 [ 122.397850][ T5830] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 122.419788][ T5830] usb 2-1: USB disconnect, device number 12 [ 122.913379][ T6631] binder: 6629:6631 ioctl 40096102 80000000 returned -22 [ 123.018151][ T6635] tipc: Started in network mode [ 123.040639][ T6635] tipc: Node identity 621292ab0e2c, cluster identity 4711 [ 123.068545][ T6635] tipc: Enabled bearer , priority 0 [ 123.095724][ T6638] syzkaller0: entered promiscuous mode [ 123.119031][ T6638] syzkaller0: entered allmulticast mode [ 123.155825][ T6635] FAULT_INJECTION: forcing a failure. [ 123.155825][ T6635] name failslab, interval 1, probability 0, space 0, times 0 [ 123.188099][ T6635] CPU: 0 UID: 0 PID: 6635 Comm: syz.3.199 Not tainted syzkaller #0 PREEMPT(full) [ 123.188114][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.188126][ T6635] Call Trace: [ 123.188131][ T6635] [ 123.188136][ T6635] dump_stack_lvl+0x189/0x250 [ 123.188153][ T6635] ? __pfx____ratelimit+0x10/0x10 [ 123.188166][ T6635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.188178][ T6635] ? __pfx__printk+0x10/0x10 [ 123.188195][ T6635] should_fail_ex+0x414/0x560 [ 123.188213][ T6635] should_failslab+0xa8/0x100 [ 123.188225][ T6635] kmem_cache_alloc_node_noprof+0x77/0x710 [ 123.188238][ T6635] ? __alloc_skb+0x112/0x2d0 [ 123.188250][ T6635] __alloc_skb+0x112/0x2d0 [ 123.188261][ T6635] __ipv6_ifa_notify+0x1e8/0xac0 [ 123.188280][ T6635] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 123.188295][ T6635] ? __lock_acquire+0xab9/0xd20 [ 123.188309][ T6635] ? __local_bh_enable_ip+0x12d/0x1c0 [ 123.188319][ T6635] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.188333][ T6635] ? __local_bh_enable_ip+0x12d/0x1c0 [ 123.188342][ T6635] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 123.188358][ T6635] addrconf_ifdown+0xe69/0x1880 [ 123.188375][ T6635] ? tls_dev_event+0x717/0xec0 [ 123.188383][ T6635] ? __pfx_addrconf_ifdown+0x10/0x10 [ 123.188402][ T6635] addrconf_notify+0x1bc/0x1010 [ 123.188419][ T6635] notifier_call_chain+0x1b6/0x3e0 [ 123.188435][ T6635] netif_set_mtu_ext+0x594/0x7d0 [ 123.188449][ T6635] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 123.188458][ T6635] ? __mutex_trylock_common+0x153/0x260 [ 123.188471][ T6635] ? __pfx___mutex_trylock_common+0x10/0x10 [ 123.188485][ T6635] ? rcu_is_watching+0x15/0xb0 [ 123.188497][ T6635] ? trace_contention_end+0x39/0x120 [ 123.188511][ T6635] netif_set_mtu+0xa4/0x150 [ 123.188520][ T6635] ? __pfx_netif_set_mtu+0x10/0x10 [ 123.188528][ T6635] ? __lock_acquire+0xab9/0xd20 [ 123.188543][ T6635] ? netdev_name_node_lookup+0xdf/0x120 [ 123.188560][ T6635] dev_set_mtu+0x126/0x260 [ 123.188572][ T6635] dev_ioctl+0x7b4/0x1150 [ 123.188587][ T6635] sock_do_ioctl+0x22c/0x300 [ 123.188602][ T6635] ? __pfx_sock_do_ioctl+0x10/0x10 [ 123.188622][ T6635] compat_sock_ioctl+0xb8d/0xc80 [ 123.188637][ T6635] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 123.188650][ T6635] ? __fget_files+0x3a0/0x420 [ 123.188658][ T6635] ? __fget_files+0x2a/0x420 [ 123.188669][ T6635] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 123.188682][ T6635] __ia32_compat_sys_ioctl+0x543/0x840 [ 123.188696][ T6635] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 123.188709][ T6635] ? __fget_files+0x3a0/0x420 [ 123.188721][ T6635] ? fput+0xa0/0xd0 [ 123.188732][ T6635] ? ksys_write+0x22a/0x250 [ 123.188746][ T6635] ? __pfx_ksys_write+0x10/0x10 [ 123.188760][ T6635] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 123.188773][ T6635] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.188786][ T6635] __do_fast_syscall_32+0xb6/0x2b0 [ 123.188800][ T6635] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.188814][ T6635] do_fast_syscall_32+0x34/0x80 [ 123.188826][ T6635] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.188838][ T6635] RIP: 0023:0xf7f54539 [ 123.188852][ T6635] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 123.188860][ T6635] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 123.188871][ T6635] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 123.188878][ T6635] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.188883][ T6635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.188888][ T6635] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 123.188894][ T6635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.188908][ T6635] [ 123.191925][ T6635] tipc: Resetting bearer [ 123.675584][ T6634] tipc: Resetting bearer [ 123.785590][ T6634] tipc: Disabling bearer [ 123.818240][ T6645] deleting an unspecified loop device is not supported. [ 123.981810][ T6648] bridge0: entered allmulticast mode [ 124.060069][ T6648] pim6reg: entered allmulticast mode [ 124.134052][ T6649] fuse: Unknown parameter ' )xbrqu[.]y^9n FɌsjPb. y) 4/h j{RG̫w]g_ cIem4 [ 124.134052][ T6649] [/t&S2@kHtH@j(3Cȴ4&}0 [ 124.134052][ T6649] hFأg0j#Ή?/OE~5p' [ 125.572143][ T6661] input: syz1 as /devices/virtual/input/input13 [ 127.616661][ T6697] netlink: 'syz.3.215': attribute type 10 has an invalid length. [ 127.744895][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.905440][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 127.922327][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 127.931809][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.961848][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.991591][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.044098][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.161049][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.180623][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.427828][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 128.434772][ T9] usbtmc 5-1:16.0: can't read capabilities [ 129.111964][ T6718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.221'. [ 129.182914][ T6718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.221'. [ 130.960828][ T5830] usb 5-1: USB disconnect, device number 6 [ 132.821558][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.828331][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.937926][ T6772] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 133.034206][ T6776] netlink: 'syz.1.234': attribute type 10 has an invalid length. [ 133.120087][ T6776] team0: Port device dummy0 added [ 133.884938][ T981] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 134.075113][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 134.117364][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.204989][ T981] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 134.305214][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.348525][ T981] usb 5-1: config 0 descriptor?? [ 134.405420][ T6797] tipc: Started in network mode [ 134.426324][ T6797] tipc: Node identity 4, cluster identity 4711 [ 134.454145][ T6797] tipc: Node number set to 4 [ 136.348444][ T981] usbhid 5-1:0.0: can't add hid device: -71 [ 136.360360][ T981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 136.423559][ T981] usb 5-1: USB disconnect, device number 7 [ 136.990634][ T6828] binder: 6826:6828 unknown command 0 [ 136.996282][ T6828] binder: 6826:6828 ioctl c0306201 80000080 returned -22 [ 137.006155][ T6828] binder: BINDER_SET_CONTEXT_MGR already set [ 137.012456][ T6828] binder: 6826:6828 ioctl 4018620d 80000040 returned -16 [ 138.534999][ T5874] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.684924][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 138.699386][ T6861] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 138.719008][ T5874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.739015][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.824483][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.880247][ T5874] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 138.918740][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.017107][ T5874] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.097633][ T5874] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.153257][ T5874] usb 4-1: Manufacturer: syz [ 139.199231][ T5874] usb 4-1: config 0 descriptor?? [ 139.504989][ T5874] rc_core: IR keymap rc-hauppauge not found [ 139.510944][ T5874] Registered IR keymap rc-empty [ 139.735599][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.825009][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.858157][ T5874] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 139.877328][ T5874] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 139.957888][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.996274][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 140.065017][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 140.105106][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 140.155701][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 140.196338][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 140.244955][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 140.295234][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 140.327654][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 140.427572][ T5874] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 140.485942][ T981] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 140.536999][ T5874] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 140.550127][ T5874] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 141.129579][ T5874] usb 4-1: USB disconnect, device number 5 [ 141.224947][ T981] usb 2-1: Using ep0 maxpacket: 8 [ 141.242359][ T981] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 141.256821][ T981] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 141.285014][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.307216][ T981] usb 2-1: Product: syz [ 141.322500][ T981] usb 2-1: Manufacturer: syz [ 141.355429][ T981] usb 2-1: SerialNumber: syz [ 141.370970][ T981] usb 2-1: config 0 descriptor?? [ 141.405585][ T981] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 141.424073][ T981] usb 2-1: setting power ON [ 141.434559][ T981] dvb-usb: bulk message failed: -22 (2/0) [ 141.458102][ T981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.593831][ T6890] capability: warning: `syz.0.267' uses deprecated v2 capabilities in a way that may be insecure [ 141.608560][ T6877] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 142.065905][ T981] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 142.074497][ T981] usb 2-1: media controller created [ 142.103411][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.115684][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.144658][ T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.616460][ T981] usb 2-1: selecting invalid altsetting 6 [ 142.639585][ T981] usb 2-1: digital interface selection failed (-22) [ 142.658430][ T981] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 142.708050][ T981] usb 2-1: setting power OFF [ 142.714121][ T981] dvb-usb: bulk message failed: -22 (2/0) [ 142.739944][ T981] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 142.765026][ T981] (NULL device *): no alternate interface [ 142.769134][ T6901] netlink: 'syz.4.268': attribute type 1 has an invalid length. [ 142.816637][ T6903] FAULT_INJECTION: forcing a failure. [ 142.816637][ T6903] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.835250][ T6903] CPU: 1 UID: 0 PID: 6903 Comm: syz.3.270 Not tainted syzkaller #0 PREEMPT(full) [ 142.835275][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.835289][ T6903] Call Trace: [ 142.835296][ T6903] [ 142.835303][ T6903] dump_stack_lvl+0x189/0x250 [ 142.835330][ T6903] ? __pfx____ratelimit+0x10/0x10 [ 142.835350][ T6903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.835372][ T6903] ? __pfx__printk+0x10/0x10 [ 142.835401][ T6903] should_fail_ex+0x414/0x560 [ 142.835432][ T6903] _copy_to_user+0x31/0xb0 [ 142.835455][ T6903] simple_read_from_buffer+0xe1/0x170 [ 142.835485][ T6903] proc_fail_nth_read+0x1b3/0x220 [ 142.835509][ T6903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.835531][ T6903] ? rw_verify_area+0x2a6/0x4d0 [ 142.835552][ T6903] ? __lock_acquire+0xab9/0xd20 [ 142.835567][ T6903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.835589][ T6903] vfs_read+0x200/0xa30 [ 142.835609][ T6903] ? fdget_pos+0x247/0x320 [ 142.835630][ T6903] ? __pfx___mutex_lock+0x10/0x10 [ 142.835652][ T6903] ? __pfx_vfs_read+0x10/0x10 [ 142.835675][ T6903] ? __fget_files+0x2a/0x420 [ 142.835696][ T6903] ? __fget_files+0x3a0/0x420 [ 142.835711][ T6903] ? __fget_files+0x2a/0x420 [ 142.835735][ T6903] ksys_read+0x145/0x250 [ 142.835773][ T6903] ? __pfx_ksys_read+0x10/0x10 [ 142.835805][ T6903] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 142.835828][ T6903] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.835853][ T6903] __do_fast_syscall_32+0xb6/0x2b0 [ 142.835877][ T6903] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.835900][ T6903] do_fast_syscall_32+0x34/0x80 [ 142.835922][ T6903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.835941][ T6903] RIP: 0023:0xf7f54539 [ 142.835955][ T6903] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 142.835968][ T6903] RSP: 002b:00000000f5446590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 142.835985][ T6903] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5446620 [ 142.835997][ T6903] RDX: 000000000000000f RSI: 00000000f73e5ff4 RDI: 0000000000000000 [ 142.836007][ T6903] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 142.836016][ T6903] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.836026][ T6903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.836054][ T6903] [ 143.724973][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 143.724989][ T30] audit: type=1326 audit(1762158611.539:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 143.779428][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.271'. [ 143.831903][ T6891] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.845948][ T6891] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 143.897557][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.919138][ T30] audit: type=1326 audit(1762158611.539:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 144.049350][ T6891] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.087009][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 144.139548][ T30] audit: type=1326 audit(1762158611.539:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 144.144971][ T6891] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 144.184613][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 144.227372][ T6891] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.233556][ T6891] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 144.233569][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.272391][ T30] audit: type=1326 audit(1762158611.539:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 144.570270][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.637973][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.655198][ T30] audit: type=1326 audit(1762158611.539:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 144.695356][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.738000][ T6891] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.743934][ T6891] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 144.787103][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.806777][ T30] audit: type=1326 audit(1762158611.559:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 144.840253][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.935257][ T30] audit: type=1326 audit(1762158611.629:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 144.960050][ T6891] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 144.973858][ T6891] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 145.024985][ T30] audit: type=1326 audit(1762158611.629:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 145.050358][ T30] audit: type=1326 audit(1762158611.629:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 145.074475][ T30] audit: type=1326 audit(1762158611.809:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 145.130951][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 145.140018][ T9] usbtmc 3-1:16.0: can't read capabilities [ 145.355314][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.406245][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.625125][ T6912] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 145.632804][ T5894] usb 3-1: USB disconnect, device number 9 [ 145.804955][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.837132][ T981] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 145.871585][ T981] usb 2-1: USB disconnect, device number 13 [ 145.966193][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 145.980006][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.994511][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.017660][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.032383][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.042440][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.058000][ T9] usb 5-1: config 0 descriptor?? [ 146.267339][ T6964] binder: 6959:6964 ioctl 40096102 80000000 returned -22 [ 146.484089][ T9] hid_parser_main: 5 callbacks suppressed [ 146.484111][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 146.511721][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 146.595083][ T9] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 146.616255][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 146.650255][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 146.670485][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 146.809808][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 146.836284][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 146.844355][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 146.857868][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 146.929839][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 147.206666][ T9] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 147.264137][ T9] microsoft 0003:045E:07DA.0005: no inputs found [ 147.281047][ T9] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 147.571638][ T9] usb 5-1: USB disconnect, device number 8 [ 147.677608][ T6997] fido_id[6997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 148.746114][ T7019] usb usb8: usbfs: process 7019 (syz.4.290) did not claim interface 0 before use [ 149.125727][ T7029] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 149.753032][ T7040] binder: 7037:7040 ioctl 40096102 80000000 returned -22 [ 150.710443][ T7065] FAULT_INJECTION: forcing a failure. [ 150.710443][ T7065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.811687][ T7065] CPU: 0 UID: 0 PID: 7065 Comm: syz.4.302 Not tainted syzkaller #0 PREEMPT(full) [ 150.811712][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.811723][ T7065] Call Trace: [ 150.811731][ T7065] [ 150.811739][ T7065] dump_stack_lvl+0x189/0x250 [ 150.811765][ T7065] ? __pfx____ratelimit+0x10/0x10 [ 150.811787][ T7065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.811809][ T7065] ? __pfx__printk+0x10/0x10 [ 150.811827][ T7065] ? __might_fault+0xb0/0x130 [ 150.811861][ T7065] should_fail_ex+0x414/0x560 [ 150.811891][ T7065] _copy_from_user+0x2d/0xb0 [ 150.811914][ T7065] get_compat_msghdr+0xad/0x4a0 [ 150.811939][ T7065] ? __pfx_get_compat_msghdr+0x10/0x10 [ 150.811969][ T7065] ___sys_sendmsg+0x193/0x2a0 [ 150.811991][ T7065] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.812044][ T7065] ? __fget_files+0x2a/0x420 [ 150.812060][ T7065] ? __fget_files+0x3a0/0x420 [ 150.812086][ T7065] __sys_sendmsg+0x164/0x220 [ 150.812107][ T7065] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.812134][ T7065] ? __pfx_ksys_write+0x10/0x10 [ 150.812159][ T7065] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 150.812184][ T7065] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.812215][ T7065] __do_fast_syscall_32+0xb6/0x2b0 [ 150.812239][ T7065] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.812264][ T7065] do_fast_syscall_32+0x34/0x80 [ 150.812287][ T7065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.812307][ T7065] RIP: 0023:0xf70dd539 [ 150.812322][ T7065] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 150.812335][ T7065] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 150.812354][ T7065] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 150.812366][ T7065] RDX: 0000000020008010 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.812377][ T7065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.812386][ T7065] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.812396][ T7065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.812424][ T7065] [ 151.025076][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.331420][ T981] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 152.525031][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 152.548674][ T981] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 152.605948][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.625084][ T7093] fuse: Bad value for 'fd' [ 152.640790][ T981] usb 2-1: Product: syz [ 152.656290][ T981] usb 2-1: Manufacturer: syz [ 152.672699][ T981] usb 2-1: SerialNumber: syz [ 152.695479][ T981] r8152-cfgselector 2-1: Unknown version 0x0000 [ 152.708780][ T981] r8152-cfgselector 2-1: config 0 descriptor?? [ 153.446584][ T7111] netlink: 'syz.3.312': attribute type 10 has an invalid length. [ 154.465739][ T981] r8152-cfgselector 2-1: Unknown version 0x0000 [ 154.491189][ T981] r8152-cfgselector 2-1: bad CDC descriptors [ 154.748964][ T981] r8152-cfgselector 2-1: USB disconnect, device number 14 [ 155.540144][ T7144] binder: 7142:7144 ioctl 40096102 80000000 returned -22 [ 156.656311][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.327'. [ 156.830580][ T7181] netlink: 'syz.4.327': attribute type 10 has an invalid length. [ 157.349788][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 157.404927][ T5881] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 157.536048][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 157.545643][ T5881] usb 4-1: device descriptor read/64, error -71 [ 157.631927][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 157.820078][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 157.836953][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.845424][ T24] usb 1-1: Product: syz [ 157.855181][ T24] usb 1-1: Manufacturer: syz [ 157.883264][ T24] usb 1-1: SerialNumber: syz [ 157.969427][ T5881] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 157.993535][ T24] usb 1-1: config 0 descriptor?? [ 158.009447][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 158.024779][ T24] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 158.115133][ T5881] usb 4-1: device descriptor read/64, error -71 [ 158.245931][ T5881] usb usb4-port1: attempt power cycle [ 158.330208][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.489088][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.609574][ T24] em28xx 1-1:0.0: chip ID is em2765 [ 158.634948][ T5881] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 158.656049][ T5881] usb 4-1: device descriptor read/8, error -71 [ 158.698524][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.792157][ T50] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.905240][ T5881] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 158.945755][ T5881] usb 4-1: device descriptor read/8, error -71 [ 159.083513][ T5881] usb usb4-port1: unable to enumerate USB device [ 159.105732][ T50] bridge_slave_1: left allmulticast mode [ 159.111656][ T50] bridge_slave_1: left promiscuous mode [ 159.146643][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.195918][ T50] bridge_slave_0: left allmulticast mode [ 159.207681][ T50] bridge_slave_0: left promiscuous mode [ 159.218265][ T24] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 159.226100][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.229698][ T24] em28xx 1-1:0.0: board has no eeprom [ 159.450222][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.467245][ T5147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.481164][ T5147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.491146][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.513708][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.524978][ T24] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 159.533435][ T24] em28xx 1-1:0.0: dvb set to bulk mode. [ 159.539503][ T5881] em28xx 1-1:0.0: Binding DVB extension [ 159.689263][ T981] usb 1-1: USB disconnect, device number 9 [ 159.696476][ T981] em28xx 1-1:0.0: Disconnecting em28xx [ 159.780455][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.793510][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.801936][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.811167][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.818982][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.946160][ T5881] em28xx 1-1:0.0: Registering input extension [ 159.971934][ T981] em28xx 1-1:0.0: Closing input extension [ 160.006659][ T981] em28xx 1-1:0.0: Freeing device [ 160.121168][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.161776][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.186071][ T50] bond0 (unregistering): Released all slaves [ 160.386627][ T50] tipc: Left network mode [ 160.826666][ T7239] binder: 7233:7239 ioctl 40096102 80000000 returned -22 [ 161.252318][ T50] hsr_slave_0: left promiscuous mode [ 161.270091][ T50] hsr_slave_1: left promiscuous mode [ 161.436129][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.443568][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.507394][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.524012][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.917603][ T5147] Bluetooth: hci4: command tx timeout [ 162.220258][ T50] veth1_macvtap: left promiscuous mode [ 162.228545][ T50] veth0_macvtap: left promiscuous mode [ 162.240174][ T50] veth1_vlan: left promiscuous mode [ 162.245831][ T50] veth0_vlan: left promiscuous mode [ 163.223267][ T7283] dlm: plock device version mismatch: kernel (1.2.0), user (1.33554432.4294901762) [ 163.313239][ T7284] capability: warning: `syz.1.354' uses 32-bit capabilities (legacy support in use) [ 163.489790][ T50] team0 (unregistering): Port device team_slave_1 removed [ 163.533899][ T50] team0 (unregistering): Port device team_slave_0 removed [ 163.870270][ T50] team0 (unregistering): Port device dummy0 removed [ 164.018742][ T5147] Bluetooth: hci4: command tx timeout [ 164.072291][ T7267] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 164.129783][ T7222] chnl_net:caif_netlink_parms(): no params data found [ 164.490708][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.502597][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.510695][ T7222] bridge_slave_0: entered allmulticast mode [ 164.520286][ T7222] bridge_slave_0: entered promiscuous mode [ 164.541913][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.560838][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.581051][ T7222] bridge_slave_1: entered allmulticast mode [ 164.607456][ T7222] bridge_slave_1: entered promiscuous mode [ 164.694985][ T5932] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.751516][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.776378][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.866841][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.875772][ T7222] team0: Port device team_slave_0 added [ 164.883278][ T5932] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 164.883304][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.924155][ T7222] team0: Port device team_slave_1 added [ 164.932926][ T7310] binder: 7303:7310 ioctl 40096102 80000000 returned -22 [ 164.948742][ T5932] usb 4-1: config 0 descriptor?? [ 165.029726][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.051469][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.101932][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.144463][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.156186][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.167658][ T5932] usbhid 4-1:0.0: can't add hid device: -71 [ 165.183799][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.284919][ T5932] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 165.317156][ T5932] usb 4-1: USB disconnect, device number 10 [ 165.387282][ T7222] hsr_slave_0: entered promiscuous mode [ 165.394089][ T7222] hsr_slave_1: entered promiscuous mode [ 165.400979][ T7222] debugfs: 'hsr0' already exists in 'hsr' [ 165.407265][ T7222] Cannot create hsr debugfs directory [ 165.421131][ T7325] vlan2: entered promiscuous mode [ 165.426617][ T7325] team0: entered promiscuous mode [ 165.431642][ T7325] team_slave_0: entered promiscuous mode [ 165.438026][ T7325] team_slave_1: entered promiscuous mode [ 165.443879][ T7325] dummy0: entered promiscuous mode [ 165.704980][ T5932] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 165.831672][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.886093][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 165.916777][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.961083][ T5932] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 165.990848][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.015832][ T5932] usb 4-1: config 0 descriptor?? [ 166.022274][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.095910][ T5147] Bluetooth: hci4: command tx timeout [ 166.199220][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.307190][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 166.320639][ T12] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.372421][ T7342] bond_slave_0: entered promiscuous mode [ 166.378400][ T7342] bond_slave_1: entered promiscuous mode [ 166.437186][ T7342] bond_slave_0: left promiscuous mode [ 166.442674][ T7342] bond_slave_1: left promiscuous mode [ 166.536802][ T5932] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 166.675962][ C1] ================================================================== [ 166.684066][ C1] BUG: KASAN: use-after-free in mcp2221_raw_event+0x106a/0x1240 [ 166.691721][ C1] Read of size 1 at addr ffff88805600bfff by task swapper/1/0 [ 166.699178][ C1] [ 166.701496][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 166.701514][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.701524][ C1] Call Trace: [ 166.701533][ C1] [ 166.701541][ C1] dump_stack_lvl+0x189/0x250 [ 166.701565][ C1] ? __kasan_check_byte+0x12/0x40 [ 166.701581][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.701601][ C1] ? lock_release+0x4b/0x3e0 [ 166.701617][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 166.701638][ C1] print_report+0xca/0x240 [ 166.701657][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 166.701685][ C1] kasan_report+0x118/0x150 [ 166.701700][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 166.701726][ C1] mcp2221_raw_event+0x106a/0x1240 [ 166.701749][ C1] ? down_trylock+0x50/0xb0 [ 166.701772][ C1] hid_input_report+0x40a/0x520 [ 166.701791][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 166.701816][ C1] hid_irq_in+0x47e/0x6d0 [ 166.701833][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 166.701853][ C1] dummy_timer+0x85f/0x44c0 [ 166.701888][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 166.701904][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 166.701919][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 166.701934][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 166.701950][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 166.701978][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 166.701994][ C1] ? read_tsc+0x9/0x20 [ 166.702015][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 166.702033][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 166.702052][ C1] handle_softirqs+0x286/0x870 [ 166.702069][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 166.702085][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 166.702102][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 166.702123][ C1] __irq_exit_rcu+0xca/0x1f0 [ 166.702138][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 166.702156][ C1] irq_exit_rcu+0x9/0x30 [ 166.702182][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 166.702209][ C1] [ 166.702214][ C1] [ 166.702219][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.702237][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 166.702261][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 5f cc b7 09 e8 ba bb 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 58 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 166.702274][ C1] RSP: 0018:ffffc90000197b58 EFLAGS: 00000282 [ 166.702289][ C1] RAX: 4732e3fa7e49b800 RBX: 0000000000000000 RCX: 4732e3fa7e49b800 [ 166.702300][ C1] RDX: 0000000000000000 RSI: ffffffff8d70d450 RDI: ffffffff8bbf0760 [ 166.702311][ C1] RBP: ffffc90000197bb0 R08: ffffffff8f7cdc77 R09: 1ffffffff1ef9b8e [ 166.702322][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9b8f R12: ffff88801ca95ac0 [ 166.702334][ C1] R13: dffffc0000000000 R14: ffff88802730bc80 R15: ffff8880b893abd8 [ 166.702361][ C1] ? finish_task_switch+0x266/0x950 [ 166.702386][ C1] __schedule+0x17a0/0x4cc0 [ 166.702413][ C1] ? __pfx_sched_clock_idle_wakeup_event+0x10/0x10 [ 166.702431][ C1] ? __pfx___schedule+0x10/0x10 [ 166.702456][ C1] ? flush_smp_call_function_queue+0x116/0x250 [ 166.702475][ C1] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 166.702498][ C1] schedule_idle+0x52/0x90 [ 166.702515][ C1] do_idle+0x4a7/0x510 [ 166.702529][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.702545][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.702565][ C1] ? __pfx_do_idle+0x10/0x10 [ 166.702583][ C1] ? do_idle+0x4ed/0x510 [ 166.702598][ C1] cpu_startup_entry+0x44/0x60 [ 166.702613][ C1] start_secondary+0x101/0x110 [ 166.702635][ C1] common_startup_64+0x13e/0x147 [ 166.702661][ C1] [ 166.702666][ C1] [ 167.055314][ C1] The buggy address belongs to the physical page: [ 167.061724][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5600b [ 167.070473][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 167.077581][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 167.086186][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 167.094749][ C1] page dumped because: kasan: bad access detected [ 167.101149][ C1] page_owner tracks the page as freed [ 167.106496][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 77311334338, free_ts 150115261782 [ 167.126971][ C1] post_alloc_hook+0x240/0x2a0 [ 167.131734][ C1] get_page_from_freelist+0x2365/0x2440 [ 167.137264][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 167.143058][ C1] alloc_pages_mpol+0x232/0x4a0 [ 167.147895][ C1] allocate_slab+0x96/0x350 [ 167.152397][ C1] ___slab_alloc+0xe94/0x18a0 [ 167.157057][ C1] __slab_alloc+0x65/0x100 [ 167.161457][ C1] kmem_cache_alloc_node_noprof+0x4c5/0x710 [ 167.167338][ C1] kmalloc_reserve+0xbd/0x290 [ 167.171994][ C1] __alloc_skb+0x142/0x2d0 [ 167.176389][ C1] inet6_rt_notify+0x170/0x470 [ 167.181151][ C1] fib6_add_rt2node+0x1876/0x33a0 [ 167.186161][ C1] fib6_add+0x8da/0x18a0 [ 167.190393][ C1] ip6_ins_rt+0xc8/0x120 [ 167.194620][ C1] __ipv6_ifa_notify+0x63f/0xac0 [ 167.199545][ C1] addrconf_dad_completed+0x180/0xd60 [ 167.204901][ C1] page last free pid 5836 tgid 5836 stack trace: [ 167.211204][ C1] __free_frozen_pages+0xbc4/0xd30 [ 167.216310][ C1] __slab_free+0x2e7/0x390 [ 167.220713][ C1] qlist_free_all+0x97/0x140 [ 167.225295][ C1] kasan_quarantine_reduce+0x148/0x160 [ 167.230745][ C1] __kasan_slab_alloc+0x22/0x80 [ 167.235583][ C1] __kmalloc_cache_node_noprof+0x405/0x6f0 [ 167.241380][ C1] __get_vm_area_node+0x13f/0x300 [ 167.246391][ C1] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 167.252274][ C1] vzalloc_noprof+0xb2/0xf0 [ 167.256762][ C1] alloc_counters+0xd3/0x6d0 [ 167.261338][ C1] compat_copy_entries_to_user+0xa4/0x520 [ 167.267061][ C1] do_ip6t_get_ctl+0xb89/0x1180 [ 167.271900][ C1] nf_getsockopt+0x26e/0x290 [ 167.276482][ C1] ipv6_getsockopt+0x1ed/0x290 [ 167.281232][ C1] do_sock_getsockopt+0x372/0x450 [ 167.286252][ C1] __sys_getsockopt+0x128/0x1d0 [ 167.291082][ C1] [ 167.293387][ C1] Memory state around the buggy address: [ 167.299003][ C1] ffff88805600be80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 167.307044][ C1] ffff88805600bf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 167.315088][ C1] >ffff88805600bf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 167.323127][ C1] ^ [ 167.331080][ C1] ffff88805600c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.339124][ C1] ffff88805600c080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.347161][ C1] ================================================================== [ 167.355213][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 167.362414][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 167.371335][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.381371][ C1] Call Trace: [ 167.384658][ C1] [ 167.387489][ C1] dump_stack_lvl+0x99/0x250 [ 167.392074][ C1] ? __asan_memcpy+0x40/0x70 [ 167.396700][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.401909][ C1] ? __pfx__printk+0x10/0x10 [ 167.406502][ C1] vpanic+0x237/0x6d0 [ 167.410485][ C1] ? __pfx_vpanic+0x10/0x10 [ 167.414983][ C1] panic+0xb9/0xc0 [ 167.418696][ C1] ? __pfx_panic+0x10/0x10 [ 167.423102][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 167.428991][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 167.434270][ C1] check_panic_on_warn+0x89/0xb0 [ 167.439204][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 167.444497][ C1] end_report+0x78/0x160 [ 167.448722][ C1] kasan_report+0x129/0x150 [ 167.453208][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 167.458489][ C1] mcp2221_raw_event+0x106a/0x1240 [ 167.463596][ C1] ? down_trylock+0x50/0xb0 [ 167.468098][ C1] hid_input_report+0x40a/0x520 [ 167.472938][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 167.478388][ C1] hid_irq_in+0x47e/0x6d0 [ 167.482704][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 167.488065][ C1] dummy_timer+0x85f/0x44c0 [ 167.492575][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 167.497499][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 167.502422][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 167.507343][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 167.512536][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 167.518521][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 167.524232][ C1] ? read_tsc+0x9/0x20 [ 167.528291][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 167.534083][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 167.539202][ C1] handle_softirqs+0x286/0x870 [ 167.543954][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 167.548703][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 167.553976][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 167.559174][ C1] __irq_exit_rcu+0xca/0x1f0 [ 167.563748][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 167.568931][ C1] irq_exit_rcu+0x9/0x30 [ 167.573155][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 167.578776][ C1] [ 167.581691][ C1] [ 167.584604][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.590572][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 167.596372][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 5f cc b7 09 e8 ba bb 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 58 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 167.616311][ C1] RSP: 0018:ffffc90000197b58 EFLAGS: 00000282 [ 167.622374][ C1] RAX: 4732e3fa7e49b800 RBX: 0000000000000000 RCX: 4732e3fa7e49b800 [ 167.630347][ C1] RDX: 0000000000000000 RSI: ffffffff8d70d450 RDI: ffffffff8bbf0760 [ 167.638326][ C1] RBP: ffffc90000197bb0 R08: ffffffff8f7cdc77 R09: 1ffffffff1ef9b8e [ 167.646322][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9b8f R12: ffff88801ca95ac0 [ 167.654285][ C1] R13: dffffc0000000000 R14: ffff88802730bc80 R15: ffff8880b893abd8 [ 167.662372][ C1] ? finish_task_switch+0x266/0x950 [ 167.667599][ C1] __schedule+0x17a0/0x4cc0 [ 167.672233][ C1] ? __pfx_sched_clock_idle_wakeup_event+0x10/0x10 [ 167.678733][ C1] ? __pfx___schedule+0x10/0x10 [ 167.683583][ C1] ? flush_smp_call_function_queue+0x116/0x250 [ 167.689760][ C1] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 167.695387][ C1] schedule_idle+0x52/0x90 [ 167.699794][ C1] do_idle+0x4a7/0x510 [ 167.703847][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.709986][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.715173][ C1] ? __pfx_do_idle+0x10/0x10 [ 167.719751][ C1] ? do_idle+0x4ed/0x510 [ 167.723975][ C1] cpu_startup_entry+0x44/0x60 [ 167.728722][ C1] start_secondary+0x101/0x110 [ 167.733479][ C1] common_startup_64+0x13e/0x147 [ 167.738411][ C1] [ 167.741674][ C1] Kernel Offset: disabled [ 167.745978][ C1] Rebooting in 86400 seconds..