last executing test programs: 21m18.719872968s ago: executing program 0 (id=1860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x50}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x10000}}, 0xb8}}, 0x0) 21m18.458249089s ago: executing program 0 (id=1862): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x1c0, 0xc8, 0x8, 0x1c0, 0x5803, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x33, 0x0, 0x6}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2, {0xfffffffffffffffe}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x98, 0x5df5, 0x800}}}, {{@ipv6={@mcast2, @private0, [0x0, 0x0, 0xff], [], 'batadv_slave_1\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x1ff, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15e], 0xff}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x6, 0x1, 0x9, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 21m18.090893985s ago: executing program 0 (id=1865): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x2b}, 0x8f89657da89930a4, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}}, 0xe8) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x43, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ec080100"]) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xfffffffc) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$FUSE(r8, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100005) syz_io_uring_submit(0x0, 0x0, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002280)=ANY=[@ANYBLOB="1201100100000040bd283309000000000001090224000100000000090400000103000000092100000001220700090581031000000000d41f60e214314166a3052d282ad5a89b47440ab716c8165933acc299938e1b79e33dcebdcf580b6ec892f1e70711db9c96caef0389e70b2031bf75caf91e98adcec968fef33a66268317c3a6e7bb7d782d7552b6f23e05bfee3f6eb1234ebdba5d4382ff5915364c6dcda781d134238e2f0dc5d69ed58f35baacdb781165f895808005e1bc71fd565aca24d05cc238cb761f4a"], 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0xa7, &(0x7f0000002380)={@empty, @local, @void, {@llc_tr={0x11, {@llc={0x1, 0xaa, '\n', "f35a1fd86f90abd50d27f5d36e12e6d01e45397f62a5471522a3984ff0917b695eb3628e78e4f66d5193084eb974d6d17c16d239c7d734d745a35e2f8ffd3010d402e0cfbf4b223f62a0b1ad08fffe76b143ed29dab062e8ad6babab7b5eb9016a635ab2d4c0f7d67295657e4f2d2215b82d85dbe227819e8cd55d2436f5ad371ead9daed5b0cac9319e61825570ea3d4f12fc8120e1"}}}}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) r11 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f0000000140)=[0x9, 0x5]) 21m14.403614361s ago: executing program 0 (id=1879): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') (async) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x100, 0x3, 0xbfdffff9}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x22, 0x0, @fd_index=0x3}) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x4318, 0x8c, 0x7, 0x5}, {0x88fe, 0x60, 0x6, 0x9}]}) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) 21m14.167236355s ago: executing program 0 (id=1880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000030a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) 21m14.004910779s ago: executing program 0 (id=1881): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = socket(0x2, 0x3, 0x0) accept4(r1, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000400)=0x80, 0x800) (async) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)={0x2, 0x14, 0xd, 0x2, 0x4, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x1f}, @sadb_key={0x1, 0x9}]}, 0x20}}, 0x80) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000001140)={0x3, {{0x2, 0x4e23, @multicast2}}}, 0x90) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r6, 0xc, 0x0, 0x25d4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket(0x10, 0x80002, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) 21m13.022897878s ago: executing program 32 (id=1881): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = socket(0x2, 0x3, 0x0) accept4(r1, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000400)=0x80, 0x800) (async) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)={0x2, 0x14, 0xd, 0x2, 0x4, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x1f}, @sadb_key={0x1, 0x9}]}, 0x20}}, 0x80) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000001140)={0x3, {{0x2, 0x4e23, @multicast2}}}, 0x90) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r6, 0xc, 0x0, 0x25d4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket(0x10, 0x80002, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) 3m42.436506915s ago: executing program 2 (id=5761): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x129642, 0x147) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) fcntl$dupfd(r1, 0x406, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) 3m42.259243754s ago: executing program 2 (id=5762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8013}, 0x0) 3m41.955414709s ago: executing program 2 (id=5766): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000001a00)=0xf2b, 0x37) getsockopt$inet6_buf(r3, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f00000000c0)=0xa4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 3m40.478983016s ago: executing program 2 (id=5771): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000140)=""/7, &(0x7f0000000080)=0x20) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0xffefffffffffffff, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) close_range(r4, 0xffffffffffffffff, 0x0) 3m39.819205541s ago: executing program 2 (id=5772): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x129642, 0x147) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) fcntl$dupfd(r1, 0x406, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002002000000020000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) 3m39.704635394s ago: executing program 2 (id=5774): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r4 = dup(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x90, &(0x7f0000000040)=0x4, 0x0, 0x4) fallocate(r4, 0x10, 0x0, 0x1001062200) 3m24.343201012s ago: executing program 33 (id=5774): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r4 = dup(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x90, &(0x7f0000000040)=0x4, 0x0, 0x4) fallocate(r4, 0x10, 0x0, 0x1001062200) 2m29.213208794s ago: executing program 3 (id=5970): syz_open_dev$tty20(0xc, 0x4, 0x1) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80000, 0x141) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x800) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x3c}}, 0x0) 2m28.689945492s ago: executing program 3 (id=5973): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x8040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffefe) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040b00000000000000ff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001380)=@newtfilter={0x30, 0x28, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x10) 2m27.591052306s ago: executing program 3 (id=5978): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x3, 0x10034c}, &(0x7f00000002c0), &(0x7f0000000080)) io_uring_enter(r0, 0x47bf, 0xfffffffc, 0x2, 0x0, 0x0) 2m27.151447166s ago: executing program 3 (id=5979): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x11000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000140)={0x5, r1, 0x1c, {0x9, 0x1}, 0x6}, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000280)={0x20000000, 0x80, 0x1, 'queue1\x00', 0x1ff}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000044d564b"]) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x34343459}}) 2m26.976466518s ago: executing program 3 (id=5980): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) read(r0, &(0x7f00000011c0)=""/221, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000003}) socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000012c0)="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", 0x1000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, &(0x7f0000000240)=0xff6d) sendto$inet(r3, &(0x7f0000000040)="d4", 0x1, 0x44887, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/105, 0x69, 0x0, 0x0, 0x3d}, &(0x7f0000000280)=0x40) close(0xffffffffffffffff) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3c, r6, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000080)) close(r8) 2m25.844680812s ago: executing program 3 (id=5985): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b000100627269646765000014000280050019000600000005001800010000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000aa000/0x1000)=nil, 0x1000}, 0x1}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386ac23e87fadc61a6160a14a500"], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 2m10.599046053s ago: executing program 34 (id=5985): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b000100627269646765000014000280050019000600000005001800010000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000aa000/0x1000)=nil, 0x1000}, 0x1}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386ac23e87fadc61a6160a14a500"], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1m48.484751261s ago: executing program 5 (id=6080): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3e}, 0x65, r1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000140)="20eba9fdb4cbab48929e1af151000000000000000000000000000100", 0x1c}], 0x1) r3 = socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, 0x0, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e0010300052406000005240000000d240f"], 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599"], 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3e}, 0x65, r1}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) (async) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000140)="20eba9fdb4cbab48929e1af151000000000000000000000000000100", 0x1c}], 0x1) (async) socket(0x10, 0x803, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e0010300052406000005240000000d240f"], 0x0) (async) 1m47.028646218s ago: executing program 5 (id=6087): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010027bd700010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000050000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000020000000000000000000000000000020000ac1414aa000000000000000000000000000000003c00000000000000fc01000000000000000000000000000100000000000100000008000000000000000000007f000001000000000000000000000000000000003200000000000000e0000001000000000000000000000000000080000301e4ffffffffffffff000000000000ff010000000000000000000000000001000000003300000000000000ac1e0001000000000000000000000000043500000000010000000000bf0a00000000000000000000000000000000000000000001000004d43300000000000000e00000010000000000000000000000000300000000000800000000000000000000000000fc000000000000000000000000000001000000003200000002000000ff0200000000000000000000000000010000000001"], 0x23c}}, 0x0) 1m46.755285456s ago: executing program 5 (id=6089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000140a05000000000000000000010000040900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000064000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100000000fd8000000008000140000000da08000240000000000900010073797a300000000005000740ef"], 0xd8}}, 0x0) 1m46.680099438s ago: executing program 5 (id=6090): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056020000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m46.46771891s ago: executing program 5 (id=6091): getpriority(0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000000000042acf64487ae570106d87e7c4e2bf2f40000e32b131ca916864223d197ac0c6ea246c81f9e1df9cdba9499cf288a65b8794ada31343c3fac0ac6ee364cd71ff392"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x80000000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000002000b7080000000001007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0xa, 0xff7, &(0x7f0000001e00)=""/4087, 0x41100}, 0x94) r8 = dup(r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd700000000000240000001800018014000200766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x40, 0x7fff7ffd}]}) set_tid_address(0x0) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000040)={0x1856, 0x4, 0xffff, 0xfffffff9, 0x11, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r8, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000418e01400004fcff", 0x58}], 0x1) read$FUSE(r8, &(0x7f00000040c0)={0x2020}, 0xf4d) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x44, 0x800, 0x23456}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000001c0)={0x81, 0xffffffffffffffff, 0xd, {0x7, 0x3}, 0x3}, 0x1) syz_open_dev$sg(&(0x7f00000000c0), 0x7a48ab01, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x90) 1m44.346156042s ago: executing program 5 (id=6099): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x101881) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}]}, 0x1c}}, 0x20000080) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_aout(r3, 0x0, 0xffffffdb) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x1, r8, 0x3}) r9 = dup(r7) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x800, 0xffe, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b3980000e4d6000000de00100d07000000000000009d03740250ceaac594b1b3d741dda1b719b838ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0x1ff, 0x400]}}) r11 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000000, 0x820b01) io_setup(0x3, &(0x7f0000000180)) write$char_usb(r11, &(0x7f0000000040)="e2", 0x2778) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x9, 0x23d9aa02992f3eff, 0x8, 0xc, 0x8, 0xfffffffc, 0x0, 0x0, 0x10, 0x9}}, 0x50) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 1m29.240564501s ago: executing program 35 (id=6099): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x101881) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}]}, 0x1c}}, 0x20000080) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_aout(r3, 0x0, 0xffffffdb) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x1, r8, 0x3}) r9 = dup(r7) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x800, 0xffe, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b3980000e4d6000000de00100d07000000000000009d03740250ceaac594b1b3d741dda1b719b838ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0x1ff, 0x400]}}) r11 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000000, 0x820b01) io_setup(0x3, &(0x7f0000000180)) write$char_usb(r11, &(0x7f0000000040)="e2", 0x2778) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x9, 0x23d9aa02992f3eff, 0x8, 0xc, 0x8, 0xfffffffc, 0x0, 0x0, 0x10, 0x9}}, 0x50) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 17.019542303s ago: executing program 7 (id=6347): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x0, 0xffffffff, 0xffdfffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) io_uring_enter(r0, 0x47f4, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000002700)=ANY=[@ANYBLOB="12012002020000082505a1a44000010203010902440001015c90090904000602020600b6052406000005240001000d240f0107f7ff000600030000090581"], &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x40}}, 0x0) sendto(r3, &(0x7f00000001c0)="167d2dc9010179ad5bf6bffacc291e380d38480eb7b7c6d61aa67daa1ac5732f0a4cd8341d8356dd3c663240a9fbb8eef2b5359eafd7a95e18d8a8957fbb94a3f0a67eac9600e77193c324392b32d7f476b5b9724f0e2b7cd123ce6f21ef474a53ad3ce90fa900a1cec765c5f70c76b6e0babf3343f757c2217936ea2fb5063a7d9b075a505048f0c6cfa89098cd", 0x8e, 0x60000890, 0x0, 0x0) 13.942432199s ago: executing program 7 (id=6358): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863000002"], 0xfce) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'macvlan1\x00'}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000020aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516", 0x5d}, {&(0x7f0000001d00)="0092e9a7e64c32c40a81fa0f64bd9906f29b6a0aa0e850e7eb26dd111c83b33cf6f3f5bfdf52e23faac8580b58c35613a51fec2e1500747c8a72eb20d3d6b9e4e75d266a5440ad6fa037d9055e6a4a6760575b9459419cfc252cb04e3a624aaaa02bf155303808bcb8ec989fd7db312bb9807d1efe0dab699418e3", 0x7b}], 0x2, 0x0, 0x0, 0x7400}, 0x40000) 13.655255376s ago: executing program 7 (id=6359): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) rseq(0x0, 0x0, 0x10000, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r8, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet6_opts(r8, 0x29, 0x36, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1b, r6, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x224b5bee36ba75e4}}, 0x14) unshare(0x2c020400) syz_io_uring_setup(0x5080, &(0x7f0000000180)={0x0, 0xdb0d, 0x800, 0xfffffffd, 0x3b5}, 0x0, 0x0) 10.959360169s ago: executing program 1 (id=6362): r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) pidfd_send_signal(r1, 0x3b, &(0x7f0000000080)={0x3b, 0x8000, 0xfa}, 0x0) r2 = memfd_secret(0x0) ftruncate(r2, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sigaltstack(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0xd121dae3649e435f, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5ce9f7791bb20115}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x4c, r5, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r6 = signalfd(r2, &(0x7f0000000300)={[0x7]}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x4, [@restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}, @fwd={0xc}, @struct={0x1, 0x7, 0x0, 0x4, 0x0, 0x4, [{0x1, 0x4, 0x7fffffff}, {0xb, 0x4, 0x6974}, {0x8, 0x2, 0xa7f7}, {0xb, 0x4, 0x2}, {0x4, 0x0, 0x51a}, {0xc, 0x3, 0x5}, {0x6, 0x5, 0x3}]}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000600)=""/39, 0xac, 0x27, 0x1, 0x4}, 0x28) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0x498}, 0xc) r9 = syz_open_dev$vcsa(&(0x7f0000000740), 0xfffffffffffffbd0, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x14, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0x29}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0xc, 0x2, 0xa, 0x10, 0x10}], &(0x7f0000000400)='syzkaller\x00', 0x80000001, 0xe9, &(0x7f0000000440)=""/233, 0x41000, 0x20, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000680)={0xbc4, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x5, 0x101, 0x800}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r8, r2, r2, r2, r2, r9, r2, r2], &(0x7f00000007c0)=[{0x1, 0x3, 0x3, 0xa}], 0x10, 0x4}, 0x94) r10 = accept4$inet6(r6, &(0x7f00000008c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000900)=0x1c, 0x80800) getsockopt$inet6_mreq(r10, 0x29, 0x2e, &(0x7f0000000940)={@loopback}, &(0x7f0000000980)=0x14) 10.039489657s ago: executing program 8 (id=6365): r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/kcm\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x24040002) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045503, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, 0x0, 0x4804, 0x0) gettid() setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) 8.340564646s ago: executing program 8 (id=6366): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000080)={0x8, r4}) 7.877629193s ago: executing program 1 (id=6368): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x3f, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) 7.360343029s ago: executing program 8 (id=6370): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000025342610ac05dfab493d010203010902120001000000000904000100fffd01"], 0x0) request_key(0x0, 0x0, 0x0, 0x0) unshare(0x22020600) unshare(0x3a000100) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0xfffffffe) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) 7.0338687s ago: executing program 1 (id=6371): unshare(0x62040200) r0 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x1, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 6.887613904s ago: executing program 6 (id=6372): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="29bbb00898932a91fdc72663d9c0db8453d8d007a2e526246a12033ba762e99486df735b", 0x24}, {&(0x7f0000000180)="968d3c41a5e6fdae99e87a3000d741984b96c8410de4253bd9600ea96c6311def2cb3ccd576a691ee803f68469915c514a8690c47ed80804a89af539ef62257f245f13bff95e543f60aae57e03a875bab11eb2fbd7e2692f2f82669aa19aa7fd7777", 0x62}, {&(0x7f0000000280)="6928a223fa4523d694f76b25fe777157067455681d486e98674c27e756cd9811e6daa84b14bd73c6c17535ed7284981751e7d49dede01ec5d9d08aef891c37115681d3c40be829cd5f8b5975f6ddbbf04eecdadca5beab1a5d58", 0x5a}, {&(0x7f0000000200)}, {&(0x7f0000000380)="7b141b6477855b0cbe7d5734189ffbe664e3f5565380abebc2572aeefdb256a4dedcef0ccc309d30e73013a9254e7cde292b67c2b6f4d8583a2b0a64401672f11039f9336828da1e805d73c8afe64c81ce3bdb4ae029a8e80f3df7bc89dc0849a8d63c44d9163b89560effa358ad41ec716110a7b91ed0502798f97daec40860b79f7f05", 0x84}, {&(0x7f0000000300)="56706847fad1e36eaa988d88c4f1941e6d07e4b23540207fc50c40692e069e3053", 0x21}], 0x6, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5aa9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xa0}}, {{&(0x7f0000000600)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000640)="a987397a1d908bda52bdd8e798b3438d8e08896dfa75bb4aee9114d27fbe8885881d84cabac4a7e4fd65a84102d009328f6463cda00ae1b09d619be3353125b3adca04fc144e574b16f84347af1cbcde394477950b795aea55bda5c9ad3556c926231bf310eb9018dc48d33d1f6092c83bdee23b23abaa92d92b9d0870e383ecba0ab07a3aa9c420309745c0b097fa14ba3acde4534a9d", 0x97}, {&(0x7f0000000700)="e3aba342d54672e618a9aca48d6f4b3dc3c8583ab608f80373", 0x19}, {&(0x7f0000000740)="be63c92e109d5d9e8a662177f72b557be590d41f3389476122cceb1874150712602e889a47fc432691a2fbdac6435cf2ecb9212b55c518c01e4c887cb55a85007fe28206c4bc5fce6096b5120a31f4cd6be7fe50296edd71b748cc08175891c3471469240b414f6042d1982a27a67ada58033fe4adc216fae0ff061ce4cb649048e9d3ff34be4c18456516a678f5934f1457cd271f44447fb0ff24325648dc09ec6a365c648c4d3badd6049111229b5ed56e8176f5efb111c460b5e01589db47f65004d29690582bfdf4fb73dfefc91e2980914a2dbbc095dc3c1cad06f96eb7dcbdc00bd0c45afd0e77ed8bf155d4885586418b538e", 0xf6}, {&(0x7f0000000840)="d9573704b110040dd018277ea7029d43aa582c0f2e4e4aa36fafcbcc970439de726895953ca292f0feaf8c00c64ffccb8f7d8b9391c94b66756edd462192d9a58b7803bbea", 0x45}], 0x5, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0xa0}}], 0x2, 0x0) 6.675360002s ago: executing program 6 (id=6374): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380), 0x106, 0x6}}, 0x20) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') listxattr(&(0x7f0000000fc0)='./file0\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x29) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) syz_usb_connect(0x2, 0x63, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xc, 0x94, 0x73, 0x8, 0xc45, 0x60fc, 0xff2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x0, 0x0, 0x10, 0x80, [{{0x9, 0x4, 0x3c, 0x2, 0x0, 0xaf, 0x39, 0xec, 0x0, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "1073"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0xdba, 0x26}, [@acm={0x4, 0x24, 0x2, 0x4}, @country_functional={0x6, 0x24, 0x7, 0x5f, 0x7fff}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xe5, 0x8, 0x1}, @dmm={0x7, 0x24, 0x14, 0xf, 0x7f2}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x0, [0x4]}, @ncm={0x6, 0x24, 0x1a, 0x9, 0xb}]}]}}]}}]}}, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x9f, 0x46d, 0xc090, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xd0, 0x5, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x100, 0x10, 0x1, {0x22, 0xca0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0x0, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x10, 0x5}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x6, 0xa1, 0xb, 0x8, 0x9}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x380a}}, {0x14, &(0x7f0000000240)=@string={0x14, 0x3, "e95217b049b7e4ce2985eb2daf7ededa22eb"}}, {0xc1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/360]}]}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4018, r1}, 0x18) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000000940)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x55, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x136, 0x136, 0x6, [@datasec={0x5, 0x2, 0x0, 0xf, 0x2, [{0x2, 0xae2, 0x7fffffff}, {0x4, 0xfffffff8, 0x80}], "9939"}, @restrict={0x9}, @union={0x7, 0x2, 0x0, 0x5, 0x0, 0x9, [{0xc, 0x3, 0x2}, {0xc, 0x3, 0x57}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xf}, {0x6, 0x2}, {0x3, 0x5}, {0x8, 0x4}, {0x1, 0x5}, {0xd, 0x1}]}, @var={0xf, 0x0, 0x0, 0xe, 0x5, 0x1}, @enum={0xb, 0x4, 0x0, 0x6, 0x4, [{0xf, 0x7}, {0x4, 0x67}, {0x10, 0x2}, {0x6, 0x8}]}, @enum={0x2, 0xa, 0x0, 0x6, 0x4, [{0x3, 0xe9}, {0x8, 0x7}, {0x6, 0x100}, {0x9, 0x8000}, {0x3, 0xdb}, {0x0, 0x7018}, {0x2, 0x6}, {0x2}, {0x1, 0x6}, {0x10, 0x8}]}, @func={0xa, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0xc728b250cd4c7f0, 0x30, 0x1e, 0x2e]}}, &(0x7f0000000d00)=""/207, 0x156, 0xcf, 0x0, 0xfffffffc, 0x10000}, 0x28) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000ec0), 0x400040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x10, 0x1a, &(0x7f0000000500)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x401}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @alu={0x7, 0x0, 0x2, 0x9, 0x7, 0xfffffffffffffff0, 0xfffffffffffffffc}, @generic={0x92, 0xd, 0x3, 0x9, 0xb1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @generic={0xd, 0xf, 0xb, 0x370, 0x40}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000600)='syzkaller\x00', 0x1c7, 0x51, &(0x7f0000000800)=""/81, 0x41000, 0x1, '\x00', r4, @sk_msg=0x7, r5, 0x8, &(0x7f0000000e40)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x1, 0x6, 0x2, 0x6ad89fc0}, 0x10, 0xffffffffffffffff, r6, 0x8, 0x0, &(0x7f0000000f00)=[{0x2, 0x2, 0x5, 0x4}, {0x2, 0x5, 0xa, 0x6}, {0x5, 0x5, 0xe, 0x6}, {0x3, 0x3, 0x2, 0x1}, {0x2, 0x3, 0x1, 0x9}, {0x4, 0x4, 0x5, 0x1}, {0x3, 0x2, 0x5, 0x4}, {0x5, 0x5, 0xf, 0x2}], 0x10, 0xfffffffc}, 0x94) 6.321991194s ago: executing program 7 (id=6376): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f0000000a40)=""/126, 0x7e}, 0x2e4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000200)}, {&(0x7f0000001100)=""/166, 0xa6}, {&(0x7f0000000b80)=""/173, 0xad}, {&(0x7f0000000c40)=""/212, 0xd4}, {&(0x7f0000000d40)=""/236, 0xec}, {&(0x7f0000000e40)=""/60, 0x3c}], 0x6, &(0x7f0000000800)=""/73, 0x49}, 0x1}], 0x2, 0x40012020, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000000)=0x31) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="0111bf"]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x8, @pix={0x400, 0x0, 0x3231564e, 0x7, 0x8, 0xe, 0x5, 0xfffff1e5, 0x1, 0x0, 0x1, 0x2}}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb"], 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffb, 0x5, 0xfffffffffffffffe, 0x4, 0x1002, 0x0, 0xefffffffffffffff, 0x1, 0x0, 0x8000000000000000, 0x0, 0x8000000000000000, 0x4, 0xffffffffffffffff, 0x1000000000000006, 0x8000], 0xd000, 0x36d901}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000000001000, &(0x7f0000000100), 0x2}}, 0x20) 5.413680042s ago: executing program 1 (id=6377): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x2cff, &(0x7f0000000280)={0x0, 0xfffffffc, 0x800, 0x1, 0x1d4}, &(0x7f0000ffe000), &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_proto_private(r2, 0x89ec, &(0x7f0000000840)="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") recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r3) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x900, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x2000000000000) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000000c0)={{0x16, @loopback, 0x4e24, 0x2, 'rr\x00', 0x2c, 0x10000, 0x52}, {@rand_addr=0x64010102, 0x4e24, 0x1, 0x2, 0x5, 0x3}}, 0x44) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0xce) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r9, 0x330b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) 4.715432358s ago: executing program 6 (id=6378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 4.498673666s ago: executing program 6 (id=6379): syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c005090497"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600490000fc"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) openat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) 4.151389809s ago: executing program 1 (id=6380): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000600010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000000800000095000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) clock_nanosleep(0x1, 0x1, 0x0, 0x0) 3.323373359s ago: executing program 4 (id=6381): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="660f3a09c700c462250c08c423e1496bb10e66baf80cb898cdc183ef66bafc0c66edc7442400a0000000c744240200000000ff1c24b9f20b00000f32460f01c90f300f4e62140fc75d6f", 0x46}], 0x31, 0x52, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30008000040601040000000000f75684786e8caefb40ff9abf1900000005000003090002"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000804) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='io_uring_queue_async_work\x00', r3, 0x0, 0x5}, 0x18) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000300)=0x4) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x8810}, 0x40040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600000000000800"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r5 = socket(0x10, 0x3, 0x0) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f00000000c0)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\nT\xdd\xd1{\xff\xcb\xdb\xb1\xfc\xf4\xbc\xc3\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\xa9\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\x06\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17Zf9\xcc\xdcR\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@', 0xffffffffffffffff) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004ac0)={0x2020}, 0x2020) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100003040000003f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x40}}, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) 2.850033373s ago: executing program 8 (id=6382): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa00000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x28) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000440), 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000500)={0xa70000, 0x8000, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x990a60, 0x80000001, '\x00', @p_u8=&(0x7f0000000480)=0x8}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100001600010428bd700000000000fe8000000000000000040000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a010101000000000000000000000000350300000000000001000000000000000000000000000000040000000000000004000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd700000000000000002ff000000000000000008000020ffffffdf0c000800080008000006000008001800"], 0x10c}}, 0x4000004) r4 = epoll_create(0x31) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00000025c0)={0x2008}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsync(r5) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r7, @ANYBLOB="05", @ANYRES32=r6, @ANYRES16=r7], 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000400)={0x1, 0x1, 0x8}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000004c80)={0xe000000d}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x1, @raw_data="9d5dcc684d7857bcda7df742eb7fcb9db9d7335d5969e0569fe57b510de14401e488167afb076e80e2571d2c0ecd86f64227098aa93a0023814ab330c4ff0f0000000000002632594f8f6e94eb9e68c55a52d912967db7166c302e09aefc10e9ccf1714f7bee737d7f28c2662c77ddd7512b984348b85d04970d0431177bd4b80200000070da4a6a0f367f42ee2bd48fbd8b62d0e268cf88a0cdd333529b59444dba0e1123565b0bf47bee4089677af86974c54301ba0c4a2f428c00"}) 2.647892092s ago: executing program 7 (id=6383): socket$netlink(0x10, 0x3, 0x400000000000004) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r2 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x1885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x80800}) (async) io_uring_enter(r2, 0xb516, 0xc2de, 0x8, 0x0, 0x0) (async) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001440)=""/126, 0x7e, 0x41) shutdown(r0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0240}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x1, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) (async) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x4cf, 0x3a, '\'\xf4-.]\\+%$)*\\@/,$.', 0x3a, '', 0x3a, './file0'}, 0x38) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r10 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.519356757s ago: executing program 4 (id=6384): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="29bbb00898932a91fdc72663d9c0db8453d8d007a2e526246a12033ba762e99486df735b", 0x24}, {&(0x7f0000000180)="968d3c41a5e6fdae99e87a3000d741984b96c8410de4253bd9600ea96c6311def2cb3ccd576a691ee803f68469915c514a8690c47ed80804a89af539ef62257f245f13bff95e543f60aae57e03a875bab11eb2fbd7e2692f2f82669aa19aa7fd7777", 0x62}, {&(0x7f0000000280)="6928a223fa4523d694f76b25fe777157067455681d486e98674c27e756cd9811e6daa84b14bd73c6c17535ed7284981751e7d49dede01ec5d9d08aef891c37115681d3c40be829cd5f8b5975f6ddbbf04eecdadca5beab1a5d58", 0x5a}, {&(0x7f0000000200)}, {&(0x7f0000000380)="7b141b6477855b0cbe7d5734189ffbe664e3f5565380abebc2572aeefdb256a4dedcef0ccc309d30e73013a9254e7cde292b67c2b6f4d8583a2b0a64401672f11039f9336828da1e805d73c8afe64c81ce3bdb4ae029a8e80f3df7bc89dc0849a8d63c44d9163b89560effa358ad41ec716110a7b91ed0502798f97daec40860b79f7f05", 0x84}, {&(0x7f0000000300)="56706847fad1e36eaa988d88c4f1941e6d07e4b23540207fc50c40692e069e3053", 0x21}], 0x6, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5aa9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xa0}}, {{&(0x7f0000000600)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000640)="a987397a1d908bda52bdd8e798b3438d8e08896dfa75bb4aee9114d27fbe8885881d84cabac4a7e4fd65a84102d009328f6463cda00ae1b09d619be3353125b3adca04fc144e574b16f84347af1cbcde394477950b795aea55bda5c9ad3556c926231bf310eb9018dc48d33d1f6092c83bdee23b23abaa92d92b9d0870e383ecba0ab07a3aa9c420309745c0b097fa14ba3acde4534a9d", 0x97}, {&(0x7f0000000700)="e3aba342d54672e618a9aca48d6f4b3dc3c8583ab608f80373", 0x19}, {&(0x7f0000000740)="be63c92e109d5d9e8a662177f72b557be590d41f3389476122cceb1874150712602e889a47fc432691a2fbdac6435cf2ecb9212b55c518c01e4c887cb55a85007fe28206c4bc5fce6096b5120a31f4cd6be7fe50296edd71b748cc08175891c3471469240b414f6042d1982a27a67ada58033fe4adc216fae0ff061ce4cb649048e9d3ff34be4c18456516a678f5934f1457cd271f44447fb0ff24325648dc09ec6a365c648c4d3badd6049111229b5ed56e8176f5efb111c460b5e01589db47f65004d29690582bfdf4fb73dfefc91e2980914a2dbbc095dc3c1cad06f96eb7dcbdc00bd0c45afd0e77ed8bf155d4885586418b538e", 0xf6}, {&(0x7f0000000840)="d9573704b110040dd018277ea7029d43aa582c0f2e4e4aa36fafcbcc970439de726895953ca292f0feaf8c00c64ffccb8f7d8b9391c94b66756edd462192d9a58b7803bbea", 0x45}], 0x5, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0xa0}}], 0x2, 0x0) 2.399484092s ago: executing program 4 (id=6385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c220400002e0000000000000c0003"], 0x30}}, 0x0) 2.350015045s ago: executing program 7 (id=6386): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000500)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af750102030109022d0002080910030904180202b41d3d0109050e03090000000109058503"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x62, &(0x7f0000000200)=@string={0x62, 0x3, "20dba189924a0ed5db8ad51b3d59b5748da6d05c4349656ea2b1ddc25505b828d9b136fd45be48c2127480f635c260eae1d46187946f57fce71a883c5df552550d13a96272611a1885ac2d81cd813565a182c347827e670bb4143333c577768d"}}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='timers\x00') syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x10) pread64(r3, &(0x7f0000000040)=""/44, 0x2c, 0x40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="540100001a00130700000000fcffffff00000000000000000000000000040001ac141412000000000000000000000004000000004e2100000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) r5 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0xafc, 0x5, 0x4, 0x100000, 0x4, {}, {0x3, 0x2, 0x3, 0x1, 0xc, 0x8, "361ed7dc"}, 0x4, 0x3, {0x0}, 0x9}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) sched_setattr(r7, &(0x7f0000000380)={0x38, 0x0, 0x1000002c, 0xb, 0x8, 0x3, 0x3, 0x3, 0x9, 0x6}, 0x0) io_uring_setup(0x6523, &(0x7f00000007c0)={0x0, 0x9c55, 0x4000, 0x3, 0x304}) 2.150670686s ago: executing program 4 (id=6387): unshare(0x62040200) r0 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x1, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 919.449995ms ago: executing program 6 (id=6388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000f00a05000000000000000000010000040900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000064000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100000000fd8000000008000140000000da08000240000000000900010073797a300000000005000740ef"], 0xd8}}, 0x0) 913.284867ms ago: executing program 1 (id=6389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) (async) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (async) close(0x3) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d"], 0x0) (async, rerun: 64) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) (rerun: 64) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) (async) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x81, 0x40, 0x95, [{{0x9, 0x4, 0x0, 0x6d, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xd, 0x9, 0xd}}}}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x5, &(0x7f0000002280)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x2024}}, {0xe, &(0x7f0000002400)=@string={0xe, 0x3, "c422d81f7246c032ffa16f48"}}]}) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) (async, rerun: 64) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) (rerun: 64) 897.119933ms ago: executing program 8 (id=6390): r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000380)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000100)=0x9) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000340)) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000140)={0x2, 0x3, 0x5, 0x216c, 0x81d}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000080)=0xfffffffd, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe]}}, 0x5c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r6, &(0x7f0000006180)={0x2020}, 0x2020) lseek(r6, 0xfffffffffffffffd, 0x1) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x205) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000180)) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60110000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c", 0xbd}], 0x1}, 0x94) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) 862.698642ms ago: executing program 4 (id=6391): syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x2800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback, 0xffffffffffffffff, 0x1f, 0x10}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x4, 0x0, 0x0, 0xef5f, 0x0, 0x2, 0x6], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000180)={r6, r7+10000000}, 0x1, 0x2, 0x1, {0x0, r8}}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r15 = socket(0x1, 0x803, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 475.471138ms ago: executing program 6 (id=6392): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000025342610ac05dfab493d010203010902120001000000000904000100fffd01"], 0x0) request_key(0x0, 0x0, 0x0, 0x0) unshare(0x22020600) unshare(0x3a000100) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0xfffffffe) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) 138.282062ms ago: executing program 8 (id=6393): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{0x0, 0x11}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) close(0x3) 0s ago: executing program 4 (id=6394): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="183c7613b01d66571e583e7c88a8", 0xe, 0x40080, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @broadcast}, 0x14) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = inotify_init1(0x800) inotify_rm_watch(r4, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xa4, r5, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x13ccf426, 0x6f}}}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="292f1b11fb0cac294bdac3a0cc24e2b956138d40fd07a6c26fc2c5a0"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x6}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x55}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xf9}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xd9}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x4, @loopback={0x0, 0xac141400}}, 0x1c) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.6.5962'. [ 1757.427182][T25106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1757.438858][T25106] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1757.447730][T25106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1757.459656][T25106] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1757.467782][T25106] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1757.477920][T24153] bond0: (slave syz_tun): Releasing backup interface [ 1757.862236][T23915] usb 7-1: Failed to submit usb control message: -71 [ 1757.862638][ T5939] usb 7-1: USB disconnect, device number 6 [ 1757.871843][T23915] usb 7-1: unable to send the bmi data to the device: -71 [ 1757.896594][T23915] usb 7-1: unable to get target info from device [ 1757.909920][T23915] usb 7-1: could not get target info (-71) [ 1757.916105][T23915] usb 7-1: could not probe fw (-71) [ 1758.016029][T25554] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.046392][ T5891] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1758.177607][T25990] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1758.199288][T25554] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.256040][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1758.278220][ T5891] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1758.301624][ T5891] usb 5-1: can't read configurations, error -71 [ 1758.346380][T25990] usb 6-1: Using ep0 maxpacket: 8 [ 1758.353366][T25990] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 1758.376333][T25990] usb 6-1: config 127 has no interface number 1 [ 1758.386876][T25990] usb 6-1: config 127 interface 171 has no altsetting 0 [ 1758.403079][T25990] usb 6-1: config 127 interface 0 has no altsetting 0 [ 1758.417434][T25554] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.429554][T25990] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1758.449126][T25990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.470834][T25990] usb 6-1: Product: syz [ 1758.475073][T25990] usb 6-1: Manufacturer: syz [ 1758.500563][T25990] usb 6-1: SerialNumber: syz [ 1758.540205][T28122] batman_adv: batadv0: Adding interface: ipvlan4 [ 1758.553649][T28122] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.590633][T28122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.603586][T28122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.622811][T28122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 1758.633677][T28125] sctp: [Deprecated]: syz.6.5971 (pid 28125) Use of int in maxseg socket option. [ 1758.633677][T28125] Use struct sctp_assoc_value instead [ 1758.660540][T28122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.682049][T28122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 1758.713037][T28122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.723601][T28122] batman_adv: batadv0: Interface activated: ipvlan4 [ 1758.775459][T25990] xr_serial 6-1:127.171: xr_serial converter detected [ 1758.819662][T25990] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1758.826120][T25990] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1758.897192][T25990] usb 6-1: USB disconnect, device number 12 [ 1758.910334][T25990] xr_serial 6-1:127.171: device disconnected [ 1758.945423][T25554] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.268654][ T1226] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1759.464311][ T1226] usb 7-1: Using ep0 maxpacket: 8 [ 1759.483336][ T1226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1759.515243][ T1226] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1759.527414][T25106] Bluetooth: hci5: command tx timeout [ 1759.562974][ T1226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 1759.594371][ T1226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 1759.606657][ T5891] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1759.631536][ T1226] usb 7-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1759.655104][ T1226] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.672734][ T1226] usb 7-1: Product: syz [ 1759.688921][ T1226] usb 7-1: Manufacturer: syz [ 1759.711506][ T1226] usb 7-1: SerialNumber: syz [ 1759.739778][ T1226] usb 7-1: config 0 descriptor?? [ 1759.747993][T28131] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1759.775733][ T1226] radioshark2 7-1:0.0: Invalid radioSHARK2 device [ 1759.786967][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 1759.787749][ T1226] radioshark2 7-1:0.0: probe with driver radioshark2 failed with error -22 [ 1759.812028][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.840094][ T5891] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1759.876169][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.914394][ T5891] usb 5-1: config 0 descriptor?? [ 1760.155188][T25990] usb 5-1: USB disconnect, device number 118 [ 1760.938801][T25554] bond0 (unregistering): (slave 1@ÿ): Releasing backup interface [ 1760.965521][T25554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1760.985277][T25554] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1760.995426][T25554] bond0 (unregistering): Released all slaves [ 1761.022549][T25554] bond1 (unregistering): Released all slaves [ 1761.073030][T28105] chnl_net:caif_netlink_parms(): no params data found [ 1761.459253][T28161] __nla_validate_parse: 6 callbacks suppressed [ 1761.459274][T28161] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5982'. [ 1761.539892][T28165] sctp: [Deprecated]: syz.4.5983 (pid 28165) Use of int in maxseg socket option. [ 1761.539892][T28165] Use struct sctp_assoc_value instead [ 1761.596356][T25106] Bluetooth: hci5: command tx timeout [ 1761.784645][T28105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.820603][T28105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.845811][T28105] bridge_slave_0: entered allmulticast mode [ 1761.892867][T28105] bridge_slave_0: entered promiscuous mode [ 1761.984734][T28105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.036732][ T1226] usb 7-1: USB disconnect, device number 7 [ 1762.046375][T28105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.053667][T28105] bridge_slave_1: entered allmulticast mode [ 1762.138336][T28105] bridge_slave_1: entered promiscuous mode [ 1762.296373][ T5891] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1762.371686][T28177] bridge2: entered promiscuous mode [ 1762.458733][T28191] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5989'. [ 1762.506301][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 1762.516280][T28191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5989'. [ 1762.562457][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1762.576254][T28191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5989'. [ 1762.597415][ T5891] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1762.666175][ T5891] usb 5-1: string descriptor 0 read error: -22 [ 1762.672615][ T5891] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1762.698657][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.706718][ T1226] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1762.722888][T28105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1762.745341][ T5891] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1762.799357][ T5891] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1762.847198][ T5891] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1762.865076][T28105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1762.889901][ T5891] usb 5-1: media controller created [ 1762.906304][ T1226] usb 7-1: Using ep0 maxpacket: 32 [ 1762.939413][ T1226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1762.966450][ T1226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1762.975735][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1763.006631][ T1226] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1763.055416][ T1226] usb 7-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 1763.095891][ T1226] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.139463][ T1226] usb 7-1: config 0 descriptor?? [ 1763.367246][T28105] team0: Port device team_slave_0 added [ 1763.515005][T28105] team0: Port device team_slave_1 added [ 1763.552045][T28193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.581475][T28193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1763.677423][T25106] Bluetooth: hci5: command tx timeout [ 1763.805835][T25554] hsr_slave_0: left promiscuous mode [ 1763.832300][T25554] hsr_slave_1: left promiscuous mode [ 1763.848927][ T1226] usbhid 7-1:0.0: can't add hid device: -71 [ 1763.849865][T25554] batman_adv: batadv0: Interface deactivated: dummy0 [ 1763.855579][ T1226] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1763.899121][T25554] batman_adv: batadv0: Removing interface: dummy0 [ 1763.914610][ T1226] usb 7-1: USB disconnect, device number 8 [ 1763.992795][T25554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1764.014285][T25554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1764.040875][T25554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1764.063063][T25554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1764.127289][T25554] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1764.171974][T25554] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1764.206468][T25554] batman_adv: batadv0: Removing interface: ipvlan2 [ 1764.245131][T25554] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 1764.268285][T25554] batman_adv: batadv0: Removing interface: ipvlan4 [ 1764.368874][T25554] veth0_macvtap: left promiscuous mode [ 1764.419422][T25554] veth1_vlan: left promiscuous mode [ 1764.430993][T25554] veth0_vlan: left promiscuous mode [ 1764.922079][T25554] pim6reg (unregistering): left allmulticast mode [ 1765.086098][ T1226] usb 5-1: USB disconnect, device number 119 [ 1765.269913][T28220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5996'. [ 1765.516831][ T5891] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1765.671779][ T5891] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1765.706310][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.714389][ T5891] usb 6-1: Product: syz [ 1765.721232][ T5891] usb 6-1: Manufacturer: syz [ 1765.725921][ T5891] usb 6-1: SerialNumber: syz [ 1765.749869][ T5891] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1765.759622][T25106] Bluetooth: hci5: command tx timeout [ 1765.819337][T11678] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1766.025752][T25554] team0 (unregistering): Port device team_slave_1 removed [ 1766.115947][T25554] team0 (unregistering): Port device team_slave_0 removed [ 1766.469918][ T5891] usb 6-1: USB disconnect, device number 13 [ 1766.887590][T11678] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1766.900748][T11678] ath9k_htc: Failed to initialize the device [ 1766.926007][ T5891] usb 6-1: ath9k_htc: USB layer deinitialized [ 1767.115609][T28224] validate_nla: 44 callbacks suppressed [ 1767.115636][T28224] netlink: 'syz.5.5998': attribute type 1 has an invalid length. [ 1767.132994][T28105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1767.151440][T28105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1767.206692][T28105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1767.247762][T28105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1767.255859][T28105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1767.289184][T28105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1767.332513][T28218] batman_adv: batadv0: Adding interface: ipvlan3 [ 1767.352049][T28218] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1767.382361][T28218] batman_adv: batadv0: Interface activated: ipvlan3 [ 1767.406321][T11678] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1767.598475][T11678] usb 6-1: Using ep0 maxpacket: 32 [ 1767.629838][T11678] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1767.658212][T11678] usb 6-1: config 0 has no interface number 0 [ 1767.676571][T11678] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1767.690638][T28105] hsr_slave_0: entered promiscuous mode [ 1767.701537][T11678] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1767.718481][T28105] hsr_slave_1: entered promiscuous mode [ 1767.730731][T28105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1767.740873][T28105] Cannot create hsr debugfs directory [ 1767.756497][T11678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.798991][T11678] usb 6-1: Product: syz [ 1767.803223][T11678] usb 6-1: Manufacturer: syz [ 1767.829971][T11678] usb 6-1: SerialNumber: syz [ 1767.911656][T11678] usb 6-1: config 0 descriptor?? [ 1767.938585][T11678] smsc75xx v1.0.0 [ 1768.545137][T28224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.601097][T28224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.898129][T28224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.946413][T28224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.410602][T11678] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1769.627159][T11678] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1769.684885][T11678] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1769.754257][T11678] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1769.812376][T11678] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1769.859182][T11678] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1769.917051][T11678] usb 6-1: USB disconnect, device number 14 [ 1770.617489][T28105] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1770.678162][T28105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1770.728104][T11678] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1770.743386][T28105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1770.803984][T28105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1770.916703][T11678] usb 6-1: Using ep0 maxpacket: 32 [ 1770.937471][T11678] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1770.966291][T11678] usb 6-1: config 0 has no interface number 0 [ 1770.982138][T11678] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1771.007298][T11678] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1771.056696][T11678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.110150][T11678] usb 6-1: Product: syz [ 1771.114402][T11678] usb 6-1: Manufacturer: syz [ 1771.136484][ T5891] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1771.155098][T11678] usb 6-1: SerialNumber: syz [ 1771.172598][T11678] usb 6-1: config 0 descriptor?? [ 1771.186809][T28283] batman_adv: batadv0: Adding interface: ipvlan4 [ 1771.192628][T28290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6009'. [ 1771.208444][T11678] smsc75xx v1.0.0 [ 1771.216789][T28283] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1771.293152][T28283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 1771.331628][T28283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.359942][T28283] batman_adv: batadv0: Interface activated: ipvlan4 [ 1771.421711][ T5891] usb 7-1: config 0 has no interfaces? [ 1771.587877][T28296] ip6t_srh: unknown srh match flags B153 [ 1771.666631][T28105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1771.722570][T28105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1771.740188][ T5891] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1771.797867][T23911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.805152][T23911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1771.806748][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.852300][ T5891] usb 7-1: Product: syz [ 1771.872630][ T5891] usb 7-1: Manufacturer: syz [ 1771.891016][ T5891] usb 7-1: SerialNumber: syz [ 1771.923854][ T5891] usb 7-1: config 0 descriptor?? [ 1771.934659][T28270] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6007'. [ 1771.937326][T11678] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1772.003519][T23916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.009547][T11678] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1772.010775][T23916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1772.061048][T11678] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1772.119369][T11678] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1772.156386][T11678] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1772.197502][T11678] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1772.230937][T11678] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 1772.328421][T28299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6007'. [ 1772.363733][ T5891] usb 6-1: USB disconnect, device number 15 [ 1772.728638][T28105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1772.845896][T28305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6011'. [ 1773.287957][T28105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1773.949220][T28105] veth0_vlan: entered promiscuous mode [ 1774.152504][T28105] veth1_vlan: entered promiscuous mode [ 1774.331859][T28105] veth0_macvtap: entered promiscuous mode [ 1774.414814][T28105] veth1_macvtap: entered promiscuous mode [ 1774.483796][T28105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1774.527722][T28105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1774.774173][T28105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.809869][T28335] loop6: detected capacity change from 0 to 1 [ 1774.820328][T28105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.834613][T28105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.854033][T28105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.863604][T27656] Dev loop6: unable to read RDB block 1 [ 1774.869441][T27656] loop6: unable to read partition table [ 1774.875272][T27656] loop6: partition table beyond EOD, truncated [ 1774.909740][T28335] Dev loop6: unable to read RDB block 1 [ 1774.923051][T28335] loop6: unable to read partition table [ 1774.948649][T28335] loop6: partition table beyond EOD, truncated [ 1774.984203][T28335] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1775.310535][T28345] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6016'. [ 1776.688930][T28345] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1776.979659][T23917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1776.996339][T23917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.167704][T23915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1777.188782][T23915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.249074][T28343] delete_channel: no stack [ 1777.490495][T28373] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6018'. [ 1777.701980][T28376] batman_adv: batadv0: Adding interface: ipvlan5 [ 1777.715905][T28376] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.739637][T28377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6019'. [ 1777.802445][T28376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 1777.831035][T28376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.858673][T28376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 1777.882707][T20124] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1777.887162][T28376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.900346][T20124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1777.909839][T20124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1777.916243][T28376] batman_adv: batadv0: Interface activated: ipvlan5 [ 1777.925672][T20124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1777.935063][T20124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1778.215491][T28384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6021'. [ 1778.429612][T28386] Cannot find add_set index 0 as target [ 1778.460253][T28386] kernel read not supported for file /!selinuÿ (pid: 28386 comm: syz.4.6022) [ 1778.482792][ T30] audit: type=1800 audit(1750953398.331:1152): pid=28386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6022" name=2173656C696E75FF7F dev="mqueue" ino=134701 res=0 errno=0 [ 1778.495752][T28391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6023'. [ 1778.512231][ T1226] usb 7-1: USB disconnect, device number 9 [ 1778.576664][T28391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6023'. [ 1778.585876][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6023'. [ 1779.188473][T28379] chnl_net:caif_netlink_parms(): no params data found [ 1779.429465][T28413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6031'. [ 1779.495529][T28414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6030'. [ 1779.528743][T28412] batman_adv: batadv0: Adding interface: ipvlan2 [ 1779.562297][T28412] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1779.634941][T28412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.661172][T28412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.682536][T28412] batman_adv: batadv0: Interface activated: ipvlan2 [ 1780.002381][T20124] Bluetooth: hci6: command tx timeout [ 1780.603149][ T5939] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1780.756318][T11678] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1780.799513][T28379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.855619][T28379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.897052][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 1780.922166][T28379] bridge_slave_0: entered allmulticast mode [ 1780.972583][ T5939] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1781.016422][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.027276][T28379] bridge_slave_0: entered promiscuous mode [ 1781.059501][T28379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1781.096663][ T5939] usb 5-1: Product: syz [ 1781.101353][ T5939] usb 5-1: Manufacturer: syz [ 1781.106074][ T5939] usb 5-1: SerialNumber: syz [ 1781.152254][T28379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.177125][ T5939] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1781.186627][T28379] bridge_slave_1: entered allmulticast mode [ 1781.215810][T28379] bridge_slave_1: entered promiscuous mode [ 1781.251465][ T5939] r8152-cfgselector 5-1: config 0 descriptor?? [ 1781.293690][T11678] usb 2-1: config 0 has no interfaces? [ 1781.456805][T11678] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1781.545151][T11678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.639202][T11678] usb 2-1: Product: syz [ 1781.666519][T11678] usb 2-1: Manufacturer: syz [ 1781.701633][T11678] usb 2-1: SerialNumber: syz [ 1781.735173][T11678] usb 2-1: config 0 descriptor?? [ 1782.154797][T20124] Bluetooth: hci6: command tx timeout [ 1782.586165][T28379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1782.640016][T28379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1783.060060][T28379] team0: Port device team_slave_0 added [ 1783.099460][T28379] team0: Port device team_slave_1 added [ 1783.146564][T26885] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1783.318503][T26885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.358543][T26885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.377834][T26885] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1783.407171][T28379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1783.433365][T26885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.446365][T28379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1783.497314][T26885] usb 7-1: config 0 descriptor?? [ 1783.544375][T28379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1783.588593][T28379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1783.595633][T28379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1783.676805][T28379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.750258][T26885] cm6533_jd 0003:0D8C:0022.002E: unknown main item tag 0x0 [ 1783.857913][T26885] cm6533_jd 0003:0D8C:0022.002E: unknown main item tag 0x0 [ 1784.057396][T26885] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.002E/input/input91 [ 1784.210718][T28379] hsr_slave_0: entered promiscuous mode [ 1784.238159][T20124] Bluetooth: hci6: command tx timeout [ 1784.259668][T26885] cm6533_jd 0003:0D8C:0022.002E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 1784.302382][T28379] hsr_slave_1: entered promiscuous mode [ 1784.334778][T26885] usb 7-1: USB disconnect, device number 10 [ 1784.396445][T28379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1784.404090][T28379] Cannot create hsr debugfs directory [ 1784.602677][T28451] fido_id[28451]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1784.646482][ T5939] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1784.653487][ T5939] r8152-cfgselector 5-1: bad CDC descriptors [ 1784.676636][ T5939] r8152-cfgselector 5-1: USB disconnect, device number 120 [ 1784.902565][T28453] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6038'. [ 1784.912599][T26885] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1784.942711][T28453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6038'. [ 1785.011349][T28453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6038'. [ 1785.035963][ T5939] usb 2-1: USB disconnect, device number 124 [ 1785.057096][T26885] usb 7-1: device descriptor read/64, error -71 [ 1785.325680][T28461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6040'. [ 1785.326610][T26885] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1785.495927][T26885] usb 7-1: device descriptor read/64, error -71 [ 1785.564989][T28379] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1785.590992][T28379] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1785.606758][ T5939] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1785.615039][T26885] usb usb7-port1: attempt power cycle [ 1785.631396][T28379] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1785.664021][T28379] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1785.796643][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 1785.811883][ T5939] usb 2-1: config 11 has an invalid interface number: 95 but max is 0 [ 1785.847805][ T5939] usb 2-1: config 11 has no interface number 0 [ 1785.847874][ T5939] usb 2-1: config 11 interface 95 has no altsetting 0 [ 1785.848694][ T5939] usb 2-1: language id specifier not provided by device, defaulting to English [ 1785.853307][ T5939] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1785.853343][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.853366][ T5939] usb 2-1: Product: syz [ 1785.853383][ T5939] usb 2-1: SerialNumber: syz [ 1785.986401][T26885] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1786.012587][T28379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.034007][T26885] usb 7-1: device descriptor read/8, error -71 [ 1786.142625][ T5939] usb 2-1: USB disconnect, device number 125 [ 1786.188770][T28379] 8021q: adding VLAN 0 to HW filter on device team0 [ 1786.259364][T23911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.266607][T23911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1786.307206][T26885] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1786.317572][T20124] Bluetooth: hci6: command tx timeout [ 1786.347377][T26885] usb 7-1: device descriptor read/8, error -71 [ 1786.362635][T23911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.369883][T23911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1786.560280][T26885] usb usb7-port1: unable to enumerate USB device [ 1786.879960][T28379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1787.054715][T28488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6045'. [ 1787.143474][T28379] veth0_vlan: entered promiscuous mode [ 1787.180321][T28488] bridge_slave_1: left allmulticast mode [ 1787.186737][T28488] bridge_slave_1: left promiscuous mode [ 1787.234478][T28488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.380362][ T30] audit: type=1326 audit(1750953407.221:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28489 comm="syz.6.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc13a92ab19 code=0x7ffc0000 [ 1787.414835][T28488] bridge_slave_0: left allmulticast mode [ 1787.420779][T28488] bridge_slave_0: left promiscuous mode [ 1787.457772][T28488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.495422][ T30] audit: type=1326 audit(1750953407.221:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28489 comm="syz.6.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc13a92ab19 code=0x7ffc0000 [ 1787.671629][ T30] audit: type=1326 audit(1750953407.221:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28489 comm="syz.6.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc13a92ab19 code=0x7ffc0000 [ 1787.696764][ T1226] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1787.814668][ T30] audit: type=1326 audit(1750953407.221:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28489 comm="syz.6.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc13a92ab19 code=0x7ffc0000 [ 1787.976352][ T30] audit: type=1326 audit(1750953407.221:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28489 comm="syz.6.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13a98e929 code=0x7ffc0000 [ 1788.101535][ T30] audit: type=1326 audit(1750953407.221:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28489 comm="syz.6.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13a98e929 code=0x7ffc0000 [ 1788.130901][T28379] veth1_vlan: entered promiscuous mode [ 1788.297077][ T30] audit: type=1326 audit(1750953407.221:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28489 comm="syz.6.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13a98e929 code=0x7ffc0000 [ 1788.442286][T28379] veth0_macvtap: entered promiscuous mode [ 1788.472413][ T30] audit: type=1326 audit(1750953407.221:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28489 comm="syz.6.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13a98e929 code=0x7ffc0000 [ 1788.500370][T28379] veth1_macvtap: entered promiscuous mode [ 1788.607136][T28495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6048'. [ 1788.640268][ T30] audit: type=1326 audit(1750953407.221:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28489 comm="syz.6.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13a98e929 code=0x7ffc0000 [ 1788.664534][T28495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6048'. [ 1788.687689][T28379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1788.840172][ T30] audit: type=1326 audit(1750953407.221:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28489 comm="syz.6.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc13a92ab19 code=0x7ffc0000 [ 1788.950853][T28379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.984420][T28379] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.044441][T28379] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.066916][T11665] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1789.096688][T28506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6051'. [ 1789.119644][T28379] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.159601][T28379] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.321555][T11665] usb 6-1: config 0 has no interfaces? [ 1789.469565][T11665] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1789.480763][T11665] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.489909][T11665] usb 6-1: Product: syz [ 1789.494390][T11665] usb 6-1: Manufacturer: syz [ 1789.537636][T11665] usb 6-1: SerialNumber: syz [ 1789.567322][T11665] usb 6-1: config 0 descriptor?? [ 1789.594291][T28490] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6046'. [ 1789.629058][ T5939] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1789.846378][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 1789.897097][ T5939] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.969376][ T5939] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1790.031616][ T5203] Dev loop8: unable to read RDB block 1 [ 1790.031874][T25554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1790.088307][ T5939] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1790.105640][ T5203] loop8: unable to read partition table [ 1790.134535][ T5203] loop8: partition table beyond EOD, truncated [ 1790.152408][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1790.178259][ T5939] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1790.196158][T25554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.257055][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.339309][ T5939] usb 5-1: config 0 descriptor?? [ 1790.529796][T23916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1790.544632][T23916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.850591][ T5939] usbhid 5-1:0.0: can't add hid device: -71 [ 1790.856907][ T5954] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1790.863736][ T5939] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1790.895465][ T5939] usb 5-1: USB disconnect, device number 121 [ 1790.910617][T28527] netlink: 'syz.7.6057': attribute type 2 has an invalid length. [ 1791.073349][T28531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6058'. [ 1791.169592][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 1791.243768][ T5954] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 1791.385305][ T5954] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 1791.490124][ T5954] usb 2-1: config 166 has no interface number 0 [ 1791.550396][ T5954] usb 2-1: config 166 has no interface number 1 [ 1791.611038][ T5954] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1791.679739][ T5954] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1791.720975][ T5954] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1791.786262][ T5954] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1791.844855][ T5954] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1791.899133][ T5954] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1791.930392][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.938693][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.957545][ T5954] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1792.020326][ T5954] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1792.061740][T28542] usb usb8: usbfs: process 28542 (syz.4.6062) did not claim interface 0 before use [ 1792.071893][ T5954] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1792.205397][ T5954] usb 2-1: config 166 interface 177 has no altsetting 0 [ 1792.262861][ T5954] usb 2-1: config 166 interface 34 has no altsetting 0 [ 1792.359817][T28545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1792.386385][ T5954] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1792.413354][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.439008][ T5954] usb 2-1: Product: syz [ 1792.446005][ T5954] usb 2-1: Manufacturer: syz [ 1792.464794][ T5954] usb 2-1: SerialNumber: syz [ 1792.935003][ T1226] usb 6-1: USB disconnect, device number 16 [ 1793.002997][T28523] bond1: entered promiscuous mode [ 1793.166464][T28523] bond1: entered allmulticast mode [ 1793.197156][T28523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1793.268487][ T5954] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 1793.540927][ T5954] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 1793.581525][T28564] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6064'. [ 1793.727302][ T5954] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 1793.809360][ T5954] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 1793.846237][ T5954] usb 2-1: No valid video chain found. [ 1793.913176][ T5954] usb 2-1: USB disconnect, device number 126 [ 1794.017645][T28569] sctp: [Deprecated]: syz.6.6065 (pid 28569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1794.017645][T28569] Use struct sctp_sack_info instead [ 1794.770231][ T30] kauditd_printk_skb: 494 callbacks suppressed [ 1794.770249][ T30] audit: type=1326 audit(1750953414.581:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28572 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9278e929 code=0x7ffc0000 [ 1795.069390][T11666] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1795.148102][ T30] audit: type=1326 audit(1750953414.581:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28572 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb9272ab19 code=0x7ffc0000 [ 1795.268490][T28579] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6069'. [ 1795.297968][ T30] audit: type=1326 audit(1750953414.581:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28572 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9278e929 code=0x7ffc0000 [ 1795.306543][T11666] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1795.393699][T28581] tipc: Started in network mode [ 1795.427724][T28581] tipc: Node identity , cluster identity 4711 [ 1795.434135][ T30] audit: type=1326 audit(1750953414.581:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28572 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb9272ab19 code=0x7ffc0000 [ 1795.565523][T11666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.628881][T11666] usb 7-1: Product: syz [ 1795.640335][ T30] audit: type=1326 audit(1750953414.581:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28572 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9278e929 code=0x7ffc0000 [ 1795.663661][T11666] usb 7-1: Manufacturer: syz [ 1795.719596][T28583] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6071'. [ 1795.721740][T11666] usb 7-1: SerialNumber: syz [ 1795.783044][T11666] usb 7-1: config 0 descriptor?? [ 1795.793392][T28583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6071'. [ 1795.796276][ T30] audit: type=1326 audit(1750953414.581:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28572 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb9272ab19 code=0x7ffc0000 [ 1795.885940][T28583] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6071'. [ 1795.973819][ T30] audit: type=1326 audit(1750953414.581:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28572 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9278e929 code=0x7ffc0000 [ 1796.074839][T11666] hso 7-1:0.0: Can't find BULK IN endpoint [ 1796.082021][T11666] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1796.122085][ T30] audit: type=1326 audit(1750953414.581:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28572 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb9272ab19 code=0x7ffc0000 [ 1796.230564][ T30] audit: type=1326 audit(1750953414.581:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28572 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb9272ab19 code=0x7ffc0000 [ 1796.298221][T11666] usb 7-1: USB disconnect, device number 16 [ 1796.347703][ T30] audit: type=1326 audit(1750953414.581:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28572 comm="syz.1.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb9272ab19 code=0x7ffc0000 [ 1796.787771][T25990] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1797.063739][T26885] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1797.074230][T25990] usb 5-1: config 0 has no interfaces? [ 1797.285658][T25990] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1797.349777][T25990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.416328][T25990] usb 5-1: Product: syz [ 1797.456496][T25990] usb 5-1: Manufacturer: syz [ 1797.461172][T25990] usb 5-1: SerialNumber: syz [ 1797.537591][T25990] usb 5-1: config 0 descriptor?? [ 1798.179817][T28618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6077'. [ 1798.275060][T28618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6077'. [ 1799.446448][T26885] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1799.483679][T28629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1799.607576][T26885] usb 6-1: Using ep0 maxpacket: 8 [ 1799.622339][T26885] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1799.695239][T26885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1799.764974][T26885] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1799.851869][T26885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.921529][T26885] usb 6-1: Product: syz [ 1799.951768][T26885] usb 6-1: Manufacturer: syz [ 1799.960260][T26885] usb 6-1: SerialNumber: syz [ 1800.015702][T26885] usb 6-1: config 0 descriptor?? [ 1800.081516][T26885] streamzap 6-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1800.293964][T28627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.339104][T28627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.426380][T26885] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1800.479383][T25990] usb 6-1: USB disconnect, device number 17 [ 1800.491239][T11666] usb 5-1: USB disconnect, device number 122 [ 1800.616412][T26885] usb 7-1: device descriptor read/64, error -71 [ 1800.896308][T26885] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1800.921633][T28656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6088'. [ 1801.076377][T26885] usb 7-1: device descriptor read/64, error -71 [ 1801.207354][T26885] usb usb7-port1: attempt power cycle [ 1801.566465][T26885] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1801.602630][T26885] usb 7-1: device descriptor read/8, error -71 [ 1801.856571][T26885] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1801.891187][T26885] usb 7-1: device descriptor read/8, error -71 [ 1802.020356][T26885] usb usb7-port1: unable to enumerate USB device [ 1802.066974][ T5939] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1802.246302][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 1802.255314][ T5939] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1802.286061][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.344201][ T5939] usb 2-1: config 0 descriptor?? [ 1802.376042][ T5939] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1802.466370][T26885] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1802.959996][T26885] usb 5-1: config 0 has no interfaces? [ 1803.030019][T26885] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1803.052818][T26885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.086338][T26885] usb 5-1: Product: syz [ 1803.108612][T26885] usb 5-1: Manufacturer: syz [ 1803.124784][T26885] usb 5-1: SerialNumber: syz [ 1803.175067][T26885] usb 5-1: config 0 descriptor?? [ 1803.944350][T25990] usb 2-1: USB disconnect, device number 2 [ 1804.288879][T28706] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1804.410056][T28706] team0: Port device batadv1 added [ 1804.443465][T28710] vivid-000: kernel_thread() failed [ 1805.743668][T25990] usb 5-1: USB disconnect, device number 123 [ 1806.601596][T28745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6115'. [ 1806.803855][T28750] macsec0: entered promiscuous mode [ 1806.811774][T25990] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1806.835744][T28750] macsec0: entered allmulticast mode [ 1806.857113][T28750] veth1_macvtap: entered allmulticast mode [ 1806.996537][T25990] usb 5-1: Using ep0 maxpacket: 8 [ 1807.012073][T25990] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1807.064915][T25990] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1807.123564][T25990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 1807.171194][T25990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 1807.208587][T25990] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1807.290490][T25990] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1807.337381][T25990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.381897][T25990] usb 5-1: Product: syz [ 1807.399752][T25990] usb 5-1: Manufacturer: syz [ 1807.423446][T25990] usb 5-1: SerialNumber: syz [ 1807.451599][T25990] usb 5-1: config 0 descriptor?? [ 1807.677092][T25990] rc_core: IR keymap rc-imon-rsc not found [ 1807.711706][T25990] Registered IR keymap rc-empty [ 1807.738012][T25990] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1807.790164][T25990] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input93 [ 1808.043318][T11678] usb 5-1: USB disconnect, device number 124 [ 1808.806693][T26885] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1808.986324][T25990] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1808.994243][T26885] usb 2-1: Using ep0 maxpacket: 32 [ 1809.010469][T26885] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1809.026245][T26885] usb 2-1: config 0 has no interface number 0 [ 1809.046331][T26885] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1809.098929][T26885] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1809.141948][T26885] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1809.156567][T11678] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1809.166242][T26885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.176937][ C1] raw-gadget.3 gadget.6: ignoring, device is not running [ 1809.184086][T26885] usb 2-1: Product: syz [ 1809.188835][T26885] usb 2-1: Manufacturer: syz [ 1809.193453][T26885] usb 2-1: SerialNumber: syz [ 1809.236315][T25990] usb 5-1: Invalid ep0 maxpacket: 9 [ 1809.336447][T11678] usb 7-1: device descriptor read/64, error -32 [ 1809.384850][T26885] usb 2-1: config 0 descriptor?? [ 1809.526317][T25990] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1809.626386][T11678] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1809.696284][T25990] usb 5-1: Invalid ep0 maxpacket: 9 [ 1809.713665][T25990] usb usb5-port1: attempt power cycle [ 1809.865209][T11678] usb 7-1: config 0 has no interfaces? [ 1810.046999][T26885] appletouch 2-1:0.85: Geyser mode initialized. [ 1810.131956][T26885] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input94 [ 1810.218203][T11678] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1810.236666][T25990] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1810.257412][T25990] usb 5-1: Invalid ep0 maxpacket: 9 [ 1810.259230][T11678] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.298747][T26885] usb 2-1: USB disconnect, device number 3 [ 1810.310389][T11678] usb 7-1: Product: syz [ 1810.314623][T11678] usb 7-1: Manufacturer: syz [ 1810.334940][T26885] appletouch 2-1:0.85: input: appletouch disconnected [ 1810.353720][T11678] usb 7-1: SerialNumber: syz [ 1810.387586][T11678] usb 7-1: config 0 descriptor?? [ 1810.477543][T25990] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1810.520797][T25990] usb 5-1: Invalid ep0 maxpacket: 9 [ 1810.611140][T25990] usb usb5-port1: unable to enumerate USB device [ 1811.250258][T28779] xt_hashlimit: size too large, truncated to 1048576 [ 1812.230670][T11666] usb 7-1: USB disconnect, device number 22 [ 1812.817347][T28809] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20001 [ 1814.875572][T11666] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1815.445411][T11666] usb 7-1: config 0 has no interfaces? [ 1815.634905][T11666] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1815.699977][T11666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.736256][T11666] usb 7-1: Product: syz [ 1815.743675][T11666] usb 7-1: Manufacturer: syz [ 1815.760686][T11666] usb 7-1: SerialNumber: syz [ 1815.782123][T11666] usb 7-1: config 0 descriptor?? [ 1816.798001][ T5891] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1817.023698][T28864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6142'. [ 1817.048259][T28864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6142'. [ 1817.486712][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 1817.523438][ T5891] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 1817.693446][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.026622][ T5891] usb 5-1: config 0 has no interface number 0 [ 1818.368301][T28871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6146'. [ 1818.385288][T28871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6146'. [ 1818.399949][T28871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6146'. [ 1818.440150][ T5891] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1818.486498][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.494582][ T5891] usb 5-1: Product: syz [ 1818.557348][ T5891] usb 5-1: Manufacturer: syz [ 1818.826451][ T5891] usb 5-1: SerialNumber: syz [ 1818.851192][ T5891] usb 5-1: config 0 descriptor?? [ 1819.221668][T25106] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1819.232678][T25106] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1819.294667][T25106] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1819.312045][T25106] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1819.323563][T25106] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1820.120047][T11666] usb 7-1: USB disconnect, device number 23 [ 1820.211432][T28898] raw_sendmsg: syz.6.6151 forgot to set AF_INET. Fix it! [ 1820.398814][T28888] chnl_net:caif_netlink_parms(): no params data found [ 1820.539426][ T5891] usb 5-1: USB disconnect, device number 3 [ 1821.357413][T25106] Bluetooth: hci7: command tx timeout [ 1821.385126][T28888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.401229][T28888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.428056][T28888] bridge_slave_0: entered allmulticast mode [ 1821.455550][T28888] bridge_slave_0: entered promiscuous mode [ 1821.534715][T28888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.586430][T28888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.658040][T28888] bridge_slave_1: entered allmulticast mode [ 1821.689275][T28888] bridge_slave_1: entered promiscuous mode [ 1821.847348][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1821.876749][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1821.885726][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1822.218674][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1822.223064][T28888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1822.253335][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1822.280438][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1822.319758][T28888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1822.564534][T28888] team0: Port device team_slave_0 added [ 1822.582603][T28925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1822.654612][T28888] team0: Port device team_slave_1 added [ 1822.771348][T28935] netlink: 'syz.1.6156': attribute type 10 has an invalid length. [ 1822.830838][T28935] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6156'. [ 1822.862525][T28935] dummy0: entered promiscuous mode [ 1822.919575][T28935] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1823.076415][ T5891] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1823.259860][T28888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1823.341702][T28888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1823.443523][T28888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1823.486391][T25106] Bluetooth: hci7: command tx timeout [ 1823.532222][T28888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1823.532416][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.550844][T28888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1823.578838][T28888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1823.612078][T28946] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6159'. [ 1823.621493][T28946] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6159'. [ 1823.682816][ T5891] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1823.737481][ T5891] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1823.874224][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.929189][ T5891] usb 5-1: config 0 descriptor?? [ 1824.006339][T26885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1824.273858][ T5891] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1824.384319][ T5891] dvb-usb: bulk message failed: -22 (3/0) [ 1824.402062][T28888] hsr_slave_0: entered promiscuous mode [ 1824.447926][T28888] hsr_slave_1: entered promiscuous mode [ 1824.471829][ T5891] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1824.497686][T28888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1824.517002][T26885] usb 2-1: config 0 has no interfaces? [ 1824.546499][T28888] Cannot create hsr debugfs directory [ 1824.573921][ T5891] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1824.614934][T26885] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1824.675691][ T5891] usb 5-1: media controller created [ 1824.725732][T26885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.759936][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1824.789145][T26885] usb 2-1: Product: syz [ 1824.793415][T26885] usb 2-1: Manufacturer: syz [ 1824.872254][ T5891] dvb-usb: bulk message failed: -22 (6/0) [ 1824.946663][T26885] usb 2-1: SerialNumber: syz [ 1824.970625][ T5891] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1825.084898][T26885] usb 2-1: config 0 descriptor?? [ 1825.108875][ T5891] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input95 [ 1825.517382][T25106] Bluetooth: hci7: command tx timeout [ 1825.544175][ T5891] dvb-usb: schedule remote query interval to 150 msecs. [ 1825.551956][ T5891] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1825.706333][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 1825.712163][ T5891] dvb-usb: error while querying for an remote control event. [ 1825.916357][T11678] dvb-usb: bulk message failed: -22 (1/0) [ 1825.922349][T11678] dvb-usb: error while querying for an remote control event. [ 1826.146642][T11678] dvb-usb: bulk message failed: -22 (1/0) [ 1826.171845][T11678] dvb-usb: error while querying for an remote control event. [ 1826.262234][T28888] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1826.324340][T28888] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1826.389862][T28888] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1826.406812][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 1826.443253][ T5891] dvb-usb: error while querying for an remote control event. [ 1826.504158][T11678] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1826.580128][T28888] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1826.656519][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 1826.676347][ T5891] dvb-usb: error while querying for an remote control event. [ 1826.948976][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 1826.955487][T11678] usb 7-1: Using ep0 maxpacket: 32 [ 1826.986496][ T5891] dvb-usb: error while querying for an remote control event. [ 1827.023699][T11678] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 1827.036939][T11678] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.071218][T11678] usb 7-1: config 0 has no interface number 0 [ 1827.090869][T11678] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1827.101923][T11678] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.136375][T11678] usb 7-1: Product: syz [ 1827.140603][T11678] usb 7-1: Manufacturer: syz [ 1827.157002][T11678] usb 7-1: SerialNumber: syz [ 1827.179359][T26885] dvb-usb: bulk message failed: -22 (1/0) [ 1827.197493][T26885] dvb-usb: error while querying for an remote control event. [ 1827.220774][T11678] usb 7-1: config 0 descriptor?? [ 1827.396944][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 1827.402921][ T5891] dvb-usb: error while querying for an remote control event. [ 1827.450787][T28888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1827.534673][T28888] 8021q: adding VLAN 0 to HW filter on device team0 [ 1827.588535][T23916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.595706][T23916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1827.603757][T11678] dvb-usb: bulk message failed: -22 (1/0) [ 1827.607023][T25106] Bluetooth: hci7: command tx timeout [ 1827.635691][T11678] dvb-usb: error while querying for an remote control event. [ 1827.673944][T23916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1827.681175][T23916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1827.752015][T11678] usb 2-1: USB disconnect, device number 4 [ 1827.797191][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 1827.817263][ T5891] dvb-usb: error while querying for an remote control event. [ 1828.036461][T11678] dvb-usb: bulk message failed: -22 (1/0) [ 1828.075667][T11678] dvb-usb: error while querying for an remote control event. [ 1828.151643][T28888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1828.266659][T11678] dvb-usb: bulk message failed: -22 (1/0) [ 1828.288408][T11678] dvb-usb: error while querying for an remote control event. [ 1828.379711][T28888] veth0_vlan: entered promiscuous mode [ 1828.464457][T28888] veth1_vlan: entered promiscuous mode [ 1828.486707][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 1828.504469][T28971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6164'. [ 1828.528592][ T5939] dvb-usb: error while querying for an remote control event. [ 1828.585727][T28971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6164'. [ 1828.608429][ T5954] usb 5-1: USB disconnect, device number 4 [ 1828.635740][T28971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6164'. [ 1828.688091][T28888] veth0_macvtap: entered promiscuous mode [ 1828.767333][T28888] veth1_macvtap: entered promiscuous mode [ 1828.814897][ T5954] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1828.895411][T28888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1828.964355][T28888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1829.061375][T28888] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.094579][T28888] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.121169][T28888] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.154626][T28888] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.495871][T11678] usb 7-1: USB disconnect, device number 24 [ 1829.677055][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1829.715615][T28987] loop6: detected capacity change from 0 to 1 [ 1829.725565][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1829.766463][T28987] Dev loop6: unable to read RDB block 1 [ 1829.779087][T28987] loop6: unable to read partition table [ 1829.817151][T28987] loop6: partition table beyond EOD, truncated [ 1829.841491][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6167'. [ 1829.866349][T28987] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1829.880647][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6167'. [ 1829.900101][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6167'. [ 1829.923666][T23916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1829.968257][T23916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.257803][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6167'. [ 1830.283378][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6167'. [ 1830.314127][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6167'. [ 1830.544992][T28999] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6170'. [ 1830.837417][T11678] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1831.036992][T11678] usb 9-1: Using ep0 maxpacket: 8 [ 1831.047836][T29004] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1831.071715][T11678] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1831.135096][T11678] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1831.205668][T11678] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1831.244531][T11678] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1831.333857][T11678] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1831.453221][T11678] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.504526][T11678] usb 9-1: Product: syz [ 1831.516937][T11678] usb 9-1: Manufacturer: syz [ 1831.550961][T11678] usb 9-1: SerialNumber: syz [ 1831.607668][T28997] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1831.895905][T11678] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1831.945963][T11678] usbtest 9-1:1.0: Linux user mode ISO test driver [ 1832.010286][T11678] usbtest 9-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1832.164824][T25990] usb 9-1: USB disconnect, device number 2 [ 1832.737839][T29031] loop6: detected capacity change from 0 to 1 [ 1832.862423][T29031] Dev loop6: unable to read RDB block 1 [ 1832.913551][T29031] loop6: unable to read partition table [ 1833.059166][T29031] loop6: partition table beyond EOD, truncated [ 1833.090532][T29031] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1833.586403][T29042] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1834.856788][T29067] netlink: 'syz.8.6192': attribute type 2 has an invalid length. [ 1835.062328][T25990] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1835.239717][T25990] usb 7-1: config 0 has no interfaces? [ 1835.279267][T25990] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1835.302181][T25990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.329252][T25990] usb 7-1: Product: syz [ 1835.343807][T25990] usb 7-1: Manufacturer: syz [ 1835.353709][T25990] usb 7-1: SerialNumber: syz [ 1835.389594][T25990] usb 7-1: config 0 descriptor?? [ 1835.587673][ T5954] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1835.780359][ T5954] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1835.806264][ T5954] usb 5-1: config 0 has no interface number 0 [ 1835.812463][ T5954] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.876774][ T5954] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.904521][ T5954] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1835.929505][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.963177][ T5954] usb 5-1: config 0 descriptor?? [ 1836.223555][T29095] tipc: Started in network mode [ 1836.249257][T29095] tipc: Node identity , cluster identity 4711 [ 1836.595761][T29077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.637997][T29077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.835405][ T5954] usbhid 5-1:0.1: can't add hid device: -71 [ 1836.859283][ T5954] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 1836.925861][ T5954] usb 5-1: USB disconnect, device number 5 [ 1837.506465][T11678] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1837.722958][T29112] geneve2: entered promiscuous mode [ 1837.925228][T11678] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.976873][T25990] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1837.985043][T11678] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1838.018121][T29114] __nla_validate_parse: 1 callbacks suppressed [ 1838.018136][T29114] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6205'. [ 1838.070848][T29114] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6205'. [ 1838.087903][T11678] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1838.119259][T11678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.142082][T11678] usb 2-1: config 0 descriptor?? [ 1838.176410][T25990] usb 5-1: Using ep0 maxpacket: 8 [ 1838.210193][T25990] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.224917][T11678] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1838.260217][T11678] dvb-usb: bulk message failed: -22 (3/0) [ 1838.283272][T11678] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1838.308676][T25990] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1838.355896][T11678] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1838.363343][T25990] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1838.411338][T11678] usb 2-1: media controller created [ 1838.444287][T11678] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1838.497135][T11678] dvb-usb: bulk message failed: -22 (6/0) [ 1838.519188][T11678] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1838.578119][T25990] usb 5-1: string descriptor 0 read error: -71 [ 1838.585446][T11678] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input96 [ 1838.609108][T25990] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1838.661849][T25990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.662276][T11678] dvb-usb: schedule remote query interval to 150 msecs. [ 1838.760624][T25990] usb 5-1: can't set config #1, error -71 [ 1838.793345][T25990] usb 5-1: USB disconnect, device number 6 [ 1838.835924][T11678] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1838.986768][T11678] dvb-usb: bulk message failed: -22 (1/0) [ 1839.002512][T11678] dvb-usb: error while querying for an remote control event. [ 1839.256667][T11678] dvb-usb: bulk message failed: -22 (1/0) [ 1839.350901][T11678] dvb-usb: error while querying for an remote control event. [ 1839.516488][T26885] dvb-usb: bulk message failed: -22 (1/0) [ 1839.522358][T26885] dvb-usb: error while querying for an remote control event. [ 1839.838408][T26885] dvb-usb: bulk message failed: -22 (1/0) [ 1839.858921][T26885] dvb-usb: error while querying for an remote control event. [ 1840.046383][T26885] dvb-usb: bulk message failed: -22 (1/0) [ 1840.056322][T26885] dvb-usb: error while querying for an remote control event. [ 1840.249422][T26885] dvb-usb: bulk message failed: -22 (1/0) [ 1840.255212][T26885] dvb-usb: error while querying for an remote control event. [ 1840.466404][T26885] dvb-usb: bulk message failed: -22 (1/0) [ 1840.474459][T26885] dvb-usb: error while querying for an remote control event. [ 1840.656991][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 1840.664019][ T5891] dvb-usb: error while querying for an remote control event. [ 1840.836974][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 1840.842927][ T5891] dvb-usb: error while querying for an remote control event. [ 1841.056466][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 1841.062285][ T5891] dvb-usb: error while querying for an remote control event. [ 1841.145471][T26885] usb 2-1: USB disconnect, device number 5 [ 1842.202923][T29142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6212'. [ 1844.460996][T26885] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1844.565053][ T5939] usb 7-1: USB disconnect, device number 25 [ 1846.115582][T29190] RDS: rds_bind could not find a transport for fe88::4109, load rds_tcp or rds_rdma? [ 1846.844773][T29203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6229'. [ 1846.866082][T29203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1846.949480][T29207] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6229'. [ 1847.589411][T29203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1848.649344][T26885] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1848.841138][T26885] usb 9-1: config 7 has an invalid interface number: 162 but max is 0 [ 1848.859771][T26885] usb 9-1: config 7 has no interface number 0 [ 1848.891947][T26885] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db70, bcdDevice=80.ff [ 1848.940271][T26885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.990020][T26885] usb 9-1: Product: syz [ 1849.034804][T26885] usb 9-1: Manufacturer: syz [ 1849.060023][T26885] usb 9-1: SerialNumber: syz [ 1849.097242][T26885] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 1849.136325][T26885] usb 9-1: no configuration chosen from 1 choice [ 1849.165758][T29223] batman_adv: batadv0: Adding interface: ipvlan6 [ 1849.212101][T29223] batman_adv: batadv0: The MTU of interface ipvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1849.246547][T29224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6236'. [ 1849.308912][T29223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 1849.369596][T29223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.414181][T29223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 1849.464152][T29223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.475092][T29223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 1849.496975][T29223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.514078][T29223] batman_adv: batadv0: Interface activated: ipvlan6 [ 1850.660734][T29244] @: renamed from syz_tun (while UP) [ 1851.480086][T26885] usb 9-1: USB disconnect, device number 3 [ 1853.363959][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.370842][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1856.088800][T29273] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6247'. [ 1856.111075][T29273] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6247'. [ 1856.126308][T29273] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6247'. [ 1856.146857][T29268] netlink: 'syz.8.6244': attribute type 1 has an invalid length. [ 1856.548457][T29283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6250'. [ 1857.056354][ T5954] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1857.195619][T29306] loop6: detected capacity change from 0 to 524287999 [ 1857.326322][T11678] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1857.471832][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 1857.532623][T11678] usb 7-1: config 0 has no interfaces? [ 1857.536333][ T5954] usb 5-1: config 0 has no interfaces? [ 1857.573446][T11678] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1857.576341][ T5954] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1857.636281][T11678] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.699721][T11678] usb 7-1: Product: syz [ 1857.718908][T11678] usb 7-1: Manufacturer: syz [ 1857.744730][T11678] usb 7-1: SerialNumber: syz [ 1857.783539][T11678] usb 7-1: config 0 descriptor?? [ 1857.807754][T27656] buffer_io_error: 26 callbacks suppressed [ 1857.807771][T27656] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 1857.826916][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.866441][ T5954] usb 5-1: config 0 descriptor?? [ 1858.447187][T29295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.456982][T29295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.189410][T25990] usb 5-1: USB disconnect, device number 7 [ 1860.125627][T29323] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6262'. [ 1860.222197][T29323] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6262'. [ 1860.287669][T29323] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6262'. [ 1860.801492][T11678] usb 7-1: USB disconnect, device number 26 [ 1861.165337][T29339] batman_adv: batadv0: Adding interface: ipvlan3 [ 1861.186492][T29342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6265'. [ 1861.197379][ T30] kauditd_printk_skb: 441 callbacks suppressed [ 1861.197398][ T30] audit: type=1326 audit(1750953481.051:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.8.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x7ffc0000 [ 1861.238215][T29339] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1861.298109][T29339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1861.320645][T29339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.371860][T29339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 1861.404716][T29339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.426749][T29339] batman_adv: batadv0: Interface activated: ipvlan3 [ 1861.448281][ T30] audit: type=1326 audit(1750953481.081:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.8.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3da7d2ab19 code=0x7ffc0000 [ 1861.626518][T26885] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1861.715790][ T30] audit: type=1326 audit(1750953481.081:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.8.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x7ffc0000 [ 1861.818092][ T30] audit: type=1326 audit(1750953481.081:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.8.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3da7d2ab19 code=0x7ffc0000 [ 1861.994840][ T30] audit: type=1326 audit(1750953481.081:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.8.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x7ffc0000 [ 1862.202895][ T30] audit: type=1326 audit(1750953481.081:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.8.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3da7d2ab19 code=0x7ffc0000 [ 1862.354521][ T30] audit: type=1326 audit(1750953481.081:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.8.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x7ffc0000 [ 1862.476623][ T30] audit: type=1326 audit(1750953481.081:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.8.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x7ffc0000 [ 1862.550717][ T30] audit: type=1326 audit(1750953481.081:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.8.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x7ffc0000 [ 1862.622016][ T30] audit: type=1326 audit(1750953481.091:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.8.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3da7d2ab19 code=0x7ffc0000 [ 1862.828274][T29346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6267'. [ 1865.116535][T11666] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1865.308788][T11666] usb 9-1: Using ep0 maxpacket: 16 [ 1865.370069][T11666] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1865.641340][T11666] usb 9-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 1865.675611][T11666] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.759450][T11666] usb 9-1: Product: syz [ 1865.782223][T11666] usb 9-1: Manufacturer: syz [ 1865.803650][T11666] usb 9-1: SerialNumber: syz [ 1865.959091][T11666] usb 9-1: config 0 descriptor?? [ 1866.177881][T11666] ipheth 9-1:0.0: Unable to find endpoints [ 1869.527251][T11678] usb 9-1: USB disconnect, device number 5 [ 1870.399843][ T5939] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1870.601940][T29392] batman_adv: batadv0: Adding interface: ipvlan2 [ 1870.616475][T29392] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1870.656240][ T5939] usb 7-1: Using ep0 maxpacket: 16 [ 1870.668634][ T5939] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.681277][T29395] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6278'. [ 1870.696268][ T5939] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1870.711132][T29392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1870.727865][ T5939] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1870.739356][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.747490][ T5939] usb 7-1: Product: syz [ 1870.751735][ T5939] usb 7-1: Manufacturer: syz [ 1870.756428][ T5939] usb 7-1: SerialNumber: syz [ 1870.781148][T29392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1870.844094][ T30] kauditd_printk_skb: 229 callbacks suppressed [ 1870.844138][ T30] audit: type=1326 audit(1750953490.691:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29396 comm="syz.4.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744898e929 code=0x7ffc0000 [ 1870.899622][T29392] batman_adv: batadv0: Interface activated: ipvlan2 [ 1871.006381][ T30] audit: type=1326 audit(1750953490.731:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29396 comm="syz.4.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744898e929 code=0x7ffc0000 [ 1871.115166][ T30] audit: type=1326 audit(1750953490.731:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29396 comm="syz.4.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744898e929 code=0x7ffc0000 [ 1871.220405][ T30] audit: type=1326 audit(1750953490.731:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29396 comm="syz.4.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f744892ab19 code=0x7ffc0000 [ 1871.245057][T11678] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1871.302794][ T30] audit: type=1326 audit(1750953490.731:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29396 comm="syz.4.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f744892ab19 code=0x7ffc0000 [ 1871.420151][ T30] audit: type=1326 audit(1750953490.731:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29396 comm="syz.4.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744898e929 code=0x7ffc0000 [ 1871.458671][ T5939] usb 7-1: 0:2 : does not exist [ 1871.535063][ T5939] usb 7-1: USB disconnect, device number 27 [ 1871.582253][T29404] sctp: [Deprecated]: syz.8.6283 (pid 29404) Use of int in maxseg socket option. [ 1871.582253][T29404] Use struct sctp_assoc_value instead [ 1871.584013][ T30] audit: type=1326 audit(1750953490.731:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29396 comm="syz.4.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f744892ab19 code=0x7ffc0000 [ 1871.752248][T27656] udevd[27656]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1871.788995][T29404] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6283'. [ 1871.834776][T29404] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6283'. [ 1871.845748][ T30] audit: type=1326 audit(1750953490.731:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29396 comm="syz.4.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f744892ab19 code=0x7ffc0000 [ 1871.941894][ T30] audit: type=1326 audit(1750953490.731:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29396 comm="syz.4.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f744892ab19 code=0x7ffc0000 [ 1872.069876][T29404] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1872.079176][ T30] audit: type=1326 audit(1750953490.731:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29396 comm="syz.4.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f744898e929 code=0x7ffc0000 [ 1872.145019][T29404] bridge0: entered promiscuous mode [ 1872.179213][T29404] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1872.190297][T29404] Cannot create hsr debugfs directory [ 1872.219618][T29404] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 1872.838082][T29435] batman_adv: batadv0: Adding interface: ipvlan7 [ 1872.849087][T29435] batman_adv: batadv0: The MTU of interface ipvlan7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1872.904655][T29436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6293'. [ 1872.972924][T29435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 1873.014016][T29435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.038813][T29435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 1873.074276][T29435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.096817][T29435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 1873.119341][T29435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.148658][T29435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 1873.158701][ T5954] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1873.205038][T29435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.234621][T29435] batman_adv: batadv0: Interface activated: ipvlan7 [ 1873.328060][ T5954] usb 9-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 1873.361097][ T5954] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1873.377248][ T5954] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1873.399161][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1873.408665][ T5954] usb 9-1: SerialNumber: syz [ 1873.837939][T11666] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1874.101894][T25990] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1874.168166][T11666] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 1874.316708][T11666] usb 2-1: config 0 has no interface number 0 [ 1874.416383][T25990] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.469025][T11666] usb 2-1: config 0 interface 29 has no altsetting 0 [ 1874.595444][T25990] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1874.646476][T11666] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1874.813071][T25990] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1874.853308][T11666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.267530][T25990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1875.307427][T11666] usb 2-1: Product: syz [ 1875.316845][T11666] usb 2-1: Manufacturer: syz [ 1875.370738][T25990] usb 7-1: SerialNumber: syz [ 1875.386294][T11666] usb 2-1: SerialNumber: syz [ 1875.424692][T11666] usb 2-1: config 0 descriptor?? [ 1875.626118][T25990] usb 7-1: 0:2 : does not exist [ 1875.681588][T25990] usb 7-1: unit 5: unexpected type 0x09 [ 1875.884027][T29455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.938900][T29455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.957062][ T5954] usb 9-1: 0:2 : does not exist [ 1875.983201][T25990] usb 7-1: USB disconnect, device number 28 [ 1875.983489][T29455] IPVS: set_ctl: invalid protocol: 2 172.30.0.2:20003 [ 1875.996323][ T5954] usb 9-1: unit 120 not found! [ 1876.087704][T29455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6295'. [ 1876.137841][T29455] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6295'. [ 1876.227165][ T5954] usb 9-1: USB disconnect, device number 6 [ 1876.318281][T27613] udevd[27613]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1876.554056][T27613] udevd[27613]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1876.962820][T29460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6302'. [ 1877.330158][T11666] peak_usb 2-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 1877.365516][T11666] peak_usb 2-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 1877.396797][T29463] tipc: Started in network mode [ 1877.410502][T29463] tipc: Node identity , cluster identity 4711 [ 1877.517447][T29465] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6303'. [ 1877.565627][T29465] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6303'. [ 1877.605684][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6303'. [ 1877.681295][T11666] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 1877.762782][T11666] usb 2-1: USB disconnect, device number 6 [ 1878.316674][T11678] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1878.380102][T29483] vivid-000: disconnect [ 1878.386564][ T5939] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1878.444669][T29487] bridge0: port 1(batadv_slave_0) entered blocking state [ 1878.464233][T29487] bridge0: port 1(batadv_slave_0) entered disabled state [ 1878.486672][T11678] usb 9-1: Using ep0 maxpacket: 16 [ 1878.500932][T29488] netlink: 'syz.4.6311': attribute type 8 has an invalid length. [ 1878.502702][T29487] batadv_slave_0: entered allmulticast mode [ 1878.540130][T11678] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1878.572734][T29466] vivid-000: reconnect [ 1878.578025][ T5939] usb 7-1: Using ep0 maxpacket: 32 [ 1878.585892][T11678] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1878.598383][T29487] batadv_slave_0: entered promiscuous mode [ 1878.622272][ T5939] usb 7-1: config 0 has an invalid interface number: 30 but max is 0 [ 1878.638676][T11678] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1878.650490][ T5939] usb 7-1: config 0 has no interface number 0 [ 1878.668010][ T5939] usb 7-1: config 0 interface 30 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1878.691722][ T5939] usb 7-1: config 0 interface 30 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1878.704874][T11678] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1878.720876][ T5939] usb 7-1: config 0 interface 30 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 1878.741279][T11678] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.752180][T11678] usb 9-1: Product: syz [ 1878.759075][ T5939] usb 7-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0 [ 1878.783460][T11678] usb 9-1: Manufacturer: syz [ 1878.791069][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.802153][T11678] usb 9-1: SerialNumber: syz [ 1878.822679][ T5939] usb 7-1: Product: syz [ 1878.850142][ T5939] usb 7-1: Manufacturer: syz [ 1878.868422][ T5939] usb 7-1: SerialNumber: syz [ 1878.920866][ T5939] usb 7-1: config 0 descriptor?? [ 1878.951566][T29479] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1878.985281][T29479] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1879.037693][ T5939] quatech2 7-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected [ 1879.256447][ T5891] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1879.264330][T11678] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 1879.277408][ T5939] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1879.309454][T11678] usb 9-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1879.316786][ T5939] quatech2 7-1:0.30: probe with driver quatech2 failed with error -71 [ 1879.407607][ T5939] usb 7-1: USB disconnect, device number 29 [ 1879.449668][ T5891] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 1879.475993][T11678] usb 9-1: USB disconnect, device number 7 [ 1879.495495][ T5891] usb 5-1: config 0 has no interface number 0 [ 1879.516618][ T5891] usb 5-1: config 0 interface 29 has no altsetting 0 [ 1879.539318][ T5891] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1879.587591][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.631625][ T5891] usb 5-1: Product: syz [ 1879.644342][ T5891] usb 5-1: Manufacturer: syz [ 1879.653463][T27585] udevd[27585]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1879.666290][ T5891] usb 5-1: SerialNumber: syz [ 1879.705271][ T5891] usb 5-1: config 0 descriptor?? [ 1880.071204][T29503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1880.184671][T29503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.436071][T29503] IPVS: set_ctl: invalid protocol: 2 172.30.0.5:20003 [ 1880.496536][T11678] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1880.636038][T29503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6314'. [ 1880.666357][T29503] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6314'. [ 1880.786439][T11666] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1880.796316][T11678] usb 9-1: Using ep0 maxpacket: 16 [ 1880.803367][T11678] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1880.814068][T11678] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1880.887438][T11678] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1880.906399][T25990] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1881.002870][T11666] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.036966][T25106] Bluetooth: hci5: command 0x0406 tx timeout [ 1881.064507][T11666] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1881.084712][T11666] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1881.085438][T11678] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1881.113980][T25990] usb 7-1: config 0 has no interfaces? [ 1881.129129][T25990] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1881.150418][T11666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.184483][T25990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.218725][T11666] usb 2-1: config 0 descriptor?? [ 1881.229231][T11678] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1881.253085][T25990] usb 7-1: Product: syz [ 1881.260297][T11666] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1881.274333][T25990] usb 7-1: Manufacturer: syz [ 1881.290421][T11678] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1881.300107][T11678] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1881.316470][T11678] usb 9-1: Manufacturer: syz [ 1881.351436][T11678] usb 9-1: config 0 descriptor?? [ 1881.465652][T11666] dvb-usb: bulk message failed: -22 (3/0) [ 1881.475741][T25990] usb 7-1: SerialNumber: syz [ 1881.489873][T11666] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1881.500632][T25990] usb 7-1: config 0 descriptor?? [ 1881.524224][T11666] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1881.639097][T11666] usb 2-1: media controller created [ 1881.776531][T11678] rc_core: IR keymap rc-hauppauge not found [ 1881.799759][T11678] Registered IR keymap rc-empty [ 1881.831882][T11678] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1881.891526][T11678] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1881.935888][T11678] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1881.964502][T11666] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1882.038070][T11666] dvb-usb: bulk message failed: -22 (6/0) [ 1882.065149][T11666] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1882.131966][T11666] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input98 [ 1882.155740][ T5891] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 1882.227876][T11678] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input97 [ 1882.251089][ T5891] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 1882.302936][T11666] dvb-usb: schedule remote query interval to 150 msecs. [ 1882.331130][T11678] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1882.355100][T29523] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1642504120 (13140032960 ns) > initial count (744665392 ns). Using initial count to start timer. [ 1882.388592][T11666] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1882.446390][T11678] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1882.496493][T11678] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1882.546476][T11678] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1882.554595][T25990] dvb-usb: bulk message failed: -22 (1/0) [ 1882.596001][T25990] dvb-usb: error while querying for an remote control event. [ 1882.606547][T11678] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1882.639523][ T5891] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 1882.724610][ T5891] usb 5-1: USB disconnect, device number 9 [ 1882.730889][T11678] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1882.800609][T25990] dvb-usb: bulk message failed: -22 (1/0) [ 1882.805202][T11678] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1882.848844][T25990] dvb-usb: error while querying for an remote control event. [ 1882.896972][T11678] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1883.027959][T11678] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1883.066300][T25990] dvb-usb: bulk message failed: -22 (1/0) [ 1883.081816][T25990] dvb-usb: error while querying for an remote control event. [ 1883.096318][T11678] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1883.288052][T25990] dvb-usb: bulk message failed: -22 (1/0) [ 1883.293865][T25990] dvb-usb: error while querying for an remote control event. [ 1883.306354][ T5939] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1883.358687][T11678] mceusb 9-1:0.0: Registered  with mce emulator interface version 1 [ 1883.377921][T11678] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1883.556292][ T5939] usb 5-1: Using ep0 maxpacket: 8 [ 1883.556451][T25990] dvb-usb: bulk message failed: -22 (1/0) [ 1883.598100][T25990] dvb-usb: error while querying for an remote control event. [ 1883.664912][ T5939] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 1883.738153][ T5939] usb 5-1: config 0 has no interface number 0 [ 1883.768565][ T5939] usb 5-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1883.786920][T11666] dvb-usb: bulk message failed: -22 (1/0) [ 1883.813446][ T5939] usb 5-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1883.825044][T11666] dvb-usb: error while querying for an remote control event. [ 1883.866676][ T5939] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 1883.877016][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.885184][ T5939] usb 5-1: Product: syz [ 1883.895367][ T5939] usb 5-1: Manufacturer: syz [ 1883.901356][ T5939] usb 5-1: SerialNumber: syz [ 1883.909179][ T5939] usb 5-1: config 0 descriptor?? [ 1883.917413][ T5939] appletouch 5-1:0.154: Could not find int-in endpoint [ 1883.932144][ T5939] appletouch 5-1:0.154: probe with driver appletouch failed with error -5 [ 1883.943978][ T5939] usbhid 5-1:0.154: couldn't find an input interrupt endpoint [ 1884.026461][T25990] dvb-usb: bulk message failed: -22 (1/0) [ 1884.038611][T25990] dvb-usb: error while querying for an remote control event. [ 1884.145201][ T5891] usb 5-1: USB disconnect, device number 10 [ 1884.246639][T25990] dvb-usb: bulk message failed: -22 (1/0) [ 1884.252479][T25990] dvb-usb: error while querying for an remote control event. [ 1884.332350][T25990] usb 2-1: USB disconnect, device number 7 [ 1884.414067][T25990] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1884.455846][T11666] usb 7-1: USB disconnect, device number 30 [ 1884.683700][T29541] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6325'. [ 1884.693129][T29541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6325'. [ 1884.705940][T29541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6325'. [ 1884.969791][T25990] usb 9-1: USB disconnect, device number 8 [ 1885.027057][T29547] ip6gretap0: entered promiscuous mode [ 1885.071531][T29547] vlan2: entered promiscuous mode [ 1885.546882][T29562] netlink: 428 bytes leftover after parsing attributes in process `syz.4.6332'. [ 1885.567793][T29562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6332'. [ 1885.812792][T29565] netlink: 'syz.8.6330': attribute type 3 has an invalid length. [ 1885.826344][T11666] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1885.857746][T29565] netlink: 'syz.8.6330': attribute type 3 has an invalid length. [ 1885.881557][T29565] netlink: 'syz.8.6330': attribute type 3 has an invalid length. [ 1885.905478][T29565] netlink: 'syz.8.6330': attribute type 3 has an invalid length. [ 1885.930178][T29565] netlink: 'syz.8.6330': attribute type 3 has an invalid length. [ 1885.977808][T29565] netlink: 'syz.8.6330': attribute type 3 has an invalid length. [ 1885.997323][T11666] usb 5-1: device descriptor read/64, error -71 [ 1886.010217][T29565] netlink: 'syz.8.6330': attribute type 3 has an invalid length. [ 1886.036523][T29565] netlink: 'syz.8.6330': attribute type 3 has an invalid length. [ 1886.055585][T29565] netlink: 'syz.8.6330': attribute type 3 has an invalid length. [ 1886.081656][T29565] netlink: 'syz.8.6330': attribute type 3 has an invalid length. [ 1886.239203][T11666] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1886.358683][ T5939] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1886.436457][T11666] usb 5-1: device descriptor read/64, error -71 [ 1886.556684][T11666] usb usb5-port1: attempt power cycle [ 1886.607057][ T5939] usb 2-1: config 0 has no interfaces? [ 1886.623482][ T5939] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1886.656002][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.722222][ T5939] usb 2-1: Product: syz [ 1886.753847][ T5939] usb 2-1: Manufacturer: syz [ 1886.792384][ T5939] usb 2-1: SerialNumber: syz [ 1886.833277][ T5939] usb 2-1: config 0 descriptor?? [ 1886.944322][T11666] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1886.986848][T11666] usb 5-1: device descriptor read/8, error -71 [ 1887.252951][T29574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6331'. [ 1887.264711][T29574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6331'. [ 1887.280954][T11666] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1887.316655][T11666] usb 5-1: device descriptor read/8, error -71 [ 1887.376266][ T5891] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1887.459994][T11666] usb usb5-port1: unable to enumerate USB device [ 1887.568642][ T5891] usb 9-1: config 0 has no interfaces? [ 1887.596658][T25990] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1887.598762][ T5891] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1887.646569][ T5891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.655033][ T5891] usb 9-1: Product: syz [ 1887.663954][ T5891] usb 9-1: Manufacturer: syz [ 1887.672738][ T5891] usb 9-1: SerialNumber: syz [ 1887.734223][ T5891] usb 9-1: config 0 descriptor?? [ 1887.786233][T25990] usb 7-1: Using ep0 maxpacket: 8 [ 1887.802935][T25990] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1887.812416][T25990] usb 7-1: config 11 has an invalid interface number: 244 but max is 0 [ 1887.821236][T25990] usb 7-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 1887.831873][T25990] usb 7-1: config 11 has no interface number 0 [ 1887.844041][T25990] usb 7-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1887.854234][T25990] usb 7-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1887.893645][T25990] usb 7-1: config 11 interface 244 has no altsetting 0 [ 1887.914574][T25990] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 1887.943557][T25990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.982348][T25990] usb 7-1: Product: syz [ 1888.060752][T25990] usb 7-1: Manufacturer: syz [ 1888.246390][T25990] usb 7-1: SerialNumber: syz [ 1888.750317][T25990] peak_usb 7-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 1888.777822][T25990] peak_usb 7-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 1889.249429][T25990] peak_usb 7-1:11.244: probe with driver peak_usb failed with error -71 [ 1889.295990][T25990] usb 7-1: USB disconnect, device number 31 [ 1889.496359][T11678] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1889.649077][T11678] usb 5-1: Using ep0 maxpacket: 16 [ 1889.669458][T11678] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1889.701956][T11678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1889.702360][T29601] batman_adv: batadv0: Adding interface: ipvlan2 [ 1889.745687][T11678] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1889.749695][T29601] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1889.771348][T11678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.802382][T29601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1889.814165][T29601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1889.847383][T11678] usb 5-1: Product: syz [ 1889.855209][T11678] usb 5-1: Manufacturer: syz [ 1889.864361][T11678] usb 5-1: SerialNumber: syz [ 1889.885510][T29601] batman_adv: batadv0: Interface activated: ipvlan2 [ 1889.904267][T11678] usb 5-1: config 0 descriptor?? [ 1889.923553][T11666] usb 2-1: USB disconnect, device number 8 [ 1889.942919][T11678] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1889.959181][T11678] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1890.665604][T25990] usb 9-1: USB disconnect, device number 9 [ 1890.706567][T11678] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1890.713911][T11678] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1890.864831][T29627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6346'. [ 1891.405948][T11678] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1891.428500][T29635] validate_nla: 43 callbacks suppressed [ 1891.428523][T29635] netlink: 'syz.6.6350': attribute type 12 has an invalid length. [ 1891.490083][T29637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6350'. [ 1891.533788][T29635] binder: 29634:29635 ioctl c0306201 2000000003c0 returned -14 [ 1891.576663][T11672] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1891.776453][T11672] usb 9-1: Using ep0 maxpacket: 8 [ 1891.800186][T11672] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1891.835701][T11672] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1891.880831][T11672] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1891.911927][T11672] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1892.076078][T11678] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1892.118738][T11678] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1892.156424][T11672] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1892.240526][T11672] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1892.343859][T11672] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.583732][T29594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.626736][T29594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.676470][T11672] usb 9-1: GET_CAPABILITIES returned 0 [ 1892.709112][T11672] usbtmc 9-1:16.0: can't read capabilities [ 1892.794743][T11678] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1892.836771][T11678] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1892.856725][T11678] usb 5-1: USB disconnect, device number 15 [ 1892.928744][T29633] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6349'. [ 1892.978233][T25990] usb 9-1: USB disconnect, device number 10 [ 1893.068493][T29653] batman_adv: batadv0: Adding interface: ipvlan8 [ 1893.088298][T29653] batman_adv: batadv0: The MTU of interface ipvlan8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.157164][T29653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 1893.184512][T29653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.216257][T29653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 1893.234902][T29653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.254432][T29653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 1893.264662][T29653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.289357][T29653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 1893.305186][T29653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.317380][T29653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 1893.327338][T29653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.338211][T29653] batman_adv: batadv0: Interface activated: ipvlan8 [ 1893.406730][T11678] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1893.425788][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1893.460529][ T5939] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1893.556411][T11678] usb 2-1: device descriptor read/64, error -32 [ 1893.647945][ T5939] usb 7-1: Using ep0 maxpacket: 32 [ 1893.667728][ T5939] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 1893.676784][T25990] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1893.696933][ T5939] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.723057][T29665] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6358'. [ 1893.746315][ T5939] usb 7-1: config 0 has no interface number 0 [ 1893.775785][ T5939] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1893.809019][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.826587][T11678] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1893.841111][ T5939] usb 7-1: Product: syz [ 1893.846604][T25990] usb 5-1: Using ep0 maxpacket: 32 [ 1893.855874][ T5939] usb 7-1: Manufacturer: syz [ 1893.875730][ T5939] usb 7-1: SerialNumber: syz [ 1893.900765][ T5939] usb 7-1: config 0 descriptor?? [ 1893.913719][T25990] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 1893.956201][T25990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1894.014402][T25990] usb 5-1: config 0 has no interface number 0 [ 1894.058103][T25990] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1894.113734][T25990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.136546][T25990] usb 5-1: Product: syz [ 1894.140767][T25990] usb 5-1: Manufacturer: syz [ 1894.171613][T25990] usb 5-1: SerialNumber: syz [ 1894.197256][T25990] usb 5-1: config 0 descriptor?? [ 1894.521195][T29673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6359'. [ 1894.806888][T29673] bridge_slave_1: left allmulticast mode [ 1894.837572][T29673] bridge_slave_1: left promiscuous mode [ 1894.874237][T29673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1894.915533][T29673] bridge_slave_0: left allmulticast mode [ 1894.941081][T29673] bridge_slave_0: left promiscuous mode [ 1894.959578][T29673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1896.522814][T11678] usb 2-1: unable to read config index 0 descriptor/all [ 1896.530183][T11678] usb 2-1: can't read configurations, error -71 [ 1896.540942][T11678] usb usb2-port1: attempt power cycle [ 1896.726339][ T5891] usb 5-1: USB disconnect, device number 16 [ 1899.693082][T29706] batman_adv: batadv0: Adding interface: ipvlan9 [ 1899.716268][T29706] batman_adv: batadv0: The MTU of interface ipvlan9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1899.777382][T29706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 1899.799599][T29706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1899.837988][T29706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 1899.950403][T29706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1899.986499][T29710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1900.003667][T29706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 1900.040977][T29706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.079794][T11678] usb 7-1: USB disconnect, device number 32 [ 1900.136576][T29706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 1900.213517][T29706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.245207][T29706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 1900.265649][T29718] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6369'. [ 1900.323258][T29718] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6369'. [ 1900.336300][T29706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.373030][T29706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 1900.396537][T29718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6369'. [ 1900.418591][T29706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.500881][T29706] batman_adv: batadv0: Interface activated: ipvlan9 [ 1900.879230][T29733] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6373'. [ 1901.007304][T11678] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1901.256498][T11678] usb 9-1: Using ep0 maxpacket: 16 [ 1901.317422][T29741] program syz.4.6375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1901.526563][T25106] Bluetooth: hci6: command 0x0406 tx timeout [ 1901.552928][T11665] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1901.728691][T11665] usb 7-1: config 0 has an invalid interface number: 60 but max is 0 [ 1901.728725][T11665] usb 7-1: config 0 has no interface number 0 [ 1901.728760][T11665] usb 7-1: config 0 interface 60 has no altsetting 0 [ 1901.730868][T11665] usb 7-1: New USB device found, idVendor=0c45, idProduct=60fc, bcdDevice=ff.2d [ 1901.730888][T11665] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.730902][T11665] usb 7-1: Product: syz [ 1901.730912][T11665] usb 7-1: Manufacturer: syz [ 1901.730923][T11665] usb 7-1: SerialNumber: syz [ 1901.732856][T11665] usb 7-1: config 0 descriptor?? [ 1901.735480][T11665] gspca_main: sonixj-2.14.0 probing 0c45:60fc [ 1901.891474][T29749] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6375'. [ 1902.025683][T29738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.079601][T29738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.170390][T11665] gspca_sonixj: reg_w1 err -71 [ 1902.190001][T11665] sonixj 7-1:0.60: probe with driver sonixj failed with error -71 [ 1902.252922][T11665] usb 7-1: USB disconnect, device number 33 [ 1902.970193][T11678] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1903.133919][T11678] usb 9-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 1903.274178][T11678] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.319114][T11678] usb 9-1: Product: syz [ 1903.325068][T11678] usb 9-1: Manufacturer: syz [ 1903.341653][T11678] usb 9-1: SerialNumber: syz [ 1903.367159][T11678] usb 9-1: config 0 descriptor?? [ 1903.546703][T11672] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1903.856244][T11672] usb 7-1: Using ep0 maxpacket: 32 [ 1903.893743][T11672] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 1904.084401][T11672] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1904.237024][T11672] usb 7-1: config 0 has no interface number 0 [ 1904.277180][T11672] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1904.371477][T11672] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.465426][T11672] usb 7-1: Product: syz [ 1904.527476][T11672] usb 7-1: Manufacturer: syz [ 1904.586428][T11672] usb 7-1: SerialNumber: syz [ 1904.627406][T11672] usb 7-1: config 0 descriptor?? [ 1904.705104][T11678] usb 9-1: can't set config #0, error -71 [ 1904.723970][T11678] usb 9-1: USB disconnect, device number 11 [ 1905.256317][T11678] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1905.292450][T29783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6385'. [ 1905.496535][T11678] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.563227][T11678] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1905.621053][T11678] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1905.664810][T11678] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1905.714143][T11678] usb 9-1: SerialNumber: syz [ 1905.960067][T11678] usb 9-1: 0:2 : does not exist [ 1905.985626][T11678] usb 9-1: unit 5: unexpected type 0x09 [ 1906.035852][T11678] usb 9-1: USB disconnect, device number 12 [ 1906.152621][T27656] udevd[27656]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1906.577237][T11678] usb 7-1: USB disconnect, device number 34 [ 1907.621294][ T30] kauditd_printk_skb: 309 callbacks suppressed [ 1907.621316][ T30] audit: type=1326 audit(1750953527.471:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29810 comm="syz.8.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x50000 [ 1907.759287][ T31] INFO: task syz.3.5985:28173 blocked for more than 143 seconds. [ 1907.817386][ T31] Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 [ 1907.835591][ T30] audit: type=1326 audit(1750953527.471:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29810 comm="syz.8.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x50000 [ 1907.873202][T11666] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1907.901276][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1907.962275][ T31] task:syz.3.5985 state:D stack:24104 pid:28173 tgid:28173 ppid:25698 task_flags:0x440040 flags:0x00004004 [ 1908.012982][ T30] audit: type=1326 audit(1750953527.471:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29810 comm="syz.8.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x50000 [ 1908.106235][ T31] Call Trace: [ 1908.109964][ T31] [ 1908.118095][ T31] __schedule+0x16f5/0x4d00 [ 1908.181713][ T31] ? schedule+0x165/0x360 [ 1908.212507][ T30] audit: type=1326 audit(1750953527.471:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29810 comm="syz.8.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x50000 [ 1908.273399][ T31] ? __pfx___schedule+0x10/0x10 [ 1908.355706][ T31] ? schedule+0x91/0x360 [ 1908.376303][T11666] usb 7-1: Using ep0 maxpacket: 16 [ 1908.383770][ T31] schedule+0x165/0x360 [ 1908.410065][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 1908.424714][ T30] audit: type=1326 audit(1750953527.471:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29810 comm="syz.8.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x50000 [ 1908.439545][ T31] schedule_preempt_disabled+0x13/0x30 [ 1908.494821][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 1908.532074][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1908.558458][ T31] ? page_cache_ra_order+0x445/0xc70 [ 1908.577887][ T31] down_read+0x98/0x2e0 [ 1908.600633][ T31] page_cache_ra_order+0x445/0xc70 [ 1908.615769][ T31] ? maybe_unlock_mmap_for_io+0x225/0x2d0 [ 1908.633421][ T31] do_sync_mmap_readahead+0x4b5/0x5f0 [ 1908.652685][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 1908.661883][ T30] audit: type=1326 audit(1750953527.471:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29810 comm="syz.8.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x50000 [ 1908.692985][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 1908.702459][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 1908.722604][ T31] filemap_fault+0x62a/0x1200 [ 1908.742798][T11666] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1908.751407][ T31] ? __pagetable_ctor+0x253/0x340 [ 1908.786397][ T30] audit: type=1326 audit(1750953527.471:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29810 comm="syz.8.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x50000 [ 1908.817561][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 1908.826288][ T31] ? rcu_is_watching+0x15/0xb0 [ 1908.840943][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1908.856241][ T31] __do_fault+0x138/0x390 [ 1908.876228][ T31] __handle_mm_fault+0x198b/0x5620 [ 1908.926389][ T30] audit: type=1326 audit(1750953527.471:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29810 comm="syz.8.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x50000 [ 1908.982622][ T31] ? __lock_acquire+0xab9/0xd20 [ 1909.000601][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 1909.037143][ T31] ? lock_vma_under_rcu+0xf8/0x710 [ 1909.066866][ T30] audit: type=1326 audit(1750953527.471:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29810 comm="syz.8.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x50000 [ 1909.126515][ T31] ? lock_vma_under_rcu+0xf8/0x710 [ 1909.145506][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1909.179500][ T31] handle_mm_fault+0x40a/0x8e0 [ 1909.192752][ T31] do_user_addr_fault+0xa81/0x1390 [ 1909.215032][ T31] ? rcu_is_watching+0x15/0xb0 [ 1909.226263][ T31] ? trace_page_fault_user+0x84/0x1e0 [ 1909.232640][ T30] audit: type=1326 audit(1750953527.471:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29810 comm="syz.8.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7d8e929 code=0x50000 [ 1909.263259][ T31] exc_page_fault+0x76/0xf0 [ 1909.294589][T11666] usb 7-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 1909.317751][ T31] asm_exc_page_fault+0x26/0x30 [ 1909.326044][T11666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.340212][ T31] RIP: 0033:0x7f6f339566ad [ 1909.348222][ T31] RSP: 002b:00007f6f33cdfb88 EFLAGS: 00010287 [ 1909.354422][T11666] usb 7-1: Product: syz [ 1909.359846][T11666] usb 7-1: Manufacturer: syz [ 1909.368042][ T31] RAX: 0000200000000240 RBX: 0000000000000004 RCX: ffffffffffffff9b [ 1909.396111][T11666] usb 7-1: SerialNumber: syz [ 1909.404345][ T31] RDX: 0000000000000064 RSI: 00007f6f334003bd RDI: 0000200000000240 [ 1909.423535][T11666] usb 7-1: config 0 descriptor?? [ 1909.444367][ T31] RBP: 00007f6f33bb7ba0 R08: 00007f6f33800000 R09: 0000000000000001 [ 1909.463477][ T31] R10: 0000000000000000 R11: 0000000000000001 R12: 00007f6f33bb616c [ 1909.490755][ T31] R13: 00007f6f33cdfc80 R14: fffffffffffffffe R15: 00007f6f33cdfca0 [ 1909.516630][ T31] [ 1909.522427][T11666] ipheth 7-1:0.0: Unable to find endpoints [ 1909.530178][ T31] INFO: task syz.3.5985:28176 blocked for more than 145 seconds. [ 1909.556228][ T31] Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 [ 1909.614533][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1909.640728][ T31] task:syz.3.5985 state:D stack:24936 pid:28176 tgid:28173 ppid:25698 task_flags:0x440040 flags:0x00004006 [ 1909.686696][ T31] Call Trace: [ 1909.690033][ T31] [ 1909.694219][ T31] __schedule+0x16f5/0x4d00 [ 1909.729521][ T31] ? schedule+0x165/0x360 [ 1909.746352][ T31] ? __pfx___schedule+0x10/0x10 [ 1909.751595][ T31] ? schedule+0x91/0x360 [ 1909.770284][ T31] schedule+0x165/0x360 [ 1909.776192][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 1909.808099][ T31] schedule_preempt_disabled+0x13/0x30 [ 1909.823954][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 1909.835278][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1909.857434][ T31] ? page_cache_ra_order+0x445/0xc70 [ 1909.874087][ T31] down_read+0x98/0x2e0 [ 1909.886448][ T31] page_cache_ra_order+0x445/0xc70 [ 1909.924873][ T31] ? maybe_unlock_mmap_for_io+0x16a/0x2d0 [ 1909.939194][ T31] do_sync_mmap_readahead+0x4b5/0x5f0 [ 1909.959298][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 1909.980048][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 1910.036984][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 1910.068245][ T31] filemap_fault+0x62a/0x1200 [ 1910.097293][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 1910.178353][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 1910.198403][ T31] ? __handle_mm_fault+0x296f/0x5620 [ 1910.215127][ T31] __do_fault+0x138/0x390 [ 1910.241954][ T31] __handle_mm_fault+0x37ed/0x5620 [ 1910.267525][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 1910.289213][ T31] ? find_vma+0xe7/0x160 [ 1910.296518][ T31] ? __pfx_find_vma+0x10/0x10 [ 1910.315473][ T31] handle_mm_fault+0x40a/0x8e0 [ 1910.330848][ T31] do_user_addr_fault+0x764/0x1390 [ 1910.343357][ T31] exc_page_fault+0x76/0xf0 [ 1910.358474][ T31] asm_exc_page_fault+0x26/0x30 [ 1910.372441][ T31] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1910.393732][ T31] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 00 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1910.446092][ T31] RSP: 0018:ffffc90004a27a18 EFLAGS: 00050206 [ 1910.463822][ T31] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 1910.495381][ T31] RDX: 0000000000000001 RSI: 00002000000b2000 RDI: ffffc90004a27aa0 [ 1910.522952][ T31] RBP: ffffc90004a27c30 R08: ffffc90004a27ad7 R09: 1ffff92000944f5a [ 1910.548226][ T31] R10: dffffc0000000000 R11: fffff52000944f5b R12: 0000000000000002 [ 1910.570237][ T31] R13: dffffc0000000000 R14: ffffc90004a27aa0 R15: 00002000000b2000 [ 1910.597574][ T31] _copy_from_user+0x7a/0xb0 [ 1910.625706][ T31] ___sys_recvmsg+0x12e/0x510 [ 1910.636025][ T31] ? __pfx____sys_recvmsg+0x10/0x10 [ 1910.642153][ T31] ? __might_fault+0xb0/0x130 [ 1910.647386][ T31] do_recvmmsg+0x307/0x770 [ 1910.652053][ T31] ? __pfx_do_recvmmsg+0x10/0x10 [ 1910.658502][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1910.663972][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1910.689091][ T31] __x64_sys_recvmmsg+0x190/0x240 [ 1910.701091][ T31] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1910.724392][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1910.732623][ T31] do_syscall_64+0xfa/0x3b0 [ 1910.737355][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1910.742814][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.792793][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1910.822095][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.835147][ T31] RIP: 0033:0x7f6f3398e929 [ 1910.879868][ T31] RSP: 002b:00007f6f34791038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1910.943763][ T31] RAX: ffffffffffffffda RBX: 00007f6f33bb6080 RCX: 00007f6f3398e929 [ 1911.002282][ T31] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1911.105343][ T31] RBP: 00007f6f33a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1911.165227][ T31] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1911.200763][ T31] R13: 0000000000000001 R14: 00007f6f33bb6080 R15: 00007f6f33cdfa28 [ 1911.239676][ T31] [ 1911.248585][ T31] INFO: task syz.3.5985:28177 blocked for more than 146 seconds. [ 1911.266218][ T31] Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 [ 1911.286207][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1911.297223][ T31] task:syz.3.5985 state:D stack:22856 pid:28177 tgid:28173 ppid:25698 task_flags:0x440140 flags:0x00004004 [ 1911.323043][ T31] Call Trace: [ 1911.332581][ T31] [ 1911.340164][ T31] __schedule+0x16f5/0x4d00 [ 1911.353764][ T31] ? schedule+0x165/0x360 [ 1911.363051][ T31] ? __pfx___schedule+0x10/0x10 [ 1911.374924][ T31] ? schedule+0x91/0x360 [ 1911.390723][ T31] schedule+0x165/0x360 [ 1911.394923][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 1911.401202][ T31] schedule_preempt_disabled+0x13/0x30 [ 1911.411230][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 1911.416918][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1911.438296][ T31] ? page_cache_ra_order+0x445/0xc70 [ 1911.449771][ T31] down_read+0x98/0x2e0 [ 1911.453976][ T31] page_cache_ra_order+0x445/0xc70 [ 1911.466303][ T31] ? maybe_unlock_mmap_for_io+0x16a/0x2d0 [ 1911.472071][ T31] do_sync_mmap_readahead+0x4b5/0x5f0 [ 1911.498455][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 1911.504448][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 1911.513249][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 1911.521026][ T31] filemap_fault+0x62a/0x1200 [ 1911.525767][ T31] ? __pagetable_ctor+0x253/0x340 [ 1911.533277][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 1911.545350][ T31] ? rcu_is_watching+0x15/0xb0 [ 1911.550827][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1911.559841][ T31] __do_fault+0x138/0x390 [ 1911.564234][ T31] __handle_mm_fault+0x198b/0x5620 [ 1911.570214][ T31] ? __lock_acquire+0xab9/0xd20 [ 1911.575125][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 1911.583429][ T31] ? __pfx_mtree_load+0x10/0x10 [ 1911.593094][T11666] usb 7-1: USB disconnect, device number 35 [ 1911.594173][ T31] ? __pfx___might_resched+0x10/0x10 [ 1911.617302][ T31] handle_mm_fault+0x40a/0x8e0 [ 1911.622176][ T31] __get_user_pages+0x1af4/0x30b0 [ 1911.632209][ T31] ? finish_task_switch+0x18b/0x950 [ 1911.642390][ T31] ? finish_task_switch+0x266/0x950 [ 1911.652498][ T31] ? __pfx___get_user_pages+0x10/0x10 [ 1911.659761][ T31] faultin_page_range+0x257/0x890 [ 1911.665208][ T31] ? blk_start_plug+0x6f/0x1b0 [ 1911.674329][ T31] madvise_do_behavior+0x232/0x2e70 [ 1911.681698][ T31] ? futex_unqueue+0x22/0x240 [ 1911.691262][ T31] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1911.697426][ T31] ? futex_unqueue+0x22/0x240 [ 1911.704674][ T31] ? futex_unqueue+0x211/0x240 [ 1911.714237][ T31] ? __futex_wait+0x1d1/0x3e0 [ 1911.725581][ T31] ? __futex_wait+0x34f/0x3e0 [ 1911.735173][ T31] ? __pfx___futex_wait+0x10/0x10 [ 1911.744378][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1911.754592][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 1911.762042][ T31] ? futex_private_hash_put+0x23a/0x290 [ 1911.772194][ T31] ? __pfx_futex_private_hash_put+0x10/0x10 [ 1911.779961][ T31] ? __lock_acquire+0xab9/0xd20 [ 1911.784939][ T31] ? madvise_lock+0xda/0x200 [ 1911.794095][ T31] do_madvise+0x174/0x220 [ 1911.798791][ T31] ? __pfx_do_madvise+0x10/0x10 [ 1911.805118][ T31] ? rcu_is_watching+0x15/0xb0 [ 1911.815245][ T31] __x64_sys_madvise+0xa7/0xc0 [ 1911.820460][ T31] do_syscall_64+0xfa/0x3b0 [ 1911.825074][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1911.838573][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1911.848843][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1911.854096][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1911.863245][ T31] RIP: 0033:0x7f6f3398e929 [ 1911.870902][ T31] RSP: 002b:00007f6f34770038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1911.882576][ T31] RAX: ffffffffffffffda RBX: 00007f6f33bb6160 RCX: 00007f6f3398e929 [ 1911.893568][ T31] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000 [ 1911.904557][ T31] RBP: 00007f6f33a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1911.915613][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1911.934521][ T31] R13: 0000000000000000 R14: 00007f6f33bb6160 R15: 00007f6f33cdfa28 [ 1911.943841][ T31] [ 1911.954716][ T31] [ 1911.954716][ T31] Showing all locks held in the system: [ 1912.021956][ T31] 1 lock held by khungtaskd/31: [ 1912.038825][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1912.053053][ T31] 2 locks held by getty/5593: [ 1912.064230][ T31] #0: ffff888030c650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1912.074416][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1912.092701][ T31] 5 locks held by kworker/u8:6/9310: [ 1912.098358][ T31] 3 locks held by kworker/1:11/11678: [ 1912.103880][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1912.115434][ T31] #1: ffffc90020587bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1912.127047][ T31] #2: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1912.137467][ T31] 2 locks held by kworker/u8:13/23916: [ 1912.143130][ T31] 2 locks held by syz.2.5774/27364: [ 1912.149123][ T31] 1 lock held by syz.3.5985/28173: [ 1912.160390][ T31] #0: ffff888148dbf0c0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 1912.177003][ T31] 1 lock held by syz.3.5985/28176: [ 1912.182237][ T31] #0: ffff888148dbf0c0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 1912.193430][ T31] 1 lock held by syz.3.5985/28177: [ 1912.200982][ T31] #0: ffff888148dbf0c0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 1912.212250][ T31] 1 lock held by syz.5.6099/28686: [ 1912.226513][ T31] #0: ffff888148dbf0c0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70 [ 1912.251555][ T31] [ 1912.265742][ T31] ============================================= [ 1912.265742][ T31] [ 1912.286564][ T31] NMI backtrace for cpu 1 [ 1912.286584][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1912.286615][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1912.286628][ T31] Call Trace: [ 1912.286636][ T31] [ 1912.286644][ T31] dump_stack_lvl+0x189/0x250 [ 1912.286680][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1912.286707][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1912.286738][ T31] ? __pfx__printk+0x10/0x10 [ 1912.286772][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1912.286801][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1912.286823][ T31] ? _printk+0xcf/0x120 [ 1912.286848][ T31] ? __pfx__printk+0x10/0x10 [ 1912.286872][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1912.286902][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1912.286929][ T31] watchdog+0xfee/0x1030 [ 1912.286957][ T31] ? watchdog+0x1de/0x1030 [ 1912.286990][ T31] kthread+0x70e/0x8a0 [ 1912.287015][ T31] ? __pfx_watchdog+0x10/0x10 [ 1912.287058][ T31] ? __pfx_kthread+0x10/0x10 [ 1912.287083][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1912.287111][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1912.287139][ T31] ? __pfx_kthread+0x10/0x10 [ 1912.287163][ T31] ret_from_fork+0x3fc/0x770 [ 1912.287195][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1912.287231][ T31] ? __switch_to_asm+0x39/0x70 [ 1912.287251][ T31] ? __switch_to_asm+0x33/0x70 [ 1912.287272][ T31] ? __pfx_kthread+0x10/0x10 [ 1912.287297][ T31] ret_from_fork_asm+0x1a/0x30 [ 1912.287339][ T31] [ 1912.287370][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1912.447439][ C0] NMI backtrace for cpu 0 [ 1912.447455][ C0] CPU: 0 UID: 0 PID: 25554 Comm: kworker/u8:24 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1912.447474][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1912.447486][ C0] Workqueue: bat_events batadv_nc_worker [ 1912.447513][ C0] RIP: 0010:lockdep_softirqs_on+0x8/0x1c0 [ 1912.447538][ C0] Code: ff 90 0f 0b 90 90 90 e9 2c ff ff ff e8 b1 9a c8 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 57 41 56 <53> 48 83 ec 10 65 48 8b 05 0b e3 fe 10 48 89 44 24 08 65 48 8b 1c [ 1912.447552][ C0] RSP: 0018:ffffc9000d2e78c8 EFLAGS: 00000046 [ 1912.447566][ C0] RAX: 0000000000000200 RBX: 0000000000000201 RCX: 88376beac9692b00 [ 1912.447578][ C0] RDX: 0000000000000000 RSI: ffffffff8be28d20 RDI: ffffffff8b34e4e8 [ 1912.447590][ C0] RBP: ffffc9000d2e7978 R08: ffffffff8fa10bf7 R09: 1ffffffff1f4217e [ 1912.447603][ C0] R10: dffffc0000000000 R11: fffffbfff1f4217f R12: ffffffff8b34e4e8 [ 1912.447615][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92001a5cf1c [ 1912.447627][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 1912.447641][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1912.447652][ C0] CR2: 0000200000404030 CR3: 0000000030eb2000 CR4: 00000000003526f0 [ 1912.447667][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1912.447677][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1912.447687][ C0] Call Trace: [ 1912.447693][ C0] [ 1912.447701][ C0] __local_bh_enable_ip+0xe9/0x1c0 [ 1912.447727][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1912.447753][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1912.447772][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 1912.447793][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 1912.447818][ C0] batadv_nc_purge_paths+0x318/0x3b0 [ 1912.447853][ C0] batadv_nc_worker+0x369/0x610 [ 1912.447875][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1912.447901][ C0] process_scheduled_works+0xae1/0x17b0 [ 1912.447939][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1912.447971][ C0] worker_thread+0x8a0/0xda0 [ 1912.447997][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1912.448024][ C0] ? __kthread_parkme+0x7b/0x200 [ 1912.448043][ C0] kthread+0x70e/0x8a0 [ 1912.448063][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1912.448087][ C0] ? __pfx_kthread+0x10/0x10 [ 1912.448105][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1912.448126][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1912.448147][ C0] ? __pfx_kthread+0x10/0x10 [ 1912.448165][ C0] ret_from_fork+0x3fc/0x770 [ 1912.448190][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1912.448214][ C0] ? __switch_to_asm+0x39/0x70 [ 1912.448231][ C0] ? __switch_to_asm+0x33/0x70 [ 1912.448246][ C0] ? __pfx_kthread+0x10/0x10 [ 1912.448264][ C0] ret_from_fork_asm+0x1a/0x30 [ 1912.448289][ C0] [ 1912.459452][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1912.459478][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1912.459511][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1912.459528][ T31] Call Trace: [ 1912.459539][ T31] [ 1912.459551][ T31] dump_stack_lvl+0x99/0x250 [ 1912.459615][ T31] ? __asan_memcpy+0x40/0x70 [ 1912.459648][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1912.459685][ T31] ? __pfx__printk+0x10/0x10 [ 1912.459723][ T31] panic+0x2db/0x790 [ 1912.459763][ T31] ? __pfx_panic+0x10/0x10 [ 1912.459797][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1912.459839][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1912.459870][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1912.459909][ T31] watchdog+0x102d/0x1030 [ 1912.459943][ T31] ? watchdog+0x1de/0x1030 [ 1912.459982][ T31] kthread+0x70e/0x8a0 [ 1912.460011][ T31] ? __pfx_watchdog+0x10/0x10 [ 1912.460040][ T31] ? __pfx_kthread+0x10/0x10 [ 1912.460069][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1912.460098][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1912.460129][ T31] ? __pfx_kthread+0x10/0x10 [ 1912.460157][ T31] ret_from_fork+0x3fc/0x770 [ 1912.460192][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1912.460231][ T31] ? __switch_to_asm+0x39/0x70 [ 1912.460255][ T31] ? __switch_to_asm+0x33/0x70 [ 1912.460277][ T31] ? __pfx_kthread+0x10/0x10 [ 1912.460305][ T31] ret_from_fork_asm+0x1a/0x30 [ 1912.460346][ T31] [ 1912.885230][ T31] Kernel Offset: disabled [ 1912.889583][ T31] Rebooting in 86400 seconds..