last executing test programs: 8m0.676365116s ago: executing program 3 (id=112): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000440)=0x97f, 0x4) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 7m58.916580145s ago: executing program 3 (id=115): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000001880), 0x40101, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0x0, &(0x7f0000006680)) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) 7m57.271746984s ago: executing program 3 (id=120): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x9, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 7m55.907582902s ago: executing program 3 (id=122): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000400)={{0x1, 0x3, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x24, 0x7, @val=@netkit={@void, @value}}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "028df7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c955ee12e"}}}}}}}, 0x0) 7m53.083032366s ago: executing program 3 (id=124): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000280)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0x8010aebc) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x35, 0x0, @val=@tracing={0x0, 0xd14f}}, 0x1c) ioctl$TCFLSH(r0, 0x540b, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 7m50.251190794s ago: executing program 3 (id=129): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x27, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x4}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) fremovexattr(r6, &(0x7f0000002340)=@known='system.posix_acl_access\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13, 0xc3}]}, 0x24}}, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1eb) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1, 0x4800003e, r8, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x83, 0x2) 7m49.451228611s ago: executing program 32 (id=109): writev(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7m34.503592479s ago: executing program 33 (id=129): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x27, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x4}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) fremovexattr(r6, &(0x7f0000002340)=@known='system.posix_acl_access\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13, 0xc3}]}, 0x24}}, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1eb) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1, 0x4800003e, r8, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x83, 0x2) 7m0.155554463s ago: executing program 2 (id=182): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x881) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8) 6m59.311507367s ago: executing program 2 (id=183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m58.1479165s ago: executing program 2 (id=185): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="009a3610008eecdef60ddb0700000b8f", 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000580)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x200000, 0x1000000}) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) 6m52.603828066s ago: executing program 2 (id=187): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x8, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0), 0x0, 0xfffffffb, 0x0, 0x2, 0x0}) 6m51.755012595s ago: executing program 2 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x391d, 0x0) r1 = fsopen(&(0x7f0000000300)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000140)='sync\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 6m51.35347837s ago: executing program 5 (id=130): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000034) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f023}) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = fcntl$dupfd(r1, 0x0, r1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0xc001}, 0x800) fsopen(&(0x7f00000006c0)='nfsd\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioperm(0x6, 0x3, 0xb017) sysinfo(0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x65c, 0xec, 0xec, 0x424, 0x0, 0x1cc, 0x594, 0x594, 0x594, 0x594, 0x594, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x80]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xff}}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x2, 0x0, [0x905, 0xfffe, 0x4, 0x4, 0x68e, 0xffff, 0x6, 0x7, 0x6, 0x7, 0xfff7, 0x9, 0xffff, 0x8, 0x2, 0x9], 0xa}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6b8) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000700)=0xffffffff, 0x4) sendmmsg$inet6(r7, &(0x7f0000001940)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x2, @mcast2={0xff, 0x5, '\x00', 0x0}, 0xffffff7f}, 0x1c, 0x0}}], 0x1, 0x4004) 6m50.819904328s ago: executing program 2 (id=190): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) 6m35.669473812s ago: executing program 34 (id=130): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000034) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f023}) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = fcntl$dupfd(r1, 0x0, r1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0xc001}, 0x800) fsopen(&(0x7f00000006c0)='nfsd\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioperm(0x6, 0x3, 0xb017) sysinfo(0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x65c, 0xec, 0xec, 0x424, 0x0, 0x1cc, 0x594, 0x594, 0x594, 0x594, 0x594, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x80]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xff}}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x2, 0x0, [0x905, 0xfffe, 0x4, 0x4, 0x68e, 0xffff, 0x6, 0x7, 0x6, 0x7, 0xfff7, 0x9, 0xffff, 0x8, 0x2, 0x9], 0xa}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6b8) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000700)=0xffffffff, 0x4) sendmmsg$inet6(r7, &(0x7f0000001940)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x2, @mcast2={0xff, 0x5, '\x00', 0x0}, 0xffffff7f}, 0x1c, 0x0}}], 0x1, 0x4004) 6m35.139704775s ago: executing program 35 (id=190): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) 4m5.097150757s ago: executing program 7 (id=373): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x8840, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200040c0, 0x0, 0x0) 4m3.759465715s ago: executing program 7 (id=376): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a11820fffff5bab1b590fff000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000002100001000a", 0x4d}], 0x1) 4m2.998592887s ago: executing program 7 (id=379): r0 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5}) iopl(0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)}, 0x0) 4m2.801735761s ago: executing program 0 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) 3m58.080843552s ago: executing program 7 (id=381): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 3m57.296219999s ago: executing program 7 (id=385): syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = syz_io_uring_setup(0x231, &(0x7f0000002100)={0x0, 0x0, 0x10100}, &(0x7f00000021c0)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x10}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) 3m56.107080949s ago: executing program 7 (id=388): r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x1, 0x20200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x3ff) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000a00)}}], 0x1, 0x40844) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x49844) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) unshare(0x20400) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) futex(&(0x7f0000000040), 0x6, 0x9, &(0x7f0000000080), 0x0, 0x40000) 3m40.354379276s ago: executing program 36 (id=388): r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x1, 0x20200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x3ff) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000a00)}}], 0x1, 0x40844) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x49844) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) unshare(0x20400) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) futex(&(0x7f0000000040), 0x6, 0x9, &(0x7f0000000080), 0x0, 0x40000) 3m19.126664968s ago: executing program 0 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) 3m2.872058101s ago: executing program 4 (id=468): socket$netlink(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r0], 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000003c0)='D', 0x1, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}], 0x1, 0x40000) shutdown(r3, 0x1) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000200)) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4, 0x97, 0xfb, 0x2562, 0x11, @private2, @mcast2, 0x30, 0x20, 0x5, 0x2}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, r3, 0x800, '\x00', r6, r5, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc0a}}, 0x11c) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r5}, &(0x7f00000001c0), &(0x7f0000000280)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000ef0285b72eae795b11ad261777db75186baf0b2792ade1f10772662181fe046096c5df696334e2d8363970c8c3b029c88880576b08935b03795560230500ef286f21c974d520c247fd200851f90b2dd5e5f6b23909a23ee27007dae2a0fdf92809a931196df3be84781f7ecafa0a4bcf7e01a23999fdfb4b490f6cfe5edf3850576acb265f2ee288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164dc2458455e3ba438c9109dd001ad93df3fc235bed50ffce5ea79cfc8cf7d53a031691362ba21394bd614ec41f636ec0e299e370f5631acfab5a6519a36f963679457241bc05a307f8be0c828a43ed21ecdd1ee2b9b7ae315e5b515c71c39bf4b45f5e3f7cd3f6404fc93cf55949f0c3a7b87f86120153725784e98975c7617ffc7e8cc497f437853d9c04b195fa52848dd1555796b3cdf2527d7929631cca05e27c28566d2c47699bc6c3f5f76680c1db20c3089a3bdc5b44d224a0b3c2ca8087486aead1d034d94d32ad677b28b10ed58f8de2d5a8d25c7cae49ba35be16888ea8da622daf5f0f02d9c08752113ab1ec2bde50940e9bf33f91a6c5056aabc04eedfeb6535540e5c027ff4df6589cb47171bfbb564a2350564f4bdbcf4e048f2b34570d5ef2bb7939256325574c3bf96f022efde18e9274d5d40af19b0afe0c774b56ff010000bf8be42828b4cb3d6cf6930f5c4c71563e4eb0d341dc742bdb802b498fef8490b52ad16e131d8e3142ef3ffba81085ce4a028c7af46774b391e2124fcd93ff05c21ad0da384ff0017957481ee790b301e3e817c3b651bb99090189eed2862f89e6b5ca8e62a5f5ff0dc6ed83392fd551d0eedc491b3df83509d2fa1023eb77b8a13de09e22a7f19088bcbd8f47ad5a964ab6bbb94784d31b397229ae3fb66ffe0e9913d32301c844e58f000094f5766dc1ca5e8cfee332a28809591c14098f71a7bdcb88186bcd36a2ecce33a3048f6f97e14dac56e84a1fdfdee2bcd21132632905c060b3aca1d4446f456e2088e7257d575e8465d7ed767e415a616d1458a32e904a1ffaf090c2884d4a56958ab143cdb95b6c39e04010b888bd95b09d50d7e6c5c084aa8cdc21890b8ff3072ca215dde339bef126b07eb835d28f977ab43670412afe8361b60bf361aa4d351214801c57dad50ad6179a7507011e3060badbe396b3fb928c7e8b"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) read$FUSE(r1, &(0x7f0000006300)={0x2020}, 0x2020) 2m58.761488974s ago: executing program 4 (id=475): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000), 0x0) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) 2m57.910664776s ago: executing program 4 (id=478): r0 = socket$inet(0x10, 0x80000, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x43}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000000)=0x6}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xab, 0xaf, 0xb5, 0x20, 0x481, 0x9f2e, 0x755b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x1, 0xe0, 0x1, 0x3, 0x2, [], [{{0x9, 0x5, 0x8a, 0x13, 0x8, 0x3, 0x7, 0xdb}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0xba, 0x0, 0x6e, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x1, 0x3, 0x1, [0x2]}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0x4, "4ccf27af"}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0xff, "b0c79521f5"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x5, 0x3, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x5, 0xc6, {0x7, 0x25, 0x1, 0x2, 0x2, 0xa67}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x2, 0x1, 0x18, "2148b6f5ecd4b7"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x6, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xf3, 0x6, 0x2, {0x7, 0x25, 0x1, 0x82, 0x8, 0x4}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x4b, 0xfd, 0x1, 0x40, 0x3}, 0xfa, &(0x7f00000005c0)={0x5, 0xf, 0xfa, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x6, 0xff0f, 0x85, [0xc0]}, @generic={0xe5, 0x10, 0x3, "e2abbb2b8aa415343296ce50d9a51ff1068eb6a24e7678c4cd5ee2811e16bf76215ba1c8f10de5f8ddea3b81789a6f41981942ca63965cbfa62123534a3b9fc4c00186b3fb4f816dc58e8525304985c1bde5ccd377fc2e77be5c07b4c93f8f73ac62ce0e4f5b4d304b9f16a1602e3e8783e55c8b67c2c5ade8d0b720bb6a279d9ee5cafbdde1589fb1d798faabacd0306f5d587bb0a93d7d7bbd0fe6eda4419106eb08cbd94e3771f5253c85a8336f35ed08fca46c30f024305b3d74855c4e6b2f87a110e17d5a0b2f605f90fe6c16dc3dc826d6f01012084da3851148d8ae3c29ff"}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000380)={0x14, &(0x7f00000007c0)={0x20, 0xe, 0x9a, {0x9a, 0xa, "b9f2a31ef26f61e0945664ce63296105628dcf294c0d5465bcb9284953c6ab5bb897821f8e4a50f675a713fa66851b58395c6db24b3533c425e912097265d182fdba7dd7c0de282c09c5c4bafed3e6b49055acff65a3805fb7be6d8eadc429396ca4fe01816ce1f23e35fba2482e975d0c4e12a29b100030f5163e186faa75fc6bb6010201c317b574359f6775e655766ce819e410032643"}}, &(0x7f0000000b40)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "147fced21f0f96c1632680da12b8c94d88ea3bf357f95103d9a680c45a2beccdf05543d821899ec988bf8cfcca0757fe1d215f3ac5505e4ef463548ad7ff95b36ed85cc97380a6d6b10e13c9893fdf3773a5bcbbf8b1c9639eea5f731af72ea8e5d1600970593665e7e8028b0fc511c12dee81e0c91fa9c0d3a9519167f25cecb10035c8ed8aec4150decf38ca090e59f868ffab8a455afa8980a32f17588d4b8b1024aee0c3c2a0a27d9b88227b4dc1198c04356a"}}}, &(0x7f0000000ac0)={0x44, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f00000009c0)={0x20, 0x82, 0x2, "22e7"}, &(0x7f0000000a00)={0x20, 0x83, 0x2, "c3f9"}, &(0x7f0000000a40)={0x20, 0x84, 0x4, "302032db"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "6fe5a5"}}) close_range(r2, 0xffffffffffffffff, 0x0) 2m53.661174382s ago: executing program 4 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {0x7, 0x0, 0xb, 0x3}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000300)='GPL\x00', 0x2, 0xfed, &(0x7f0000001e00)=""/4077, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r2, 0x40047451, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xf649e8f29e3418ef, 0x2, 0xec3, 0xeffffdff, 0x0, [{0x1, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0x78, 0x4, 0x0, '\x00', 0x1}, {0xfe, 0x0, 0x1, '\x00', 0x2}, {0x8, 0xfd, 0x5, '\x00', 0xb}, {0x10, 0x0, 0x4, '\x00', 0xfd}, {0x8, 0x81, 0xbc}, {0x0, 0xc8, 0x0, '\x00', 0xf2}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x8, 0x6, 0xff, '\x00', 0x1}, {0xfe, 0x20, 0x0, '\x00', 0x2e}, {0x69, 0x50, 0x0, '\x00', 0x3}, {0x4, 0x5, 0x7, '\x00', 0x3}, {0x1, 0x4e, 0x2}, {0x2, 0x2, 0x4, '\x00', 0xff}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xf9}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x82, 0x7, 0x7, '\x00', 0x40}, {0x0, 0x1e}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x87, 0x2e}]}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r6, 0xae78, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r8, r5, 0x0, 0x8010002b) 2m51.127487065s ago: executing program 4 (id=488): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) pipe(&(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB="000827bd00dbdf2514012a000000dd90cdbf958d70dac810eaf6bb6e2a2f6b0d2fc9685ffca49225eceba0e6dac33d73e477b42f0f9fd47d7219d3a10ad5094d25bb30b70b800a4a76b8bdd3dd241f73bbd8efe459b5ccf0d632758cfac4e342394d3fe5b39905694f7bb63935c7c4c479defd02f59e"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) mount$9p_rdma(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f00000007c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d30783030b9263706cc5d66c0bdbb0d3030346532332c72713d3078303030303030303030303030", @ANYBLOB="f625cc", @ANYRES8, @ANYBLOB="cb07f44dc156f1816c865d8f063aa5a136fe839a7ddacc3922d5b7850c8ac23740b47dec7e2a8a551f87f2feffd8692e733bc826db1cc38b59df3b88394dd3f748", @ANYBLOB="2cccf29187b27e5bf8e0499106ce9483a25601d638"]) r1 = fsopen(&(0x7f0000000300)='befs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000a0000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e"], 0x122}}, 0x4008090) 2m50.3310938s ago: executing program 4 (id=491): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m34.147403983s ago: executing program 37 (id=491): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m30.639684984s ago: executing program 0 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) 1m43.199475629s ago: executing program 0 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) 1m3.924332011s ago: executing program 0 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) 24.273423925s ago: executing program 0 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) 8.160829658s ago: executing program 6 (id=804): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000400)="205ae946", 0x4, 0x20008801, &(0x7f00000002c0)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 7.956671212s ago: executing program 1 (id=805): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8ad6, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0xc0083000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.263789971s ago: executing program 6 (id=808): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x3, 0xfffffffe, 0x17, 0xb, 0x1, 0x81, 0x6, 0x152, 0x1}) 6.832848749s ago: executing program 8 (id=809): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00), 0x0) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000400)=[{0x5, 0x39, 0x6, 0xba, @time={0xd, 0xd}, {0x4, 0x2}, {0x6, 0xfb}, @note={0x2, 0x81, 0x5, 0x9, 0x2}}, {0x0, 0xa5, 0xff, 0x4, @time={0xffffc09f, 0x7}, {0x9, 0x3}, {0xfb, 0x7}, @control={0x1, 0x1, 0xb0}}], 0x38) 6.406628817s ago: executing program 6 (id=810): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xe0) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) 5.979325877s ago: executing program 8 (id=812): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x1208008, &(0x7f00000021c0)=ANY=[@ANYBLOB="6769643d9adfbb0251e770fa1ce0b2680c6dd66807bca399b5ebcae9132a3f4ed6744703164724f41a94d1432585d2ae83440f822a269df2a7080e444cf5588bcbdaa7e5d4940794b5cb95b0bf7ddb65615a77cba54b8b8204830567e7f00aefc53e37e1ddb239b13420456e6df51cc4d8186a4afb01c3362c3d59f170fe9c5c8fa71022a4c559945b10ca54190cd5c5f3dffe1d9b50193c83d3112357a9c4da8b7206274209ec48c6a113fefd41edc92bb95b7278844b2085b8cb5062712e", @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,dmode=00000000000001000000002,dmode=00000000000017777777777,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=00000000000000044301,dmode=00000000000000000002531,anchor=00000000000000000002,dmode=00000000000000000000007,volume=00000000000000000031,\x00'], 0x6, 0xc46, &(0x7f0000000f40)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000700)="9a0e0000002b01670f01d1c4c3095fbc9d4c0000001bdf05e4fa0000c4c14ddd79000f01c364360f55620cc4c27d5a28f3640f225b0f8e0000c0fe", 0x3b}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.697819977s ago: executing program 1 (id=813): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.472432419s ago: executing program 6 (id=814): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 5.023870094s ago: executing program 9 (id=815): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000040)={0x2, 0xe0, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x5, @empty}, 0x10, 0x0}}], 0x2, 0x400e004) 4.5911473s ago: executing program 1 (id=816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25130000000800", @ANYRES32=r2, @ANYBLOB="0600b50085010000040013000a000600081211000000000006001200830000000c0081"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x4000814) 4.163423306s ago: executing program 9 (id=817): socket$unix(0x1, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(0xffffffffffffffff, 0x394b, 0xcd66, 0x21, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.107990962s ago: executing program 8 (id=818): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x20008801, &(0x7f00000002c0)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 3.992194044s ago: executing program 6 (id=819): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) r6 = eventfd(0x2) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.623711795s ago: executing program 1 (id=820): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 3.083406044s ago: executing program 8 (id=821): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, 0x0, 0x20000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001800010a04"], 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x44, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x25c, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1c) 2.95227991s ago: executing program 9 (id=822): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}], 0xa8) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000400)=[{0x5, 0x39, 0x6, 0xba, @time={0xd, 0xd}, {0x4, 0x2}, {0x6, 0xfb}, @note={0x2, 0x81, 0x5, 0x9, 0x2}}, {0x0, 0xa5, 0xff, 0x4, @time={0xffffc09f, 0x7}, {0x9, 0x3}, {0xfb, 0x7}, @control={0x1, 0x1, 0xb0}}], 0x38) 2.849672173s ago: executing program 6 (id=823): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0}) 1.996041582s ago: executing program 9 (id=824): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xe0) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) 1.779799272s ago: executing program 1 (id=825): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000480)=""/170, 0xaa}], 0x1, 0x9, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000200)={0x0, 0x6, 0x13, 0x1}) 1.29975506s ago: executing program 8 (id=826): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, &(0x7f0000000080)) 1.086182073s ago: executing program 9 (id=827): r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4) 300.149089ms ago: executing program 1 (id=828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x28, r1, 0x5, 0x100000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings]}, 0x28}}, 0x4000800) 235.912594ms ago: executing program 8 (id=829): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 0s ago: executing program 9 (id=830): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25130000000800", @ANYRES32=r2, @ANYBLOB="0600b50085010000040013000a000600081211000000000006001200830000000c0081"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x4000814) kernel console output (not intermixed with test programs): us mode [ 521.549601][ T6733] veth0_vlan: left promiscuous mode [ 522.762776][ T6733] team0 (unregistering): Port device team_slave_1 removed [ 522.922335][ T6733] team0 (unregistering): Port device team_slave_0 removed [ 523.849536][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 523.869232][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 523.885706][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 523.941127][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 523.968514][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 524.909030][ T11] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 525.218096][ T11] usb 8-1: config 0 has no interfaces? [ 525.504308][ T11] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 525.514063][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.522696][ T11] usb 8-1: Product: syz [ 525.527158][ T11] usb 8-1: Manufacturer: syz [ 525.532266][ T11] usb 8-1: SerialNumber: syz [ 525.682290][ T11] usb 8-1: config 0 descriptor?? [ 525.814285][ T30] audit: type=1326 audit(1747795876.923:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.8.311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f50b8e969 code=0x0 [ 526.089251][ T5802] Bluetooth: hci2: command tx timeout [ 526.381642][ T7492] chnl_net:caif_netlink_parms(): no params data found [ 526.427069][ T7496] netlink: 32 bytes leftover after parsing attributes in process `syz.7.307'. [ 528.194739][ T5802] Bluetooth: hci2: command tx timeout [ 528.474550][ T7538] bridge0: entered promiscuous mode [ 528.480306][ T7538] macvlan2: entered promiscuous mode [ 528.945881][ T7492] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.957546][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.965666][ T7492] bridge_slave_0: entered allmulticast mode [ 528.974411][ T7492] bridge_slave_0: entered promiscuous mode [ 529.181494][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.189529][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.197868][ T7492] bridge_slave_1: entered allmulticast mode [ 529.208270][ T7492] bridge_slave_1: entered promiscuous mode [ 529.962479][ T7492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.080773][ T7492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.239777][ T5802] Bluetooth: hci2: command tx timeout [ 530.612442][ T7492] team0: Port device team_slave_0 added [ 530.632475][ T7492] team0: Port device team_slave_1 added [ 530.934913][ T30] audit: type=1326 audit(1747795882.043:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.4.324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2773b8e969 code=0x0 [ 531.175157][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.182666][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.211389][ T7492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.418388][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.426110][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.453209][ T7492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.515010][ T7569] xt_TCPMSS: Only works on TCP SYN packets [ 531.945511][ T7492] hsr_slave_0: entered promiscuous mode [ 531.954546][ T7492] hsr_slave_1: entered promiscuous mode [ 531.962878][ T7492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.970903][ T7492] Cannot create hsr debugfs directory [ 532.339143][ T5802] Bluetooth: hci2: command tx timeout [ 532.691273][ T7575] process 'syz.6.327' launched '/dev/fd/5' with NULL argv: empty string added [ 534.614469][ T7492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 534.885979][ T7492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 535.010405][ T7492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 535.221173][ T7492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 536.810440][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.817154][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.556851][ T7492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.953560][ T7492] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.088763][ T1882] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.096629][ T1882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.171012][ T5878] usb 8-1: USB disconnect, device number 2 [ 538.317866][ T1882] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.325585][ T1882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.670513][ T30] audit: type=1326 audit(1747795889.783:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.4.338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2773b8e969 code=0x0 [ 539.992789][ T30] audit: type=1326 audit(1747795891.103:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773b8e969 code=0x7ffc0000 [ 540.016947][ T30] audit: type=1326 audit(1747795891.123:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2773b8e969 code=0x7ffc0000 [ 540.040549][ T30] audit: type=1326 audit(1747795891.123:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773b8e969 code=0x7ffc0000 [ 540.063482][ T30] audit: type=1326 audit(1747795891.133:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2773b8e969 code=0x7ffc0000 [ 540.088567][ T30] audit: type=1326 audit(1747795891.133:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773b8e969 code=0x7ffc0000 [ 540.114008][ T30] audit: type=1326 audit(1747795891.143:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2773b8e969 code=0x7ffc0000 [ 540.137052][ T30] audit: type=1326 audit(1747795891.143:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773b8e969 code=0x7ffc0000 [ 540.160229][ T30] audit: type=1326 audit(1747795891.153:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2773b8e969 code=0x7ffc0000 [ 540.185355][ T30] audit: type=1326 audit(1747795891.153:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773b8e969 code=0x7ffc0000 [ 541.209782][ T7492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.468010][ T7654] netlink: 60 bytes leftover after parsing attributes in process `syz.8.346'. [ 542.034170][ T7492] veth0_vlan: entered promiscuous mode [ 542.240468][ T5878] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 542.270293][ T5871] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 542.358825][ T7492] veth1_vlan: entered promiscuous mode [ 542.489215][ T5878] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.500727][ T5878] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 542.510799][ T5878] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.569491][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 542.651087][ T5871] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 542.661322][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.792031][ T5871] usb 7-1: config 0 descriptor?? [ 542.907640][ T5878] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 542.917897][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.926484][ T5878] usb 9-1: Product: syz [ 542.931104][ T5878] usb 9-1: Manufacturer: syz [ 542.935971][ T5878] usb 9-1: SerialNumber: syz [ 543.092202][ T5871] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 543.102469][ T7492] veth0_macvtap: entered promiscuous mode [ 543.143107][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 543.206332][ T7492] veth1_macvtap: entered promiscuous mode [ 543.255828][ T5871] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 543.263549][ T5871] usb 7-1: media controller created [ 543.453452][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 543.535805][ T7492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.686379][ T7492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.871016][ T7492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.880785][ T7492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.889982][ T7492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.899172][ T7492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.919308][ T5871] az6027: usb out operation failed. (-71) [ 543.951864][ T5871] az6027: usb out operation failed. (-71) [ 543.957936][ T5871] stb0899_attach: Driver disabled by Kconfig [ 543.964676][ T5871] az6027: no front-end attached [ 543.964676][ T5871] [ 544.211105][ T5871] az6027: usb out operation failed. (-71) [ 544.217133][ T5871] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 544.229056][ T5871] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 544.468873][ T5871] dvb-usb: schedule remote query interval to 400 msecs. [ 544.476251][ T5871] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 544.519193][ T45] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 544.636943][ T5871] usb 7-1: USB disconnect, device number 7 [ 544.789015][ T45] usb 8-1: Using ep0 maxpacket: 8 [ 544.848223][ T45] usb 8-1: config 0 has no interfaces? [ 544.998889][ T45] usb 8-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 545.008289][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.017266][ T45] usb 8-1: Product: syz [ 545.021986][ T45] usb 8-1: Manufacturer: syz [ 545.026859][ T45] usb 8-1: SerialNumber: syz [ 545.216030][ T45] usb 8-1: config 0 descriptor?? [ 545.493354][ T5871] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 545.744614][ T11] usb 8-1: USB disconnect, device number 3 [ 546.640674][ T11] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 546.811406][ T7693] loop2: detected capacity change from 0 to 7 [ 546.893392][ T11] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 546.905499][ T11] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 546.915938][ T11] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 546.925589][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.964632][ T7693] Dev loop2: unable to read RDB block 7 [ 546.994907][ T7693] loop2: unable to read partition table [ 547.059909][ T7693] loop2: partition table beyond EOD, truncated [ 547.066702][ T7693] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 547.186284][ T7688] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 547.250179][ T11] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.784562][ T11] usb 7-1: USB disconnect, device number 8 [ 548.029468][ T7308] udevd[7308]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.681454][ T7742] loop2: detected capacity change from 0 to 7 [ 552.749938][ T7742] Dev loop2: unable to read RDB block 7 [ 552.756266][ T7742] loop2: unable to read partition table [ 553.450218][ T11] usb 9-1: USB disconnect, device number 2 [ 553.629619][ T7742] loop2: partition table beyond EOD, truncated [ 553.636965][ T7742] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 554.153988][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 554.154074][ T30] audit: type=1326 audit(1747795905.243:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.8.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f50b8e969 code=0x7ffc0000 [ 554.183515][ T30] audit: type=1326 audit(1747795905.243:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.8.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f50b8e969 code=0x7ffc0000 [ 554.313373][ T7750] overlayfs: missing 'workdir' [ 554.579646][ T30] audit: type=1326 audit(1747795905.353:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.8.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8f50b8e969 code=0x7ffc0000 [ 554.602490][ T30] audit: type=1326 audit(1747795905.403:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.8.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f50b8e969 code=0x7ffc0000 [ 554.626950][ T30] audit: type=1326 audit(1747795905.403:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.8.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f50b8e969 code=0x7ffc0000 [ 554.650275][ T30] audit: type=1326 audit(1747795905.403:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.8.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8f50b8e969 code=0x7ffc0000 [ 554.672975][ T30] audit: type=1326 audit(1747795905.413:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.8.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f50b2ab39 code=0x7ffc0000 [ 554.695597][ T30] audit: type=1326 audit(1747795905.413:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.8.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f50b2ab39 code=0x7ffc0000 [ 554.720577][ T30] audit: type=1326 audit(1747795905.413:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.8.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f50b2ab39 code=0x7ffc0000 [ 554.743916][ T30] audit: type=1326 audit(1747795905.413:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.8.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f50b2ab39 code=0x7ffc0000 [ 556.074500][ T6733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.083121][ T6733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.402544][ T1882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.411034][ T1882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.334365][ T7775] netlink: 216 bytes leftover after parsing attributes in process `syz.6.377'. [ 557.554930][ T4382] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.847938][ T4382] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.184345][ T4382] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.532378][ T4382] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.525645][ T4382] bridge_slave_1: left allmulticast mode [ 559.535252][ T4382] bridge_slave_1: left promiscuous mode [ 559.542221][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.680533][ T4382] bridge_slave_0: left allmulticast mode [ 559.686433][ T4382] bridge_slave_0: left promiscuous mode [ 559.694549][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.540887][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.655606][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.736190][ T4382] bond0 (unregistering): Released all slaves [ 561.499493][ T4382] hsr_slave_0: left promiscuous mode [ 561.538977][ T4382] hsr_slave_1: left promiscuous mode [ 561.547423][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.556338][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.632228][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.640910][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.731248][ T4382] veth1_macvtap: left promiscuous mode [ 561.737076][ T4382] veth0_macvtap: left promiscuous mode [ 561.743650][ T4382] veth1_vlan: left promiscuous mode [ 561.749196][ T4382] veth0_vlan: left promiscuous mode [ 563.173384][ T4382] team0 (unregistering): Port device team_slave_1 removed [ 563.338583][ T4382] team0 (unregistering): Port device team_slave_0 removed [ 563.999062][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 564.245716][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.256361][ T45] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 564.360310][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 564.371461][ T45] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 564.373639][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 564.382062][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.398503][ T45] usb 5-1: Product: syz [ 564.404356][ T45] usb 5-1: Manufacturer: syz [ 564.410300][ T45] usb 5-1: SerialNumber: syz [ 564.480072][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 564.520076][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 564.621761][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 564.783757][ T45] usb 5-1: config 0 descriptor?? [ 565.103950][ T45] usb 5-1: USB disconnect, device number 5 [ 565.641276][ T1635] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 565.929681][ T1635] usb 8-1: config 0 has no interfaces? [ 566.353215][ T1635] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 566.362861][ T1635] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.371796][ T1635] usb 8-1: Product: syz [ 566.376313][ T1635] usb 8-1: Manufacturer: syz [ 566.381635][ T1635] usb 8-1: SerialNumber: syz [ 566.719978][ T5800] Bluetooth: hci2: command tx timeout [ 566.723935][ T1635] usb 8-1: config 0 descriptor?? [ 567.052016][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.062660][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.316268][ T7817] chnl_net:caif_netlink_parms(): no params data found [ 568.639277][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 568.639363][ T30] audit: type=1800 audit(1747795919.753:84): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.398" name="/" dev="fuse" ino=1 res=0 errno=0 [ 568.824666][ T5800] Bluetooth: hci2: command tx timeout [ 569.367878][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.378032][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.386324][ T7817] bridge_slave_0: entered allmulticast mode [ 569.396291][ T7817] bridge_slave_0: entered promiscuous mode [ 569.412849][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.420803][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.428854][ T7817] bridge_slave_1: entered allmulticast mode [ 569.438614][ T7817] bridge_slave_1: entered promiscuous mode [ 569.587755][ T7817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.697686][ T7817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.994771][ T1635] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 570.092007][ T7817] team0: Port device team_slave_0 added [ 570.158193][ T7817] team0: Port device team_slave_1 added [ 570.231080][ T1635] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.242045][ T1635] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 570.360171][ T1635] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 570.370356][ T1635] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 570.379079][ T1635] usb 9-1: SerialNumber: syz [ 570.735268][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.742866][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.770876][ T7817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.943175][ T5800] Bluetooth: hci2: command tx timeout [ 570.992385][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.002731][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.029393][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.037086][ T7817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.332969][ T5871] hid-generic 0000:0003:0000.0002: item fetching failed at offset 0/2 [ 571.423469][ T7817] hsr_slave_0: entered promiscuous mode [ 571.432833][ T5871] hid-generic 0000:0003:0000.0002: probe with driver hid-generic failed with error -22 [ 571.438029][ T7817] hsr_slave_1: entered promiscuous mode [ 571.455775][ T7817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.464138][ T7817] Cannot create hsr debugfs directory [ 572.969507][ T5800] Bluetooth: hci2: command tx timeout [ 574.241017][ T7901] netlink: 60 bytes leftover after parsing attributes in process `syz.4.406'. [ 574.287705][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.406'. [ 574.374216][ T7817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 574.520362][ T7817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 574.620425][ T7817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 574.849054][ T7817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 575.544283][ T1635] usb 9-1: 0:2 : does not exist [ 576.149632][ T11] usb 9-1: USB disconnect, device number 3 [ 576.807586][ T30] audit: type=1800 audit(1747795927.903:85): pid=7921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.411" name="/" dev="9p" ino=2 res=0 errno=0 [ 576.906448][ T7916] netfs: Couldn't get user pages (rc=-14) [ 576.978257][ T7817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.300499][ T7817] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.459944][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.467859][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.659103][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.666586][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.310474][ T5871] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 578.559989][ T5871] usb 7-1: config 1 interface 0 has no altsetting 0 [ 578.622223][ T5871] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 578.631746][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.641020][ T5871] usb 7-1: Product: syz [ 578.645456][ T5871] usb 7-1: Manufacturer: syz [ 578.650449][ T5871] usb 7-1: SerialNumber: syz [ 579.579472][ T5871] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 579.600610][ T45] usb 8-1: USB disconnect, device number 4 [ 580.833246][ T7952] netlink: 60 bytes leftover after parsing attributes in process `syz.8.419'. [ 580.935742][ T7950] netlink: 60 bytes leftover after parsing attributes in process `syz.8.419'. [ 581.025954][ T7817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.552619][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 581.562900][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 581.621084][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 581.645023][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 581.671619][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 581.987754][ T7817] veth0_vlan: entered promiscuous mode [ 582.054107][ T7957] usb 7-1: USB disconnect, device number 9 [ 582.092900][ T7957] usblp0: removed [ 582.110830][ T7817] veth1_vlan: entered promiscuous mode [ 582.473375][ T45] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 582.516279][ T7817] veth0_macvtap: entered promiscuous mode [ 582.628604][ T7817] veth1_macvtap: entered promiscuous mode [ 582.707457][ T45] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.718334][ T45] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 582.853180][ T45] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 582.863151][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 582.871990][ T45] usb 9-1: SerialNumber: syz [ 582.997425][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.170620][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.539657][ T7817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.549095][ T7817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.558254][ T7817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.569291][ T7817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.796496][ T5802] Bluetooth: hci4: command tx timeout [ 583.886283][ T7955] chnl_net:caif_netlink_parms(): no params data found [ 584.049159][ T1869] hid-generic 0000:0003:0000.0003: item fetching failed at offset 0/2 [ 584.215780][ T1869] hid-generic 0000:0003:0000.0003: probe with driver hid-generic failed with error -22 [ 585.846696][ T5802] Bluetooth: hci4: command tx timeout [ 586.184057][ T6733] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.445327][ T6733] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.836347][ T6733] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.011954][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.020615][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.030291][ T7955] bridge_slave_0: entered allmulticast mode [ 587.041309][ T7955] bridge_slave_0: entered promiscuous mode [ 587.164651][ T6733] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.400712][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.408989][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.417415][ T7955] bridge_slave_1: entered allmulticast mode [ 587.430114][ T7955] bridge_slave_1: entered promiscuous mode [ 587.926409][ T5802] Bluetooth: hci4: command tx timeout [ 588.123242][ T45] usb 9-1: 0:2 : does not exist [ 588.391974][ T7955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.560108][ T6733] bridge_slave_1: left allmulticast mode [ 588.566262][ T6733] bridge_slave_1: left promiscuous mode [ 588.573949][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.751404][ T6733] bridge_slave_0: left allmulticast mode [ 588.757593][ T6733] bridge_slave_0: left promiscuous mode [ 588.764823][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.830238][ T1869] usb 9-1: USB disconnect, device number 4 [ 588.915411][ T7302] udevd[7302]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.000745][ T6733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.000804][ T5800] Bluetooth: hci4: command tx timeout [ 590.100904][ T6733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.152040][ T6733] bond0 (unregistering): Released all slaves [ 590.240908][ T7955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.303902][ T8016] netlink: 60 bytes leftover after parsing attributes in process `syz.8.431'. [ 590.544125][ T8015] netlink: 60 bytes leftover after parsing attributes in process `syz.8.431'. [ 590.864636][ T7955] team0: Port device team_slave_0 added [ 590.945946][ T7955] team0: Port device team_slave_1 added [ 591.031309][ T8022] netlink: 388 bytes leftover after parsing attributes in process `syz.4.433'. [ 591.600155][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.607691][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.635476][ T7955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.766262][ T6733] hsr_slave_0: left promiscuous mode [ 591.790869][ T6733] hsr_slave_1: left promiscuous mode [ 591.799859][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.807775][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.904891][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.914034][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.024285][ T6733] veth1_macvtap: left promiscuous mode [ 592.030242][ T6733] veth0_macvtap: left promiscuous mode [ 592.036242][ T6733] veth1_vlan: left promiscuous mode [ 592.042270][ T6733] veth0_vlan: left promiscuous mode [ 593.456191][ T6733] team0 (unregistering): Port device team_slave_1 removed [ 593.557308][ T6733] team0 (unregistering): Port device team_slave_0 removed [ 593.926208][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.933974][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.962482][ T7955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.981408][ T45] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 594.251036][ T45] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.261964][ T45] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.338083][ T45] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 594.349295][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 594.357777][ T45] usb 9-1: SerialNumber: syz [ 594.490463][ T5878] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 594.551507][ T7955] hsr_slave_0: entered promiscuous mode [ 594.566930][ T7955] hsr_slave_1: entered promiscuous mode [ 594.739258][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 594.799171][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 594.811857][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 595.082414][ T5878] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 595.092333][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.101906][ T5878] usb 5-1: Product: syz [ 595.106415][ T5878] usb 5-1: Manufacturer: syz [ 595.111742][ T5878] usb 5-1: SerialNumber: syz [ 595.119336][ T5802] Bluetooth: hci5: command 0x0406 tx timeout [ 595.429883][ T5878] usb 5-1: config 0 descriptor?? [ 595.446392][ T1869] hid-generic 0000:0003:0000.0004: item fetching failed at offset 0/2 [ 595.527786][ T5878] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 595.540411][ T5878] cyphidcom ttyUSB0: required endpoint is missing [ 595.600023][ T1869] hid-generic 0000:0003:0000.0004: probe with driver hid-generic failed with error -22 [ 595.669272][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.808262][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.937298][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.948305][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.210035][ T1869] usb 5-1: USB disconnect, device number 6 [ 596.305558][ T1869] cypress_m8 5-1:0.0: device disconnected [ 596.817114][ T7955] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 596.964223][ T7955] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 597.122621][ T7955] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 597.240964][ T7955] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 598.191099][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.198001][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 599.217692][ T7955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.516971][ T7955] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.550752][ T4634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.559352][ T4634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.573376][ T45] usb 9-1: 0:2 : does not exist [ 599.636104][ T3986] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.643848][ T3986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.937480][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.945886][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.970807][ T8076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.443'. [ 600.009440][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.017690][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.049390][ T8073] netlink: 60 bytes leftover after parsing attributes in process `syz.4.443'. [ 600.075241][ T8077] netlink: 388 bytes leftover after parsing attributes in process `syz.6.444'. [ 600.289605][ T5878] usb 9-1: USB disconnect, device number 5 [ 600.423224][ T7302] udevd[7302]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 601.286762][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.514707][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.785433][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.063315][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.091010][ T60] bridge_slave_1: left allmulticast mode [ 603.096941][ T60] bridge_slave_1: left promiscuous mode [ 603.104268][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.213201][ T60] bridge_slave_0: left allmulticast mode [ 603.219690][ T60] bridge_slave_0: left promiscuous mode [ 603.226507][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.992543][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.060796][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.094444][ T60] bond0 (unregistering): Released all slaves [ 604.445762][ T7955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.766655][ T60] hsr_slave_0: left promiscuous mode [ 604.819012][ T60] hsr_slave_1: left promiscuous mode [ 604.827633][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.835673][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.883814][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.891921][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.981432][ T60] veth1_macvtap: left promiscuous mode [ 604.988255][ T60] veth0_macvtap: left promiscuous mode [ 604.994865][ T60] veth1_vlan: left promiscuous mode [ 605.001122][ T60] veth0_vlan: left promiscuous mode [ 605.930906][ T60] team0 (unregistering): Port device team_slave_1 removed [ 605.958957][ T60] team0 (unregistering): Port device team_slave_0 removed [ 607.449231][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 608.729808][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.740731][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.919580][ T45] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 608.930598][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 608.940121][ T45] usb 5-1: SerialNumber: syz [ 608.977398][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.015585][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.028411][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.069381][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.321066][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 609.544048][ T8141] netlink: 388 bytes leftover after parsing attributes in process `syz.8.456'. [ 611.240337][ T7957] hid-generic 0000:0003:0000.0005: item fetching failed at offset 0/2 [ 611.415528][ T7957] hid-generic 0000:0003:0000.0005: probe with driver hid-generic failed with error -22 [ 611.679243][ T5800] Bluetooth: hci1: command tx timeout [ 612.682051][ T45] usb 5-1: 0:2 : does not exist [ 612.719958][ T45] usb 5-1: USB disconnect, device number 7 [ 612.873643][ T30] audit: type=1800 audit(1747795963.973:86): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.457" name="/" dev="9p" ino=2 res=0 errno=0 [ 613.106528][ T7302] udevd[7302]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.181265][ T7955] veth0_vlan: entered promiscuous mode [ 613.318997][ T7955] veth1_vlan: entered promiscuous mode [ 613.765209][ T5800] Bluetooth: hci1: command tx timeout [ 613.909813][ T7955] veth0_macvtap: entered promiscuous mode [ 613.950133][ T8139] chnl_net:caif_netlink_parms(): no params data found [ 614.026168][ T7955] veth1_macvtap: entered promiscuous mode [ 614.471405][ T7955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.579249][ T7957] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 614.625177][ T7955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.756363][ T7955] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.765761][ T7955] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.775095][ T7955] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.784317][ T7955] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.839106][ T7957] usb 9-1: Using ep0 maxpacket: 32 [ 614.907659][ T7957] usb 9-1: unable to get BOS descriptor or descriptor too short [ 614.955691][ T7957] usb 9-1: config 7 has an invalid interface number: 111 but max is 0 [ 614.965176][ T7957] usb 9-1: config 7 has no interface number 0 [ 615.026654][ T7957] usb 9-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 615.039477][ T7957] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.047903][ T7957] usb 9-1: Product: syz [ 615.052863][ T7957] usb 9-1: Manufacturer: syz [ 615.057774][ T7957] usb 9-1: SerialNumber: syz [ 615.513227][ T8161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.527809][ T8161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.785581][ T7957] usb 9-1: bad CDC descriptors [ 615.839906][ T5800] Bluetooth: hci1: command tx timeout [ 615.897624][ T7957] usb 9-1: USB disconnect, device number 6 [ 616.688997][ T1635] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 616.810341][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.817959][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.826629][ T8139] bridge_slave_0: entered allmulticast mode [ 616.836755][ T8139] bridge_slave_0: entered promiscuous mode [ 616.943121][ T8200] netlink: 388 bytes leftover after parsing attributes in process `syz.4.467'. [ 616.959444][ T1635] usb 7-1: Using ep0 maxpacket: 16 [ 617.009475][ T1635] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.021943][ T1635] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.026992][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.032310][ T1635] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 617.039686][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.049021][ T1635] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.066201][ T8139] bridge_slave_1: entered allmulticast mode [ 617.076039][ T8139] bridge_slave_1: entered promiscuous mode [ 617.218890][ T1635] usb 7-1: config 0 descriptor?? [ 617.751289][ T1635] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 617.760118][ T1635] appleir 0003:05AC:8241.0006: unknown main item tag 0x3 [ 617.794021][ T1635] appleir 0003:05AC:8241.0006: No inputs registered, leaving [ 617.815144][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.870654][ T1635] appleir 0003:05AC:8241.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 617.922735][ T5800] Bluetooth: hci1: command tx timeout [ 617.996040][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.043829][ T1635] usb 7-1: USB disconnect, device number 10 [ 618.180121][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 618.407006][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.419827][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.440187][ T45] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 618.449915][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 618.458496][ T45] usb 5-1: SerialNumber: syz [ 618.543593][ T8139] team0: Port device team_slave_0 added [ 618.632021][ T8139] team0: Port device team_slave_1 added [ 619.281336][ T1635] hid-generic 0000:0003:0000.0007: item fetching failed at offset 0/2 [ 619.355664][ T1635] hid-generic 0000:0003:0000.0007: probe with driver hid-generic failed with error -22 [ 619.490365][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.497606][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.526046][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.676091][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.683751][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.710993][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.086963][ T8211] fido_id[8211]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 620.405885][ T8139] hsr_slave_0: entered promiscuous mode [ 620.419872][ T8139] hsr_slave_1: entered promiscuous mode [ 620.431632][ T8139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.440314][ T8139] Cannot create hsr debugfs directory [ 621.541590][ T45] usb 5-1: 0:2 : does not exist [ 621.830099][ T45] usb 5-1: USB disconnect, device number 8 [ 622.217465][ T7302] udevd[7302]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.764121][ T8241] netlink: 388 bytes leftover after parsing attributes in process `syz.8.477'. [ 623.985963][ T8139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 623.993974][ T1635] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 624.111219][ T8139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 624.174299][ T1635] usb 5-1: Using ep0 maxpacket: 32 [ 624.216781][ T1635] usb 5-1: unable to get BOS descriptor or descriptor too short [ 624.236108][ T8139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 624.309288][ T1635] usb 5-1: config 7 has an invalid interface number: 111 but max is 0 [ 624.317827][ T1635] usb 5-1: config 7 has no interface number 0 [ 624.367574][ T8139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 624.410287][ T1635] usb 5-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 624.420033][ T1635] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.428526][ T1635] usb 5-1: Product: syz [ 624.435711][ T1635] usb 5-1: Manufacturer: syz [ 624.440776][ T1635] usb 5-1: SerialNumber: syz [ 624.506852][ T30] audit: type=1800 audit(1747795975.613:87): pid=8256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.481" name="/" dev="9p" ino=2 res=0 errno=0 [ 624.777580][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.789926][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.988365][ T1635] usb 5-1: bad CDC descriptors [ 625.016047][ T1869] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 625.112081][ T1635] usb 5-1: USB disconnect, device number 9 [ 625.286328][ T1869] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.296919][ T1869] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 625.422594][ T1869] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 625.433511][ T1869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.443267][ T1869] usb 9-1: Product: syz [ 625.447781][ T1869] usb 9-1: Manufacturer: syz [ 625.453010][ T1869] usb 9-1: SerialNumber: syz [ 625.639680][ T1869] usb 9-1: config 0 descriptor?? [ 625.859035][ T1869] usb 9-1: USB disconnect, device number 7 [ 626.064216][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.483'. [ 626.186520][ T8139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.377459][ T8139] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.486995][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.494921][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.638577][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.646565][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.986814][ T8139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.173995][ T4014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.182563][ T4014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.625462][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.637105][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.487390][ T8139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.829886][ T8290] netlink: 388 bytes leftover after parsing attributes in process `syz.8.489'. [ 630.206248][ T8139] veth0_vlan: entered promiscuous mode [ 630.346267][ T8139] veth1_vlan: entered promiscuous mode [ 630.840321][ T8139] veth0_macvtap: entered promiscuous mode [ 630.996966][ T8139] veth1_macvtap: entered promiscuous mode [ 631.160088][ T7957] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 631.343386][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.401728][ T7957] usb 5-1: config 0 has no interfaces? [ 631.481326][ T7957] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 631.491609][ T7957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.500177][ T7957] usb 5-1: Product: syz [ 631.504690][ T7957] usb 5-1: Manufacturer: syz [ 631.510113][ T7957] usb 5-1: SerialNumber: syz [ 631.550774][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.683133][ T7957] usb 5-1: config 0 descriptor?? [ 631.729626][ T8139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.739136][ T8139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.748298][ T8139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.757470][ T8139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.143351][ T8309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.509735][ T7957] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 632.718577][ T7957] usb 10-1: Using ep0 maxpacket: 32 [ 632.761063][ T1635] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 632.802703][ T7957] usb 10-1: unable to get BOS descriptor or descriptor too short [ 632.869905][ T7957] usb 10-1: config 7 has an invalid interface number: 111 but max is 0 [ 632.878977][ T7957] usb 10-1: config 7 has no interface number 0 [ 632.989219][ T7957] usb 10-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 632.999273][ T7957] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.007536][ T7957] usb 10-1: Product: syz [ 633.012207][ T7957] usb 10-1: Manufacturer: syz [ 633.017226][ T7957] usb 10-1: SerialNumber: syz [ 633.067554][ T1635] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.079235][ T1635] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 633.250741][ T1635] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 633.262264][ T1635] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.271502][ T1635] usb 9-1: Product: syz [ 633.275920][ T1635] usb 9-1: Manufacturer: syz [ 633.281023][ T1635] usb 9-1: SerialNumber: syz [ 633.505824][ T1635] usb 9-1: config 0 descriptor?? [ 633.528447][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.645478][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.731996][ T1869] usb 9-1: USB disconnect, device number 8 [ 633.778535][ T7957] usb 10-1: bad CDC descriptors [ 633.922950][ T7957] usb 10-1: USB disconnect, device number 2 [ 635.004699][ T8331] netlink: 'syz.6.498': attribute type 12 has an invalid length. [ 640.285280][ T8361] netlink: 388 bytes leftover after parsing attributes in process `syz.8.502'. [ 642.278080][ T30] audit: type=1800 audit(1747795993.393:88): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.505" name="/" dev="9p" ino=2 res=0 errno=0 [ 643.228082][ T8380] ALSA: mixer_oss: invalid OSS volume 'A1é4ó1Ø=w”ÄVe]' [ 643.236271][ T8380] ALSA: mixer_oss: invalid OSS volume 'ÊÒ±BËÂì;T`¿@$™¿¾E÷ócXÆMYdŸè,' [ 643.245526][ T8380] ALSA: mixer_oss: invalid OSS volume 'b«Ž@hé#' [ 643.252749][ T8380] ALSA: mixer_oss: invalid OSS volume '•‘h4¿–ÐX¬„S4v=0_>¤&äÏ' [ 643.261591][ T8380] ALSA: mixer_oss: invalid OSS volume '|œ/"tj' [ 643.268272][ T8380] ALSA: mixer_oss: invalid OSS volume '-z5²Šc^÷Jƒå6$̹' [ 643.276637][ T8380] ALSA: mixer_oss: invalid OSS volume '0ÉóT„®°yòÝäî¬ó‰´ª‡—‚j–P&†³aït' [ 643.285802][ T8380] ALSA: mixer_oss: invalid OSS volume '÷|á¥ó~‚\' [ 643.293249][ T8380] ALSA: mixer_oss: invalid OSS volume '­É@ô^3bÉœ‘}˜ÔG$º#\Ä("/øoúLÛ' [ 643.304847][ T8380] ALSA: mixer_oss: invalid OSS volume '' [ 644.740637][ T5878] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 644.974583][ T5878] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.985847][ T5878] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 645.060246][ T5878] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 645.069942][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.078249][ T5878] usb 7-1: Product: syz [ 645.082876][ T5878] usb 7-1: Manufacturer: syz [ 645.088223][ T5878] usb 7-1: SerialNumber: syz [ 645.234078][ T5878] usb 7-1: config 0 descriptor?? [ 645.468295][ T5878] usb 7-1: USB disconnect, device number 11 [ 646.039318][ T1869] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 646.318546][ T1869] usb 9-1: Using ep0 maxpacket: 32 [ 646.390512][ T1869] usb 9-1: unable to get BOS descriptor or descriptor too short [ 646.413075][ T1869] usb 9-1: config 7 has an invalid interface number: 111 but max is 0 [ 646.421797][ T1869] usb 9-1: config 7 has no interface number 0 [ 646.510566][ T1869] usb 9-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 646.520175][ T1869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.528342][ T1869] usb 9-1: Product: syz [ 646.532857][ T1869] usb 9-1: Manufacturer: syz [ 646.537608][ T1869] usb 9-1: SerialNumber: syz [ 646.974495][ T8395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.987556][ T8395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.218924][ T1869] usb 9-1: bad CDC descriptors [ 647.350114][ T1869] usb 9-1: USB disconnect, device number 9 [ 647.459202][ T11] usb 5-1: USB disconnect, device number 10 [ 647.825537][ T4634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.833892][ T4634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.185598][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.194061][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.556933][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 648.571796][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 648.706923][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 648.752288][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 648.791585][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 649.764747][ T3986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.147214][ T3986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.434363][ T3986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.780550][ T3986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.880060][ T5802] Bluetooth: hci2: command tx timeout [ 651.679940][ T8411] chnl_net:caif_netlink_parms(): no params data found [ 651.789758][ T3986] bridge_slave_1: left allmulticast mode [ 651.800270][ T3986] bridge_slave_1: left promiscuous mode [ 651.807020][ T3986] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.930319][ T3986] bridge_slave_0: left allmulticast mode [ 651.936269][ T3986] bridge_slave_0: left promiscuous mode [ 651.943327][ T3986] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.974268][ T5802] Bluetooth: hci2: command tx timeout [ 653.111282][ T3986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.184388][ T3986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.245858][ T3986] bond0 (unregistering): Released all slaves [ 654.116296][ T3986] hsr_slave_0: left promiscuous mode [ 654.131585][ T3986] hsr_slave_1: left promiscuous mode [ 654.140471][ T3986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.148264][ T3986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.182596][ T3986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.190558][ T3986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.259767][ T3986] veth1_macvtap: left promiscuous mode [ 654.265843][ T3986] veth0_macvtap: left promiscuous mode [ 654.275284][ T3986] veth1_vlan: left promiscuous mode [ 654.281243][ T3986] veth0_vlan: left promiscuous mode [ 655.039901][ T5802] Bluetooth: hci2: command tx timeout [ 655.369804][ T30] audit: type=1326 audit(1747796006.463:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.8.517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f50b8e969 code=0x0 [ 655.434422][ T3986] team0 (unregistering): Port device team_slave_1 removed [ 655.632383][ T3986] team0 (unregistering): Port device team_slave_0 removed [ 656.289128][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 656.302672][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 656.320963][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 656.353499][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 656.369425][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 657.050520][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.058161][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.066122][ T8411] bridge_slave_0: entered allmulticast mode [ 657.075154][ T8411] bridge_slave_0: entered promiscuous mode [ 657.135840][ T5800] Bluetooth: hci2: command tx timeout [ 657.191885][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.199908][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.208024][ T8411] bridge_slave_1: entered allmulticast mode [ 657.219299][ T8411] bridge_slave_1: entered promiscuous mode [ 657.520101][ T5871] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 657.531438][ T1635] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 657.730136][ T5871] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.743295][ T5871] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 657.849736][ T1635] usb 7-1: Using ep0 maxpacket: 16 [ 657.882865][ T1635] usb 7-1: config 0 has no interfaces? [ 657.919639][ T1635] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 657.929430][ T1635] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.940411][ T1635] usb 7-1: Product: syz [ 657.944854][ T1635] usb 7-1: Manufacturer: syz [ 657.951220][ T1635] usb 7-1: SerialNumber: syz [ 658.055001][ T1635] usb 7-1: config 0 descriptor?? [ 658.069322][ T5871] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 658.079102][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.087409][ T5871] usb 9-1: Product: syz [ 658.092203][ T5871] usb 9-1: Manufacturer: syz [ 658.097434][ T5871] usb 9-1: SerialNumber: syz [ 658.160206][ T8411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.306910][ T8464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.317651][ T8464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.330872][ T8411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.469731][ T5871] usb 9-1: config 0 descriptor?? [ 658.569650][ T5800] Bluetooth: hci1: command tx timeout [ 658.645354][ T8411] team0: Port device team_slave_0 added [ 658.706944][ T5871] usb 9-1: USB disconnect, device number 10 [ 658.770787][ T3986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.872610][ T8411] team0: Port device team_slave_1 added [ 658.918142][ T3986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.039792][ T1635] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 659.231533][ T3986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.258295][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.260937][ T1635] usb 10-1: Using ep0 maxpacket: 32 [ 659.266316][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.301606][ T8411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.490717][ T3986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.604472][ T1635] usb 10-1: unable to get BOS descriptor or descriptor too short [ 659.668489][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.675344][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.711885][ T1635] usb 10-1: config 7 has an invalid interface number: 111 but max is 0 [ 659.720679][ T1635] usb 10-1: config 7 has no interface number 0 [ 659.734688][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.739438][ T1635] usb 10-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 659.742064][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.751319][ T1635] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.751451][ T1635] usb 10-1: Product: syz [ 659.778168][ T8411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.788378][ T1635] usb 10-1: Manufacturer: syz [ 659.788498][ T1635] usb 10-1: SerialNumber: syz [ 660.275469][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.286234][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.446842][ T1635] usb 10-1: bad CDC descriptors [ 660.550691][ T1635] usb 10-1: USB disconnect, device number 3 [ 660.657561][ T5800] Bluetooth: hci1: command tx timeout [ 660.671934][ T3986] bridge_slave_1: left allmulticast mode [ 660.677990][ T3986] bridge_slave_1: left promiscuous mode [ 660.685269][ T3986] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.850071][ T3986] bridge_slave_0: left allmulticast mode [ 660.856203][ T3986] bridge_slave_0: left promiscuous mode [ 660.863190][ T3986] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.082334][ T3986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.205461][ T3986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.276013][ T3986] bond0 (unregistering): Released all slaves [ 662.553082][ T8454] chnl_net:caif_netlink_parms(): no params data found [ 662.731423][ T5800] Bluetooth: hci1: command tx timeout [ 662.760123][ T3986] IPVS: stopping master sync thread 6042 ... [ 662.848078][ T8411] hsr_slave_0: entered promiscuous mode [ 662.862903][ T8411] hsr_slave_1: entered promiscuous mode [ 662.872607][ T8411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.880788][ T8411] Cannot create hsr debugfs directory [ 663.909208][ T3986] hsr_slave_0: left promiscuous mode [ 663.959428][ T3986] hsr_slave_1: left promiscuous mode [ 663.967550][ T3986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.975770][ T3986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.095627][ T3986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.103671][ T3986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.302971][ T3986] veth1_macvtap: left promiscuous mode [ 664.309103][ T3986] veth0_macvtap: left promiscuous mode [ 664.315081][ T3986] veth1_vlan: left promiscuous mode [ 664.322558][ T3986] veth0_vlan: left promiscuous mode [ 664.617731][ T30] audit: type=1326 audit(1747796015.733:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8508 comm="syz.8.530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f50b8e969 code=0x0 [ 664.889764][ T5800] Bluetooth: hci1: command tx timeout [ 665.297948][ T3986] team0 (unregistering): Port device team_slave_1 removed [ 665.377147][ T3986] team0 (unregistering): Port device team_slave_0 removed [ 667.011824][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.019876][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.027702][ T8454] bridge_slave_0: entered allmulticast mode [ 667.037741][ T8454] bridge_slave_0: entered promiscuous mode [ 667.384892][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.396166][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.405227][ T8454] bridge_slave_1: entered allmulticast mode [ 667.415260][ T8454] bridge_slave_1: entered promiscuous mode [ 668.144940][ T8520] netlink: 'syz.8.532': attribute type 4 has an invalid length. [ 668.153919][ T8520] netlink: 32 bytes leftover after parsing attributes in process `syz.8.532'. [ 668.402468][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.705967][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.413370][ T8454] team0: Port device team_slave_0 added [ 669.533275][ T8454] team0: Port device team_slave_1 added [ 670.111307][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.119140][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.149189][ T8454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.215613][ T1635] usb 7-1: USB disconnect, device number 12 [ 670.227952][ T8411] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 670.334467][ T8411] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 670.425117][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.436123][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.465712][ T8454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.517015][ T8411] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 670.620992][ T8411] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 671.054030][ T5857] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 671.246849][ T8454] hsr_slave_0: entered promiscuous mode [ 671.261548][ T8454] hsr_slave_1: entered promiscuous mode [ 671.272347][ T8454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 671.280495][ T8454] Cannot create hsr debugfs directory [ 671.339095][ T5857] usb 10-1: Using ep0 maxpacket: 32 [ 671.392463][ T5857] usb 10-1: unable to get BOS descriptor or descriptor too short [ 671.424759][ T5857] usb 10-1: config 7 has an invalid interface number: 111 but max is 0 [ 671.434882][ T5857] usb 10-1: config 7 has no interface number 0 [ 671.539523][ T5857] usb 10-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 671.550337][ T5857] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.561584][ T5857] usb 10-1: Product: syz [ 671.566228][ T5857] usb 10-1: Manufacturer: syz [ 671.571917][ T5857] usb 10-1: SerialNumber: syz [ 671.814176][ T30] audit: type=1326 audit(1747796022.913:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.6.540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91a238e969 code=0x0 [ 671.882038][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.893418][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.982858][ T5857] usb 10-1: bad CDC descriptors [ 672.111554][ T5857] usb 10-1: USB disconnect, device number 4 [ 673.071504][ T8411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.562378][ T8411] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.713281][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.720901][ T6733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.827706][ T3917] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.835664][ T3917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.184952][ T8454] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 674.334728][ T8454] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 674.441102][ T8454] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 674.560953][ T8454] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 675.236918][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.546'. [ 675.246895][ T8580] bridge_slave_1: left allmulticast mode [ 675.254051][ T8580] bridge_slave_1: left promiscuous mode [ 675.262107][ T8580] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.662368][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.857415][ T8411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.984019][ T8454] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.118351][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.126114][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.250209][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.257917][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.705902][ T8411] veth0_vlan: entered promiscuous mode [ 678.876455][ T8454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.992501][ T8411] veth1_vlan: entered promiscuous mode [ 679.408263][ T8411] veth0_macvtap: entered promiscuous mode [ 679.563631][ T8411] veth1_macvtap: entered promiscuous mode [ 679.906506][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.027751][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.188965][ T8411] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.198529][ T8411] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.208248][ T8411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.217412][ T8411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.885547][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.920926][ T8454] veth0_vlan: entered promiscuous mode [ 683.040770][ T8454] veth1_vlan: entered promiscuous mode [ 683.171056][ T30] audit: type=1326 audit(1747796034.263:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.9.552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09fc38e969 code=0x0 [ 683.510824][ T8454] veth0_macvtap: entered promiscuous mode [ 683.559940][ T8454] veth1_macvtap: entered promiscuous mode [ 683.744805][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.830810][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.994686][ T8454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.004829][ T8454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.016380][ T8454] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.025674][ T8454] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.839586][ T8421] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 687.072273][ T8421] usb 10-1: Using ep0 maxpacket: 32 [ 687.105894][ T8421] usb 10-1: unable to get BOS descriptor or descriptor too short [ 687.153636][ T8421] usb 10-1: config 7 has an invalid interface number: 111 but max is 0 [ 687.162915][ T8421] usb 10-1: config 7 has no interface number 0 [ 687.254602][ T8421] usb 10-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 687.265003][ T8421] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.273680][ T8421] usb 10-1: Product: syz [ 687.278182][ T8421] usb 10-1: Manufacturer: syz [ 687.283351][ T8421] usb 10-1: SerialNumber: syz [ 687.652469][ T8643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.663179][ T8643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.827279][ T8421] usb 10-1: bad CDC descriptors [ 687.956954][ T8421] usb 10-1: USB disconnect, device number 5 [ 688.709166][ T5857] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 688.963475][ T5857] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 688.974247][ T5857] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.985424][ T5857] usb 7-1: config 0 has no interface number 0 [ 688.991968][ T5857] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 689.001729][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.218916][ T5857] usb 7-1: config 0 descriptor?? [ 689.317554][ T5857] ldusb 7-1:0.55: Interrupt in endpoint not found [ 691.420333][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.428863][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.709446][ T3917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.717730][ T3917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.279315][ T6733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.287555][ T6733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.569098][ T8421] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 695.789253][ T3986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.789509][ T8421] usb 2-1: Using ep0 maxpacket: 32 [ 695.797582][ T3986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.922629][ T8421] usb 2-1: unable to get BOS descriptor or descriptor too short [ 696.010284][ T8421] usb 2-1: config 7 has an invalid interface number: 111 but max is 0 [ 696.020793][ T8421] usb 2-1: config 7 has no interface number 0 [ 696.171815][ T8421] usb 2-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 696.181682][ T8421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.190477][ T8421] usb 2-1: Product: syz [ 696.194954][ T8421] usb 2-1: Manufacturer: syz [ 696.199942][ T8421] usb 2-1: SerialNumber: syz [ 696.628208][ T8421] usb 2-1: bad CDC descriptors [ 696.813283][ T8421] usb 2-1: USB disconnect, device number 2 [ 697.234431][ T6733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.636942][ T6733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.925818][ T6733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.265913][ T6733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.141609][ T6733] bridge_slave_1: left allmulticast mode [ 699.147575][ T6733] bridge_slave_1: left promiscuous mode [ 699.154689][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.260860][ T6733] bridge_slave_0: left allmulticast mode [ 699.266838][ T6733] bridge_slave_0: left promiscuous mode [ 699.275128][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.779270][ T5853] usb 7-1: USB disconnect, device number 13 [ 700.212094][ T6733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.270652][ T6733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.296736][ T6733] bond0 (unregistering): Released all slaves [ 700.896452][ T6733] hsr_slave_0: left promiscuous mode [ 700.934416][ T6733] hsr_slave_1: left promiscuous mode [ 700.944427][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.955240][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.999003][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.006784][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.070071][ T6733] veth1_macvtap: left promiscuous mode [ 701.075904][ T6733] veth0_macvtap: left promiscuous mode [ 701.082974][ T6733] veth1_vlan: left promiscuous mode [ 701.088816][ T6733] veth0_vlan: left promiscuous mode [ 702.161857][ T6733] team0 (unregistering): Port device team_slave_1 removed [ 702.280278][ T6733] team0 (unregistering): Port device team_slave_0 removed [ 703.444683][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 703.510277][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 703.523950][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 703.538333][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 703.550183][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.121158][ T8780] chnl_net:caif_netlink_parms(): no params data found [ 705.337989][ T8806] loop6: detected capacity change from 0 to 2048 [ 705.470158][ T8806] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 705.613212][ T52] Bluetooth: hci1: command tx timeout [ 705.886991][ T8813] loop8: detected capacity change from 0 to 1024 [ 706.459939][ T5871] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 706.688944][ T5871] usb 10-1: Using ep0 maxpacket: 32 [ 706.785182][ T5871] usb 10-1: unable to get BOS descriptor or descriptor too short [ 706.850998][ T5871] usb 10-1: config 7 has an invalid interface number: 111 but max is 0 [ 706.859957][ T5871] usb 10-1: config 7 has no interface number 0 [ 706.903613][ T8822] Zero length message leads to an empty skb [ 706.934025][ T5871] usb 10-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 706.944218][ T5871] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.952986][ T5871] usb 10-1: Product: syz [ 706.957680][ T5871] usb 10-1: Manufacturer: syz [ 706.965356][ T5871] usb 10-1: SerialNumber: syz [ 707.092333][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.8.595'. [ 707.102249][ T8826] netlink: 20 bytes leftover after parsing attributes in process `syz.8.595'. [ 707.154008][ T8780] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.162391][ T8780] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.172686][ T8780] bridge_slave_0: entered allmulticast mode [ 707.182593][ T8780] bridge_slave_0: entered promiscuous mode [ 707.326428][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.334320][ T8780] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.342577][ T8780] bridge_slave_1: entered allmulticast mode [ 707.352450][ T8780] bridge_slave_1: entered promiscuous mode [ 707.476769][ T5871] usb 10-1: bad CDC descriptors [ 707.611049][ T5871] usb 10-1: USB disconnect, device number 6 [ 707.679050][ T5800] Bluetooth: hci1: command tx timeout [ 707.769831][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 707.964158][ T8780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.120356][ T8780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.610326][ T8780] team0: Port device team_slave_0 added [ 708.664760][ T8780] team0: Port device team_slave_1 added [ 709.004790][ T8780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.012441][ T8780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.044357][ T8780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.068505][ T8780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.076291][ T8780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.103895][ T8780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.500144][ T8849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.600'. [ 709.762782][ T52] Bluetooth: hci1: command tx timeout [ 709.811329][ T8780] hsr_slave_0: entered promiscuous mode [ 709.822869][ T8780] hsr_slave_1: entered promiscuous mode [ 709.832074][ T8780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.840164][ T8780] Cannot create hsr debugfs directory [ 710.538003][ T8863] loop1: detected capacity change from 0 to 764 [ 711.413092][ T5871] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 711.646124][ T5871] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.656836][ T5871] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 711.756190][ T5871] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 711.766108][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 711.774917][ T5871] usb 9-1: SerialNumber: syz [ 711.805046][ T8876] loop1: detected capacity change from 0 to 512 [ 711.839472][ T52] Bluetooth: hci1: command tx timeout [ 712.121544][ T8876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.136086][ T8876] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 712.864480][ T8780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 712.921360][ T8780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 712.970328][ T8780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 713.158369][ T8411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.254286][ T8780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 714.496757][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.6.615'. [ 715.482904][ T8780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.858450][ T8780] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.926621][ T8913] loop6: detected capacity change from 0 to 128 [ 715.955917][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.963755][ T6733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.138573][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.144032][ T8913] ======================================================= [ 716.144032][ T8913] WARNING: The mand mount option has been deprecated and [ 716.144032][ T8913] and is ignored by this kernel. Remove the mand [ 716.144032][ T8913] option from the mount to silence this warning. [ 716.144032][ T8913] ======================================================= [ 716.146332][ T6733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.649941][ T8780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 717.066576][ T5871] usb 9-1: 0:2 : does not exist [ 717.871150][ T8921] netlink: 104 bytes leftover after parsing attributes in process `syz.9.620'. [ 718.292727][ T45] usb 9-1: USB disconnect, device number 11 [ 721.050737][ T8780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.094334][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.101573][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.750748][ T8950] netlink: 132 bytes leftover after parsing attributes in process `syz.9.628'. [ 721.809750][ T8780] veth0_vlan: entered promiscuous mode [ 721.948527][ T8780] veth1_vlan: entered promiscuous mode [ 722.527803][ T8780] veth0_macvtap: entered promiscuous mode [ 722.637298][ T8780] veth1_macvtap: entered promiscuous mode [ 722.965497][ T8780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.117833][ T8780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.286966][ T8780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.297405][ T8780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.306966][ T8780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.316413][ T8780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.930207][ T8971] loop1: detected capacity change from 0 to 256 [ 724.177937][ T8971] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x606c8cac, utbl_chksum : 0xe619d30d) [ 724.360256][ T8971] exFAT-fs (loop1): error, data size is invalid(10) [ 724.367656][ T8971] exFAT-fs (loop1): Filesystem has been set read-only [ 724.620592][ T8971] exFAT-fs (loop1): error, data size is invalid(10) [ 724.949836][ T8421] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 725.065210][ T8985] loop8: detected capacity change from 0 to 512 [ 725.150150][ T8421] usb 10-1: Using ep0 maxpacket: 16 [ 725.232952][ T8421] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.245059][ T8421] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.255929][ T8421] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 725.266093][ T8421] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.444945][ T8421] usb 10-1: config 0 descriptor?? [ 725.555088][ T8985] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.569029][ T8985] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.981054][ T8421] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 725.988507][ T8421] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 725.998062][ T8421] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 726.006779][ T8421] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 726.014322][ T8421] appleir 0003:05AC:8241.0008: unknown main item tag 0x0 [ 726.038897][ T8996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.642'. [ 726.295600][ T8421] appleir 0003:05AC:8241.0008: No inputs registered, leaving [ 726.333195][ T7167] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.380899][ T8421] appleir 0003:05AC:8241.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 726.486156][ T8421] usb 10-1: USB disconnect, device number 7 [ 727.033494][ T9006] netlink: 44 bytes leftover after parsing attributes in process `syz.8.644'. [ 727.356155][ T9001] fido_id[9001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 727.399371][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 727.703746][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 727.716490][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 727.728807][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 727.739064][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 727.752779][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 727.763178][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.067994][ T45] usb 2-1: config 0 descriptor?? [ 728.576085][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 728.584196][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 728.691460][ T45] usb 2-1: USB disconnect, device number 3 [ 728.904182][ T9024] loop6: detected capacity change from 0 to 1024 [ 730.101999][ T6733] hfsplus: b-tree write err: -5, ino 4 [ 730.537744][ T9040] loop9: detected capacity change from 0 to 1024 [ 730.648103][ T9040] EXT4-fs: Ignoring removed nobh option [ 730.655079][ T9040] EXT4-fs: Ignoring removed bh option [ 730.830561][ T9040] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.654: bad orphan inode 32767 [ 730.927898][ T9040] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.105696][ T9051] netlink: 132 bytes leftover after parsing attributes in process `syz.6.655'. [ 731.120082][ T45] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 731.328873][ T45] usb 9-1: Using ep0 maxpacket: 16 [ 731.389143][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.401041][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.411355][ T45] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 731.421030][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.538508][ T30] audit: type=1800 audit(1747796082.633:93): pid=9040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.654" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 731.561195][ T30] audit: type=1800 audit(1747796082.643:94): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.654" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 731.677181][ T45] usb 9-1: config 0 descriptor?? [ 732.054375][ T7955] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.181864][ T45] appleir 0003:05AC:8241.0009: unknown main item tag 0x0 [ 732.189927][ T45] appleir 0003:05AC:8241.0009: unknown main item tag 0x0 [ 732.197433][ T45] appleir 0003:05AC:8241.0009: unknown main item tag 0x0 [ 732.205638][ T45] appleir 0003:05AC:8241.0009: unknown main item tag 0x0 [ 732.213175][ T45] appleir 0003:05AC:8241.0009: unknown main item tag 0x0 [ 732.365225][ T45] appleir 0003:05AC:8241.0009: No inputs registered, leaving [ 732.529869][ T45] appleir 0003:05AC:8241.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 732.651705][ T45] usb 9-1: USB disconnect, device number 12 [ 733.283906][ T9073] fuse: Bad value for 'fd' [ 733.586516][ T9068] fido_id[9068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 734.190310][ T30] audit: type=1326 audit(1747796085.273:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.1.665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3da998e969 code=0x0 [ 734.352574][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.363270][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.710260][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.718498][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.498268][ T4634] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.924651][ T4634] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.240706][ T9101] netlink: 132 bytes leftover after parsing attributes in process `syz.9.669'. [ 737.524731][ T4634] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.966084][ T4634] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.670853][ T4634] bridge_slave_1: left allmulticast mode [ 738.676817][ T4634] bridge_slave_1: left promiscuous mode [ 738.683823][ T4634] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.805998][ T4634] bridge_slave_0: left allmulticast mode [ 738.812485][ T4634] bridge_slave_0: left promiscuous mode [ 738.819604][ T4634] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.377956][ T4634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.414154][ T4634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.434877][ T4634] bond0 (unregistering): Released all slaves [ 740.243677][ T4634] hsr_slave_0: left promiscuous mode [ 740.306756][ T4634] hsr_slave_1: left promiscuous mode [ 740.315329][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.323569][ T4634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.414542][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.422852][ T4634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.525017][ T4634] veth1_macvtap: left promiscuous mode [ 740.531136][ T4634] veth0_macvtap: left promiscuous mode [ 740.537406][ T4634] veth1_vlan: left promiscuous mode [ 740.543455][ T4634] veth0_vlan: left promiscuous mode [ 741.345305][ T4634] team0 (unregistering): Port device team_slave_1 removed [ 741.427745][ T4634] team0 (unregistering): Port device team_slave_0 removed [ 742.048995][ T9134] loop6: detected capacity change from 0 to 1024 [ 742.114929][ T9134] EXT4-fs: Ignoring removed bh option [ 742.166462][ T9134] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 743.179730][ T5857] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 743.260470][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 743.286140][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 743.301173][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 743.323631][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 743.344943][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 743.369942][ T5857] usb 10-1: Using ep0 maxpacket: 8 [ 743.399184][ T5857] usb 10-1: config 0 has no interfaces? [ 743.506703][ T5857] usb 10-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 743.516422][ T5857] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.525709][ T5857] usb 10-1: Product: syz [ 743.531674][ T5857] usb 10-1: Manufacturer: syz [ 743.536637][ T5857] usb 10-1: SerialNumber: syz [ 743.689766][ T5857] usb 10-1: config 0 descriptor?? [ 743.919676][ T9147] fuse: Bad value for 'fd' [ 743.947476][ T8421] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 744.179484][ T8421] usb 7-1: Using ep0 maxpacket: 32 [ 744.192359][ T8421] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 744.193399][ T5857] usb 10-1: USB disconnect, device number 8 [ 744.205353][ T8421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 744.223218][ T8421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 744.233536][ T8421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 744.245392][ T8421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 744.427826][ T8421] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 744.437883][ T8421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.446589][ T8421] usb 7-1: Product: syz [ 744.451429][ T8421] usb 7-1: Manufacturer: syz [ 744.456549][ T8421] usb 7-1: SerialNumber: syz [ 744.538440][ T8421] usb 7-1: config 0 descriptor?? [ 744.771307][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 744.806444][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 744.820986][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 744.832576][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 744.842159][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 744.897962][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 744.905991][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 744.919727][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 744.929592][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 744.948762][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 744.982800][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 745.017237][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 745.048084][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 745.067970][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 745.097159][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 745.129915][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 745.155233][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 745.186887][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 745.233606][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 745.269913][ T8421] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 745.276993][ T8421] input input8: Timeout waiting for response from device. [ 745.390053][ T8421] usb 7-1: USB disconnect, device number 14 [ 745.440745][ T5800] Bluetooth: hci1: command tx timeout [ 745.529441][ T9159] netlink: 132 bytes leftover after parsing attributes in process `syz.9.680'. [ 745.663427][ T9142] chnl_net:caif_netlink_parms(): no params data found [ 745.926057][ T9161] loop8: detected capacity change from 0 to 256 [ 747.003833][ T9173] loop1: detected capacity change from 0 to 128 [ 747.100341][ T9173] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 747.525680][ T5800] Bluetooth: hci1: command tx timeout [ 748.236661][ T9142] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.246143][ T9142] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.257640][ T9142] bridge_slave_0: entered allmulticast mode [ 748.268846][ T9142] bridge_slave_0: entered promiscuous mode [ 748.490825][ T9142] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.499008][ T9142] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.506923][ T9142] bridge_slave_1: entered allmulticast mode [ 748.516979][ T9142] bridge_slave_1: entered promiscuous mode [ 748.659716][ T8421] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 748.859144][ T8421] usb 10-1: Using ep0 maxpacket: 8 [ 748.887752][ T9191] fuse: Bad value for 'fd' [ 748.899295][ T8421] usb 10-1: config 0 has no interfaces? [ 748.982018][ T8421] usb 10-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 748.991750][ T8421] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.000392][ T8421] usb 10-1: Product: syz [ 749.004928][ T8421] usb 10-1: Manufacturer: syz [ 749.010264][ T8421] usb 10-1: SerialNumber: syz [ 749.116651][ T9197] netlink: 132 bytes leftover after parsing attributes in process `syz.6.693'. [ 749.135328][ T9142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.144481][ T8421] usb 10-1: config 0 descriptor?? [ 749.261256][ T9142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.512030][ T9142] team0: Port device team_slave_0 added [ 749.558823][ T5857] usb 10-1: USB disconnect, device number 9 [ 749.600821][ T5800] Bluetooth: hci1: command tx timeout [ 749.700679][ T9142] team0: Port device team_slave_1 added [ 750.127169][ T9142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.134957][ T9142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.162201][ T9142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.198358][ T9142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.208482][ T9142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.237190][ T9142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.904378][ T9142] hsr_slave_0: entered promiscuous mode [ 750.915151][ T9142] hsr_slave_1: entered promiscuous mode [ 750.928962][ T9142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 750.936858][ T9142] Cannot create hsr debugfs directory [ 751.126100][ T8421] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 751.335468][ T8421] usb 7-1: Using ep0 maxpacket: 32 [ 751.432177][ T8421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 751.443719][ T8421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 751.500104][ T8421] usb 7-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 751.509911][ T8421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.518221][ T8421] usb 7-1: Product: syz [ 751.524038][ T8421] usb 7-1: Manufacturer: syz [ 751.529442][ T8421] usb 7-1: SerialNumber: syz [ 751.690485][ T5800] Bluetooth: hci1: command tx timeout [ 751.702034][ T8421] usb 7-1: config 0 descriptor?? [ 751.746203][ T8421] cypress_m8 7-1:0.0: HID->COM RS232 Adapter converter detected [ 751.757482][ T8421] cyphidcom ttyUSB0: required endpoint is missing [ 751.924399][ T9202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.935491][ T9202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.160093][ T8421] usb 7-1: USB disconnect, device number 15 [ 752.171012][ T8421] cypress_m8 7-1:0.0: device disconnected [ 752.210241][ T9218] fuse: Bad value for 'group_id' [ 752.215709][ T9218] fuse: Bad value for 'group_id' [ 753.783131][ T9233] netlink: 132 bytes leftover after parsing attributes in process `syz.6.705'. [ 754.045878][ T9142] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 754.147625][ T9142] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 754.221066][ T9237] fuse: Bad value for 'fd' [ 754.304793][ T9142] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 754.353170][ T8421] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 754.493962][ T9142] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 754.597472][ T8421] usb 2-1: Using ep0 maxpacket: 8 [ 754.652107][ T8421] usb 2-1: config 0 has no interfaces? [ 754.693813][ T8421] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 754.703637][ T8421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.714454][ T8421] usb 2-1: Product: syz [ 754.719778][ T8421] usb 2-1: Manufacturer: syz [ 754.724742][ T8421] usb 2-1: SerialNumber: syz [ 754.836666][ T8421] usb 2-1: config 0 descriptor?? [ 755.261254][ T5857] usb 2-1: USB disconnect, device number 4 [ 755.964467][ T9142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.169276][ T9142] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.238081][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.246007][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.370848][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.378775][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.740558][ T9256] fuse: Bad value for 'group_id' [ 756.745805][ T9256] fuse: Bad value for 'group_id' [ 758.184571][ T5853] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 758.399551][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 758.457795][ T5853] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 758.467614][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.567438][ T5853] usb 2-1: config 0 descriptor?? [ 758.689118][ T9280] netlink: 132 bytes leftover after parsing attributes in process `syz.9.719'. [ 758.849536][ T8421] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 758.872145][ T5853] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 759.070234][ T5853] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 759.082372][ T5853] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 759.094198][ T5853] asix 2-1:0.0: probe with driver asix failed with error -32 [ 759.139025][ T8421] usb 9-1: Using ep0 maxpacket: 32 [ 759.239454][ T8421] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 759.251181][ T8421] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 759.277639][ T9142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.345512][ T8421] usb 9-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 759.355638][ T8421] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.367321][ T8421] usb 9-1: Product: syz [ 759.372515][ T8421] usb 9-1: Manufacturer: syz [ 759.377386][ T8421] usb 9-1: SerialNumber: syz [ 759.395378][ T8421] usb 9-1: config 0 descriptor?? [ 759.514951][ T8421] cypress_m8 9-1:0.0: HID->COM RS232 Adapter converter detected [ 759.531787][ T8421] cyphidcom ttyUSB0: required endpoint is missing [ 759.718325][ T8421] usb 9-1: USB disconnect, device number 13 [ 759.731580][ T8421] cypress_m8 9-1:0.0: device disconnected [ 759.962266][ T9287] loop1: detected capacity change from 0 to 1024 [ 760.054900][ T9142] veth0_vlan: entered promiscuous mode [ 760.067397][ T9287] EXT4-fs error (device loop1): __ext4_fill_super:5502: comm syz.1.717: inode #2: comm syz.1.717: iget: illegal inode # [ 760.101092][ T9287] EXT4-fs (loop1): get root inode failed [ 760.107018][ T9287] EXT4-fs (loop1): mount failed [ 760.221285][ T9142] veth1_vlan: entered promiscuous mode [ 761.071799][ T9298] fuse: Bad value for 'fd' [ 761.341901][ T9142] veth0_macvtap: entered promiscuous mode [ 761.462594][ T9142] veth1_macvtap: entered promiscuous mode [ 761.756403][ T9142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.763907][ T8421] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 761.816517][ T5871] usb 2-1: USB disconnect, device number 5 [ 761.935844][ T8421] usb 9-1: Using ep0 maxpacket: 8 [ 761.937121][ T9142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.968387][ T9142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.983971][ T9142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.993901][ T9142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.004753][ T9142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.073858][ T8421] usb 9-1: config 0 has no interfaces? [ 762.127377][ T8421] usb 9-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 762.137195][ T8421] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.146374][ T8421] usb 9-1: Product: syz [ 762.150984][ T8421] usb 9-1: Manufacturer: syz [ 762.155848][ T8421] usb 9-1: SerialNumber: syz [ 762.196399][ T8421] usb 9-1: config 0 descriptor?? [ 762.483588][ T9310] fuse: Bad value for 'group_id' [ 762.491800][ T9310] fuse: Bad value for 'group_id' [ 762.668970][ T45] usb 9-1: USB disconnect, device number 14 [ 763.925632][ T9327] netlink: 132 bytes leftover after parsing attributes in process `syz.9.731'. [ 764.112626][ T9329] input: syz1 as /devices/virtual/input/input9 [ 765.800592][ T9346] loop1: detected capacity change from 0 to 256 [ 765.924698][ T9346] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 765.936110][ T9346] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 766.429363][ T9351] fuse: Bad value for 'fd' [ 766.554367][ T9346] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 768.639706][ T45] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 768.841371][ T45] usb 10-1: Using ep0 maxpacket: 8 [ 768.891083][ T45] usb 10-1: config 0 has no interfaces? [ 768.989281][ T45] usb 10-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 768.998972][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.007634][ T45] usb 10-1: Product: syz [ 769.012392][ T45] usb 10-1: Manufacturer: syz [ 769.017353][ T45] usb 10-1: SerialNumber: syz [ 769.186797][ T45] usb 10-1: config 0 descriptor?? [ 769.224189][ T9374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.744'. [ 769.609350][ T8421] usb 10-1: USB disconnect, device number 10 [ 771.011480][ T9397] fuse: Bad value for 'fd' [ 771.318221][ T9403] netlink: 'syz.8.751': attribute type 4 has an invalid length. [ 772.121772][ T9409] netlink: 28 bytes leftover after parsing attributes in process `syz.9.753'. [ 773.243911][ T8421] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 773.461240][ T8421] usb 10-1: Using ep0 maxpacket: 8 [ 773.515284][ T8421] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 773.528073][ T8421] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.538823][ T8421] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 773.551879][ T8421] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 773.562945][ T8421] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 773.573467][ T8421] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 773.583279][ T8421] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.768973][ T45] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 773.872742][ T8421] usb 10-1: config 0 descriptor?? [ 773.984648][ T52] Bluetooth: hci3: urb ffff8880492fb840 submission failed (90) [ 774.131154][ T5857] usb 10-1: USB disconnect, device number 11 [ 774.194749][ T45] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 774.207267][ T45] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.217744][ T45] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 774.227280][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.339179][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 774.429570][ T45] hub 9-1:4.0: USB hub found [ 774.460609][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.471398][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.640813][ T45] hub 9-1:4.0: 12 ports detected [ 774.646212][ T45] usb 9-1: selecting invalid altsetting 1 [ 774.653347][ T45] hub 9-1:4.0: Using single TT (err -22) [ 774.722023][ T45] hub 9-1:4.0: insufficient power available to use all downstream ports [ 774.854435][ T6733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.863230][ T6733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.960909][ T45] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 774.967894][ T45] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 775.059131][ T8421] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 775.163958][ T45] usb 9-1: USB disconnect, device number 15 [ 775.293099][ T8421] usb 7-1: Using ep0 maxpacket: 16 [ 775.354850][ T8421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.367846][ T8421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.378506][ T8421] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 775.388507][ T8421] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.644415][ T8421] usb 7-1: config 0 descriptor?? [ 776.135157][ T8421] hid (null): bogus close delimiter [ 776.186177][ T3986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.249780][ T8421] wacom 0003:056A:0084.000A: bogus close delimiter [ 776.256882][ T8421] wacom 0003:056A:0084.000A: item 0 4 2 10 parsing failed [ 776.373201][ T8421] wacom 0003:056A:0084.000A: parse failed [ 776.384333][ T8421] wacom 0003:056A:0084.000A: probe with driver wacom failed with error -22 [ 776.509360][ T3986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.624314][ T8421] usb 7-1: USB disconnect, device number 16 [ 776.774352][ T3986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.808091][ T9454] fuse: Bad value for 'fd' [ 777.086279][ T3986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.736943][ T3986] bridge_slave_1: left allmulticast mode [ 777.743562][ T3986] bridge_slave_1: left promiscuous mode [ 777.755014][ T3986] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.877605][ T3986] bridge_slave_0: left allmulticast mode [ 777.884965][ T3986] bridge_slave_0: left promiscuous mode [ 777.892317][ T3986] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.500852][ T3986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.553709][ T3986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.608250][ T3986] bond0 (unregistering): Released all slaves [ 779.223491][ T3986] hsr_slave_0: left promiscuous mode [ 779.250708][ T3986] hsr_slave_1: left promiscuous mode [ 779.259346][ T3986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.267125][ T3986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.321834][ T3986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.330898][ T3986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.438872][ T3986] veth1_macvtap: left promiscuous mode [ 779.444714][ T3986] veth0_macvtap: left promiscuous mode [ 779.451497][ T3986] veth1_vlan: left promiscuous mode [ 779.457282][ T3986] veth0_vlan: left promiscuous mode [ 780.309045][ T3986] team0 (unregistering): Port device team_slave_1 removed [ 780.337765][ T3986] team0 (unregistering): Port device team_slave_0 removed [ 781.209418][ T45] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 781.461184][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.472928][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.483693][ T45] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 781.497273][ T45] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 781.507060][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.778279][ T45] usb 10-1: config 0 descriptor?? [ 782.359899][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 782.363553][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 782.367791][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 782.378206][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 782.383128][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 782.398083][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 782.402696][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 782.406098][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 782.471343][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 782.527849][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 782.553193][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.562685][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.833859][ T45] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 782.945326][ T45] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 782.980657][ T45] usb 10-1: USB disconnect, device number 12 [ 783.101187][ T9494] loop1: detected capacity change from 0 to 8 [ 783.300808][ T9494] SQUASHFS error: lzo decompression failed, data probably corrupt [ 783.309875][ T9494] SQUASHFS error: Failed to read block 0x0: -5 [ 783.316932][ T9494] SQUASHFS error: lzo decompression failed, data probably corrupt [ 783.325660][ T9494] SQUASHFS error: Failed to read block 0x0: -5 [ 783.401475][ T30] audit: type=1800 audit(1747796134.453:96): pid=9494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.775" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 783.576129][ T9499] SQUASHFS error: lzo decompression failed, data probably corrupt [ 783.588210][ T9499] SQUASHFS error: Failed to read block 0x0: -5 [ 783.596324][ T9499] SQUASHFS error: lzo decompression failed, data probably corrupt [ 783.605050][ T9499] SQUASHFS error: Failed to read block 0x0: -5 [ 783.693409][ T9494] SQUASHFS error: lzo decompression failed, data probably corrupt [ 783.702013][ T9494] SQUASHFS error: Failed to read block 0x0: -5 [ 783.709313][ T9494] SQUASHFS error: lzo decompression failed, data probably corrupt [ 783.717482][ T9494] SQUASHFS error: Failed to read block 0x0: -5 [ 783.924426][ T9500] netlink: 52 bytes leftover after parsing attributes in process `syz.8.777'. [ 784.572936][ T5800] Bluetooth: hci1: command tx timeout [ 784.635877][ T9501] fido_id[9501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 785.040046][ T9515] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.050364][ T9515] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.178159][ T9488] chnl_net:caif_netlink_parms(): no params data found [ 786.495658][ T9531] loop6: detected capacity change from 0 to 1024 [ 786.562256][ T9531] EXT4-fs: Ignoring removed i_version option [ 786.640759][ T5800] Bluetooth: hci1: command tx timeout [ 786.798463][ T9531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.213051][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.8.788'. [ 787.332685][ T6481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.680794][ T9546] loop1: detected capacity change from 0 to 128 [ 787.725240][ T9488] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.734013][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.742073][ T9488] bridge_slave_0: entered allmulticast mode [ 787.751959][ T9488] bridge_slave_0: entered promiscuous mode [ 787.802683][ T9488] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.811568][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.819731][ T9488] bridge_slave_1: entered allmulticast mode [ 787.829674][ T9488] bridge_slave_1: entered promiscuous mode [ 787.863450][ T9548] netlink: 52 bytes leftover after parsing attributes in process `syz.9.791'. [ 787.889107][ T9546] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 787.981397][ T9488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.031026][ T9546] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.104693][ T9488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.124855][ T9546] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 788.622528][ T9488] team0: Port device team_slave_0 added [ 788.716191][ T9488] team0: Port device team_slave_1 added [ 788.729259][ T5800] Bluetooth: hci1: command tx timeout [ 789.382462][ T9488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.390054][ T9488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.417155][ T9488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.449607][ T8421] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 789.713793][ T9488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.722027][ T9488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.735875][ T8421] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 789.753298][ T9488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.760956][ T8421] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 789.761127][ T8421] usb 9-1: config 0 interface 0 has no altsetting 0 [ 789.761311][ T8421] usb 9-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 789.761461][ T8421] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.887780][ T8421] usb 9-1: config 0 descriptor?? [ 789.898877][ T9564] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 790.460185][ T8421] logitech 0003:046D:C24F.000C: unbalanced delimiter at end of report description [ 790.524571][ T8421] logitech 0003:046D:C24F.000C: parse failed [ 790.531965][ T8421] logitech 0003:046D:C24F.000C: probe with driver logitech failed with error -22 [ 790.631725][ T9488] hsr_slave_0: entered promiscuous mode [ 790.642444][ T9488] hsr_slave_1: entered promiscuous mode [ 790.660558][ T9488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.668516][ T9488] Cannot create hsr debugfs directory [ 790.733683][ T45] usb 9-1: USB disconnect, device number 16 [ 790.801720][ T5800] Bluetooth: hci1: command tx timeout [ 792.050757][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.9.802'. [ 792.071190][ T9591] netlink: 52 bytes leftover after parsing attributes in process `syz.8.803'. [ 794.329047][ T9488] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 794.500612][ T9488] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 794.631115][ T9488] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 794.735029][ T9488] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 795.264001][ T9622] loop8: detected capacity change from 0 to 2048 [ 796.559419][ T9488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.822529][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.9.817'. [ 796.825889][ T9488] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.952491][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.960411][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.081725][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.089470][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.467552][ T9488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 797.546020][ T9646] loop1: detected capacity change from 0 to 2048 [ 797.793253][ T9646] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 798.152896][ T8421] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 798.411165][ T8421] usb 7-1: Using ep0 maxpacket: 16 [ 798.489752][ T8421] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 798.499398][ T8421] usb 7-1: config 1 has no interface number 0 [ 798.505836][ T8421] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 798.516667][ T8421] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 798.527218][ T8421] usb 7-1: config 1 interface 105 has no altsetting 0 [ 798.790456][ T8421] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 798.802545][ T8421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.811281][ T8421] usb 7-1: Product: syz [ 798.815742][ T8421] usb 7-1: Manufacturer: syz [ 798.821008][ T8421] usb 7-1: SerialNumber: syz [ 799.060103][ T9654] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 799.068536][ T9654] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 799.742486][ T9654] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 799.840964][ T9654] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 800.317050][ T8421] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 800.409769][ T8421] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 800.489031][ T8421] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 800.500799][ T8421] ===================================================== [ 800.508108][ T8421] BUG: KMSAN: uninit-value in usbnet_probe+0x2e57/0x4390 [ 800.515664][ T8421] usbnet_probe+0x2e57/0x4390 [ 800.520740][ T8421] usb_probe_interface+0xd01/0x1310 [ 800.526221][ T8421] really_probe+0x4d4/0xd90 [ 800.531267][ T8421] __driver_probe_device+0x268/0x380 [ 800.536908][ T8421] driver_probe_device+0x70/0x8b0 [ 800.542326][ T8421] __device_attach_driver+0x4ee/0x950 [ 800.547957][ T8421] bus_for_each_drv+0x3e0/0x680 [ 800.553371][ T8421] __device_attach+0x3c8/0x5c0 [ 800.558507][ T8421] device_initial_probe+0x33/0x40 [ 800.565155][ T8421] bus_probe_device+0x3ba/0x5e0 [ 800.570422][ T8421] device_add+0x12a9/0x1c10 [ 800.575233][ T8421] usb_set_configuration+0x3493/0x3b70 [ 800.584662][ T8421] usb_generic_driver_probe+0xfc/0x290 [ 800.591607][ T8421] usb_probe_device+0x38d/0x690 [ 800.596896][ T8421] really_probe+0x4d4/0xd90 [ 800.601836][ T8421] __driver_probe_device+0x268/0x380 [ 800.607401][ T8421] driver_probe_device+0x70/0x8b0 [ 800.613369][ T8421] __device_attach_driver+0x4ee/0x950 [ 800.619252][ T8421] bus_for_each_drv+0x3e0/0x680 [ 800.624328][ T8421] __device_attach+0x3c8/0x5c0 [ 800.629501][ T8421] device_initial_probe+0x33/0x40 [ 800.634786][ T8421] bus_probe_device+0x3ba/0x5e0 [ 800.640276][ T8421] device_add+0x12a9/0x1c10 [ 800.645256][ T8421] usb_new_device+0x104b/0x20c0 [ 800.650690][ T8421] hub_event+0x5588/0x7580 [ 800.655434][ T8421] process_scheduled_works+0xb9a/0x1d90 [ 800.661480][ T8421] worker_thread+0xedf/0x1590 [ 800.666440][ T8421] kthread+0xd5c/0xf00 [ 800.671112][ T8421] ret_from_fork+0x71/0x90 [ 800.676164][ T8421] ret_from_fork_asm+0x1a/0x30 [ 800.681416][ T8421] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 800.687414][ T8421] Uninit was stored to memory at: [ 800.693931][ T8421] dev_addr_mod+0xb0/0x550 [ 800.698848][ T8421] aqc111_bind+0x35f/0x1150 [ 800.703666][ T8421] usbnet_probe+0xbe9/0x4390 [ 800.709015][ T8421] usb_probe_interface+0xd01/0x1310 [ 800.714481][ T8421] really_probe+0x4d4/0xd90 [ 800.719465][ T8421] __driver_probe_device+0x268/0x380 [ 800.725629][ T8421] driver_probe_device+0x70/0x8b0 [ 800.731506][ T8421] __device_attach_driver+0x4ee/0x950 [ 800.737182][ T8421] bus_for_each_drv+0x3e0/0x680 [ 800.742408][ T8421] __device_attach+0x3c8/0x5c0 [ 800.747431][ T8421] device_initial_probe+0x33/0x40 [ 800.752966][ T8421] bus_probe_device+0x3ba/0x5e0 [ 800.758111][ T8421] device_add+0x12a9/0x1c10 [ 800.763094][ T8421] usb_set_configuration+0x3493/0x3b70 [ 800.768983][ T8421] usb_generic_driver_probe+0xfc/0x290 [ 800.774835][ T8421] usb_probe_device+0x38d/0x690 [ 800.780178][ T8421] really_probe+0x4d4/0xd90 [ 800.789583][ T8421] __driver_probe_device+0x268/0x380 [ 800.795348][ T8421] driver_probe_device+0x70/0x8b0 [ 800.800907][ T8421] __device_attach_driver+0x4ee/0x950 [ 800.806588][ T8421] bus_for_each_drv+0x3e0/0x680 [ 800.811839][ T8421] __device_attach+0x3c8/0x5c0 [ 800.816887][ T8421] device_initial_probe+0x33/0x40 [ 800.822829][ T8421] bus_probe_device+0x3ba/0x5e0 [ 800.827897][ T8421] device_add+0x12a9/0x1c10 [ 800.832817][ T8421] usb_new_device+0x104b/0x20c0 [ 800.837883][ T8421] hub_event+0x5588/0x7580 [ 800.842861][ T8421] process_scheduled_works+0xb9a/0x1d90 [ 800.849028][ T8421] worker_thread+0xedf/0x1590 [ 800.853982][ T8421] kthread+0xd5c/0xf00 [ 800.858353][ T8421] ret_from_fork+0x71/0x90 [ 800.863358][ T8421] ret_from_fork_asm+0x1a/0x30 [ 800.868754][ T8421] [ 800.871223][ T8421] Uninit was stored to memory at: [ 800.876573][ T8421] aqc111_bind+0x794/0x1150 [ 800.882595][ T8421] usbnet_probe+0xbe9/0x4390 [ 800.891877][ T8421] usb_probe_interface+0xd01/0x1310 [ 800.897765][ T8421] really_probe+0x4d4/0xd90 [ 800.903730][ T8421] __driver_probe_device+0x268/0x380 [ 800.909675][ T8421] driver_probe_device+0x70/0x8b0 [ 800.915059][ T8421] __device_attach_driver+0x4ee/0x950 [ 800.920951][ T8421] bus_for_each_drv+0x3e0/0x680 [ 800.926051][ T8421] __device_attach+0x3c8/0x5c0 [ 800.931231][ T8421] device_initial_probe+0x33/0x40 [ 800.936627][ T8421] bus_probe_device+0x3ba/0x5e0 [ 800.941880][ T8421] device_add+0x12a9/0x1c10 [ 800.946703][ T8421] usb_set_configuration+0x3493/0x3b70 [ 800.952631][ T8421] usb_generic_driver_probe+0xfc/0x290 [ 800.958417][ T8421] usb_probe_device+0x38d/0x690 [ 800.963702][ T8421] really_probe+0x4d4/0xd90 [ 800.968452][ T8421] __driver_probe_device+0x268/0x380 [ 800.974287][ T8421] driver_probe_device+0x70/0x8b0 [ 800.979851][ T8421] __device_attach_driver+0x4ee/0x950 [ 800.985572][ T8421] bus_for_each_drv+0x3e0/0x680 [ 800.994527][ T8421] __device_attach+0x3c8/0x5c0 [ 801.000467][ T8421] device_initial_probe+0x33/0x40 [ 801.005866][ T8421] bus_probe_device+0x3ba/0x5e0 [ 801.011213][ T8421] device_add+0x12a9/0x1c10 [ 801.016048][ T8421] usb_new_device+0x104b/0x20c0 [ 801.021950][ T8421] hub_event+0x5588/0x7580 [ 801.026615][ T8421] process_scheduled_works+0xb9a/0x1d90 [ 801.032748][ T8421] worker_thread+0xedf/0x1590 [ 801.037678][ T8421] kthread+0xd5c/0xf00 [ 801.043523][ T8421] ret_from_fork+0x71/0x90 [ 801.048303][ T8421] ret_from_fork_asm+0x1a/0x30 [ 801.053467][ T8421] [ 801.055940][ T8421] Local variable buf.i created at: [ 801.061443][ T8421] aqc111_bind+0x221/0x1150 [ 801.066241][ T8421] usbnet_probe+0xbe9/0x4390 [ 801.071239][ T8421] [ 801.073827][ T8421] CPU: 0 UID: 0 PID: 8421 Comm: kworker/0:6 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(undef) [ 801.086554][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 801.101889][ T8421] Workqueue: usb_hub_wq hub_event [ 801.107275][ T8421] ===================================================== [ 801.116243][ T8421] Disabling lock debugging due to kernel taint [ 801.123066][ T8421] Kernel panic - not syncing: kmsan.panic set ... [ 801.129794][ T8421] CPU: 0 UID: 0 PID: 8421 Comm: kworker/0:6 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(undef) [ 801.144171][ T8421] Tainted: [B]=BAD_PAGE [ 801.148508][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 801.158918][ T8421] Workqueue: usb_hub_wq hub_event [ 801.164773][ T8421] Call Trace: [ 801.168439][ T8421] [ 801.171806][ T8421] __dump_stack+0x26/0x30 [ 801.176558][ T8421] dump_stack_lvl+0x53/0x270 [ 801.181521][ T8421] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 801.187658][ T8421] dump_stack+0x1e/0x25 [ 801.192062][ T8421] panic+0x4bd/0xd50 [ 801.196274][ T8421] kmsan_report+0x29d/0x2a0 [ 801.201284][ T8421] ? __netdev_printk+0x677/0xa00 [ 801.206553][ T8421] ? __msan_warning+0x96/0x120 [ 801.211626][ T8421] ? usbnet_probe+0x2e57/0x4390 [ 801.216841][ T8421] ? usb_probe_interface+0xd01/0x1310 [ 801.222694][ T8421] ? really_probe+0x4d4/0xd90 [ 801.227648][ T8421] ? __driver_probe_device+0x268/0x380 [ 801.233390][ T8421] ? driver_probe_device+0x70/0x8b0 [ 801.238863][ T8421] ? __device_attach_driver+0x4ee/0x950 [ 801.244767][ T8421] ? bus_for_each_drv+0x3e0/0x680 [ 801.250027][ T8421] ? __device_attach+0x3c8/0x5c0 [ 801.255204][ T8421] ? device_initial_probe+0x33/0x40 [ 801.260643][ T8421] ? bus_probe_device+0x3ba/0x5e0 [ 801.265877][ T8421] ? device_add+0x12a9/0x1c10 [ 801.270963][ T8421] ? usb_set_configuration+0x3493/0x3b70 [ 801.276935][ T8421] ? usb_generic_driver_probe+0xfc/0x290 [ 801.282810][ T8421] ? usb_probe_device+0x38d/0x690 [ 801.288084][ T8421] ? really_probe+0x4d4/0xd90 [ 801.293109][ T8421] ? __driver_probe_device+0x268/0x380 [ 801.298852][ T8421] ? driver_probe_device+0x70/0x8b0 [ 801.304371][ T8421] ? __device_attach_driver+0x4ee/0x950 [ 801.310277][ T8421] ? bus_for_each_drv+0x3e0/0x680 [ 801.315695][ T8421] ? __device_attach+0x3c8/0x5c0 [ 801.320907][ T8421] ? device_initial_probe+0x33/0x40 [ 801.326389][ T8421] ? bus_probe_device+0x3ba/0x5e0 [ 801.331655][ T8421] ? device_add+0x12a9/0x1c10 [ 801.336578][ T8421] ? usb_new_device+0x104b/0x20c0 [ 801.341833][ T8421] ? hub_event+0x5588/0x7580 [ 801.346751][ T8421] ? process_scheduled_works+0xb9a/0x1d90 [ 801.352741][ T8421] ? worker_thread+0xedf/0x1590 [ 801.357843][ T8421] ? kthread+0xd5c/0xf00 [ 801.362427][ T8421] ? ret_from_fork+0x71/0x90 [ 801.367375][ T8421] ? ret_from_fork_asm+0x1a/0x30 [ 801.372597][ T8421] ? kmsan_get_metadata+0x105/0x1b0 [ 801.378582][ T8421] ? kmsan_get_metadata+0x105/0x1b0 [ 801.384125][ T8421] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 801.390707][ T8421] ? kmsan_get_metadata+0x105/0x1b0 [ 801.396387][ T8421] __msan_warning+0x96/0x120 [ 801.401408][ T8421] usbnet_probe+0x2e57/0x4390 [ 801.406836][ T8421] ? pm_runtime_enable+0x3b2/0x4d0 [ 801.412315][ T8421] ? __pfx_usbnet_probe+0x10/0x10 [ 801.417711][ T8421] usb_probe_interface+0xd01/0x1310 [ 801.423228][ T8421] ? __pfx_usb_probe_interface+0x10/0x10 [ 801.429255][ T8421] really_probe+0x4d4/0xd90 [ 801.434163][ T8421] __driver_probe_device+0x268/0x380 [ 801.439748][ T8421] driver_probe_device+0x70/0x8b0 [ 801.445070][ T8421] ? kmsan_get_metadata+0x105/0x1b0 [ 801.450598][ T8421] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 801.456839][ T8421] __device_attach_driver+0x4ee/0x950 [ 801.462516][ T8421] bus_for_each_drv+0x3e0/0x680 [ 801.467757][ T8421] ? __pfx___device_attach_driver+0x10/0x10 [ 801.474089][ T8421] __device_attach+0x3c8/0x5c0 [ 801.479165][ T8421] device_initial_probe+0x33/0x40 [ 801.484412][ T8421] bus_probe_device+0x3ba/0x5e0 [ 801.489574][ T8421] device_add+0x12a9/0x1c10 [ 801.494301][ T8421] usb_set_configuration+0x3493/0x3b70 [ 801.500063][ T8421] usb_generic_driver_probe+0xfc/0x290 [ 801.505739][ T8421] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 801.512036][ T8421] usb_probe_device+0x38d/0x690 [ 801.517122][ T8421] ? __pfx_usb_probe_device+0x10/0x10 [ 801.522992][ T8421] really_probe+0x4d4/0xd90 [ 801.527911][ T8421] __driver_probe_device+0x268/0x380 [ 801.533429][ T8421] driver_probe_device+0x70/0x8b0 [ 801.538692][ T8421] ? kmsan_get_metadata+0x105/0x1b0 [ 801.544252][ T8421] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 801.550430][ T8421] __device_attach_driver+0x4ee/0x950 [ 801.556069][ T8421] bus_for_each_drv+0x3e0/0x680 [ 801.561128][ T8421] ? __pfx___device_attach_driver+0x10/0x10 [ 801.567277][ T8421] __device_attach+0x3c8/0x5c0 [ 801.572268][ T8421] device_initial_probe+0x33/0x40 [ 801.577510][ T8421] bus_probe_device+0x3ba/0x5e0 [ 801.582585][ T8421] device_add+0x12a9/0x1c10 [ 801.587312][ T8421] usb_new_device+0x104b/0x20c0 [ 801.592379][ T8421] hub_event+0x5588/0x7580 [ 801.597034][ T8421] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 801.603103][ T8421] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 801.609048][ T8421] ? kmsan_get_metadata+0x105/0x1b0 [ 801.614573][ T8421] ? __pfx_hub_event+0x10/0x10 [ 801.619750][ T8421] process_scheduled_works+0xb9a/0x1d90 [ 801.625682][ T8421] worker_thread+0xedf/0x1590 [ 801.630617][ T8421] kthread+0xd5c/0xf00 [ 801.634920][ T8421] ? __pfx_worker_thread+0x10/0x10 [ 801.640392][ T8421] ? __pfx_kthread+0x10/0x10 [ 801.645254][ T8421] ret_from_fork+0x71/0x90 [ 801.649910][ T8421] ? __pfx_kthread+0x10/0x10 [ 801.654781][ T8421] ret_from_fork_asm+0x1a/0x30 [ 801.659840][ T8421] [ 801.663429][ T8421] Kernel Offset: disabled [ 801.667991][ T8421] Rebooting in 86400 seconds..