last executing test programs: 11m46.142092556s ago: executing program 0 (id=7748): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x25b4e59c81b60c2e, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @opaque='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}}, 0x0) 11m45.998259969s ago: executing program 0 (id=7749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x808500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000034c0)) 11m45.593287899s ago: executing program 0 (id=7751): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) write$tun(r0, &(0x7f0000000000)={@void, @val={0x2, 0x4, 0x2, 0x5dd, 0x8, 0x3}, @x25={0x3, 0x1, 0xff}}, 0xd) 11m45.310838541s ago: executing program 0 (id=7756): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmdt(0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000c40)={0x0, 0x2, 0x3, 0xfffa, 0x70, 0xf, 0x9, 0xffff, {0x0, @in6={{0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x2d0, 0x7, 0x401, 0xe, 0x7}}, &(0x7f0000000b00)=0xb0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 11m42.983437546s ago: executing program 0 (id=7764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)={0x24, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='o'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 11m42.76624693s ago: executing program 0 (id=7767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 11m27.471453061s ago: executing program 32 (id=7767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m36.837391467s ago: executing program 5 (id=9325): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@deltclass={0x0, 0x29, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff2, 0xfff3}, {0x4, 0x7}}, [@tclass_kind_options=@c_mqprio, @tclass_kind_options=@c_clsact]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x6) socket$netlink(0x10, 0x3, 0x15) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000080)={r3, r4, 0x0, 0x0, 0x4}) close(r2) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58) r5 = shmget$private(0x0, 0x1000, 0x4, &(0x7f00008ef000/0x1000)=nil) shmctl$SHM_LOCK(r5, 0xb) 2m33.654231825s ago: executing program 5 (id=9335): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x34c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x320, 0x2, [@TCA_U32_SEL={0x204, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0xe, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x80000001, 0x20000007, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0x0, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x104, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x5, 0x3ff, 0x5, 0x4}, {0x2, 0xe55, 0x69c, 0x4000000}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0xa, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x7}, {0x7, 0x59, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x1000, 0x2, 0x264, 0x9}, {0x4, 0xb, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x3, 0x2, 0x7, 0x7}, {0x80, 0x3, 0x2, 0x1e0}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x34c}}, 0x24040084) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="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"/284], 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000011401"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 2m30.428958152s ago: executing program 5 (id=9342): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x7f, 0xffffffff, 0xfff, 0x1, 0xf, 0x1, 0x3, 0xfffffffffffffffd, 0x61, 0xfff, 0x100000001, 0x1, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0xfffffffffffffff7, 0x8, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x800003, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x9, 0x1, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ffe, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x7, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0xa, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000001500), 0x200) unshare(0x2c020400) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) 2m27.534792569s ago: executing program 5 (id=9349): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x5, 0xd9, 0xffdffe0000000001, 0xfa11, 0xfffffffa}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040fff80000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005002500000000000800"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b80200001800a00010071756f7461000000100002800c00014000000000000000002c00"], 0x124}}, 0x0) 2m25.286899931s ago: executing program 5 (id=9353): syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180)="8ec5", 0x2, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r3, 0x4b32, 0xf1a) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2m23.069280756s ago: executing program 5 (id=9360): ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x7, 'nr0\x00', {0x80}, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084000"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) connect$tipc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m7.718348769s ago: executing program 33 (id=9360): ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x7, 'nr0\x00', {0x80}, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084000"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) connect$tipc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m46.900878638s ago: executing program 2 (id=9448): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0xc, @string={0xc, 0x3, "9a000000000000000000"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x6, @string={0x6, 0x3, "ac658b07"}}, 0x0, 0x0}, 0x0) 1m43.617308147s ago: executing program 2 (id=9456): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r4 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) 1m41.208315593s ago: executing program 2 (id=9462): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c80001800378013000300717472283414d6bba919736d34290000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 1m39.874811891s ago: executing program 2 (id=9465): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000000)={0xd, @pix_mp={0x9, 0x40000055, 0x64737664, 0x6, 0x8, [{0x9, 0x4000}, {0x9, 0x7fffffff}, {0x7f4d6e18, 0x2}, {0x0, 0x1}, {0x8000, 0x200}, {0x4000008}, {0x865e, 0x1f}, {0x7311, 0x7fff}], 0xc3, 0x4, 0x8, 0xe87b598fe6909e43, 0x5}}) 1m39.462346926s ago: executing program 4 (id=9467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x9c}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000800) r2 = syz_open_dev$vbi(&(0x7f0000001340), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000013c0)=@fd={0x7, 0xe, 0x4, 0x2000, 0x27, {0x77359400}, {0x1, 0xc, 0x0, 0xb2, 0x5, 0xf7, "230b6991"}, 0x7ff, 0x4, {}, 0x2}) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x4008880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x800008d, 0x0) 1m37.847432919s ago: executing program 4 (id=9472): r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_create(0x4, 0x80000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000010c0)=@abs, 0x38) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x21) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000001480)={0x0, &(0x7f0000001140)=[@uexit={0x0, 0x18, 0x2}, @nested_load_code={0x12e, 0x7e, {0x3, "430f01cf66baf80cb8c9cec08cef66bafc0cb000eec7442400760a0e2ac74424020b000000c7442406000000000f011c24c421c972f6b4450f01c3470f35f30fc7753b66baf80cb860817883ef66bafc0cb8e5710000ef262666430f388017c403997a730002"}}, @cpuid={0x64, 0x18, {0x8, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x9f, 0x6, 0x9, 0x1000}}, @rdmsr={0x66, 0x18, {0x826}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x6}, @rdmsr={0x66, 0x18, {0x1b4}}, @wr_drn={0x68, 0x20, {0x1, 0x8}}, @code={0xa, 0x6a, {"670fc73bc4c38141af001800005e66baa00066ed664a0f38f57c605566ba4100b87f000000ef0f01c5f3400fc7b17c770000660faef348b804000000000000000f23c80f21f8350400f0000f23f80f20e035000004000f22e0"}}, @nested_create_vm={0x12d, 0x18, 0x3}, @uexit={0x0, 0x18}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x20000000}, @cpuid={0x64, 0x18, {0x10, 0x7}}, @rdmsr={0x66, 0x18, {0xf19}}, @set_irq_handler={0xc8, 0x20, {0xfd}}, @nested_load_code={0x12e, 0x75, {0x1, "67450fc7b7bcd899eb66b8f4000f00d8b98b0000000f3264666566440fd6feb9380300000f32660fc73748b800600000000000000f23c80f21f8350c0010000f23f83e670fc5d4f266baf80cb895980f86ef66bafc0cecc402b0f3595d"}}], 0x2f5}) getdents64(r5, &(0x7f00000000c0)=""/4096, 0x1000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048080}, 0x0) getsockopt(r1, 0x1, 0xe, &(0x7f0000002a40)=""/152, &(0x7f0000002b00)=0x98) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002f61afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000001}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x98}}, 0x10) ptrace(0x10, r0) socket(0x2a, 0x800, 0x0) 1m36.270972637s ago: executing program 2 (id=9475): syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180)="8ec5", 0x2, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r3, 0x4b32, 0xf1a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1m34.112013048s ago: executing program 2 (id=9479): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x38}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x50, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1b}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1m33.719688263s ago: executing program 4 (id=9483): socket$inet(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xff}, @rand_addr=0x64010102}}}], 0x20}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m31.995907998s ago: executing program 4 (id=9486): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x5, 0xd9, 0xffdffe0000000001, 0xfa11, 0xfffffffa}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040fff80000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005002500000000000800"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b80200001800a00010071756f7461000000100002800c00014000000000000000002c00"], 0x124}}, 0x0) 1m30.008848821s ago: executing program 4 (id=9492): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[]) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x68840) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xeae7, 0x1000, 0x6, 0x37d}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r3, 0x2afd, 0x308b, 0xc, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff}, 0x1c, 0x0}}], 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, 0x0) 1m28.47998055s ago: executing program 4 (id=9494): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe80000000000000800000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1m18.955060049s ago: executing program 34 (id=9479): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x38}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x50, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1b}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1m13.367690597s ago: executing program 35 (id=9494): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe80000000000000800000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 12.716576674s ago: executing program 8 (id=9677): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103000) mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 12.293972023s ago: executing program 3 (id=9680): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x7) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x541b, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x24, &(0x7f0000000780)={0x0, 0x10, 0xd1, {0xd1, 0x21, "fcc3679ba1643894a45e809c0e0dd8eeee9767b69e2d0aa32dc9771cd14308e3629ebe46e87c506d5e23b9c48c87c48cd2dae7f5d441a3427b6a79c02a7b4b59ab663909d01b67c5e7b006a077e0ef9ff526f80bd0e632ed113e329f9fc6973ce9b233360f5a886a759227e15ff71bbfce2c8ceecd2e9cb7c83c7bc58f3342e487b0720664747fa61aeb1e69a6063d11a5fb8d6ff5d52beb8d149055ccee55036c28f696d45f5c6d9d9562abfa5f5b24d69c6eccf912e4a3872f578186e779c268ced5a6b765ac7c909e58067bb981"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000009c0)={0x0, 0x22, 0x11, {[@main=@item_012={0x2, 0x0, 0x8, "74b4"}, @main=@item_012={0x2, 0x0, 0x9, "12e0"}, @local=@item_4={0x3, 0x2, 0x3, "e7df9a26"}, @main=@item_012={0x2, 0x0, 0x8, "c119"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x0, 0x1, 0x6}, @local]}}, 0x0}, &(0x7f0000000980)={0x2c, &(0x7f0000000480)={0x40, 0x31}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000880)={0x20, 0x1, 0x88, "4cdbfae4164c3cd748b4a3b00fe5dfebea8d0b50aefd3de9c8d36ddbe1459527ff0af644a832c1a818ef2f4d6b4e7b6447eebe80500a722ec148d855ddc03d0096cce2eb137f3a40a5e16f02700761098d3ab9ac3358ddde618ed9bf300904a30b4dac9bf05ab91ec3243e5346f837581ed34500f3813f1419334bb5081fe28fd6cff00885affed5"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0xa}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r7, 0x805, 0x800, 0x0, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, 0x0, 0x0) 9.492315943s ago: executing program 8 (id=9684): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmdt(0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000"], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e080083"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x6f94, 0x5, 0xa45a2b2e, 0x7fff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x14fe}, 0x1ff, 0x5, 0x7, 0x0, 0x8000000000000002, 0x2, 0x8abd, 0x5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 9.468854223s ago: executing program 6 (id=9685): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000180)={0x6, 0x200, 0x8d, 0x800, 0xb, 0x9}) 8.706851948s ago: executing program 3 (id=9687): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1e, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af0117030109021200010000000009"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000180)=""/135) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e61, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 8.478421954s ago: executing program 6 (id=9689): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) fanotify_init(0x200, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x5c, {0x3, 0x0, 0x16f8000, 0x0, 0x0, 0x2, {0x0, 0x1, 0x2, 0x0, 0x0, 0x9, 0x1fd, 0xff, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.045683088s ago: executing program 6 (id=9690): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r4 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) 7.518402931s ago: executing program 7 (id=9691): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 6.614139163s ago: executing program 3 (id=9692): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x200040d0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x80) 6.43204552s ago: executing program 1 (id=9693): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 6.266395102s ago: executing program 8 (id=9694): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) close(r7) pipe(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r7) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000800) unshare(0x22010000) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r3, 0x3516, 0x483, 0x0, 0x0, 0x0) 5.862575451s ago: executing program 6 (id=9695): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x4, 0x20, 0x1e, 0x100000e}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0xc0000100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r4, 0x2276, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [], 0x5}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x3], 0x5}}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x1000004fe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clock_getres(0x2, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 5.58126033s ago: executing program 3 (id=9696): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 5.337084603s ago: executing program 8 (id=9697): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x7) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x541b, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x24, &(0x7f0000000780)={0x0, 0x10, 0xd1, {0xd1, 0x21, "fcc3679ba1643894a45e809c0e0dd8eeee9767b69e2d0aa32dc9771cd14308e3629ebe46e87c506d5e23b9c48c87c48cd2dae7f5d441a3427b6a79c02a7b4b59ab663909d01b67c5e7b006a077e0ef9ff526f80bd0e632ed113e329f9fc6973ce9b233360f5a886a759227e15ff71bbfce2c8ceecd2e9cb7c83c7bc58f3342e487b0720664747fa61aeb1e69a6063d11a5fb8d6ff5d52beb8d149055ccee55036c28f696d45f5c6d9d9562abfa5f5b24d69c6eccf912e4a3872f578186e779c268ced5a6b765ac7c909e58067bb981"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000009c0)={0x0, 0x22, 0x11, {[@main=@item_012={0x2, 0x0, 0x8, "74b4"}, @main=@item_012={0x2, 0x0, 0x9, "12e0"}, @local=@item_4={0x3, 0x2, 0x3, "e7df9a26"}, @main=@item_012={0x2, 0x0, 0x8, "c119"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x0, 0x1, 0x6}, @local]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x94e}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r7, 0x805, 0x800, 0x0, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, 0x0, 0x0) 4.868487014s ago: executing program 7 (id=9698): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) 4.682135615s ago: executing program 6 (id=9699): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x5, 0xd9, 0xffdffe0000000001, 0xfa11, 0xfffffffa}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040fff80000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005002500000000000800"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b80200001800a00010071756f7461000000100002800c00014000000000000000002c00"], 0x124}}, 0x0) 4.471125213s ago: executing program 7 (id=9700): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x29c780}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 4.249064697s ago: executing program 1 (id=9701): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sigaltstack(0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0xc, @string={0xc, 0x3, "9a000000000000000000"}}, 0x0, 0x0}, 0x0) 3.687613993s ago: executing program 3 (id=9702): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) fanotify_init(0x200, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x5c, {0x3, 0x0, 0x16f8000, 0x0, 0x0, 0x2, {0x0, 0x1, 0x2, 0x0, 0x0, 0x9, 0x1fd, 0xff, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.425144659s ago: executing program 7 (id=9703): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x5, 0xd9, 0xffdffe0000000001, 0xfa11, 0xfffffffa}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040fff80000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005002500000000000800"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b80200001800a00010071756f7461000000100002800c00014000000000000000002c00"], 0x124}}, 0x0) 2.314258819s ago: executing program 6 (id=9704): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmdt(0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000"], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e080083"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x6f94, 0x5, 0xa45a2b2e, 0x7fff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x14fe}, 0x1ff, 0x5, 0x7, 0x0, 0x8000000000000002, 0x2, 0x8abd, 0x5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 2.12089477s ago: executing program 1 (id=9705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x200040d0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x80) 1.353519643s ago: executing program 3 (id=9707): syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 1.304691635s ago: executing program 8 (id=9708): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040fff80000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005002500000000000800"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b80200001800a00010071756f7461000000100002800c00014000000000000000002c00"], 0x124}}, 0x0) 1.243494704s ago: executing program 7 (id=9709): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x4, 0x20, 0x1e, 0x100000e}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0xc0000100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r4, 0x2276, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [], 0x5}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x3], 0x5}}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x1000004fe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clock_getres(0x2, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 757.449829ms ago: executing program 1 (id=9710): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) 398.67531ms ago: executing program 1 (id=9711): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) splice(r7, 0x0, r6, 0x0, 0x4ff9c, 0x0) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000000180)={0x6, 0x200, 0x8d, 0x800, 0xb, 0x9}) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001200)="0dd7f97978bd", 0x0, 0x6, 0x10000, 0x1, 0x0}) write$dsp(r4, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000280)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 29.661366ms ago: executing program 8 (id=9712): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c80001800378013000300717472283414d6bba919736d34290000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 0s ago: executing program 7 (id=9713): syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) kernel console output (not intermixed with test programs): interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3423.314263][ T5960] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3423.374169][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3423.401642][ T5960] usb 2-1: config 0 descriptor?? [ 3423.660492][T12822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9302'. [ 3423.673142][T12822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9302'. [ 3423.682334][T12822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9302'. [ 3423.758504][ T5960] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3423.813846][ T65] net_ratelimit: 29 callbacks suppressed [ 3423.813866][ T65] bond19: (slave macvlan3): failed to get link speed/duplex [ 3424.015362][ T193] bond19: (slave macvlan3): failed to get link speed/duplex [ 3424.041535][T12827] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 3424.260396][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3424.420609][T12828] hsr0: MTU too low for tipc bearer [ 3424.426045][T12828] tipc: Enabling of bearer rejected, failed to enable media [ 3424.448933][ T65] bond19: (slave macvlan3): failed to get link speed/duplex [ 3424.579484][ T65] bond19: (slave macvlan3): failed to get link speed/duplex [ 3424.704809][ T8037] bond19: (slave macvlan3): failed to get link speed/duplex [ 3424.825227][T27874] bond19: (slave macvlan3): failed to get link speed/duplex [ 3424.992575][ T8037] bond19: (slave macvlan3): failed to get link speed/duplex [ 3425.123896][ T8037] bond19: (slave macvlan3): failed to get link speed/duplex [ 3425.253748][T27874] bond19: (slave macvlan3): failed to get link speed/duplex [ 3425.527968][ T5954] usb 2-1: USB disconnect, device number 18 [ 3425.870666][T12843] fuse: Bad value for 'fd' [ 3425.884808][T12843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9309'. [ 3426.856068][T12856] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 3426.862631][T12856] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3426.989710][T12856] vhci_hcd vhci_hcd.0: Device attached [ 3426.995827][T12861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9310'. [ 3427.334167][ T5963] usb 37-1: new low-speed USB device number 12 using vhci_hcd [ 3427.442867][T12857] vhci_hcd: connection reset by peer [ 3427.448929][T27874] vhci_hcd vhci_hcd.2: stop threads [ 3427.473236][T27874] vhci_hcd vhci_hcd.2: release socket [ 3427.483336][T27874] vhci_hcd vhci_hcd.2: disconnect device [ 3427.874491][T12867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9316'. [ 3428.626934][ T5960] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 3428.824473][T26672] net_ratelimit: 26 callbacks suppressed [ 3428.824487][T26672] bond19: (slave macvlan3): failed to get link speed/duplex [ 3428.983707][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 3429.012390][ T5279] bond19: (slave macvlan3): failed to get link speed/duplex [ 3429.177272][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3429.188328][ T5960] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3429.197520][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3429.228679][ T5960] usb 4-1: config 0 descriptor?? [ 3429.243768][ T6109] bond19: (slave macvlan3): failed to get link speed/duplex [ 3429.366213][T27874] bond19: (slave macvlan3): failed to get link speed/duplex [ 3429.494599][ T5960] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3429.564020][T27874] bond19: (slave macvlan3): failed to get link speed/duplex [ 3429.684408][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3430.045685][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3430.316599][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3430.453742][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3430.811279][ T13] bond19: (slave macvlan3): failed to get link speed/duplex [ 3430.835270][T12894] tipc: Enabling of bearer rejected, failed to enable media [ 3430.874522][T12898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9322'. [ 3431.288595][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9323'. [ 3431.616501][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9326'. [ 3431.899894][T12913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9327'. [ 3432.683809][ T5963] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 3432.721527][ T5960] usb 4-1: USB disconnect, device number 35 [ 3433.150989][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9331'. [ 3433.342527][T12911] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 3433.349092][T12911] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3433.443981][T12911] vhci_hcd vhci_hcd.0: Device attached [ 3433.632657][T12929] vhci_hcd: connection closed [ 3433.635733][ T5260] vhci_hcd vhci_hcd.5: stop threads [ 3433.653764][ T5260] vhci_hcd vhci_hcd.5: release socket [ 3433.688791][ T5260] vhci_hcd vhci_hcd.5: disconnect device [ 3433.856810][ T7601] net_ratelimit: 25 callbacks suppressed [ 3433.856832][ T7601] bond19: (slave macvlan3): failed to get link speed/duplex [ 3434.072785][ T193] bond19: (slave macvlan3): failed to get link speed/duplex [ 3434.098684][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9333'. [ 3434.203780][ T7601] bond19: (slave macvlan3): failed to get link speed/duplex [ 3434.324698][ T7601] bond19: (slave macvlan3): failed to get link speed/duplex [ 3434.597482][ T8447] bond19: (slave macvlan3): failed to get link speed/duplex [ 3434.713739][ T6109] bond19: (slave macvlan3): failed to get link speed/duplex [ 3434.843776][ T7601] bond19: (slave macvlan3): failed to get link speed/duplex [ 3434.888769][T13151] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3434.967332][ T6109] bond19: (slave macvlan3): failed to get link speed/duplex [ 3435.143748][ T6109] bond19: (slave macvlan3): failed to get link speed/duplex [ 3435.268530][T26672] bond19: (slave macvlan3): failed to get link speed/duplex [ 3435.375117][ T5963] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 3435.418801][T12960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9337'. [ 3435.456728][T12960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9337'. [ 3435.466011][T12960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9337'. [ 3435.607319][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3435.646302][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3435.719618][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3435.746083][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3435.797071][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9338'. [ 3435.835548][ T5963] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3435.846215][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3435.930602][ T5963] usb 2-1: config 0 descriptor?? [ 3436.835903][ T5959] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 3437.044896][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 3437.091820][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3437.103000][ T5959] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3437.120059][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3437.164260][ T5959] usb 4-1: config 0 descriptor?? [ 3437.356132][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9341'. [ 3437.454468][ T5959] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3438.129739][T12983] tipc: Enabling of bearer rejected, failed to enable media [ 3438.154702][ T5963] usbhid 2-1:0.0: can't add hid device: -71 [ 3438.162284][ T5963] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3438.202720][ T5963] usb 2-1: USB disconnect, device number 19 [ 3438.531028][T12988] netlink: 'syz.4.9343': attribute type 21 has an invalid length. [ 3438.541038][T12988] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9343'. [ 3438.958730][T29445] net_ratelimit: 28 callbacks suppressed [ 3438.958750][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3439.343983][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3439.471031][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3439.584231][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3439.704393][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3439.823848][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3439.933763][ T1792] bond19: (slave macvlan3): failed to get link speed/duplex [ 3440.044088][ T3660] bond19: (slave macvlan3): failed to get link speed/duplex [ 3440.173869][ T3660] bond19: (slave macvlan3): failed to get link speed/duplex [ 3440.373860][ T3660] bond19: (slave macvlan3): failed to get link speed/duplex [ 3440.526356][T12999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3440.585278][ T5963] usb 4-1: USB disconnect, device number 36 [ 3440.643854][T12999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3440.946600][T13011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9347'. [ 3440.960496][T13011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9347'. [ 3440.969690][ T30] audit: type=1326 audit(1768914049.506:11059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13002 comm="syz.3.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3441.140977][ T30] audit: type=1326 audit(1768914049.506:11060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13002 comm="syz.3.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3441.193168][T13012] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9349'. [ 3441.204519][T13012] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9349'. [ 3441.213522][T13012] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9349'. [ 3441.255235][ T30] audit: type=1326 audit(1768914049.506:11061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13002 comm="syz.3.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3441.279414][ T30] audit: type=1326 audit(1768914049.506:11062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13002 comm="syz.3.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3441.440704][T13013] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 3441.447253][T13013] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3441.715729][T13013] vhci_hcd vhci_hcd.0: Device attached [ 3441.735497][ T30] audit: type=1326 audit(1768914049.506:11063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13002 comm="syz.3.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3441.866733][ T30] audit: type=1326 audit(1768914049.506:11064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13002 comm="syz.3.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3441.962788][T13014] vhci_hcd: connection closed [ 3441.963044][ T65] vhci_hcd vhci_hcd.2: stop threads [ 3441.991807][ T65] vhci_hcd vhci_hcd.2: release socket [ 3442.016738][ T30] audit: type=1326 audit(1768914049.506:11065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13002 comm="syz.3.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3442.039508][ T5970] usb 38-1: SetAddress Request (26) to port 0 [ 3442.051629][ T5970] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 3442.114919][ T30] audit: type=1326 audit(1768914049.506:11066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13002 comm="syz.3.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3442.200311][ T30] audit: type=1326 audit(1768914049.506:11067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13002 comm="syz.3.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3442.303793][ T30] audit: type=1326 audit(1768914049.506:11068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13002 comm="syz.3.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3442.379433][ T65] vhci_hcd vhci_hcd.2: disconnect device [ 3442.684664][T13023] netlink: 'syz.1.9351': attribute type 21 has an invalid length. [ 3442.692652][T13023] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9351'. [ 3443.343898][T11532] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 3443.514616][T13036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3443.663903][T11532] usb 3-1: Using ep0 maxpacket: 16 [ 3443.669485][T13036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3443.746394][T11532] usb 3-1: config 0 has no interfaces? [ 3443.779386][T13034] netlink: 'syz.5.9353': attribute type 21 has an invalid length. [ 3443.798241][T11532] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3443.817884][T11532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3443.844363][T13034] netlink: 156 bytes leftover after parsing attributes in process `syz.5.9353'. [ 3443.864171][T11532] usb 3-1: Product: syz [ 3443.878570][T11532] usb 3-1: Manufacturer: syz [ 3443.883182][T11532] usb 3-1: SerialNumber: syz [ 3443.936744][T11532] usb 3-1: config 0 descriptor?? [ 3444.019967][T27874] net_ratelimit: 24 callbacks suppressed [ 3444.019989][T27874] bond19: (slave macvlan3): failed to get link speed/duplex [ 3444.094916][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9356'. [ 3444.173728][T27874] bond19: (slave macvlan3): failed to get link speed/duplex [ 3444.192436][T11532] usb 3-1: USB disconnect, device number 20 [ 3444.389426][ T65] bond19: (slave macvlan3): failed to get link speed/duplex [ 3444.503894][ T65] bond19: (slave macvlan3): failed to get link speed/duplex [ 3444.644178][ T3660] bond19: (slave macvlan3): failed to get link speed/duplex [ 3444.831077][T13052] netlink: 'syz.1.9359': attribute type 21 has an invalid length. [ 3444.839116][T13052] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9359'. [ 3444.855261][ T3660] bond19: (slave macvlan3): failed to get link speed/duplex [ 3445.115473][T27874] bond19: (slave macvlan3): failed to get link speed/duplex [ 3445.250550][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3445.563994][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3445.674062][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3446.897098][T13074] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 3446.903657][T13074] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3446.953867][T13074] vhci_hcd vhci_hcd.0: Device attached [ 3447.123707][ T5970] usb 38-1: device descriptor read/8, error -110 [ 3447.124061][T13080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9365'. [ 3447.154244][T13075] vhci_hcd: connection closed [ 3447.162716][ T8037] vhci_hcd vhci_hcd.4: stop threads [ 3447.174807][ T8037] vhci_hcd vhci_hcd.4: release socket [ 3447.266667][T11532] usb 42-1: SetAddress Request (27) to port 0 [ 3447.272898][T11532] usb 42-1: new SuperSpeed USB device number 27 using vhci_hcd [ 3447.293012][ T8037] vhci_hcd vhci_hcd.4: disconnect device [ 3447.313798][T11532] usb 42-1: enqueue for inactive port 0 [ 3447.567135][ T5970] usb usb38-port1: attempt power cycle [ 3447.705001][T11532] usb usb42-port1: attempt power cycle [ 3448.144153][ T5970] usb usb38-port1: unable to enumerate USB device [ 3448.264577][T11532] usb usb42-port1: unable to enumerate USB device [ 3448.319382][ T5970] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 3448.483761][ T5970] usb 4-1: Using ep0 maxpacket: 16 [ 3448.500031][ T5970] usb 4-1: config 0 has no interfaces? [ 3448.577637][T13099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9370'. [ 3448.723032][ T5970] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3448.756094][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3448.904769][ T5970] usb 4-1: Product: syz [ 3448.910609][ T5970] usb 4-1: Manufacturer: syz [ 3448.915302][ T5970] usb 4-1: SerialNumber: syz [ 3448.923954][ T5970] usb 4-1: config 0 descriptor?? [ 3449.124879][ T3518] net_ratelimit: 26 callbacks suppressed [ 3449.124894][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3449.198689][ T5970] usb 4-1: USB disconnect, device number 37 [ 3449.255727][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3449.375239][ T5260] bond19: (slave macvlan3): failed to get link speed/duplex [ 3449.527012][ T1792] bond19: (slave macvlan3): failed to get link speed/duplex [ 3449.678980][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3449.793776][ T1792] bond19: (slave macvlan3): failed to get link speed/duplex [ 3449.930865][ T5260] bond19: (slave macvlan3): failed to get link speed/duplex [ 3449.981588][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9374'. [ 3450.223953][ T5160] bond19: (slave macvlan3): failed to get link speed/duplex [ 3450.364279][T10633] bond19: (slave macvlan3): failed to get link speed/duplex [ 3450.608928][ T5279] bond19: (slave macvlan3): failed to get link speed/duplex [ 3450.722055][T13115] netlink: 'syz.2.9373': attribute type 21 has an invalid length. [ 3450.735975][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.742641][T13115] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9373'. [ 3450.755885][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3452.183346][T13137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9379'. [ 3452.397486][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9378'. [ 3453.850598][ T5970] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 3454.063680][ T5970] usb 3-1: Using ep0 maxpacket: 16 [ 3454.075045][ T5970] usb 3-1: config 0 has no interfaces? [ 3454.083216][ T5970] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3454.093277][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3454.101378][ T5970] usb 3-1: Product: syz [ 3454.105611][ T5970] usb 3-1: Manufacturer: syz [ 3454.110192][ T5970] usb 3-1: SerialNumber: syz [ 3454.124922][ T5970] usb 3-1: config 0 descriptor?? [ 3454.134874][ T8037] net_ratelimit: 23 callbacks suppressed [ 3454.134895][ T8037] bond19: (slave macvlan3): failed to get link speed/duplex [ 3454.593379][ T5963] usb 3-1: USB disconnect, device number 21 [ 3454.826616][T13164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3454.931033][T13164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3454.956572][ T1763] bond19: (slave macvlan3): failed to get link speed/duplex [ 3455.189738][ T7842] bond19: (slave macvlan3): failed to get link speed/duplex [ 3455.315886][ T7842] bond19: (slave macvlan3): failed to get link speed/duplex [ 3455.496743][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3455.619577][ T1792] bond19: (slave macvlan3): failed to get link speed/duplex [ 3455.826656][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3456.014729][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3456.141799][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3456.285523][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3456.372459][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 3456.372476][ T30] audit: type=1326 audit(1768914064.916:11101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.9388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3456.482760][ T30] audit: type=1326 audit(1768914064.956:11102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.9388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3456.544325][ T30] audit: type=1326 audit(1768914064.956:11103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.9388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3456.603210][ T30] audit: type=1326 audit(1768914064.956:11104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.9388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3456.703710][ T30] audit: type=1326 audit(1768914064.966:11105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.9388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3456.726866][ T5970] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 3456.740643][ T30] audit: type=1326 audit(1768914064.966:11106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.9388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3456.810807][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9390'. [ 3456.909244][ T30] audit: type=1326 audit(1768914064.976:11107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.9388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3456.938209][ T5970] usb 4-1: Using ep0 maxpacket: 16 [ 3456.968941][ T30] audit: type=1326 audit(1768914064.976:11108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.9388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3457.005452][ T5970] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 3457.038062][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3457.040250][ T30] audit: type=1326 audit(1768914064.976:11109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.9388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3457.070482][ T5970] usb 4-1: Product: syz [ 3457.181719][ T5970] usb 4-1: Manufacturer: syz [ 3457.211138][ T5970] usb 4-1: SerialNumber: syz [ 3457.216318][ T30] audit: type=1326 audit(1768914064.976:11110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.3.9388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3457.293773][ T5970] usb 4-1: config 0 descriptor?? [ 3457.618094][ T5970] usb 4-1: USB disconnect, device number 38 [ 3458.903786][T13205] netlink: 'syz.4.9395': attribute type 1 has an invalid length. [ 3459.026329][T13204] bond29: (slave geneve3): making interface the new active one [ 3459.056253][T13204] bond29: (slave geneve3): Enslaving as an active interface with an up link [ 3459.086402][ T3518] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 3459.095731][ T3518] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 3459.303836][ T3518] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 3459.312660][ T3518] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 3459.463745][ T3518] net_ratelimit: 20 callbacks suppressed [ 3459.463765][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3459.693986][T13212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9397'. [ 3459.705540][T13212] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9397'. [ 3459.723680][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3459.810784][T13212] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9397'. [ 3459.836221][T10633] bond19: (slave macvlan3): failed to get link speed/duplex [ 3459.953706][ T8037] bond19: (slave macvlan3): failed to get link speed/duplex [ 3460.064761][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3460.114250][T13215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9399'. [ 3460.175773][ T8037] bond19: (slave macvlan3): failed to get link speed/duplex [ 3460.231464][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9398'. [ 3460.332946][ T8037] bond19: (slave macvlan3): failed to get link speed/duplex [ 3460.549152][ T13] bond19: (slave macvlan3): failed to get link speed/duplex [ 3460.680798][ T1792] bond19: (slave macvlan3): failed to get link speed/duplex [ 3460.833327][T26948] bond19: (slave macvlan3): failed to get link speed/duplex [ 3460.884662][T13227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9401'. [ 3460.896691][T13227] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9401'. [ 3460.905760][T13227] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9401'. [ 3461.570092][T13234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3461.604077][T13234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3461.704186][T13234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3461.764271][T13234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3461.782188][T13234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3462.109159][T13232] netlink: 'syz.1.9403': attribute type 21 has an invalid length. [ 3462.273902][T13237] netlink: 'syz.1.9403': attribute type 21 has an invalid length. [ 3462.313195][T13232] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9403'. [ 3462.412397][T13237] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9403'. [ 3462.950737][T13239] chnl_net:caif_netlink_parms(): no params data found [ 3463.015075][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 3463.015091][ T30] audit: type=1326 audit(1768914071.566:11169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.3.9405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3463.121935][ T30] audit: type=1326 audit(1768914071.596:11170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.3.9405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3463.154214][ T5970] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 3463.242796][ T30] audit: type=1326 audit(1768914071.596:11171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.3.9405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3463.302284][T13239] bridge0: port 1(bridge_slave_0) entered blocking state [ 3463.309537][ T5970] usb 3-1: Using ep0 maxpacket: 16 [ 3463.319532][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9407'. [ 3463.328669][ T30] audit: type=1326 audit(1768914071.606:11172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.3.9405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3463.377425][ T30] audit: type=1326 audit(1768914071.606:11173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.3.9405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3463.400650][ T5970] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 3463.400680][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3463.400701][ T5970] usb 3-1: Product: syz [ 3463.400716][ T5970] usb 3-1: Manufacturer: syz [ 3463.400731][ T5970] usb 3-1: SerialNumber: syz [ 3463.432906][ T5970] usb 3-1: config 0 descriptor?? [ 3463.439795][T13256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9407'. [ 3463.472672][T13239] bridge0: port 1(bridge_slave_0) entered disabled state [ 3463.480440][ T30] audit: type=1326 audit(1768914071.706:11174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.3.9405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3463.508256][ T30] audit: type=1326 audit(1768914071.706:11175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.3.9405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3463.534808][T13239] bridge_slave_0: entered allmulticast mode [ 3463.537101][ T30] audit: type=1326 audit(1768914071.706:11176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.3.9405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3463.542557][T13239] bridge_slave_0: entered promiscuous mode [ 3463.575769][T13239] bridge0: port 2(bridge_slave_1) entered blocking state [ 3463.583144][T13239] bridge0: port 2(bridge_slave_1) entered disabled state [ 3463.719596][T13239] bridge_slave_1: entered allmulticast mode [ 3463.748357][T13239] bridge_slave_1: entered promiscuous mode [ 3463.925407][T13234] Bluetooth: hci6: command tx timeout [ 3464.181447][T13262] netlink: 'syz.4.9408': attribute type 21 has an invalid length. [ 3464.238167][T13263] netlink: 'syz.4.9408': attribute type 21 has an invalid length. [ 3464.277868][T13262] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9408'. [ 3464.288619][T13263] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9408'. [ 3464.356951][T13239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3464.369110][T13239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3464.501703][T13239] team0: Port device team_slave_0 added [ 3464.530454][T13268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9410'. [ 3464.629317][T13239] team0: Port device team_slave_1 added [ 3464.653428][T13239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3464.662008][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3464.739363][T13239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3464.775497][T13239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3464.782512][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3464.867302][T13239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3465.260133][T13276] netlink: 'syz.4.9413': attribute type 1 has an invalid length. [ 3465.505808][ T4974] net_ratelimit: 13 callbacks suppressed [ 3465.505828][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3465.521799][T13283] netlink: 'syz.1.9414': attribute type 21 has an invalid length. [ 3465.593634][T13287] netlink: 'syz.1.9414': attribute type 21 has an invalid length. [ 3465.602975][T13272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9411'. [ 3465.663336][T13283] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9414'. [ 3465.692043][T11532] usb 3-1: USB disconnect, device number 22 [ 3465.734261][T13284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9411'. [ 3465.867030][T13239] hsr_slave_0: entered promiscuous mode [ 3465.877820][T13239] hsr_slave_1: entered promiscuous mode [ 3466.043879][T13234] Bluetooth: hci6: command tx timeout [ 3466.060152][T13239] debugfs: 'hsr0' already exists in 'hsr' [ 3466.074025][T13239] Cannot create hsr debugfs directory [ 3466.121618][T21381] bond19: (slave macvlan3): failed to get link speed/duplex [ 3466.862276][ T30] audit: type=1326 audit(1768914075.406:11177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13299 comm="syz.3.9417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3466.904007][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3466.923705][ T30] audit: type=1326 audit(1768914075.406:11178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13299 comm="syz.3.9417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3467.025505][ T4620] bond19: (slave macvlan3): failed to get link speed/duplex [ 3467.200691][T13239] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3467.302239][T13239] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3467.326480][T13239] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3467.437758][T13239] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3467.674792][T13310] __nla_validate_parse: 3 callbacks suppressed [ 3467.674805][T13310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9420'. [ 3467.860525][T13307] netlink: 'syz.3.9419': attribute type 21 has an invalid length. [ 3467.897555][T13307] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9419'. [ 3467.918842][T13313] netlink: 'syz.3.9419': attribute type 21 has an invalid length. [ 3468.011155][T13313] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9419'. [ 3468.083955][T13234] Bluetooth: hci6: command tx timeout [ 3468.269291][T13325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3468.280117][T13325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3468.427383][T13239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3468.537109][ T4620] bond19: (slave macvlan3): failed to get link speed/duplex [ 3469.019352][T13239] 8021q: adding VLAN 0 to HW filter on device team0 [ 3469.121034][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state [ 3469.128182][ T7601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3469.188871][ T5260] bridge0: port 2(bridge_slave_1) entered blocking state [ 3469.196013][ T5260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3469.684370][ T5260] bond19: (slave macvlan3): failed to get link speed/duplex [ 3469.863068][T13334] netlink: 'syz.3.9424': attribute type 21 has an invalid length. [ 3469.980574][T13334] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9424'. [ 3469.994459][T13335] netlink: 'syz.3.9424': attribute type 21 has an invalid length. [ 3470.002305][T13335] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9424'. [ 3470.166557][ T1081] bond19: (slave macvlan3): failed to get link speed/duplex [ 3470.209590][T13234] Bluetooth: hci6: command tx timeout [ 3470.241337][T13239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3470.339963][T13239] veth0_vlan: entered promiscuous mode [ 3470.392874][T13239] veth1_vlan: entered promiscuous mode [ 3470.464358][T21381] bond19: (slave macvlan3): failed to get link speed/duplex [ 3470.674355][ T4620] bond19: (slave macvlan3): failed to get link speed/duplex [ 3471.273759][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3471.546559][T13346] netlink: 'syz.1.9426': attribute type 21 has an invalid length. [ 3471.774835][T13239] veth0_macvtap: entered promiscuous mode [ 3471.789291][ T8447] bond19: (slave macvlan3): failed to get link speed/duplex [ 3471.810176][T13346] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9426'. [ 3471.825451][T13350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9428'. [ 3471.873175][T13239] veth1_macvtap: entered promiscuous mode [ 3471.920959][T13239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3471.936821][T13239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3472.073194][ T5160] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3472.169627][ T5160] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3472.455287][ T5160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3472.578163][ T5160] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3472.654546][ T8037] bond19: (slave macvlan3): failed to get link speed/duplex [ 3472.795596][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 3472.796223][ T30] audit: type=1326 audit(1768914081.346:11186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3472.893821][ T30] audit: type=1326 audit(1768914081.346:11187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3472.942443][ T30] audit: type=1326 audit(1768914081.346:11188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3472.994014][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3473.007392][ T30] audit: type=1326 audit(1768914081.346:11189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3473.033929][ T30] audit: type=1326 audit(1768914081.346:11190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3473.078617][ T5160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3473.101922][ T5160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3473.132333][ T30] audit: type=1326 audit(1768914081.346:11191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3473.182540][ T8447] bond19: (slave macvlan3): failed to get link speed/duplex [ 3473.211100][ T5160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3473.223398][ T5160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3473.245478][ T30] audit: type=1326 audit(1768914081.346:11192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3473.373766][ T30] audit: type=1326 audit(1768914081.346:11193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3473.403962][ T5160] bond19: (slave macvlan3): failed to get link speed/duplex [ 3473.476625][ T30] audit: type=1326 audit(1768914081.346:11194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3473.518346][ T5160] bond19: (slave macvlan3): failed to get link speed/duplex [ 3473.601045][ T30] audit: type=1326 audit(1768914081.346:11195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0699acb9 code=0x7ffc0000 [ 3473.699832][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3473.824087][ T3660] bond19: (slave macvlan3): failed to get link speed/duplex [ 3473.846722][ T5963] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 3474.016654][T13368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9431'. [ 3474.029193][T13368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9431'. [ 3474.038245][T13368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9431'. [ 3474.096327][ T5963] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3474.147578][ T5963] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3474.214609][ T5963] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3474.223113][ T5963] usb 4-1: Manufacturer: syz [ 3474.258463][ T5963] usb 4-1: config 0 descriptor?? [ 3474.284578][ T5963] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 3474.413934][T11532] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 3474.644177][T11532] usb 7-1: Using ep0 maxpacket: 8 [ 3474.667771][T11532] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3474.701320][T11532] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3474.728900][T11532] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3474.738827][T11532] usb 7-1: config 0 descriptor?? [ 3474.941262][T13378] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 3474.947800][T13378] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3474.963940][T13378] vhci_hcd vhci_hcd.0: Device attached [ 3475.012557][T11532] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3475.093445][T13379] vhci_hcd: connection closed [ 3475.093945][ T6074] vhci_hcd vhci_hcd.1: stop threads [ 3475.124545][ T6074] vhci_hcd vhci_hcd.1: release socket [ 3475.157338][ T6074] vhci_hcd vhci_hcd.1: disconnect device [ 3475.637616][T13387] tipc: Failed to obtain node identity [ 3475.643268][T13387] tipc: Enabling of bearer rejected, failed to enable media [ 3475.713913][T13388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3475.743134][T13388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3475.793301][ T13] net_ratelimit: 14 callbacks suppressed [ 3475.793323][ T13] bond19: (slave macvlan3): failed to get link speed/duplex [ 3475.926156][T13391] netlink: 'syz.2.9435': attribute type 1 has an invalid length. [ 3475.953227][ T1081] bond19: (slave macvlan3): failed to get link speed/duplex [ 3475.989685][T13393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9435'. [ 3476.047864][T13393] bond28: (slave geneve5): making interface the new active one [ 3476.073252][T13393] bond28: (slave geneve5): Enslaving as an active interface with an up link [ 3476.144685][ T1792] bond19: (slave macvlan3): failed to get link speed/duplex [ 3476.154733][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 3476.191191][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 3476.228552][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 3476.279527][ T13] bond19: (slave macvlan3): failed to get link speed/duplex [ 3476.414647][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3476.551390][T11532] usb 4-1: USB disconnect, device number 39 [ 3476.687845][T13401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9437'. [ 3476.699175][T13401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9437'. [ 3476.708331][T13401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9437'. [ 3476.721339][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3476.867690][ T5279] bond19: (slave macvlan3): failed to get link speed/duplex [ 3476.983779][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3477.104644][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3477.356757][ T3660] bond19: (slave macvlan3): failed to get link speed/duplex [ 3478.268070][ T5959] usb 7-1: USB disconnect, device number 2 [ 3478.500160][T13416] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 3479.112145][T13421] netlink: 'syz.6.9440': attribute type 21 has an invalid length. [ 3479.120273][T13421] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9440'. [ 3479.131486][T13421] netlink: 'syz.6.9440': attribute type 21 has an invalid length. [ 3479.139484][T13421] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9440'. [ 3479.513128][T13430] netlink: 'syz.3.9443': attribute type 1 has an invalid length. [ 3479.621074][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9442'. [ 3479.644089][T13433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9443'. [ 3480.831898][T13453] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9447'. [ 3480.844323][ T4974] net_ratelimit: 22 callbacks suppressed [ 3480.844343][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3480.937093][T13453] bridge0: port 2(bridge_slave_1) entered disabled state [ 3480.946225][T13453] bridge0: port 1(bridge_slave_0) entered disabled state [ 3481.001083][T13446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9445'. [ 3481.013187][T13455] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9447'. [ 3481.022545][T13455] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9447'. [ 3481.052184][T13454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9445'. [ 3481.193257][T13454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9445'. [ 3481.426829][ T5279] bond19: (slave macvlan3): failed to get link speed/duplex [ 3481.553786][ T1763] bond19: (slave macvlan3): failed to get link speed/duplex [ 3481.679165][ T1763] bond19: (slave macvlan3): failed to get link speed/duplex [ 3481.693749][ T5963] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 3481.708106][T13459] netlink: 'syz.4.9449': attribute type 1 has an invalid length. [ 3481.868394][ T5963] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3481.905060][ T5963] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3481.933924][ T13] bond19: (slave macvlan3): failed to get link speed/duplex [ 3481.963677][ T5963] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3482.035115][ T5963] usb 3-1: Manufacturer: syz [ 3482.043759][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3482.156159][ T7601] bond19: (slave macvlan3): failed to get link speed/duplex [ 3482.172674][ T5963] usb 3-1: config 0 descriptor?? [ 3482.196778][ T5963] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 3482.263737][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3482.328308][T13466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3482.337634][T13466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3482.351901][T13466] tipc: Enabling of bearer rejected, already enabled [ 3482.374314][ T4620] bond19: (slave macvlan3): failed to get link speed/duplex [ 3482.492737][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3484.535994][ T5963] usb 3-1: USB disconnect, device number 23 [ 3485.628310][T13496] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 3485.814879][T13500] __nla_validate_parse: 2 callbacks suppressed [ 3485.814909][T13500] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9458'. [ 3485.834695][T13500] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9458'. [ 3485.844378][T13500] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9458'. [ 3485.866522][ T4974] net_ratelimit: 24 callbacks suppressed [ 3485.866536][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3486.026604][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3486.173693][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3486.283900][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3486.393767][ T3660] bond19: (slave macvlan3): failed to get link speed/duplex [ 3486.514456][ T65] bond19: (slave macvlan3): failed to get link speed/duplex [ 3486.624915][ T5279] bond19: (slave macvlan3): failed to get link speed/duplex [ 3486.748693][ T13] bond19: (slave macvlan3): failed to get link speed/duplex [ 3486.878636][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3487.010656][T26672] bond19: (slave macvlan3): failed to get link speed/duplex [ 3487.243846][ T5963] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 3487.413719][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 3487.420318][ T5963] usb 4-1: config 0 has no interfaces? [ 3487.447572][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9462'. [ 3487.500161][ T5963] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3487.525412][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3487.576325][ T5963] usb 4-1: Product: syz [ 3487.580523][ T5963] usb 4-1: Manufacturer: syz [ 3487.597178][ T5963] usb 4-1: SerialNumber: syz [ 3487.765421][ T5963] usb 4-1: config 0 descriptor?? [ 3488.009855][T13522] netlink: 'syz.4.9463': attribute type 21 has an invalid length. [ 3488.018058][T13522] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9463'. [ 3488.258794][ T5963] usb 4-1: USB disconnect, device number 40 [ 3489.481374][T13542] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 3489.487959][T13542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3489.636181][T13542] vhci_hcd vhci_hcd.0: Device attached [ 3489.658563][T13545] 8021q: adding VLAN 0 to HW filter on device bond29 [ 3489.893862][T13543] vhci_hcd: connection closed [ 3489.894242][ T5959] usb 37-1: new low-speed USB device number 13 using vhci_hcd [ 3489.907152][ T65] vhci_hcd vhci_hcd.2: stop threads [ 3489.912388][ T65] vhci_hcd vhci_hcd.2: release socket [ 3489.921109][ T65] vhci_hcd vhci_hcd.2: disconnect device [ 3490.699252][T13553] netlink: 'syz.3.9470': attribute type 21 has an invalid length. [ 3490.713614][T13553] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9470'. [ 3490.883771][ T4974] net_ratelimit: 24 callbacks suppressed [ 3490.883791][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3491.065706][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3491.206816][T27874] bond19: (slave macvlan3): failed to get link speed/duplex [ 3491.366080][T10633] bond19: (slave macvlan3): failed to get link speed/duplex [ 3491.418249][T13569] netlink: 'syz.3.9473': attribute type 21 has an invalid length. [ 3491.544612][T13569] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9473'. [ 3491.608616][T13570] netlink: 'syz.3.9473': attribute type 21 has an invalid length. [ 3491.618437][T13570] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9473'. [ 3492.044198][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3492.344437][ T5260] bond19: (slave macvlan3): failed to get link speed/duplex [ 3492.592997][ T193] bond19: (slave macvlan3): failed to get link speed/duplex [ 3492.612731][T13578] netlink: 'syz.2.9475': attribute type 21 has an invalid length. [ 3492.620984][T13578] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9475'. [ 3492.703907][T10633] bond19: (slave macvlan3): failed to get link speed/duplex [ 3493.436095][T13588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9478'. [ 3494.172927][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3494.414742][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3494.725712][T13605] netlink: 'syz.6.9480': attribute type 21 has an invalid length. [ 3494.734072][T13605] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9480'. [ 3494.746144][T13605] netlink: 'syz.6.9480': attribute type 21 has an invalid length. [ 3494.754126][T13605] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9480'. [ 3494.799266][T13606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9483'. [ 3495.311692][ T5959] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 3495.793497][T13612] netlink: 'syz.3.9484': attribute type 21 has an invalid length. [ 3495.853873][T13613] netlink: 'syz.3.9484': attribute type 21 has an invalid length. [ 3496.219645][T13612] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9484'. [ 3496.279122][T13613] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9484'. [ 3496.310935][ T6109] net_ratelimit: 2 callbacks suppressed [ 3496.310950][ T6109] bond19: (slave macvlan3): failed to get link speed/duplex [ 3496.473692][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3496.664265][T13622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9486'. [ 3496.686929][T13622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9486'. [ 3496.696129][T13622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9486'. [ 3496.705727][ T13] bond19: (slave macvlan3): failed to get link speed/duplex [ 3497.043783][T10633] bond19: (slave macvlan3): failed to get link speed/duplex [ 3497.287294][T13624] netlink: 'syz.6.9485': attribute type 21 has an invalid length. [ 3497.314211][T13624] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9485'. [ 3497.346624][ T1081] bond19: (slave macvlan3): failed to get link speed/duplex [ 3497.462451][T13615] netlink: 'syz.6.9485': attribute type 21 has an invalid length. [ 3497.470546][ T1081] bond19: (slave macvlan3): failed to get link speed/duplex [ 3497.482749][T13615] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9485'. [ 3497.583789][ T1081] bond19: (slave macvlan3): failed to get link speed/duplex [ 3497.693713][ T1081] bond19: (slave macvlan3): failed to get link speed/duplex [ 3497.895041][ T5279] bond19: (slave macvlan3): failed to get link speed/duplex [ 3497.903295][T13635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9489'. [ 3498.233722][ T5260] bond19: (slave macvlan3): failed to get link speed/duplex [ 3498.484899][T13637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9490'. [ 3498.496799][T13637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9490'. [ 3498.506071][T13637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9490'. [ 3500.613648][ T5963] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 3500.778376][ T5963] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 3500.787529][ T5963] usb 7-1: config 0 has no interface number 0 [ 3500.807128][ T5963] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3500.823395][ T5963] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3500.843010][ T5963] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 3500.853922][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3500.888749][ T5963] usb 7-1: config 0 descriptor?? [ 3501.334877][T21381] net_ratelimit: 22 callbacks suppressed [ 3501.334899][T21381] bond19: (slave macvlan3): failed to get link speed/duplex [ 3501.513757][ T5260] bond19: (slave macvlan3): failed to get link speed/duplex [ 3501.588483][ T5963] usbhid 7-1:0.1: can't add hid device: -71 [ 3501.606322][ T5963] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 3501.630954][ T5260] bond19: (slave macvlan3): failed to get link speed/duplex [ 3501.654336][ T5963] usb 7-1: USB disconnect, device number 3 [ 3501.777902][ T13] bond19: (slave macvlan3): failed to get link speed/duplex [ 3501.904554][ T5260] bond19: (slave macvlan3): failed to get link speed/duplex [ 3502.014248][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3502.022902][ T5963] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 3502.151776][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3502.218210][ T5963] usb 4-1: Using ep0 maxpacket: 8 [ 3502.227537][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3502.279387][ T5963] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3502.313681][ T5649] bond19: (slave macvlan3): failed to get link speed/duplex [ 3502.321956][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3502.377792][ T5963] usb 4-1: config 0 descriptor?? [ 3502.423723][ T5649] bond19: (slave macvlan3): failed to get link speed/duplex [ 3502.533731][ T5649] bond19: (slave macvlan3): failed to get link speed/duplex [ 3502.683963][ T5963] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3502.963058][T13681] netlink: 'syz.1.9502': attribute type 21 has an invalid length. [ 3502.971798][T13681] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9502'. [ 3502.982667][T13681] netlink: 'syz.1.9502': attribute type 21 has an invalid length. [ 3502.990723][T13681] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9502'. [ 3503.308745][T13683] tipc: Enabling of bearer rejected, failed to enable media [ 3503.416196][T13682] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 3503.422782][T13682] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3503.484039][T13682] vhci_hcd vhci_hcd.0: Device attached [ 3503.734504][T13684] vhci_hcd: connection closed [ 3503.735406][ T4974] vhci_hcd vhci_hcd.6: stop threads [ 3503.752559][ T4974] vhci_hcd vhci_hcd.6: release socket [ 3503.761244][ T4974] vhci_hcd vhci_hcd.6: disconnect device [ 3503.839562][ T5959] usb 46-1: enqueue for inactive port 0 [ 3504.354545][ T5959] usb usb46-port1: attempt power cycle [ 3504.940201][T13695] netlink: 'syz.6.9504': attribute type 72 has an invalid length. [ 3504.949304][ T5959] usb usb46-port1: unable to enumerate USB device [ 3504.960427][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9504'. [ 3505.174823][T13699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9505'. [ 3505.468062][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9506'. [ 3505.654684][T11532] usb 4-1: USB disconnect, device number 41 [ 3506.414364][T26948] net_ratelimit: 28 callbacks suppressed [ 3506.414922][T26948] bond19: (slave macvlan3): failed to get link speed/duplex [ 3506.554123][ T5260] bond19: (slave macvlan3): failed to get link speed/duplex [ 3506.678613][T26948] bond19: (slave macvlan3): failed to get link speed/duplex [ 3506.794499][ T7842] bond19: (slave macvlan3): failed to get link speed/duplex [ 3506.904104][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3506.999447][T13714] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9508'. [ 3507.017437][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3507.143877][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3507.253739][ T7842] bond19: (slave macvlan3): failed to get link speed/duplex [ 3507.364715][ T7842] bond19: (slave macvlan3): failed to get link speed/duplex [ 3507.485574][ T4620] bond19: (slave macvlan3): failed to get link speed/duplex [ 3507.729200][T13726] netlink: 'syz.6.9511': attribute type 21 has an invalid length. [ 3507.737286][T13726] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9511'. [ 3507.748213][T13726] netlink: 'syz.6.9511': attribute type 21 has an invalid length. [ 3507.756226][T13726] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9511'. [ 3507.788132][T13725] netlink: 'syz.1.9510': attribute type 21 has an invalid length. [ 3507.797302][T13725] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9510'. [ 3507.824846][T13725] netlink: 'syz.1.9510': attribute type 21 has an invalid length. [ 3507.855057][T13725] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9510'. [ 3508.821904][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9515'. [ 3509.482847][T13744] netlink: 'syz.3.9516': attribute type 21 has an invalid length. [ 3509.491890][T13744] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9516'. [ 3509.504101][T13744] netlink: 'syz.3.9516': attribute type 21 has an invalid length. [ 3509.643638][T13744] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9516'. [ 3509.944978][T13747] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9518'. [ 3510.041688][T13151] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3510.055330][T13151] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3510.067135][T13151] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3510.125238][T13151] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3510.134516][T13151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3510.741589][T13753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9519'. [ 3510.942973][T13763] netlink: 'syz.6.9520': attribute type 21 has an invalid length. [ 3511.033983][T13763] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9520'. [ 3511.167121][T13765] netlink: 'syz.6.9520': attribute type 21 has an invalid length. [ 3511.214614][T13765] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9520'. [ 3511.376721][T13751] chnl_net:caif_netlink_parms(): no params data found [ 3511.822812][T13751] bridge0: port 1(bridge_slave_0) entered blocking state [ 3511.844313][T13751] bridge0: port 1(bridge_slave_0) entered disabled state [ 3511.857305][T13751] bridge_slave_0: entered allmulticast mode [ 3511.868245][T13751] bridge_slave_0: entered promiscuous mode [ 3511.916059][T13751] bridge0: port 2(bridge_slave_1) entered blocking state [ 3511.933495][T13751] bridge0: port 2(bridge_slave_1) entered disabled state [ 3511.957110][T13751] bridge_slave_1: entered allmulticast mode [ 3511.981257][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9523'. [ 3512.024236][T13751] bridge_slave_1: entered promiscuous mode [ 3512.196219][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.202637][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.245958][T13234] Bluetooth: hci7: command tx timeout [ 3512.276910][T13751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3512.337673][T13751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3512.489050][T13751] team0: Port device team_slave_0 added [ 3512.502291][T13751] team0: Port device team_slave_1 added [ 3512.576135][T13782] netlink: 'syz.3.9524': attribute type 21 has an invalid length. [ 3512.611877][T13782] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9524'. [ 3512.622611][T13782] netlink: 'syz.3.9524': attribute type 21 has an invalid length. [ 3512.623732][ T5160] net_ratelimit: 24 callbacks suppressed [ 3512.623751][ T5160] bond19: (slave macvlan3): failed to get link speed/duplex [ 3512.673529][T13751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3512.740636][T13751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3512.827430][T13751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3512.838944][T13782] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9524'. [ 3512.861513][ T5279] bond19: (slave macvlan3): failed to get link speed/duplex [ 3512.882678][T13751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3512.897011][T13751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3513.054407][T13751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3513.455698][ T5160] bond19: (slave macvlan3): failed to get link speed/duplex [ 3513.529493][T13751] hsr_slave_0: entered promiscuous mode [ 3513.579010][T13751] hsr_slave_1: entered promiscuous mode [ 3513.648860][T13751] debugfs: 'hsr0' already exists in 'hsr' [ 3513.676665][T13751] Cannot create hsr debugfs directory [ 3513.881382][ T3660] bond19: (slave macvlan3): failed to get link speed/duplex [ 3514.012627][ T8037] bond19: (slave macvlan3): failed to get link speed/duplex [ 3514.240593][T13793] netlink: 'syz.3.9527': attribute type 21 has an invalid length. [ 3514.279505][T13793] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9527'. [ 3514.308802][ T193] bond19: (slave macvlan3): failed to get link speed/duplex [ 3514.325719][T13793] netlink: 'syz.3.9527': attribute type 21 has an invalid length. [ 3514.339357][T13234] Bluetooth: hci7: command tx timeout [ 3514.365793][T13793] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9527'. [ 3514.469482][T13751] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3514.486729][T13751] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3514.541208][T13751] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3514.568610][T13751] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3514.674144][ T193] bond19: (slave macvlan3): failed to get link speed/duplex [ 3514.888012][T26672] bond19: (slave macvlan3): failed to get link speed/duplex [ 3514.919143][T11532] usb 5-1: USB disconnect, device number 49 [ 3515.045135][T26672] bond19: (slave macvlan3): failed to get link speed/duplex [ 3515.106019][T13751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3515.211309][T13751] 8021q: adding VLAN 0 to HW filter on device team0 [ 3515.314191][ T3660] bond19: (slave macvlan3): failed to get link speed/duplex [ 3515.387510][T11532] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 3515.651502][T13151] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 3515.663208][T13151] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 3515.673340][T13151] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 3515.825763][ T1763] bridge0: port 1(bridge_slave_0) entered blocking state [ 3515.832863][ T1763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3515.925719][T13151] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 3515.963466][T13151] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 3516.073866][ T5960] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 3516.254008][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 3516.287884][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 3516.295110][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3516.338506][ T5960] usb 4-1: config 0 has no interfaces? [ 3516.423746][T13151] Bluetooth: hci7: command tx timeout [ 3516.444131][ T5960] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3516.453206][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3516.482052][ T5960] usb 4-1: Product: syz [ 3516.497051][ T5960] usb 4-1: Manufacturer: syz [ 3516.501842][ T5960] usb 4-1: SerialNumber: syz [ 3516.582941][ T5960] usb 4-1: config 0 descriptor?? [ 3516.952093][T13810] chnl_net:caif_netlink_parms(): no params data found [ 3516.981807][ T5959] usb 4-1: USB disconnect, device number 42 [ 3517.353726][ T5959] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 3517.397419][T13751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3517.422166][T13810] bridge0: port 1(bridge_slave_0) entered blocking state [ 3517.429945][T13810] bridge0: port 1(bridge_slave_0) entered disabled state [ 3517.438518][T13810] bridge_slave_0: entered allmulticast mode [ 3517.448114][T13810] bridge_slave_0: entered promiscuous mode [ 3517.480266][T13810] bridge0: port 2(bridge_slave_1) entered blocking state [ 3517.487706][T13810] bridge0: port 2(bridge_slave_1) entered disabled state [ 3517.521420][T13810] bridge_slave_1: entered allmulticast mode [ 3517.535455][T13810] bridge_slave_1: entered promiscuous mode [ 3517.545825][ T5959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3517.619195][ T5959] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3517.775773][T13810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3517.794595][ T5959] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3517.836771][ T5959] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3517.849083][T13810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3517.864130][ T5959] usb 7-1: Manufacturer: syz [ 3517.883725][ T5959] usb 7-1: config 0 descriptor?? [ 3518.113860][T13151] Bluetooth: hci8: command tx timeout [ 3518.147443][T13810] team0: Port device team_slave_0 added [ 3518.163410][T13810] team0: Port device team_slave_1 added [ 3518.184525][T13751] veth0_vlan: entered promiscuous mode [ 3518.272582][T13810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3518.288524][T13810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3518.349095][ T5959] usbhid 7-1:0.0: can't add hid device: -32 [ 3518.350828][T13810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3518.363200][ T5959] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 3518.379780][ T5959] usb 7-1: USB disconnect, device number 4 [ 3518.415357][T13810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3518.422337][T13810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3518.463779][T13810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3518.483910][T13151] Bluetooth: hci7: command tx timeout [ 3518.499207][T13751] veth1_vlan: entered promiscuous mode [ 3518.535039][ T1763] net_ratelimit: 4 callbacks suppressed [ 3518.535059][ T1763] bond19: (slave macvlan3): failed to get link speed/duplex [ 3518.611831][T13810] hsr_slave_0: entered promiscuous mode [ 3518.619920][T13810] hsr_slave_1: entered promiscuous mode [ 3518.627336][T13810] debugfs: 'hsr0' already exists in 'hsr' [ 3518.633334][T13810] Cannot create hsr debugfs directory [ 3518.899789][T13751] veth0_macvtap: entered promiscuous mode [ 3518.957622][T13751] veth1_macvtap: entered promiscuous mode [ 3518.994090][ T1763] bond19: (slave macvlan3): failed to get link speed/duplex [ 3519.053424][T13751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3519.134515][T13751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3519.143815][T26672] bond19: (slave macvlan3): failed to get link speed/duplex [ 3519.184589][ T1792] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3519.336574][ T1792] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3519.350432][ T1792] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3519.424833][ T1792] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3519.450481][ T1792] bond19: (slave macvlan3): failed to get link speed/duplex [ 3519.992172][T13810] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3520.007038][T13810] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3520.097611][ T1792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3520.119827][ T1792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3520.145228][ T1763] bond19: (slave macvlan3): failed to get link speed/duplex [ 3520.152579][T13810] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3520.169533][T13151] Bluetooth: hci8: command tx timeout [ 3520.226122][T13810] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3520.396057][ T6074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3520.414947][ T6074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3520.434341][T26672] bond19: (slave macvlan3): failed to get link speed/duplex [ 3520.851014][ T4620] bond19: (slave macvlan3): failed to get link speed/duplex [ 3521.207449][T13810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3521.313700][ T4620] bond19: (slave macvlan3): failed to get link speed/duplex [ 3521.329606][T13810] 8021q: adding VLAN 0 to HW filter on device team0 [ 3521.372015][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 3521.379163][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3521.423953][ T7842] bond19: (slave macvlan3): failed to get link speed/duplex [ 3521.486827][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 3521.493979][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3521.596961][ T193] bond19: (slave macvlan3): failed to get link speed/duplex [ 3521.941245][T13810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3522.026359][T13810] veth0_vlan: entered promiscuous mode [ 3522.061975][T13810] veth1_vlan: entered promiscuous mode [ 3522.199184][T13810] veth0_macvtap: entered promiscuous mode [ 3522.256363][T13151] Bluetooth: hci8: command tx timeout [ 3522.314653][T13810] veth1_macvtap: entered promiscuous mode [ 3522.567000][T13810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3522.627046][T13810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3522.750705][ T1763] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3522.811150][ T1763] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3522.869687][ T1763] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3522.929861][ T1763] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3523.198855][ T8037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3523.226643][ T8037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3523.351724][T26948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3523.362327][T26948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3523.594379][ T5279] net_ratelimit: 8 callbacks suppressed [ 3523.594399][ T5279] bond19: (slave macvlan3): failed to get link speed/duplex [ 3523.798200][ T13] bond19: (slave macvlan3): failed to get link speed/duplex [ 3523.924689][T26948] bond19: (slave macvlan3): failed to get link speed/duplex [ 3523.943761][ T5960] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 3524.063754][ T5279] bond19: (slave macvlan3): failed to get link speed/duplex [ 3524.143788][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 3524.159685][ T5960] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 3524.174413][ T1081] bond19: (slave macvlan3): failed to get link speed/duplex [ 3524.196054][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3524.268365][ T5960] usb 2-1: Product: syz [ 3524.299375][ T1081] bond19: (slave macvlan3): failed to get link speed/duplex [ 3524.304350][ T5960] usb 2-1: Manufacturer: syz [ 3524.325260][ T5960] usb 2-1: SerialNumber: syz [ 3524.336509][T13234] Bluetooth: hci8: command tx timeout [ 3524.360287][ T5960] usb 2-1: config 0 descriptor?? [ 3524.366796][ T5959] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 3524.418973][ T4620] bond19: (slave macvlan3): failed to get link speed/duplex [ 3524.523817][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 3524.533395][ T5959] usb 4-1: config 0 has no interfaces? [ 3524.543684][ T1763] bond19: (slave macvlan3): failed to get link speed/duplex [ 3524.597876][ T5959] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3524.636334][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3524.653833][ T5960] usb 2-1: USB disconnect, device number 20 [ 3524.693732][ T13] bond19: (slave macvlan3): failed to get link speed/duplex [ 3524.752710][ T5959] usb 4-1: Product: syz [ 3524.786147][ T5959] usb 4-1: Manufacturer: syz [ 3524.790783][ T5959] usb 4-1: SerialNumber: syz [ 3524.804593][ T13] bond19: (slave macvlan3): failed to get link speed/duplex [ 3524.927569][ T5959] usb 4-1: config 0 descriptor?? [ 3525.057324][T13889] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9548'. [ 3525.074887][T13889] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9548'. [ 3525.278306][ T5959] usb 4-1: USB disconnect, device number 43 [ 3525.692565][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9550'. [ 3526.532684][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9552'. [ 3527.188220][T13923] netlink: 'syz.8.9553': attribute type 21 has an invalid length. [ 3527.196600][T13923] netlink: 156 bytes leftover after parsing attributes in process `syz.8.9553'. [ 3527.209902][T13923] netlink: 'syz.8.9553': attribute type 21 has an invalid length. [ 3527.217922][T13923] netlink: 156 bytes leftover after parsing attributes in process `syz.8.9553'. [ 3528.615798][ T2374] net_ratelimit: 20 callbacks suppressed [ 3528.615819][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3528.796096][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3528.945900][ T2374] bond19: (slave macvlan3): failed to get link speed/duplex [ 3529.063924][ T5115] bond19: (slave macvlan3): failed to get link speed/duplex [ 3529.179523][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3529.294616][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3529.485153][T26672] bond19: (slave macvlan3): failed to get link speed/duplex [ 3529.674869][ T5115] bond19: (slave macvlan3): failed to get link speed/duplex [ 3529.888184][ T8447] bond19: (slave macvlan3): failed to get link speed/duplex [ 3529.963450][T13946] netlink: 'syz.8.9557': attribute type 21 has an invalid length. [ 3530.104296][T27874] bond19: (slave macvlan3): failed to get link speed/duplex [ 3530.149721][T13946] netlink: 156 bytes leftover after parsing attributes in process `syz.8.9557'. [ 3530.149778][T13948] netlink: 'syz.8.9557': attribute type 21 has an invalid length. [ 3530.253925][T13948] netlink: 156 bytes leftover after parsing attributes in process `syz.8.9557'. [ 3530.587766][T10269] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 3530.834081][T10269] usb 7-1: Using ep0 maxpacket: 16 [ 3530.846559][T10269] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 3530.860301][T10269] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3530.870671][T10269] usb 7-1: Product: syz [ 3530.884847][T10269] usb 7-1: Manufacturer: syz [ 3530.912479][T10269] usb 7-1: SerialNumber: syz [ 3530.957295][T10269] usb 7-1: config 0 descriptor?? [ 3531.185137][T10269] usb 7-1: USB disconnect, device number 5 [ 3531.681927][T13962] tipc: Enabling of bearer rejected, failed to enable media [ 3531.751150][ T30] audit: type=1326 audit(1768914140.216:11196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.1.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cae19acb9 code=0x7ffc0000 [ 3531.847228][ T30] audit: type=1326 audit(1768914140.216:11197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.1.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2cae19acb9 code=0x7ffc0000 [ 3531.967299][ T30] audit: type=1326 audit(1768914140.216:11198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.1.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cae19acb9 code=0x7ffc0000 [ 3532.070061][ T30] audit: type=1326 audit(1768914140.216:11199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.1.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cae19acb9 code=0x7ffc0000 [ 3532.153991][ T30] audit: type=1326 audit(1768914140.226:11200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.1.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2cae19acb9 code=0x7ffc0000 [ 3532.257542][ T30] audit: type=1326 audit(1768914140.226:11201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.1.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cae19acb9 code=0x7ffc0000 [ 3532.383708][ T30] audit: type=1326 audit(1768914140.226:11202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.1.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2cae19c547 code=0x7ffc0000 [ 3532.534807][ T30] audit: type=1326 audit(1768914140.226:11203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.1.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2cae15b58e code=0x7ffc0000 [ 3532.766823][ T30] audit: type=1326 audit(1768914140.226:11204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.1.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2cae15b58e code=0x7ffc0000 [ 3532.912564][ T30] audit: type=1326 audit(1768914140.226:11205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.1.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2cae15b58e code=0x7ffc0000 [ 3534.825279][ T8447] net_ratelimit: 16 callbacks suppressed [ 3534.825294][ T8447] bond19: (slave macvlan3): failed to get link speed/duplex [ 3534.964734][T26672] bond19: (slave macvlan3): failed to get link speed/duplex [ 3535.075459][T21381] bond19: (slave macvlan3): failed to get link speed/duplex [ 3535.337599][ T8447] bond19: (slave macvlan3): failed to get link speed/duplex [ 3535.465568][T13974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3535.592911][T13974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3535.764547][T13974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3535.876378][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9569'. [ 3535.896458][T13974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3536.065980][ T8447] bond19: (slave macvlan3): failed to get link speed/duplex [ 3536.181238][T14003] tipc: Enabling of bearer rejected, failed to enable media [ 3536.203922][T13974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3536.797612][T14009] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 3536.804182][T14009] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3536.871536][T14009] vhci_hcd vhci_hcd.0: Device attached [ 3536.978101][T14014] netlink: 80 bytes leftover after parsing attributes in process `syz.8.9573'. [ 3537.072672][T14010] vhci_hcd: connection closed [ 3537.083309][ T8447] vhci_hcd vhci_hcd.6: stop threads [ 3537.094486][ T8447] vhci_hcd vhci_hcd.6: release socket [ 3537.100201][ T8447] vhci_hcd vhci_hcd.6: disconnect device [ 3537.163730][ T5970] usb 46-1: enqueue for inactive port 0 [ 3537.674896][ T5970] usb usb46-port1: attempt power cycle [ 3537.870712][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9575'. [ 3537.919575][T14027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9576'. [ 3538.053763][T14024] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9576'. [ 3538.063205][T14024] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9576'. [ 3538.313468][ T5970] usb usb46-port1: unable to enumerate USB device [ 3539.396420][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9580'. [ 3540.063683][ T4620] net_ratelimit: 26 callbacks suppressed [ 3540.063704][ T4620] bond19: (slave macvlan3): failed to get link speed/duplex [ 3540.383755][ T5970] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 3540.413901][T21381] bond19: (slave macvlan3): failed to get link speed/duplex [ 3540.536737][T21381] bond19: (slave macvlan3): failed to get link speed/duplex [ 3540.573630][ T5970] usb 4-1: Using ep0 maxpacket: 16 [ 3540.593234][ T5970] usb 4-1: config 0 has no interfaces? [ 3540.602649][ T5970] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3540.652791][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3540.667899][T13963] bond19: (slave macvlan3): failed to get link speed/duplex [ 3540.725063][ T5970] usb 4-1: Product: syz [ 3540.754579][ T5970] usb 4-1: Manufacturer: syz [ 3540.782986][ T5970] usb 4-1: SerialNumber: syz [ 3540.783972][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3540.845741][ T5970] usb 4-1: config 0 descriptor?? [ 3540.910970][ T7842] bond19: (slave macvlan3): failed to get link speed/duplex [ 3541.023724][ T4620] bond19: (slave macvlan3): failed to get link speed/duplex [ 3541.143718][ T7842] bond19: (slave macvlan3): failed to get link speed/duplex [ 3541.254229][ T7842] bond19: (slave macvlan3): failed to get link speed/duplex [ 3541.402859][ T9068] bond19: (slave macvlan3): failed to get link speed/duplex [ 3541.653372][ T5970] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 3541.776902][T14062] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9585'. [ 3541.855411][ T5970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3541.867550][ T5970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3541.878708][ T5970] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3541.888524][ T5970] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3541.912955][ T5970] usb 7-1: Manufacturer: syz [ 3541.919570][ T5970] usb 7-1: config 0 descriptor?? [ 3542.341461][ T5970] usbhid 7-1:0.0: can't add hid device: -32 [ 3542.348321][ T5970] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 3542.377820][ T5970] usb 7-1: USB disconnect, device number 6 [ 3542.670060][T14075] binder: 14074:14075 ioctl c0306201 0 returned -14 [ 3542.790765][T14077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9590'. [ 3543.001730][ T5960] usb 4-1: USB disconnect, device number 44 [ 3543.462877][T14093] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9591'. [ 3544.192939][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 3544.192952][ T30] audit: type=1326 audit(1768914152.736:11226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14097 comm="syz.1.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cae19acb9 code=0x7ffc0000 [ 3544.359547][ T30] audit: type=1326 audit(1768914152.776:11227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14097 comm="syz.1.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2cae19acb9 code=0x7ffc0000 [ 3544.410772][T14100] tipc: Enabling of bearer rejected, failed to enable media [ 3544.530868][ T30] audit: type=1326 audit(1768914152.776:11228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14097 comm="syz.1.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cae19acb9 code=0x7ffc0000 [ 3544.669516][ T30] audit: type=1326 audit(1768914152.776:11229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14097 comm="syz.1.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2cae19acb9 code=0x7ffc0000 [ 3544.828669][ T30] audit: type=1326 audit(1768914152.776:11230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14097 comm="syz.1.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cae19acb9 code=0x7ffc0000 [ 3544.896285][ T30] audit: type=1326 audit(1768914152.776:11231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14097 comm="syz.1.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2cae19c547 code=0x7ffc0000 [ 3545.172564][ T30] audit: type=1326 audit(1768914152.776:11232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14097 comm="syz.1.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2cae15b58e code=0x7ffc0000 [ 3545.195647][T29445] net_ratelimit: 31 callbacks suppressed [ 3545.195661][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3545.260618][ T30] audit: type=1326 audit(1768914152.776:11233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14097 comm="syz.1.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2cae15b58e code=0x7ffc0000 [ 3545.309165][ T30] audit: type=1326 audit(1768914152.776:11234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14097 comm="syz.1.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2cae15b58e code=0x7ffc0000 [ 3545.360637][ T5115] bond19: (slave macvlan3): failed to get link speed/duplex [ 3545.376085][T14107] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9596'. [ 3545.426084][ T30] audit: type=1326 audit(1768914152.776:11235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14097 comm="syz.1.9594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2cae15b58e code=0x7ffc0000 [ 3545.535856][ T1792] bond19: (slave macvlan3): failed to get link speed/duplex [ 3545.630825][T14084] netlink: 'syz.8.9592': attribute type 21 has an invalid length. [ 3545.639074][T14084] netlink: 156 bytes leftover after parsing attributes in process `syz.8.9592'. [ 3545.650007][T14084] netlink: 'syz.8.9592': attribute type 21 has an invalid length. [ 3545.661865][T14084] netlink: 156 bytes leftover after parsing attributes in process `syz.8.9592'. [ 3545.749342][ T65] bond19: (slave macvlan3): failed to get link speed/duplex [ 3545.883713][T26948] bond19: (slave macvlan3): failed to get link speed/duplex [ 3546.014974][ T193] bond19: (slave macvlan3): failed to get link speed/duplex [ 3546.183933][T26672] bond19: (slave macvlan3): failed to get link speed/duplex [ 3546.386942][T26672] bond19: (slave macvlan3): failed to get link speed/duplex [ 3546.545038][T26672] bond19: (slave macvlan3): failed to get link speed/duplex [ 3546.655443][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3547.093103][T14124] tipc: Enabling of bearer rejected, failed to enable media [ 3547.120942][T13842] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 3547.285271][T13842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3547.343831][T13842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3547.393951][T13842] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3547.403091][T13842] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3547.432573][T13842] usb 7-1: Manufacturer: syz [ 3547.453257][T13842] usb 7-1: config 0 descriptor?? [ 3547.945500][T13842] usbhid 7-1:0.0: can't add hid device: -32 [ 3547.951500][T13842] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 3548.128921][ T5960] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 3548.165794][T13842] usb 7-1: USB disconnect, device number 7 [ 3548.293620][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 3548.301036][ T5960] usb 4-1: config 0 has no interfaces? [ 3548.312038][ T5960] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3548.321910][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3548.442275][ T5960] usb 4-1: Product: syz [ 3548.459284][ T5960] usb 4-1: Manufacturer: syz [ 3548.524474][ T5960] usb 4-1: SerialNumber: syz [ 3548.547848][T14130] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9604'. [ 3548.597509][ T5960] usb 4-1: config 0 descriptor?? [ 3549.010593][T14138] netlink: 'syz.6.9606': attribute type 21 has an invalid length. [ 3549.018618][T14138] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9606'. [ 3549.031074][T14138] netlink: 'syz.6.9606': attribute type 21 has an invalid length. [ 3549.039149][T14138] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9606'. [ 3549.180759][ T5960] usb 4-1: USB disconnect, device number 45 [ 3549.531914][T14140] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9607'. [ 3550.206934][ T7601] net_ratelimit: 30 callbacks suppressed [ 3550.206949][ T7601] bond19: (slave macvlan3): failed to get link speed/duplex [ 3550.329041][ T42] bond19: (slave macvlan3): failed to get link speed/duplex [ 3550.447977][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3550.488718][T14142] netlink: 'syz.1.9608': attribute type 21 has an invalid length. [ 3550.499960][T14142] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9608'. [ 3550.515718][T14142] netlink: 'syz.1.9608': attribute type 21 has an invalid length. [ 3550.525615][T14142] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9608'. [ 3550.642211][ T42] bond19: (slave macvlan3): failed to get link speed/duplex [ 3550.800360][ T9068] bond19: (slave macvlan3): failed to get link speed/duplex [ 3550.917985][ T5115] bond19: (slave macvlan3): failed to get link speed/duplex [ 3551.054626][T13974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3551.062629][T10269] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 3551.164427][ T5115] bond19: (slave macvlan3): failed to get link speed/duplex [ 3551.280550][T14168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9615'. [ 3551.290039][T10269] usb 7-1: Using ep0 maxpacket: 16 [ 3551.302271][T10269] usb 7-1: config 0 has no interfaces? [ 3551.515694][T10269] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3551.580749][T10269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3551.632154][T10269] usb 7-1: Product: syz [ 3551.639666][T10269] usb 7-1: Manufacturer: syz [ 3551.639689][ T5115] bond19: (slave macvlan3): failed to get link speed/duplex [ 3551.677690][T10269] usb 7-1: SerialNumber: syz [ 3551.722483][T10269] usb 7-1: config 0 descriptor?? [ 3551.764589][ T3518] bond19: (slave macvlan3): failed to get link speed/duplex [ 3551.774228][ T5960] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 3552.002117][ T5970] usb 7-1: USB disconnect, device number 8 [ 3552.016660][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3552.053105][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3552.066033][ T5960] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3552.078554][ T5960] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3552.100318][ T5960] usb 4-1: Manufacturer: syz [ 3552.166184][ T5960] usb 4-1: config 0 descriptor?? [ 3553.019750][ T5960] uclogic 0003:256C:006D.00BF: interface is invalid, ignoring [ 3553.848968][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9618'. [ 3554.615964][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 3554.615978][ T30] audit: type=1326 audit(1768914163.136:11255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.8.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fd59acb9 code=0x7ffc0000 [ 3554.865531][ T5970] usb 4-1: USB disconnect, device number 46 [ 3555.021303][ T30] audit: type=1326 audit(1768914163.136:11256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.8.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66fd59acb9 code=0x7ffc0000 [ 3555.213705][ T30] audit: type=1326 audit(1768914163.136:11257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.8.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fd59acb9 code=0x7ffc0000 [ 3555.275281][ T30] audit: type=1326 audit(1768914163.136:11258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.8.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66fd59acb9 code=0x7ffc0000 [ 3555.309764][ T5970] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 3555.631105][ T30] audit: type=1326 audit(1768914163.136:11259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.8.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fd59acb9 code=0x7ffc0000 [ 3555.750804][ T5970] usb 7-1: Using ep0 maxpacket: 16 [ 3555.803749][T10269] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3555.901202][ T5970] usb 7-1: config 0 has no interfaces? [ 3556.063730][ T30] audit: type=1326 audit(1768914163.136:11260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.8.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f66fd59acb9 code=0x7ffc0000 [ 3556.163878][T10269] usb 4-1: Using ep0 maxpacket: 16 [ 3556.270390][ T30] audit: type=1326 audit(1768914163.136:11261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.8.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fd59acb9 code=0x7ffc0000 [ 3556.357059][T10269] usb 4-1: config 0 has no interfaces? [ 3556.427887][T29445] net_ratelimit: 21 callbacks suppressed [ 3556.427909][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3556.464948][T10269] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3556.553998][ T5970] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3556.573610][T10269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3556.581662][T10269] usb 4-1: Product: syz [ 3556.616502][ T30] audit: type=1326 audit(1768914163.136:11262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14187 comm="syz.8.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fd59acb9 code=0x7ffc0000 [ 3556.640780][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3556.659999][T10269] usb 4-1: Manufacturer: syz [ 3556.687558][ T5970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3556.792524][T10269] usb 4-1: SerialNumber: syz [ 3556.835160][ T5970] usb 7-1: Product: syz [ 3556.842873][ T5970] usb 7-1: Manufacturer: syz [ 3556.882314][T10269] usb 4-1: config 0 descriptor?? [ 3556.917240][ T5970] usb 7-1: SerialNumber: syz [ 3556.932820][ T5970] usb 7-1: config 0 descriptor?? [ 3557.063722][ T9068] bond19: (slave macvlan3): failed to get link speed/duplex [ 3557.267373][ T7601] bond19: (slave macvlan3): failed to get link speed/duplex [ 3557.394687][ T5279] bond19: (slave macvlan3): failed to get link speed/duplex [ 3557.573730][ T9068] bond19: (slave macvlan3): failed to get link speed/duplex [ 3557.747409][ T9068] bond19: (slave macvlan3): failed to get link speed/duplex [ 3557.884008][ T65] bond19: (slave macvlan3): failed to get link speed/duplex [ 3557.945277][T14215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9627'. [ 3558.245192][ T65] bond19: (slave macvlan3): failed to get link speed/duplex [ 3558.369350][ T65] bond19: (slave macvlan3): failed to get link speed/duplex [ 3558.396272][ T5961] usb 7-1: USB disconnect, device number 9 [ 3558.754053][ T5970] usb 4-1: USB disconnect, device number 47 [ 3558.929771][T14220] netlink: 'syz.6.9629': attribute type 21 has an invalid length. [ 3558.956033][T14220] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9629'. [ 3558.973211][T14220] netlink: 'syz.6.9629': attribute type 21 has an invalid length. [ 3558.981805][T14220] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9629'. [ 3559.225920][ T5970] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3559.440327][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3559.461870][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3559.499992][ T5970] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3559.532129][ T5970] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3559.622598][ T5970] usb 4-1: Manufacturer: syz [ 3559.638514][ T5970] usb 4-1: config 0 descriptor?? [ 3559.972867][T14243] binder: 14238:14243 ioctl c0306201 0 returned -14 [ 3560.084580][ T5970] usbhid 4-1:0.0: can't add hid device: -71 [ 3560.092443][ T5970] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3560.102903][ T5970] usb 4-1: USB disconnect, device number 48 [ 3560.622451][ T30] audit: type=1326 audit(1768914169.166:11263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.6.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3560.768898][ T30] audit: type=1326 audit(1768914169.166:11264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.6.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3560.836917][ T30] audit: type=1326 audit(1768914169.166:11265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.6.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3560.926909][ T30] audit: type=1326 audit(1768914169.166:11266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.6.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3561.019395][ T30] audit: type=1326 audit(1768914169.166:11267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.6.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3561.131370][ T30] audit: type=1326 audit(1768914169.166:11268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.6.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3561.198175][ T30] audit: type=1326 audit(1768914169.166:11269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.6.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3561.249380][ T30] audit: type=1326 audit(1768914169.166:11270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.6.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3561.282351][ T30] audit: type=1326 audit(1768914169.166:11271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14245 comm="syz.6.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3561.495035][T14261] tipc: Enabling of bearer rejected, failed to enable media [ 3561.555057][ T30] audit: type=1326 audit(1768914170.016:11272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14256 comm="syz.1.9641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cae19acb9 code=0x7ffc0000 [ 3561.613653][T29445] net_ratelimit: 26 callbacks suppressed [ 3561.613667][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3561.804813][ T5649] bond19: (slave macvlan3): failed to get link speed/duplex [ 3561.968300][ T5649] bond19: (slave macvlan3): failed to get link speed/duplex [ 3562.143644][ T5961] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 3562.161720][ T8447] bond19: (slave macvlan3): failed to get link speed/duplex [ 3562.293661][T26948] bond19: (slave macvlan3): failed to get link speed/duplex [ 3562.414601][T26948] bond19: (slave macvlan3): failed to get link speed/duplex [ 3562.511468][ T5961] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 3562.530811][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3562.539047][T26948] bond19: (slave macvlan3): failed to get link speed/duplex [ 3562.561113][ T5961] usb 7-1: Product: syz [ 3562.591908][ T5961] usb 7-1: Manufacturer: syz [ 3562.622229][ T5961] usb 7-1: SerialNumber: syz [ 3562.668601][T13963] bond19: (slave macvlan3): failed to get link speed/duplex [ 3562.689047][ T5961] hub 7-1:24.0: bad descriptor, ignoring hub [ 3562.697143][ T5961] hub 7-1:24.0: probe with driver hub failed with error -5 [ 3562.783915][ T8447] bond19: (slave macvlan3): failed to get link speed/duplex [ 3562.863713][T10269] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3562.904045][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3562.914303][ T5961] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 3562.936993][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3562.963341][ T5961] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 3562.988775][ T5961] usb 7-1: media controller created [ 3562.994683][T10269] usb 4-1: device descriptor read/64, error -71 [ 3563.055787][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3563.219014][ T5961] DVB: Unable to find symbol dib7000p_attach() [ 3563.251809][T10269] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3563.259850][ T5961] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 3563.372447][ T5961] rc_core: IR keymap rc-dib0700-rc5 not found [ 3563.378709][ T5961] Registered IR keymap rc-empty [ 3563.399658][T10269] usb 4-1: device descriptor read/64, error -71 [ 3563.412698][ T5961] dvb-usb: could not initialize remote control. [ 3563.435728][ T5961] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 3563.498124][ T5961] usb 7-1: USB disconnect, device number 10 [ 3563.529847][T10269] usb usb4-port1: attempt power cycle [ 3563.695836][ T5961] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 3563.876263][T14282] tipc: Enabling of bearer rejected, failed to enable media [ 3563.943821][T10269] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3563.969335][T10269] usb 4-1: device descriptor read/8, error -71 [ 3564.218107][T10269] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3564.272328][T10269] usb 4-1: device descriptor read/8, error -71 [ 3564.419383][T10269] usb usb4-port1: unable to enumerate USB device [ 3565.484568][T14297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9652'. [ 3566.654250][ T8447] net_ratelimit: 25 callbacks suppressed [ 3566.654271][ T8447] bond19: (slave macvlan3): failed to get link speed/duplex [ 3566.826628][T29445] bond19: (slave macvlan3): failed to get link speed/duplex [ 3566.978920][T14315] bond19: (slave macvlan3): failed to get link speed/duplex [ 3567.104974][ T7842] bond19: (slave macvlan3): failed to get link speed/duplex [ 3567.135360][T10269] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 3567.215125][T14315] bond19: (slave macvlan3): failed to get link speed/duplex [ 3567.315818][T10269] usb 7-1: Using ep0 maxpacket: 16 [ 3567.347271][T10269] usb 7-1: config 0 has no interfaces? [ 3567.354761][T14315] bond19: (slave macvlan3): failed to get link speed/duplex [ 3567.426900][T10269] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3567.463662][T10269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3567.473653][ T5115] bond19: (slave macvlan3): failed to get link speed/duplex [ 3567.519521][T10269] usb 7-1: Product: syz [ 3567.533614][T10269] usb 7-1: Manufacturer: syz [ 3567.549971][T10269] usb 7-1: SerialNumber: syz [ 3567.604352][T10269] usb 7-1: config 0 descriptor?? [ 3567.613642][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3567.783826][ T1763] bond19: (slave macvlan3): failed to get link speed/duplex [ 3567.997683][ T1763] bond19: (slave macvlan3): failed to get link speed/duplex [ 3568.437850][T14330] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9659'. [ 3568.473206][T14330] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9659'. [ 3569.535459][T14338] binder: 14333:14338 ioctl c0306201 0 returned -14 [ 3570.106235][T11532] usb 7-1: USB disconnect, device number 11 [ 3570.582618][T14344] binder: 14341:14344 ioctl c0306201 0 returned -14 [ 3571.714298][T18896] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3571.715014][T27874] net_ratelimit: 30 callbacks suppressed [ 3571.715030][T27874] bond19: (slave macvlan3): failed to get link speed/duplex [ 3571.807990][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9665'. [ 3571.884401][T18896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3571.902358][T18896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3571.935153][T27874] bond19: (slave macvlan3): failed to get link speed/duplex [ 3572.009784][T18896] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3572.038636][T18896] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3572.113421][T18896] usb 4-1: Manufacturer: syz [ 3572.113441][T27874] bond19: (slave macvlan3): failed to get link speed/duplex [ 3572.164688][T18896] usb 4-1: config 0 descriptor?? [ 3572.274885][ T9068] bond19: (slave macvlan3): failed to get link speed/duplex [ 3572.405312][ T5115] bond19: (slave macvlan3): failed to get link speed/duplex [ 3572.514547][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3572.634714][T13974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3572.676371][T18896] usbhid 4-1:0.0: can't add hid device: -32 [ 3572.682448][T18896] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 3572.763782][T27874] bond19: (slave macvlan3): failed to get link speed/duplex [ 3572.784400][T14363] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9667'. [ 3572.884526][T13974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3572.886000][T18896] usb 4-1: USB disconnect, device number 53 [ 3573.014630][T13974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3573.417326][T14373] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9670'. [ 3573.726660][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.732979][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.858522][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9670'. [ 3574.656985][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9674'. [ 3575.106043][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 3575.106060][ T30] audit: type=1326 audit(1768914183.656:11301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.6.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3575.184545][ T30] audit: type=1326 audit(1768914183.696:11302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.6.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3575.238284][ T30] audit: type=1326 audit(1768914183.696:11303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.6.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3575.310713][ T30] audit: type=1326 audit(1768914183.696:11304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.6.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3575.393971][ T30] audit: type=1326 audit(1768914183.696:11305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.6.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3575.416655][ T5959] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 3575.583750][ T5959] usb 7-1: Using ep0 maxpacket: 16 [ 3575.589054][ T30] audit: type=1326 audit(1768914183.696:11306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.6.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3575.615762][ T5959] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3575.690932][ T5959] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 3575.736925][ T30] audit: type=1326 audit(1768914183.696:11307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.6.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3575.760145][ T5959] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3575.816651][ T5959] usb 7-1: Product: syz [ 3575.820887][ T5959] usb 7-1: Manufacturer: syz [ 3575.831030][ T5959] usb 7-1: SerialNumber: syz [ 3575.839383][ T30] audit: type=1326 audit(1768914183.696:11308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.6.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3575.867277][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9679'. [ 3575.891156][ T5959] usb 7-1: config 0 descriptor?? [ 3575.907305][ T30] audit: type=1326 audit(1768914183.696:11309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.6.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3575.982147][ T30] audit: type=1326 audit(1768914183.696:11310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.6.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84499acb9 code=0x7ffc0000 [ 3576.083721][T11532] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 3576.168450][T18896] usb 7-1: USB disconnect, device number 12 [ 3576.249921][T11532] usb 2-1: Using ep0 maxpacket: 16 [ 3576.257595][T11532] usb 2-1: config 0 has no interfaces? [ 3576.279384][T11532] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3576.310752][T11532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3576.331899][T11532] usb 2-1: Product: syz [ 3576.346946][T11532] usb 2-1: Manufacturer: syz [ 3576.361460][T11532] usb 2-1: SerialNumber: syz [ 3576.388057][T11532] usb 2-1: config 0 descriptor?? [ 3576.443662][ T5954] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3576.718506][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 3576.743945][ T42] net_ratelimit: 27 callbacks suppressed [ 3576.743960][ T42] bond19: (slave macvlan3): failed to get link speed/duplex [ 3576.788403][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3576.807829][ T5954] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3576.838563][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3576.896477][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3576.936659][ T5954] usb 4-1: config 0 descriptor?? [ 3577.017993][ T42] bond19: (slave macvlan3): failed to get link speed/duplex [ 3577.135997][ T5649] bond19: (slave macvlan3): failed to get link speed/duplex [ 3577.167258][ T5954] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3577.206441][T14416] netlink: 'syz.6.9681': attribute type 21 has an invalid length. [ 3577.214555][T14416] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9681'. [ 3577.225503][T14416] netlink: 'syz.6.9681': attribute type 21 has an invalid length. [ 3577.233352][T14416] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9681'. [ 3577.433659][ T42] bond19: (slave macvlan3): failed to get link speed/duplex [ 3577.586056][ T3660] bond19: (slave macvlan3): failed to get link speed/duplex [ 3577.715342][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3577.820150][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9683'. [ 3577.833284][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9683'. [ 3577.858074][T14382] bond19: (slave macvlan3): failed to get link speed/duplex [ 3577.873061][T14423] tipc: Enabling of bearer rejected, failed to enable media [ 3577.977715][ T1081] bond19: (slave macvlan3): failed to get link speed/duplex [ 3578.093972][ T5115] bond19: (slave macvlan3): failed to get link speed/duplex [ 3579.248916][T11532] usb 2-1: USB disconnect, device number 21 [ 3579.488829][ T5959] usb 4-1: USB disconnect, device number 54 [ 3580.063989][ T5959] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3580.169821][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 3580.169839][ T30] audit: type=1326 audit(1768914188.716:11383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.3.9687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f0699a94b code=0x7ffc0000 [ 3580.256329][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 3580.261951][ T30] audit: type=1326 audit(1768914188.806:11384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.3.9687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f0699a94b code=0x7ffc0000 [ 3580.299186][ T5959] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3580.360823][ T5959] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 3580.371511][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3580.380100][ T5959] usb 4-1: Product: syz [ 3580.389245][ T5959] usb 4-1: Manufacturer: syz [ 3580.404006][ T5959] usb 4-1: SerialNumber: syz [ 3580.430992][ T5959] usb 4-1: config 0 descriptor?? [ 3580.470898][ T30] audit: type=1326 audit(1768914188.806:11385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.3.9687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f0699a94b code=0x7ffc0000 [ 3580.564459][ T30] audit: type=1326 audit(1768914188.806:11386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.3.9687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f0699a94b code=0x7ffc0000 [ 3580.644247][ T30] audit: type=1326 audit(1768914188.806:11387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.3.9687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f0699a94b code=0x7ffc0000 [ 3580.700193][ T30] audit: type=1326 audit(1768914188.806:11388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.3.9687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f0699a94b code=0x7ffc0000 [ 3580.743939][ T5959] usb 4-1: USB disconnect, device number 55 [ 3580.783447][ T30] audit: type=1326 audit(1768914188.856:11389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.3.9687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f0699a94b code=0x7ffc0000 [ 3581.074177][ T30] audit: type=1326 audit(1768914188.866:11390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.3.9687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f0699a94b code=0x7ffc0000 [ 3581.118841][ T30] audit: type=1326 audit(1768914188.886:11391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.3.9687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f0699a94b code=0x7ffc0000 [ 3581.436797][ T30] audit: type=1326 audit(1768914188.886:11392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.3.9687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f0699a94b code=0x7ffc0000 [ 3581.769064][ T1081] net_ratelimit: 23 callbacks suppressed [ 3581.769087][ T1081] bond19: (slave macvlan3): failed to get link speed/duplex [ 3581.963979][ T4974] bond19: (slave macvlan3): failed to get link speed/duplex [ 3582.012058][T14461] binder: 14456:14461 ioctl c0306201 0 returned -14 [ 3582.137242][T21381] bond19: (slave macvlan3): failed to get link speed/duplex [ 3582.265446][T21381] bond19: (slave macvlan3): failed to get link speed/duplex [ 3582.394547][ T5649] bond19: (slave macvlan3): failed to get link speed/duplex [ 3582.523725][ T5649] bond19: (slave macvlan3): failed to get link speed/duplex [ 3582.650415][ T5649] bond19: (slave macvlan3): failed to get link speed/duplex [ 3582.711650][T14465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9695'. [ 3582.725975][T14465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9695'. [ 3582.991769][T14469] tipc: Enabling of bearer rejected, already enabled [ 3583.055180][T14382] bond19: (slave macvlan3): failed to get link speed/duplex [ 3583.174485][T14382] bond19: (slave macvlan3): failed to get link speed/duplex [ 3583.333858][ T13] bond19: (slave macvlan3): failed to get link speed/duplex [ 3583.976758][T14485] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9699'. [ 3584.347145][T14481] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9699'. [ 3584.356384][T18896] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 3584.364386][T14481] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9699'. [ 3584.601646][T18896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3584.706503][T18896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3584.748147][T18896] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3584.773585][T18896] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3584.786878][T18896] usb 2-1: Manufacturer: syz [ 3584.822861][T18896] usb 2-1: config 0 descriptor?? [ 3585.379786][T18896] usbhid 2-1:0.0: can't add hid device: -71 [ 3585.400468][T18896] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3585.412348][T18896] usb 2-1: USB disconnect, device number 22 [ 3585.513035][T14497] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9703'. [ 3585.541275][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 3585.548771][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 3585.606217][T14498] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9703'. [ 3585.643843][T14498] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9703'. [ 3585.948893][T13234] Bluetooth: hci6: command 0x0406 tx timeout [ 3586.774697][T13963] net_ratelimit: 25 callbacks suppressed [ 3586.774711][T13963] bond19: (slave macvlan3): failed to get link speed/duplex [ 3586.964043][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3587.030059][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9707'. [ 3587.109532][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3587.165699][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9709'. [ 3587.251080][T26948] bond19: (slave macvlan3): failed to get link speed/duplex [ 3587.423454][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3587.533798][ T5649] bond19: (slave macvlan3): failed to get link speed/duplex [ 3587.567413][T18896] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 3587.704110][T14315] bond19: (slave macvlan3): failed to get link speed/duplex [ 3587.791842][T18896] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3587.828901][ T6074] bond19: (slave macvlan3): failed to get link speed/duplex [ 3587.837195][T18896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3587.966757][T18896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3587.989435][T18896] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3588.023061][T14315] bond19: (slave macvlan3): failed to get link speed/duplex [ 3588.072968][T18896] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3588.150990][T18896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3588.175177][T13963] bond19: (slave macvlan3): failed to get link speed/duplex [ 3588.215947][T18896] usb 7-1: config 0 descriptor?? [ 3588.284475][ T5959] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 3588.411432][T14533] __nla_validate_parse: 4 callbacks suppressed [ 3588.411476][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9712'. [ 3588.524803][ T5959] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 3588.534282][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3588.543565][ T5959] usb 2-1: Product: syz [ 3588.547769][ T5959] usb 2-1: Manufacturer: syz [ 3588.555151][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9713'. [ 3588.564315][ T5959] usb 2-1: SerialNumber: syz [ 3588.582661][ T5959] hub 2-1:24.0: bad descriptor, ignoring hub [ 3588.593622][ T5959] hub 2-1:24.0: probe with driver hub failed with error -5 [ 3588.844113][ T5959] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 3588.870613][T18896] plantronics 0003:047F:FFFF.00C0: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 3589.005132][ T5959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3589.022906][ T5959] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 3589.147011][ T5959] usb 2-1: media controller created [ 3589.359675][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3589.604655][ T31] INFO: task syz.5.9360:13061 blocked for more than 143 seconds. [ 3589.612433][ T31] Tainted: G L syzkaller #0 [ 3589.645573][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3589.665100][ T5959] DVB: Unable to find symbol dib7000p_attach() [ 3589.665397][ T31] task:syz.5.9360 state:D stack:26456 pid:13061 tgid:13057 ppid:7148 task_flags:0x400140 flags:0x00080002 [ 3589.671499][ T5959] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 3589.693564][ T31] Call Trace: [ 3589.697095][ T31] [ 3589.700406][ T31] __schedule+0x14ef/0x4fb0 [ 3589.741044][ T31] ? __pfx___schedule+0x10/0x10 [ 3589.775807][ T31] ? schedule+0x90/0x360 [ 3589.790697][ T31] schedule+0x164/0x360 [ 3589.811432][ T31] schedule_preempt_disabled+0x13/0x30 [ 3589.846725][ T31] __mutex_lock+0x829/0x1340 [ 3589.864291][ T31] ? __mutex_lock+0x5cc/0x1340 [ 3589.879574][ T31] ? nfnetlink_rcv_msg+0xa6e/0x12c0 [ 3589.887477][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3589.919942][ T31] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 3589.934486][ T5959] rc_core: IR keymap rc-dib0700-rc5 not found [ 3589.935761][ T31] nfnetlink_rcv_msg+0xa6e/0x12c0 [ 3589.940824][ T5959] Registered IR keymap rc-empty [ 3589.995245][ T31] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 3590.006688][ T5960] usb 7-1: USB disconnect, device number 13 [ 3590.061903][ T5959] dvb-usb: could not initialize remote control. [ 3590.071788][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 3590.093422][ T5959] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 3590.106552][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3590.126485][ T31] netlink_rcv_skb+0x232/0x4b0 [ 3590.131338][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 3590.220908][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3590.258836][ T31] ? bpf_lsm_capable+0x9/0x20 [ 3590.310228][ T31] ? security_capable+0x7e/0x2c0 [ 3590.333150][ T31] nfnetlink_rcv+0x2c0/0x27b0 [ 3590.353766][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 3590.359119][ T31] ? kernel_text_address+0xa5/0xe0 [ 3590.384344][ T5959] usb 2-1: USB disconnect, device number 23 [ 3590.422564][ T31] ? __kernel_text_address+0xd/0x30 [ 3590.470308][ T5959] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 3590.486144][ T31] ? unwind_get_return_address+0x4d/0x90 [ 3590.491835][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3590.509955][ T31] ? arch_stack_walk+0xfb/0x150 [ 3590.519206][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3590.526057][ T31] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 3590.531251][ T31] ? stack_depot_save_flags+0x33/0x810 [ 3590.539173][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3590.544881][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3590.553144][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 3590.558557][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 3590.564510][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 3590.571592][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 3590.577353][ T31] netlink_unicast+0x80f/0x9b0 [ 3590.582243][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 3590.588942][ T31] ? __alloc_skb+0x193/0x390 [ 3590.596470][ T31] ? netlink_sendmsg+0x650/0xb40 [ 3590.601537][ T31] ? skb_put+0x11b/0x210 [ 3590.606310][ T31] netlink_sendmsg+0x813/0xb40 [ 3590.611341][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3590.617156][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3590.622361][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3590.628098][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3590.635371][ T31] __sock_sendmsg+0x21c/0x270 [ 3590.640154][ T31] ____sys_sendmsg+0x4d7/0x810 [ 3590.645525][ T31] ? __might_fault+0xaf/0x130 [ 3590.651265][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3590.657082][ T31] ? import_iovec+0x73/0xa0 [ 3590.661679][ T31] ___sys_sendmsg+0x2a5/0x360 [ 3590.666846][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3590.671884][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 3590.677533][ T31] ? futex_wait+0x29a/0x380 [ 3590.682159][ T31] ? __fget_files+0x2a/0x420 [ 3590.687311][ T31] ? __fget_files+0x3a0/0x420 [ 3590.692092][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3590.698486][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3590.706798][ T31] ? rcu_is_watching+0x15/0xb0 [ 3590.711688][ T31] do_syscall_64+0xe2/0xf80 [ 3590.716985][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3590.723155][ T31] ? trace_irq_disable+0x37/0x100 [ 3590.728718][ T31] ? clear_bhb_loop+0x60/0xb0 [ 3590.733844][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3590.739867][ T31] RIP: 0033:0x7fb5d7f9acb9 [ 3590.746349][ T31] RSP: 002b:00007fb5d61d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3590.756416][ T31] RAX: ffffffffffffffda RBX: 00007fb5d8216090 RCX: 00007fb5d7f9acb9 [ 3590.764819][ T31] RDX: 00000000000040c0 RSI: 0000200000000040 RDI: 0000000000000005 [ 3590.772893][ T31] RBP: 00007fb5d8008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3590.781479][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3590.789853][ T31] R13: 00007fb5d8216128 R14: 00007fb5d8216090 R15: 00007fb5d833fa48 [ 3590.798303][ T31] [ 3590.801458][ T31] INFO: task syz.5.9360:13064 blocked for more than 144 seconds. [ 3590.812123][ T31] Tainted: G L syzkaller #0 [ 3590.840096][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3590.849218][ T31] task:syz.5.9360 state:D stack:26336 pid:13064 tgid:13057 ppid:7148 task_flags:0x400140 flags:0x00080002 [ 3590.862988][ T31] Call Trace: [ 3590.867763][ T31] [ 3590.870811][ T31] __schedule+0x14ef/0x4fb0 [ 3590.875827][ T31] ? __pfx___schedule+0x10/0x10 [ 3590.880805][ T31] ? schedule+0x90/0x360 [ 3590.885876][ T31] schedule+0x164/0x360 [ 3590.890128][ T31] schedule_preempt_disabled+0x13/0x30 [ 3590.896395][ T31] __mutex_lock+0x829/0x1340 [ 3590.901100][ T31] ? __mutex_lock+0x5cc/0x1340 [ 3590.906415][ T31] ? nfnetlink_rcv_msg+0xa6e/0x12c0 [ 3590.911707][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3590.917981][ T31] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 3590.923280][ T31] nfnetlink_rcv_msg+0xa6e/0x12c0 [ 3590.929151][ T31] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 3590.935115][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 3590.940706][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3590.946247][ T31] netlink_rcv_skb+0x232/0x4b0 [ 3590.952206][ T31] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 3590.958355][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3590.965518][ T31] ? bpf_lsm_capable+0x9/0x20 [ 3590.970298][ T31] ? security_capable+0x7e/0x2c0 [ 3590.976104][ T31] nfnetlink_rcv+0x2c0/0x27b0 [ 3590.980901][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 3590.986775][ T31] ? kernel_text_address+0xa5/0xe0 [ 3590.992011][ T31] ? __kernel_text_address+0xd/0x30 [ 3590.997776][ T31] ? unwind_get_return_address+0x4d/0x90 [ 3591.003926][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3591.010260][ T31] ? arch_stack_walk+0xfb/0x150 [ 3591.015708][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3591.020816][ T31] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 3591.027186][ T31] ? stack_depot_save_flags+0x33/0x810 [ 3591.032810][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3591.038240][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3591.043323][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 3591.048934][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 3591.054624][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 3591.060308][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 3591.066086][ T31] netlink_unicast+0x80f/0x9b0 [ 3591.070952][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 3591.089745][ T31] ? __alloc_skb+0x193/0x390 [ 3591.099031][ T31] ? netlink_sendmsg+0x650/0xb40 [ 3591.109849][ T31] ? skb_put+0x11b/0x210 [ 3591.118883][ T31] netlink_sendmsg+0x813/0xb40 [ 3591.131177][ T31] ? rcu_is_watching+0x15/0xb0 [ 3591.141622][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3591.153825][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3591.162320][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3591.173481][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3591.184179][ T31] __sock_sendmsg+0x21c/0x270 [ 3591.193293][ T31] ____sys_sendmsg+0x4d7/0x810 [ 3591.202998][ T31] ? __might_fault+0xaf/0x130 [ 3591.218780][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3591.228830][ T31] ? import_iovec+0x73/0xa0 [ 3591.237950][ T31] ___sys_sendmsg+0x2a5/0x360 [ 3591.247045][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3591.256501][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 3591.265206][ T31] ? futex_wake+0x4ac/0x580 [ 3591.273165][ T31] ? __fget_files+0x2a/0x420 [ 3591.282332][ T31] ? __fget_files+0x3a0/0x420 [ 3591.290697][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3591.297747][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3591.303379][ T31] ? rcu_is_watching+0x15/0xb0 [ 3591.308887][ T31] do_syscall_64+0xe2/0xf80 [ 3591.314042][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3591.320205][ T31] ? trace_irq_disable+0x37/0x100 [ 3591.327681][ T31] ? clear_bhb_loop+0x60/0xb0 [ 3591.332517][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3591.338988][ T31] RIP: 0033:0x7fb5d7f9acb9 [ 3591.343898][ T31] RSP: 002b:00007fb5d61b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3591.352474][ T31] RAX: ffffffffffffffda RBX: 00007fb5d8216180 RCX: 00007fb5d7f9acb9 [ 3591.361830][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 3591.370899][ T31] RBP: 00007fb5d8008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3591.379288][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3591.388647][ T31] R13: 00007fb5d8216218 R14: 00007fb5d8216180 R15: 00007fb5d833fa48 [ 3591.397031][ T31] [ 3591.400218][ T31] [ 3591.400218][ T31] Showing all locks held in the system: [ 3591.410554][ T31] 1 lock held by khungtaskd/31: [ 3591.415947][ T31] #0: ffffffff8e341b60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3591.430172][ T31] 2 locks held by getty/5593: [ 3591.438035][ T31] #0: ffff88814e9d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3591.450739][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 3591.461437][ T31] 3 locks held by syz.0.7767/6972: [ 3591.467202][ T31] 1 lock held by syz.5.9360/13061: [ 3591.472407][ T31] #0: ffffffff9a1f73b8 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa6e/0x12c0 [ 3591.484457][ T31] 1 lock held by syz.5.9360/13064: [ 3591.489666][ T31] #0: ffffffff9a1f73b8 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa6e/0x12c0 [ 3591.500430][ T31] 1 lock held by syz.2.9479/13592: [ 3591.506332][ T31] #0: ffffffff9a1f73b8 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa6e/0x12c0 [ 3591.518453][ T31] 1 lock held by syz.4.9494/13657: [ 3591.533868][ T31] #0: ffffffff9a1f73b8 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa6e/0x12c0 [ 3591.555775][ T31] [ 3591.558207][ T31] ============================================= [ 3591.558207][ T31] [ 3591.567339][ T31] NMI backtrace for cpu 0 [ 3591.567368][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3591.567392][ T31] Tainted: [L]=SOFTLOCKUP [ 3591.567399][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3591.567409][ T31] Call Trace: [ 3591.567416][ T31] [ 3591.567425][ T31] dump_stack_lvl+0xe8/0x150 [ 3591.567452][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 3591.567478][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3591.567507][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3591.567536][ T31] sys_info+0x135/0x170 [ 3591.567557][ T31] watchdog+0xf90/0xfe0 [ 3591.567584][ T31] ? watchdog+0x209/0xfe0 [ 3591.567612][ T31] kthread+0x726/0x8b0 [ 3591.567637][ T31] ? __pfx_watchdog+0x10/0x10 [ 3591.567658][ T31] ? __pfx_kthread+0x10/0x10 [ 3591.567683][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3591.567701][ T31] ? __pfx_kthread+0x10/0x10 [ 3591.567723][ T31] ret_from_fork+0x51b/0xa40 [ 3591.567743][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3591.567759][ T31] ? __switch_to+0xc82/0x1410 [ 3591.567786][ T31] ? __pfx_kthread+0x10/0x10 [ 3591.567808][ T31] ret_from_fork_asm+0x1a/0x30 [ 3591.567851][ T31] [ 3591.567859][ T31] Sending NMI from CPU 0 to CPUs 1: [ 3591.695050][ C1] NMI backtrace for cpu 1 [ 3591.695084][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 3591.695107][ C1] Tainted: [L]=SOFTLOCKUP [ 3591.695113][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3591.695123][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 3591.695149][ C1] Code: 78 50 02 e9 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c3 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 3591.695162][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c2 [ 3591.695177][ C1] RAX: 0000000005d5afc5 RBX: ffffffff819834ed RCX: 0000000080000001 [ 3591.695189][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b4a7a RDI: ffffffff8be08f60 [ 3591.695200][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 3591.695213][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fc25e70 [ 3591.695229][ C1] R13: 1ffff110039d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 3591.695239][ C1] FS: 0000000000000000(0000) GS:ffff888125b0b000(0000) knlGS:0000000000000000 [ 3591.695253][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3591.695264][ C1] CR2: 00007f2cae3de2f8 CR3: 000000007656a000 CR4: 00000000003526f0 [ 3591.695279][ C1] Call Trace: [ 3591.695287][ C1] [ 3591.695293][ C1] default_idle+0x13/0x20 [ 3591.695314][ C1] default_idle_call+0x72/0xb0 [ 3591.695335][ C1] do_idle+0x1bd/0x500 [ 3591.695352][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 3591.695372][ C1] ? __pfx_do_idle+0x10/0x10 [ 3591.695393][ C1] cpu_startup_entry+0x43/0x60 [ 3591.695409][ C1] start_secondary+0x101/0x110 [ 3591.695431][ C1] common_startup_64+0x13e/0x147 [ 3591.695457][ C1] [ 3591.869038][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3591.875917][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3591.886607][ T31] Tainted: [L]=SOFTLOCKUP [ 3591.891024][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3591.901177][ T31] Call Trace: [ 3591.904480][ T31] [ 3591.907499][ T31] vpanic+0x1e0/0x670 [ 3591.911509][ T31] panic+0xc5/0xd0 [ 3591.915254][ T31] ? __pfx_panic+0x10/0x10 [ 3591.919682][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3591.925077][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 3591.931260][ T31] watchdog+0xfda/0xfe0 [ 3591.935443][ T31] ? watchdog+0x209/0xfe0 [ 3591.939792][ T31] kthread+0x726/0x8b0 [ 3591.943885][ T31] ? __pfx_watchdog+0x10/0x10 [ 3591.948663][ T31] ? __pfx_kthread+0x10/0x10 [ 3591.953260][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3591.958451][ T31] ? __pfx_kthread+0x10/0x10 [ 3591.963222][ T31] ret_from_fork+0x51b/0xa40 [ 3591.967803][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3591.973009][ T31] ? __switch_to+0xc82/0x1410 [ 3591.977703][ T31] ? __pfx_kthread+0x10/0x10 [ 3591.982306][ T31] ret_from_fork_asm+0x1a/0x30 [ 3591.987076][ T31] [ 3591.990543][ T31] Kernel Offset: disabled [ 3591.994878][ T31] Rebooting in 86400 seconds..