last executing test programs: 51m0.689082818s ago: executing program 32 (id=27): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x1000, 0x9020}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}}, 0x0) 50m44.639148825s ago: executing program 33 (id=64): syz_open_dev$swradio(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r2 = dup(r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102376, 0x18fe8) sendfile(r1, r2, 0x0, 0x80006) 48m38.561531714s ago: executing program 34 (id=408): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x7f, 0x2, 0x0}) ioctl(0xffffffffffffffff, 0x8b29, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 48m12.536495901s ago: executing program 35 (id=459): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000ab7e46bd9f3a3ba5ab6ebeb04ce9f0f3ce0de405f96760a535c687f42ee311d635a5c5c30de34ce9bbfeb420517fa8b3c3c1966f6d817bd66d58b5093b10e075b0d5cfafe8f6c942098668044762430be7a72f7a230df5f9bd3c3522ab9e75d5cb1dcee27861d00b0e42b"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 47m57.958271237s ago: executing program 36 (id=500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1e6, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x8e, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da2", 0x5dc}, 0x4c) 47m24.800058341s ago: executing program 37 (id=529): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) creat(0x0, 0x0) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x453, 0x10, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000010) 47m12.424252178s ago: executing program 38 (id=546): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x9, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 46m44.2431094s ago: executing program 39 (id=589): fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, 0x0, 0x107041, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) io_submit(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd']) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x30045, 0x3, 0x4d15f1d92a29622d}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x880) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa10c51059e009"], 0x1a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 46m19.080360182s ago: executing program 40 (id=626): r0 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="700100001000010000000000ffdbdf250a010100000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000803200000000000000000000000000000000000001000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000002000100af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000ffffffff1c00040001"], 0x170}}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x26, 0x180006, 0x40) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$rose(r4, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) socket$can_j1939(0x1d, 0x2, 0x7) 45m35.185150564s ago: executing program 41 (id=707): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$sg(0x0, 0xfffffffffffffffd, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffd) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) 44m30.431081312s ago: executing program 42 (id=886): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x8, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x9, @raw_data="aa9fc93b2df81d65fcfb42a66fead6d015c9fe8917575d131c1a182cd561746e2fb051ce4a53653d5a396bd514cae6183adcc6d417cdafe5bb6cff02a3b45a461d33c93f1677f0efbac2bbd2e149dce5caed05f6e18340e58102ef991d0894f4ee1bc9b9d0303e2fcb53176e571b1923c72639c0226f9d0d23786948f11c183f878cce0b67a9e6f1b56255fe6c531551cbc14b35cc28accb18ef196097b292f4033579cf9e88bd7bc7a92345b4ae0a9dd21f2f9852d44e43c97d682d866c4b111e56e0142ec0e7b1"}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) close(0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0) 44m27.684528802s ago: executing program 43 (id=898): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r2 = msgget$private(0x0, 0x101) msgrcv(r2, 0x0, 0x0, 0x1, 0x5800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f00000011c0)={{r4}, "0ada402ba7151196b56f6418ea02ec78a536e11ea11d827a5f3cbe8146ceb32118f37bb190a213ac1c6aebe0bf468e0d0ce0c82ec606cbf8b35de3673f1ffa1867a9c92686bc002449228a594a3d3b77c8a10834dfe0591175986c50b7e52f55241df3547593d8c98ae91494911f22a0211d12fa8224a2abf0fb1f3b0b6e96dcf61e65524e6f45260c187ad184c06bae9c6f6dac1674508be626f720f3b0116a1679ec598da242e4bdec4f71d74d621ea9d88117594f6d050e6e6a6dc3c73f47e081dc490a59c0d0575ee0f98edaf6dacba3bb4ac8ec9a3aa7e49b7e44fe00e04de2546af77f39e53dfd0114d4335b3e6d46d19762998ef5aefe37ef72146dd39df5a94c5b62da3be42b96196a4bddee30413983d75822f46af245f5dd9c503b5d0070c6859f4fc6edceba36d7d2ee89b2ea04a6ee09b94d274d7259e1c89b0811da32c93131692ef4da95309832177aae96b68f9a3a037d6dcbfc50e822fa0637bbda9e81bdd75e087c47dbd15d51d65f839248937dd372ab75f097929d9c0d4693fa6c44d3c52e2a4b8c9ae247301339253084b0c83ee849d956d15764fc77cf8f9375f908793024141a271c7db409220fc9f2be455c526c8e59e03084036ae27a8950c2771ea26f0bdfcfb0c8703974ea53eb9bc4a71b73091a6e605c553b1ddf11bee32474daf9fe32c9d5caad4714c9fccffd7e8d56f4447326760a1cf12ea89aed15258ae6cba94d5292323a6ce45d833144379e4e902835a97bc44d2d803b4a5bd9535d8d6268d247f823a8c97684d09b17b679074b069628afa97b8ab0a4f0d8d9bd2f3f8ec4b14f1bb0bdeee4539a3a48c11ec9628e9de0e108cb2154efc25da4acd1b8edd1e3e752d49b9f3d19d97bbb0438369bc7fd8daa847f69cadb3423eba629f0dd9655b0dd20aaa8ee0fc2c0720fcb788c0db2ccb9dd6098bd024bb740b1ec880ad432a00f93dcc419d8c37256521aeec99164d20c4cd3d92715643e86960ee73b8123eaff52252588f5740b7465230e9d8f46ea3e46a46758d93da25ae0ebb434eeda9f2fcb0af1aa8b8c283234af5a01f01e2579e734c4c100228a7240634a4244b64b74d929c6caafbff33d832b99543516111ad17a1aedc0a68d8b0508f5ac7122c484719f18d03b861348738e0572fde61646f804f6accbefc71a509cb7054c1a6a5c0ae7e8d1823c537268b3dd3dc6b3246488835be38ea0f59d23fc02f4f8a7072bbff6fb628e7299b6c6a03bab32c7c183a310f8a0aedf5f1b0bca250556fdd460980e3153cf81222da5f4503d4fef36787928bc8321d9f3f2dc3ec053213d4bfed1570f2e7391e5f2442e5a5307241bc3099a1480f37645302eb1236a106d36305e22335cba5ef8bc5909b95c2c19b5879c606bb88261b9df3a944d5a2a2929326e5ade8c895ded6a98c9358d8ac032032c43d9813e008530ac65d46f1b183aa22ef056d48af3e1cfcf92d0d99c24e6d078430c4053ff826a5b259ba43305c7d98b0bee0541ac415232217cffc7df8221d9acbcf8e2f96a37bc4d8703a4c7bce0f34018bfa89aec45a7a690fb7973917579fc16916b705178fc4e7f878b1946569ef468b867bfe52c3b718c2b2aa222cc79ec7637adea4bed145402a37d7abfe42c6c867d7049f7159412162b9b7fac7edb23bfd644a85be05ce48315ee9e0ae736670d0f1d5b21b410a5a04ef1011e53c9f3acfef0d13691c3fd1c2b37ee76ef5ea9d82d5a6f324968654deb689d17baafc7ed0e90de499ee649e64fb1dcf7d632444e7a7a43d4c8abb2205a0df6e306930717e0d7419e9e5720d409c02bcfc6dff15cb244b157d84b9a2e65d4ee24877607186c38c97a78ddb6cd51fd862439f69dcc01b55f74e78e6ac32aea1e430e7ef263c842e406223de7556ada660f4e2bcb5747840a2c9ee7174e7821ca40a314b80119e2320d2ca9f2e9d5b2c4e76a9e3fc6c5515faed4a395a2b59e9d3317d1b9e2295ef54aeb35311dfd4dee26946b91bcb1bdc032bf7b19c7008a94c0b7e92218516c376347b24b18624606dbb666c3f44112971ac3943a2249c81203926a914b9bb012f844b0139a99f5f92ddd49c5553a718a88fd32ffa84ef2f87119005749860db98a3d148e6aa3e93dfeb0c9e11bbc90b30bee933786353fe85570ffeec870546e35b1076b05419858f4b45da2368b71bd33e3cdb174db2edbefd960f471502889e1858a6e053ed30a1e83aaa963d2ca3085d3829712f96bb30ec09961564e626e3fae7bdbc5ed541450b2685c7eed26304e9fec7375df2a0d693b91054c95480a3bd904bc866a905c6c6f946a8c8b0dc301dcbf79cb85fa999560aeaa7f1ac5d3ca09fa3e39d6ba6577bf23c0be24d5a0477d0cb130e4ddcf100040278a9fab28f8ee0c031d6cc74674b4f701e2c0ec597d0bed434791d6d87b55b37c545fb16410171114c2ae620e69a187d34ab25a963f34b63d3ec43c18c5a6c9c0fc0324bd779c5234a226c8b2dd9d8686d5b9cf04cf1f502aba062395bbd9d388b75f65eb9468d3164c75d449cf8cd70cfee5cb76224656a7baf643b6acbea70aa0265da84ef7e0eaddabc9a4cb4e823821cbbf5bd24aebd75a6ddceac4ce4a97b7f4b014cf6b1d68e7c4d662894005e8dcd1923736eb609b35d2e3371ae3b9803d562ec5cfa6c0c07c350bfad3492ceeb79147a0e3877332225a58b5e3e276acd6c455873cdf938dcbc90c1ed28bfe7aab347a3aba5874bd6924f5fe73f5b187890108dcc38564611b0b4aec1d3bcc986f0ea9d8c6e0055b7c3f3608e9886cf91bc4f3fa8627fdd618fa56bd421a947942a5bf5f39b4adb4c9604b96263b5a6afca8a7a5817465d33b8bb362ad30388671bac4577cf3b619352cba8969c6c09ed841f1334b816a688c010dff4c229dc7c9caf77faf28a2f65f1488d7dc3a1d23a8aef8c4bad359f141b0ef7094f684fd4511b1e5a580f68838d0a43bbecba5ccbf2e844998e7d8567b43aada9a8eaf655448a7bc0362a2a49e26ad2bd2882ecd58303fc8e83e5766dccd2bd8ec7886f00bae1362a89d58359bab11fad3343d9e3ee01a29266df57971f56477388d8cda7fa1f5da5bbe77a687367c1adf6ced54c90ea2b9e8353339aabd3945b0dc523074af31577baff8da414618b428af41182eb819e5b1cb9c8cc50d9ba2777df3f9852888f5d645a0c95c1293eb1df1c414930779896933f3e68a83c5c2554afb198fd149ef228d2696b7185bc363ee58c2261de2bc4689f7d385fc722f3e61c8a25fc59b6f3e39c4b2fa62d98954ff9ff2277b2f0897c03d64a4c223f279640e67d6024438f8701198b57dc9b4175eb680016ace2882f7b598af018281d944527a868e325468e911925c9ed966b36e1667c5b9333b24d678ee1a73707db7aa952cb324a6620e3fe5115d2084d7979383261669576259888735e06550dc48566c5f69fd3bed73114450e64de02946832543ce30b5c54679265e6a5d99065ae455ca255c46d9a449d0690c8ef454296a5c8f86a27501fe3c6f750f4c41ebfe549df9aa7558fc6c25fdbfe61ec27f85ee2acabedaafc4d56ad26c92683166761c6c70480e4233e1def05c0b7f8139b807d1841b98ad0c7487ef41a1020479ff2f86c7d1cff5a99d4ce47312bb055cb8ab5be46652bf21963c0fdcac50201ba3e879e198e7db68bc447406c5ef584a2dd4cf0a107ea8c6ad5d444c2468e076e550e4283ac5c14b1c3911ebc56a8bec4899e32bbc78c27ed5d3529e936a9d26895136e032bd39e264c7cdd803a34b4db7d5ce3ddbace86135683027c14c9118ce1b91c838c74efce25011c00684a10ea8ee222b8dee46d4d44c67c09391287bb7f6e9798b75ecb827e91dc58418886b8f89b2aefb65242e17fbb0ad373767e1cdaf5a683e99041e9e56710b202147151f3bf2dbd9c49f7e69629e6eb44b96fb0d11c9aa6bb3b40a824c1059a30f8210d36370367febc72a6815179b1944c532150a3746344cef29bc6d613088b9b62c284148b47febb5a77439d8aa80ae5e7cdaaba4e00cee48966637056cef403b3e0d68fc0de91170449bb02bff898ab2ae9529ee5fdc5a6dca53d3f4fb64802c43643d130b451c8207d4140c96e73899c94e103c42f057e700b79a854c016df3f12528435e5b61c5d0a3a12c719a2796c4b2c63da44020e5e0d24601e5a48a01a876849b923207f0d1f498e9c0c188067a53fa68a9bac042afbee6dfc45f6cf8dce9cd5dae33bfb1118fa0d83838f595401624b565d2a1c7336dfd0d0dcdbb0ffe7550d671d195fb5ea6268c527070fe8f6b8c9a5cd815b21290aeb285bc9574dc7f335597da2179fb83a9aa7bb63c15ddf5282d9692c5c56c74397e242a0e98ef9c729abde9a94eee662be2717dcaa5b481c53af22ad8e721cc71f8bec9432ee36b057662babcb21d0039a498d421a7b15a79d9451b2b4451228c0c377e0bc36ab566ad09f78a67e251431595fd69f92b73ea04e5da3bc61f54b9871f52ec945174a9f4a295b0787e3dc777329c228896da9f0adb4536ca821418a7f161f272c49981d04e22e8e6923e1793254e8501e6f95badd658f4520d0a0583ae2b4d754e14372625217c3e18821084732efc92812d20ae906c6ca216d95c78dbdc84424d16e4619112bb03fd9c9e25ce595ed4de1a06180f392092deafb8e692d7127fa67d8eb8284a1fea875ef76f4516e4102bd268ace10dc7d9a0e4a16e2f933fa8a566a7d628fbb6f4dd6824e6b55b92ef659ff7dad857eec8ed44d7370392c4dfc4f074a014b7c95751846ae0ad09603f3bf534afe1166fc73569119347a857317a15cbaf5831e356ad673a28267c443dd975ecade256e7b4234fb3749e4fb496216cbb9f84d090e23a592c6408ceb0696efd188a0191dd47dfb642336773d76095ffd7acf3ecb57b66324017317c13a007ed87e0ada88fb23a663212f7a57ac965230c66f3f3dbfc2721179b6be7c416c35e5079167c097df5b3085c85e022eeb8aa707e09f2313c46b705ce13037348f4135388a2b1f79bd6449d83ca595b074b62b6994b1729f286779879a81bdd8dd3a1e63773e88dcea86e3ebbceb20fc0faf93017dfa1bfd96941bcdaa7242980bec91c0da9cac3ea62db7531b4716b9064b67668ac6e524c6e13d129a77390544b518bd078296adce70036ef9c427e3cbe6e4bcc8a028f6a4bde148c4a83be3427a24361411ef64fcae6e55e53351433da4b0fa9968ca4d51a4f3224f268f46917e6a6adca5db8b1afac52eb2d4cfc94d573737b44bd44fb48195adb08881a89bb0fd81dc81f31079ef23f77963d3f7d556e9b90d8371071047d7bc710609fa63c5028f1412fb9fa50e0a936ed587b158b6d53f30fc7f588babc2a3bf9a768b8c957b44bc340bcb4515e5ff72f067537e276e4a1aa8a9789daedd7c3d24f5a4100a6108cf2406a37fc8bfb47a4f5902ba10ac70b58f026a651b8f2b1eacb4491ed1aa7c1834c43d5b2c5ba98b72b667796a32bad2064cec0860000448b124649ab6bcf85a2cd0031fb27f96300b9f337d1d909b31b9813f13bde6f7c068153aa0f271b2cd951dc304fed4c4320892c639bcf796c5df813d4b8efcd9bbae5257ad3d226e8008454911af18635b6b648b8598c87bb6494b40935198c00f58d8c37890a235591b484796459aca2835fb9949f86be314eab75de6ed81b66f3da7b19f2421b7de6bfeb33c1b7f21916c5f7c013f7efacc1d212f4547c44b1059ec2ea12a4f75585ed0ed53efdf091aed1"}) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'batadv_slave_1\x00'}}, 0x1e) 43m37.954816818s ago: executing program 44 (id=990): creat(0x0, 0x96) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0xb635773f06ebbee3, 0x36ec26d2bbe7d4b4, 0xffffffffffffffff, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x7e000000000}, 0x40000, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 43m33.524675567s ago: executing program 45 (id=996): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") truncate(0x0, 0x1fff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x107041, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) io_submit(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 43m25.738080882s ago: executing program 46 (id=1009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0xb, 0x0, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f0000000440)={0xc1, 0x0, 0x1}) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r7, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x0, 0x0) 43m4.431743239s ago: executing program 47 (id=1038): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) bind$alg(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x3, 0xfffa, 0x1000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x453, 0x10, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000010) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff}, 0x38) syz_open_dev$cec(0x0, 0x0, 0x100) syz_open_dev$cec(0x0, 0x0, 0x0) 39m29.244030416s ago: executing program 48 (id=1863): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 33m44.261328661s ago: executing program 4 (id=2958): socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00>\x00\t\x00'], 0x34}}, 0x84) 33m43.487314931s ago: executing program 4 (id=2961): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') 33m42.216237743s ago: executing program 4 (id=2963): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) getgroups(0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$inet(0x2b, 0x801, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141101) dup(r2) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 33m41.191925169s ago: executing program 4 (id=2967): creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x6, 0x20000403, 0x0, 0x0, 0xd, 0x5, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = dup2(r3, r0) fcntl$lock(r4, 0x24, &(0x7f0000000240)={0x1, 0x1, 0x7, 0x3, r2}) 33m40.305248405s ago: executing program 4 (id=2971): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)="451f1c8854978fbd1de2e6d2c3b63be5802aac5ed4ec7621aea6633515d234fe03d1f02429da339070428fada33461ba3501c54f6c290de012a9a51c254255ccdf997f4c69ea8942335fb7b950da9e83"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 33m39.913658053s ago: executing program 4 (id=2975): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 33m24.64880021s ago: executing program 49 (id=2975): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 27m42.808158081s ago: executing program 8 (id=3826): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f0000000240)=""/69, 0x45, 0x0) 27m42.055499757s ago: executing program 8 (id=3830): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x65]}, 0x8, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff08020301090212"], 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) fsopen(0x0, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) read(0xffffffffffffffff, 0x0, 0x0) 27m39.251461803s ago: executing program 8 (id=3837): sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 27m38.377883746s ago: executing program 8 (id=3839): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="bf16000000000000b707000001009fa35070000000000000280000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71d0e6adff07f1d8f7faf75e0f226bd99eea7960707142fa2dc79b9723741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988ee99fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837079e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000ffffffdf0000000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b9349e31aa3701c38c527d3237c18e521ab219efdebb7b3de8f67581cf796a1d4223b90b80fcad3f6c962b9f292324b7ab7f7da31cf41ab12012fb1e0a494034127de745409e35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d307db98ca112874ec309baed0499104dcfe7c0f694bd5fc9e66d058b75fa4c81e5c9f42d9383e41d277b10392a96286744f049c3f128f8f92ef992239eafce5b43b4ec1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b2e00916de48a4e70f03cc415ba77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b638c234bbb55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4cc302b52e2101de18a1f1f7c551b3fa00055cc1c46c5fd9c26a54d43fa050645bd6109b113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97c870800000047546103f123f661c84726e7c7c55eff231a1b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef7be184f5e93ba5c8c2a4c04450b652b8d4c2ff030000000000000007c6bbd6cb2b240ce7d47ae636a5dbe9864a117d27326850a7c3b57086a4482c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c87c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a700a86c814459f3cdaaf99000000000000000000bf2130d1b32c826563c718d0ad23bc83ba3f3757210a057e177615c0683f000000000000006d4e0413ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fcff030000629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa63966945d93c33b038ce0d890f85f8a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f207ea3df3d6c0002a41783078e56c70afe8016b3dd9dc7785b36e609f173cc747837d600283b3452c57a5d44cacd363589845637071320921d32c1663964eddec97cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c81eb7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dcb0c42c4d719347f3d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57586e5fe2aa611f6232a9b71882ce24fce75cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed000080000000000000000000000fa36bbac00bb77c933d3961556f3fe647b05643b0000000000000000000000967aef9c5706e13d5889e77dab80a2548ec31629b7355a2bb8b93e4b6323061f545b26accc4621b568ab0bfaf30aa4f60705532c4a09c0a4a5487c762167edf362be35b9c90ad7e372a66bbb1471aa21000000000000104061c66a7432f25687618e31dcef8c5d4a2457a93f3fc6d3d7131746c75ccf400fc1a7a51826832ef7f5fbc78827d937768443a1c1ca3aba930826fd21aa1201d9225256df8de405d1f12c17cdaff3ad675aa333aa7e919459babd3cc1000000000000000000000000000000000000000000000000000000000000000059fdc6a54a2a8b28fa7d9b92aeb58e78e3b8594a5ef6bb67e52bf43b6145f544273a8f62852706c0abef368bfc72f92fa99a7bf121019cff8001fd7d2f6c2c295a5cab383235fec4c1decbed258ee9df8963c0fc828ad2119ffefe36c78692fffb6942b9da0922b2aa8f6b66c14ee7f42d5951edcc986356b41c0de3549f851ca340d9e425e355c1decb785a1042a72c1c98a084b04b1d9be473e50a15d76b110eda3b7cc1f2501211773cf510a43888422c1328476dd6f42659c61a18618fd28d5cd342c276aa9c4cc035077fa09d672b8dcfb3ac1751628647047d07338a8619037e3449a173ddd697f541a0795a2de7ef1396d70675341ebf004be122de04b5275fe7e53d28ebdc5051cec00759d73ca97229d93b965926060b6f91d01324bd458b425ea51c5d5b69551d599188fc6040370ac9ca7ae9eea9e5ede79bd66bd3d616dd7d7dd4c3a8fd055a3585af6fe7f5046c61154598cd33c33a48ece1072afd04b1fd85eb1655d9f3f813392c9634200d892dc6810b436820a1e0f6b464855e28953eb63cd3d6fc1b7bfb588ce28a51af1658d45d759a8399da55a3ff6597bb9f47167fe55ca240623a001e5fe15d9ddefea06a3750501916163844106c4ce662f418d9fc509e5447f712048d53e7e36ee7de083c5ea1119969d858eb6785395fc5a2c551de9a086cb4583f55c47828645e3046"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r1}, 0xc) 27m36.981919048s ago: executing program 8 (id=3842): socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x84) 27m36.057746633s ago: executing program 8 (id=3845): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$AUDIT_USER(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x7c, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfd, "30bdd5ded193745a9c046bfce6fa8631b743c55e37d0c88c0eeb3078780d8f2162eeeb4a95f66f45f1645e059302b475476068dfb83830932324c5bfbf44ccea71cdbc3184152c3b7df8016e15f1bdd2c34bb1f7581d2ad6161c60c398c80282f327227e0e864b2e2bd568"}, 0x7c}, 0x1, 0x0, 0x0, 0x2000004}, 0x40800) r6 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x7079, 0x0, 0x3, 0x1e5, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x80002, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r10, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 27m20.501452215s ago: executing program 50 (id=3845): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$AUDIT_USER(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x7c, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfd, "30bdd5ded193745a9c046bfce6fa8631b743c55e37d0c88c0eeb3078780d8f2162eeeb4a95f66f45f1645e059302b475476068dfb83830932324c5bfbf44ccea71cdbc3184152c3b7df8016e15f1bdd2c34bb1f7581d2ad6161c60c398c80282f327227e0e864b2e2bd568"}, 0x7c}, 0x1, 0x0, 0x0, 0x2000004}, 0x40800) r6 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x7079, 0x0, 0x3, 0x1e5, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x80002, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r10, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 7m57.757639256s ago: executing program 3 (id=7982): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 7m57.105311518s ago: executing program 3 (id=7986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a0000000000000000000000000000004000000000005f3a00000000200002000a00000000000000fc010000000000000000000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) 7m56.590275484s ago: executing program 3 (id=7991): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r1, @ANYBLOB="08000b000300000008000200ac"], 0x54}}, 0x0) 7m56.162666297s ago: executing program 3 (id=7995): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) 7m55.567016315s ago: executing program 3 (id=7997): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 7m55.094479208s ago: executing program 3 (id=8000): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) clock_gettime(0x0, &(0x7f0000000240)) ppoll(&(0x7f0000000200)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) 7m39.775418342s ago: executing program 51 (id=8000): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) clock_gettime(0x0, &(0x7f0000000240)) ppoll(&(0x7f0000000200)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) 2m32.155930996s ago: executing program 1 (id=9458): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0xc1, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb3, 0x68, 0x0, 0x40, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010100, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad00"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}, "cb57cd"}}}}}, 0x0) 2m31.64628944s ago: executing program 1 (id=9459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)={@val={0x800e}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x68, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x4e23, 0xa, 0x0, @opaque='x)'}}}}}}, 0x38) 2m30.738392351s ago: executing program 1 (id=9464): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x80) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 2m30.120786902s ago: executing program 1 (id=9466): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r1, 0x4) 2m29.453957101s ago: executing program 1 (id=9468): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x9) r2 = dup(r0) unshare(0x2010000) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000100003040000000000000000000000005c29008007ed98ca4945e9bb613185507aaf605d220bfe14a6469b44433c2b08c48ba4aa090000446fd411cce71e1fea839ccc37a86a4346833590180419c36445ecf547d3d5b6e13095f1d480", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800600190088000000050001"], 0x44}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) listen(r4, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000240)=0x1000, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f00000000c0)={0x0, 0x40}) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 2m25.879438078s ago: executing program 1 (id=9474): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x9}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='gadgetfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m10.617387986s ago: executing program 52 (id=9474): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x9}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='gadgetfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m21.466413178s ago: executing program 0 (id=9652): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="76d3f95e3bab5fa5272154f56eeafec45daca12cd99c4161e0e13be32d272999859dfcba9facf86060f77ade", 0x2c}, {&(0x7f00000000c0)="b731c1024a77bf9a94fc63d77527c330fb438162b37cf7e5c7d6153d812509e74a7f853bdbe1ce77b7a115f32f2ba07184bc6d3132b344cc56bfaea4ff0cd63e53aa47233b91b1f82b45822029adc0266595e63ca74cf21022929d91feaaa77641270b04cc15aeafeafd2bd49c2c84a92505cb2421301b781d3e584f5efef8556162db157264709c2919374ca2ab70094362c3aeb9355df555f73d6e8efdd054f38cff134878791bc45e3f107c0f596e16e2d4c9e8160145c7b49cff58d7c2e3197d05006ed6a748d0f269e91ec026155229b61846", 0xd5}, {&(0x7f00000001c0)="d428e2a43fce0598050da32ad1e96d660098e1466c24e2c786a20995806b6af12fb40d6ea923ed186198a01f", 0x2c}, {&(0x7f0000000c40)="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", 0x409}, {&(0x7f0000000200)="93f75ed68482a3efe87ead6cb5f6ae7d59ff7a4c7bdbeb8858fcb28490f552cae81b3eda1e122ec26e71930e62fc2f4dc4ad2877ea62a0ac263668459763f05154f7611fc2cd283a5060826a188ae3b5e486bfe6337d1686fae355a932686a0f4a4c659c4e4a78f7bee9144ba97afb2bf2b96b8bc875a98dc38c693d3c03c6b7", 0x80}, {&(0x7f0000000280)="efb2c6d9a753cff646c787664f7312462488", 0x12}, {&(0x7f0000001c40)="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", 0x21c}], 0x7}}], 0x1, 0x84) 1m20.202396815s ago: executing program 0 (id=9654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 1m19.090680459s ago: executing program 0 (id=9657): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x38, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1m18.170574149s ago: executing program 0 (id=9661): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1m17.681089856s ago: executing program 0 (id=9664): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="76d3f95e3bab5fa5272154f56eeafec45daca12cd99c4161e0e13be32d272999859dfcba9facf86060f77ade", 0x2c}, {&(0x7f00000000c0)="b731c1024a77bf9a94fc63d77527c330fb438162b37cf7e5c7d6153d812509e74a7f853bdbe1ce77b7a115f32f2ba07184bc6d3132b344cc56bfaea4ff0cd63e53aa47233b91b1f82b45822029adc0266595e63ca74cf21022929d91feaaa77641270b04cc15aeafeafd2bd49c2c84a92505cb2421301b781d3e584f5efef8556162db157264709c2919374ca2ab70094362c3aeb9355df555f73d6e8efdd054f38cff134878791bc45e3f107c0f596e16e2d4c9e8160145c7b49cff58d7c2e3197d05006ed6a748d0f269e91ec026155229b61846", 0xd5}, {&(0x7f00000001c0)="d428e2a43fce0598050da32ad1e96d660098e1466c24e2c786a20995806b6af12fb40d6ea923ed186198a01f", 0x2c}, {&(0x7f0000000c40)="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", 0x409}, {&(0x7f0000000200)="93f75ed68482a3efe87ead6cb5f6ae7d59ff7a4c7bdbeb8858fcb28490f552cae81b3eda1e122ec26e71930e62fc2f4dc4ad2877ea62a0ac263668459763f05154f7611fc2cd283a5060826a188ae3b5e486bfe6337d1686fae355a932686a0f4a4c659c4e4a78f7bee9144ba97afb2bf2b96b8bc875a98dc38c693d3c03c6b7", 0x80}, {&(0x7f0000000280)="efb2c6d9a753cff646c787664f7312462488730fdcd4be3bccbf0e", 0x1b}, {&(0x7f0000001c40)="eefcdc37dff28075a683789e15adfdafab31b300a03b4ddb55917b4d0ad1cb3f8a900db10cc3ea07c034c9b3cd11dd38c21aa0fee5214e106574ce53839bfd45f8e5f86b33352f09fc40664258304e3b2d47b1c8bc90a0883887cba929c9e378b98ccef7accdfc6984e2087adc25cfd39d6bdc7c6a0c216196139fc81f79a34de6f602102c5e511cc8a75d297731b0432025371c597f2e2789037b077846fe116e8076bd43fb473604889451b8299cb5f84ecea5cf4c9f500425b6bb03a11c0d9380c5efef9ba40e6def6cab6aa6534f077e6a2954eb85c1b68714769281dc18dffafd6f2fa2844abb242d91ce29b1812a9e9ce1d19f228f4633d5f5466bdf015b39df26d8ae3ae3703922ffffa4388d34b140233bb2e1e84083f9d3ca6347015316ecfaaad4d06cdfb321e0955f172ec266fe08272da87e0097e86594d42f0d55080bad8e9921e1df1a8f717653d0a9aab14807d9863c63a245489273d578c2a1abe846737ee72beb08d7c7d603420e7a920160774ba26e4e6e6876a267da608eb26706ad53fdf5b433ffc3455fadbc54fe21185244ced1e25c2f1292cd650bb2b99eece29d61df34151b83499c5bdf42775eba99c48e3f95db0c16f4a7121b626503c4534ca59fca51a192a78bfa19bf1711ba41b983c04c470e7fd92c14c4e215e06758a1b032ea2d7276173ea712812492616081f67babdbe6fab90879120494b627c58683a84f2c67530bcc65c357046b4791e7f986480c876d", 0x21c}], 0x7}}], 0x1, 0x84) 1m17.206385415s ago: executing program 0 (id=9667): shutdown(0xffffffffffffffff, 0xacc2d12b9a5b0806) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 1m1.929475568s ago: executing program 53 (id=9667): shutdown(0xffffffffffffffff, 0xacc2d12b9a5b0806) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 16.558939834s ago: executing program 6 (id=9820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x34, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "06"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) 16.121455513s ago: executing program 6 (id=9823): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x63, 0x4200, 0x0, 0x0}], 0x1}) 15.727518225s ago: executing program 5 (id=9826): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="04a62d6789b442", 0x7, 0xc0c1, 0x0, 0x0) close(0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x24000800) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x34}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) r3 = gettid() r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000004000000080000000986000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 14.629410271s ago: executing program 5 (id=9829): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) close(r0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 14.075476371s ago: executing program 5 (id=9832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 14.014341399s ago: executing program 6 (id=9833): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x0) 13.370748285s ago: executing program 6 (id=9837): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x1000) r1 = add_key$fscrypt_provisioning(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)={0x2, 0x0, @auto=[0x34, 0x30, 0x1a]}, 0xb, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)) keyctl$set_timeout(0xf, r0, 0x200) 12.764521022s ago: executing program 6 (id=9839): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="04a62d6789b442", 0x7, 0xc0c1, 0x0, 0x0) close(0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x24000800) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x34}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) r3 = gettid() r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000004000000080000000986000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 11.506351727s ago: executing program 6 (id=9845): syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xa) 7.91889842s ago: executing program 7 (id=9855): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="04a62d6789b442", 0x7, 0xc0c1, 0x0, 0x0) close(0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x24000800) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x34}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) r3 = gettid() r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000004000000080000000986000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 6.930599715s ago: executing program 2 (id=9857): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xdc1}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d61637674617000", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 6.360288241s ago: executing program 7 (id=9859): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x63, 0x4200, 0x0, 0x0}], 0x1}) 5.812080529s ago: executing program 9 (id=9860): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x1000) r1 = add_key$fscrypt_provisioning(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)={0x2, 0x0, @auto=[0x34, 0x30, 0x1a]}, 0xb, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)) keyctl$set_timeout(0xf, r0, 0x200) 5.720908924s ago: executing program 2 (id=9861): r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 5.243514619s ago: executing program 9 (id=9862): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socket$inet6(0xa, 0x2, 0x0) 4.506368859s ago: executing program 9 (id=9863): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 4.253694573s ago: executing program 7 (id=9864): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {0x0}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc61", 0xd7}], 0x5}}, {}], 0x2, 0xc0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.935275325s ago: executing program 9 (id=9865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1cf70000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf25050000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa33000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\v\x00\x00\x00'], 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) accept4(r1, &(0x7f0000000180)=@nl=@proc, &(0x7f0000000380)=0x80, 0x80000) sendmmsg$inet(r4, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="4f80dfed9cba8a309ce9d40208a3e87bfb056e2acd00767cda6ab9806f2eafd17f370c5744f05b7de2f0705482e85facaa7f0bc9f4c4c467680bd01d88f8b5a7df620bab380abada7f25e703fc261f", 0x4f}, {&(0x7f0000001900)="f0ec815c78b1c6e9f82c00f9c64ea9153527afecd2b7cfa2b4776a8e56c5ec3a0deeaff2816298dcc70c14208f2a0eb05a17a46148b595e0d67366ddb7830dff1400afdd072738c0dd3e9606e34412c53c24e464ad840459d9a4aa8bd952bcdf41478715b9e6badf7f918abaea707a7aefefe1ee2c5fbe4f61a9c370bc285dc0de77bfdcbb51bf3aad7a3ca0b8c375f892dc67f3c80b0f69d853cf7ff10110b9b18d8987604f90c7f2113baa2e57ea0c7e48b15224ae95d00199168775564d2967c88d0a46d40997245ab4471b069b73bde9fa485b97c50fe7dc23f2aea46808136b9526d4bf385043a7d7513220ff573d4cefe2e31c2c31c26441ab13347a7ed8eaedc9f954804d3e0f632be8decd9c68af27ae90b9a347efd3796902ce1e75c8a80c6ef0901c7d80cfa57814fc4c8e036a71c663b195e4c1b035bb96789deb17fbd9be2e89023bf80a959c0e113bcdfd2d48177936906e49f9ab503027d6f83af95e4b3f21218307babdc24293a59101bc5d12734f39de3d0ffc20e980a069d44f4b2ec5d8617dc35a7301e9a59208c6da6d0eba823d4134477a71b2daacbf1e59b0cd3620882aac1ad92cb8d0a662233486565bdb4dc16a51620abb6891179c66b9a0791fe9089fad880976319143791374eecb5b4cf1afbaf6128aa6fae97f4c24ca4910000ba17db4192e9f1101f659b694faf08caa4aa43ba6f8bb252d17d8c9f9ab7d57b2ef13c7fcfb62b45a6c74a477fa963e545047b24ca7e4e43bc735af9d2a6b245cc85e01283b81062acd0c9868ecd3818dd202b70424be7c5857f82f362dcbbc650249a8eb6276daa89650059498aeaeea3ef531b56af98e2bb97f89c0c9401f899a49f3719fda3c0c20eae631030ec3d6fa714814882fceb37fb0aede740b2b00ea51308b4af830fb8079b194e45ab938f129382b84f7a4a70876b77436f3421a80cb4d5eb6c49fe8e402be5e523a7962ce56a5b27f74afe8aaab493f3c15bbcd53f40c4c7a35e380077e54e600386f4bb2621d4432d3f170bb39ef303f8b95f96ceb5bafd6009e8cc5e73fedd6597ad95e70fca51a3e58c28f80e117e38bb87ebc854e6afee2c7a475c92beda8414e584c069a3d52488c1b22fa7feb4c042e62ae048ece524257a125c27e0b35f07b0b39eb50b0cda389199663336c272423c434aa54ea252415b9a447da125259fd7fca43f5bc1fdcf4b393831affe918fbedfaa22119943795f6dbe02d1a7a6d880f5c13b3f540bd5004b42d58d7c2208c44a59fe95c10d5bdd21ef176118f09f0", 0x397}, {&(0x7f0000000340)="fb", 0x1}], 0x3}}], 0x1, 0x4000010) socket(0x1, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r1, 0x8000000000000001, 0x7, 0x7f}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x1000000}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.583316173s ago: executing program 7 (id=9866): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) close(r0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.601416935s ago: executing program 9 (id=9867): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x80) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 2.254682275s ago: executing program 5 (id=9868): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="04a62d6789b442", 0x7, 0xc0c1, 0x0, 0x0) close(0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x24000800) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x34}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) r3 = gettid() r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000004000000080000000986000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 2.240260326s ago: executing program 2 (id=9869): pipe(&(0x7f0000000000)) unshare(0x2c020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x8000, 0x5, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x7, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x1ff, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x0, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x71, 0x7, 0x7, 0x3, 0x10000, 0xd, 0x3e, 0x8f, 0x6, 0x46, 0x0, 0x80000005, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0xffffffff, 0x2, 0x9, 0x4, 0x9, 0x478b, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0xfffffffd, 0x45, 0xfffffffe, 0x100, 0x9, 0x6, 0x5, 0x7fff, 0x8, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0xdd, 0x2, 0x2, 0x3, 0x6, 0x4, 0x6d01, 0x5, 0x8, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x22b6c00a, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x803, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x0, 0xaaed, 0x4, 0x25], [0x9, 0x9, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xcea, 0x1ff, 0x8, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0xffff, 0x403, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x3, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x6675, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x6, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.199639929s ago: executing program 7 (id=9870): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xdc1}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d61637674617000", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1.886046634s ago: executing program 9 (id=9871): syz_usb_connect(0x0, 0x53, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 1.577482329s ago: executing program 2 (id=9872): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socket$inet6(0xa, 0x2, 0x0) 1.063994713s ago: executing program 7 (id=9873): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x794, 0x0, 0x0, 0x0}], 0x1}) 877.309403ms ago: executing program 5 (id=9874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 758.64148ms ago: executing program 2 (id=9875): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc61", 0xd7}], 0x5}}, {}], 0x2, 0xc0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 432.631198ms ago: executing program 5 (id=9876): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1cf70000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf25050000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa33000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\v\x00\x00\x00'], 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) accept4(r1, &(0x7f0000000180)=@nl=@proc, &(0x7f0000000380)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r1, 0x8000000000000001, 0x7, 0x7f}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x1000000}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 0s ago: executing program 2 (id=9877): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x0}, r0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)={0x2, 0x0, @auto=[0x34, 0x30, 0x1a]}, 0xb, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)) keyctl$set_timeout(0xf, r0, 0x200) kernel console output (not intermixed with test programs): lid interface number: 0 but max is -1 [ 3061.880593][T14109] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3061.889862][T14109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3061.899952][T14109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3061.915285][T14109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3061.985784][T14109] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3061.995747][T14109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3062.004143][T14109] usb 2-1: Product: syz [ 3062.013791][T14109] usb 2-1: Manufacturer: syz [ 3062.019675][T14109] usb 2-1: SerialNumber: syz [ 3062.030634][T14109] usb 2-1: config 0 descriptor?? [ 3062.082242][T14109] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 3062.090077][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 3062.098293][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 3062.107568][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 3062.120611][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 3062.130386][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 3062.138575][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 3062.146550][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 3062.282825][T14109] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3062.293646][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 3062.302184][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 3062.310353][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 3062.323148][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 3062.407526][T14109] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3064.024278][T31567] pim6reg: entered allmulticast mode [ 3064.044843][T23963] usb 2-1: USB disconnect, device number 15 [ 3064.151085][T23963] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3064.232170][T23963] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3064.243858][T23963] keyspan 2-1:0.0: device disconnected [ 3065.566579][T31588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8848'. [ 3065.670083][T31588] macvtap3: entered promiscuous mode [ 3065.675742][T31588] bond0: entered promiscuous mode [ 3065.682024][T31588] macvtap3: entered allmulticast mode [ 3065.687664][T31588] bond0: entered allmulticast mode [ 3065.694962][T31588] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 3065.849722][T31594] bond0: left allmulticast mode [ 3065.854995][T31594] bond0: left promiscuous mode [ 3066.750343][T31610] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8854'. [ 3067.450304][T23963] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 3067.690576][T23963] usb 10-1: Using ep0 maxpacket: 16 [ 3067.782323][T23963] usb 10-1: config index 0 descriptor too short (expected 1828, got 36) [ 3067.791555][T23963] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 3067.800224][T23963] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3067.809646][T23963] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3067.820327][T23963] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3067.831655][T23963] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3067.986174][T23963] usb 10-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3067.995836][T23963] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3068.004518][T23963] usb 10-1: Product: syz [ 3068.009187][T23963] usb 10-1: Manufacturer: syz [ 3068.014168][T23963] usb 10-1: SerialNumber: syz [ 3068.024196][T23963] usb 10-1: config 0 descriptor?? [ 3068.056902][T23963] keyspan 10-1:0.0: Keyspan 2 port adapter converter detected [ 3068.065642][T23963] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 87 [ 3068.073818][T23963] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 7 [ 3068.083248][T23963] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 81 [ 3068.091722][T23963] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 1 [ 3068.099839][T23963] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 2 [ 3068.107830][T23963] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 85 [ 3068.116035][T23963] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 5 [ 3068.241452][T23963] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3068.251570][T23963] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 83 [ 3068.263587][T23963] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 4 [ 3068.272504][T23963] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 86 [ 3068.280732][T23963] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 6 [ 3068.292377][T23963] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3069.683730][T23963] usb 10-1: USB disconnect, device number 33 [ 3069.710272][T23963] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3069.800643][T23963] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3069.812105][T23963] keyspan 10-1:0.0: device disconnected [ 3070.028666][T31627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8865'. [ 3070.077934][T31627] bond_slave_0: entered promiscuous mode [ 3070.084116][T31627] bond_slave_1: entered promiscuous mode [ 3070.090681][T31627] macvtap2: entered promiscuous mode [ 3070.096336][T31627] bond0: entered promiscuous mode [ 3070.112736][T31627] macvtap2: entered allmulticast mode [ 3070.118613][T31627] bond0: entered allmulticast mode [ 3070.124001][T31627] bond_slave_0: entered allmulticast mode [ 3070.130408][T31627] bond_slave_1: entered allmulticast mode [ 3070.142194][T31627] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 3070.248964][T31630] bond0: left allmulticast mode [ 3070.254262][T31630] bond_slave_0: left allmulticast mode [ 3070.260456][T31630] bond_slave_1: left allmulticast mode [ 3070.266243][T31630] bond0: left promiscuous mode [ 3070.274584][T31630] bond_slave_0: left promiscuous mode [ 3070.280396][T31630] bond_slave_1: left promiscuous mode [ 3073.883090][T31660] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8878'. [ 3074.423105][T31672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8884'. [ 3075.820421][T31683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8887'. [ 3075.872310][T31683] netlink: 248 bytes leftover after parsing attributes in process `syz.1.8887'. [ 3077.363021][T31706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8897'. [ 3078.024774][T31715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8902'. [ 3078.618407][T14109] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 3078.778393][T14109] usb 3-1: Using ep0 maxpacket: 16 [ 3078.807743][T14109] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 3078.816388][T14109] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 3078.824829][T14109] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3078.834166][T14109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3078.844245][T14109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3078.855498][T14109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3078.921171][T14109] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3078.931118][T14109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3078.939618][T14109] usb 3-1: Product: syz [ 3078.944068][T14109] usb 3-1: Manufacturer: syz [ 3078.949089][T14109] usb 3-1: SerialNumber: syz [ 3079.090689][T14109] usb 3-1: config 0 descriptor?? [ 3079.115567][T14109] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 3079.124254][T14109] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 3079.132409][T14109] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 3079.141695][T14109] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 3079.149866][T14109] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 3079.157771][T14109] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 3079.165854][T14109] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 3079.174629][T14109] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 3079.363360][T14109] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3079.374749][T14109] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 3079.383787][T14109] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 3079.396426][T14109] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 3079.405003][T14109] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 3079.423189][T14109] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3081.068933][T14109] usb 3-1: USB disconnect, device number 18 [ 3081.150733][T14109] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3081.240151][T14109] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3081.251539][T14109] keyspan 3-1:0.0: device disconnected [ 3082.310615][T31754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8920'. [ 3082.374481][T31754] syz_tun: entered promiscuous mode [ 3082.382531][T31754] macvtap3: entered promiscuous mode [ 3082.400174][T31754] macvtap3: entered allmulticast mode [ 3082.405856][T31754] syz_tun: entered allmulticast mode [ 3083.520878][T31775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8927'. [ 3083.715988][T31779] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8931'. [ 3083.839784][T23963] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 3084.094221][T23963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3084.107081][T23963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3084.117800][T23963] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 3084.131639][T23963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3084.321272][T23963] usb 3-1: config 0 descriptor?? [ 3084.823652][T23963] cp2112 0003:10C4:EA90.0064: unknown main item tag 0x0 [ 3084.935247][T23963] cp2112 0003:10C4:EA90.0064: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 3085.043027][T23963] cp2112 0003:10C4:EA90.0064: error requesting version [ 3085.111164][T23963] cp2112 0003:10C4:EA90.0064: probe with driver cp2112 failed with error -71 [ 3085.133464][T23963] usb 3-1: USB disconnect, device number 19 [ 3085.625802][T31795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8937'. [ 3085.701501][T31795] syz_tun: entered promiscuous mode [ 3085.707144][T31795] macvtap3: entered promiscuous mode [ 3085.713520][T31795] macvtap3: entered allmulticast mode [ 3085.719365][T31795] syz_tun: entered allmulticast mode [ 3087.296180][T31814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8944'. [ 3088.625969][T31831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8950'. [ 3088.711339][T31831] macvtap4: entered promiscuous mode [ 3088.717901][T31831] macvtap4: entered allmulticast mode [ 3089.208513][T23963] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 3089.288732][T31840] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8952'. [ 3089.395809][T23963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3089.407296][T23963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3089.417518][T23963] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 3089.426944][T23963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3089.458647][T23963] usb 3-1: config 0 descriptor?? [ 3089.859061][T14109] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 3089.897303][T23963] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 3089.918821][T23963] cp2112 0003:10C4:EA90.0065: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 3090.132933][T23963] cp2112 0003:10C4:EA90.0065: error requesting version [ 3090.151486][T23963] cp2112 0003:10C4:EA90.0065: probe with driver cp2112 failed with error -71 [ 3090.173902][T23963] usb 3-1: USB disconnect, device number 20 [ 3090.216044][T14109] usb 2-1: Using ep0 maxpacket: 16 [ 3090.286821][T14109] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 3090.295673][T14109] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 3090.304236][T14109] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3090.313478][T14109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3090.323681][T14109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3090.334907][T14109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3090.497311][T14109] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3090.507173][T14109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3090.515653][T14109] usb 2-1: Product: syz [ 3090.520207][T14109] usb 2-1: Manufacturer: syz [ 3090.525077][T14109] usb 2-1: SerialNumber: syz [ 3090.534674][T14109] usb 2-1: config 0 descriptor?? [ 3090.550175][T14109] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 3090.559097][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 3090.567390][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 3090.577304][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 3090.592812][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 3090.602493][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 3090.610812][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 3090.619203][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 3090.655147][T14109] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3090.666155][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 3090.674495][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 3090.689181][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 3090.697165][T14109] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 3090.792736][T31844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8955'. [ 3090.850109][T14109] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3092.589559][T23963] usb 2-1: USB disconnect, device number 16 [ 3092.613615][T23963] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3092.655000][T31854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8959'. [ 3092.701274][T23963] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3092.712378][T23963] keyspan 2-1:0.0: device disconnected [ 3093.353924][T31860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8963'. [ 3093.415064][T31860] macvtap4: entered promiscuous mode [ 3093.422463][T31860] macvtap4: entered allmulticast mode [ 3093.773515][T31863] batman_adv: batadv0: Adding interface: ip6gretap2 [ 3093.781535][T31863] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3093.808595][T31863] batman_adv: batadv0: Interface activated: ip6gretap2 [ 3094.458698][T14109] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 3094.631112][T14109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3094.642751][T14109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3094.652993][T14109] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 3094.662601][T14109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3094.744762][T14109] usb 3-1: config 0 descriptor?? [ 3095.122220][T31886] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8971'. [ 3095.171390][T14109] cp2112 0003:10C4:EA90.0066: unknown main item tag 0x0 [ 3095.227926][T14109] cp2112 0003:10C4:EA90.0066: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 3095.402489][T14109] cp2112 0003:10C4:EA90.0066: error requesting version [ 3095.414091][T14109] cp2112 0003:10C4:EA90.0066: probe with driver cp2112 failed with error -71 [ 3095.430173][T14109] usb 3-1: USB disconnect, device number 21 [ 3095.798862][T23963] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 3096.072652][T23963] usb 7-1: Using ep0 maxpacket: 16 [ 3096.152856][T23963] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 3096.161966][T23963] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 3096.170543][T23963] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3096.180006][T23963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3096.190003][T23963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3096.201091][T23963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3096.428608][T23963] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3096.437942][T23963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3096.446421][T23963] usb 7-1: Product: syz [ 3096.450968][T23963] usb 7-1: Manufacturer: syz [ 3096.455853][T23963] usb 7-1: SerialNumber: syz [ 3096.467960][T23963] usb 7-1: config 0 descriptor?? [ 3096.488729][T23963] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected [ 3096.496437][T23963] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87 [ 3096.504547][T23963] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 3096.513638][T23963] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 3096.525087][T23963] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 3096.533798][T23963] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 3096.542237][T23963] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 3096.550302][T23963] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 3096.585972][T31894] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8976'. [ 3096.648384][T31894] syz_tun: entered promiscuous mode [ 3096.654320][T31894] macvtap5: entered promiscuous mode [ 3096.667789][T31894] macvtap5: entered allmulticast mode [ 3096.673462][T31894] syz_tun: entered allmulticast mode [ 3096.689955][T23963] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3096.702756][T23963] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83 [ 3096.711463][T23963] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 3096.719703][T23963] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86 [ 3096.732828][T23963] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 3096.834960][T23963] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3098.481859][T26256] usb 7-1: USB disconnect, device number 16 [ 3098.554146][T26256] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3098.630963][T26256] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3098.641916][T26256] keyspan 7-1:0.0: device disconnected [ 3099.827564][T31921] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8986'. [ 3099.865635][T26256] hid-generic 0005:0C45:0A0F.0067: item fetching failed at offset 0/2 [ 3099.892161][T26256] hid-generic 0005:0C45:0A0F.0067: probe with driver hid-generic failed with error -22 [ 3099.952379][T31930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8990'. [ 3100.016445][T31930] syz_tun: entered promiscuous mode [ 3100.023097][T31930] macvtap4: entered promiscuous mode [ 3100.029984][T31930] macvtap4: entered allmulticast mode [ 3100.035615][T31930] syz_tun: entered allmulticast mode [ 3100.549117][T31939] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8992'. [ 3101.208644][T23963] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 3101.398809][T23963] usb 3-1: Using ep0 maxpacket: 16 [ 3101.487477][T23963] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 3101.496976][T23963] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 3101.505650][T23963] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3101.514982][T23963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3101.524971][T23963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3101.539595][T23963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3101.822429][T23963] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3101.831999][T23963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3101.840983][T23963] usb 3-1: Product: syz [ 3101.848775][T23963] usb 3-1: Manufacturer: syz [ 3101.853633][T23963] usb 3-1: SerialNumber: syz [ 3101.953697][T23963] usb 3-1: config 0 descriptor?? [ 3101.967642][T23963] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 3101.975521][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 3101.983629][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 3101.992917][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 3102.001037][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 3102.009212][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 3102.017216][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 3102.025304][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 3102.159908][T23963] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3102.170344][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 3102.178958][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 3102.186969][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 3102.194986][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 3102.206152][T23963] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3103.607376][T26256] usb 3-1: USB disconnect, device number 22 [ 3103.691428][T26256] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3103.760111][T26256] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3103.771898][T26256] keyspan 3-1:0.0: device disconnected [ 3104.832893][T31969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9006'. [ 3104.859872][T31973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3105.811234][T31987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9012'. [ 3105.963869][T31988] batadv0: entered promiscuous mode [ 3105.972743][T31988] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3105.990669][T31988] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 3106.398394][T26256] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 3106.608677][T26256] usb 3-1: Using ep0 maxpacket: 16 [ 3106.662796][T26256] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 3106.671651][T26256] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 3106.680181][T26256] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3106.689592][T26256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3106.699856][T26256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3106.711201][T26256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3106.797209][T26256] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3106.807001][T26256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3106.815254][T26256] usb 3-1: Product: syz [ 3106.820199][T26256] usb 3-1: Manufacturer: syz [ 3106.824956][T26256] usb 3-1: SerialNumber: syz [ 3106.835344][T26256] usb 3-1: config 0 descriptor?? [ 3106.852331][T26256] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 3106.867064][T26256] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 3106.876453][T26256] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 3106.886511][T26256] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 3106.894786][T26256] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 3106.907628][T26256] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 3106.919029][T26256] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 3106.927286][T26256] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 3107.123333][T26256] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3107.133518][T26256] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 3107.141771][T26256] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 3107.150135][T26256] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 3107.158571][T26256] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 3107.177741][T26256] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3108.887816][T23963] usb 3-1: USB disconnect, device number 23 [ 3108.953563][T23963] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3109.007751][T23963] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3109.026508][T23963] keyspan 3-1:0.0: device disconnected [ 3110.252376][T32022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9026'. [ 3110.301615][T23963] hid-generic 0005:0C45:0A0F.0068: item fetching failed at offset 0/2 [ 3110.327723][T23963] hid-generic 0005:0C45:0A0F.0068: probe with driver hid-generic failed with error -22 [ 3111.842472][T32044] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9034'. [ 3115.326896][T32071] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9046'. [ 3116.581457][T32091] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9053'. [ 3116.645055][T32091] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9053'. [ 3117.168345][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 3117.516184][T32101] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9058'. [ 3120.111007][T32118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9065'. [ 3120.245748][T26256] hid-generic 0005:0C45:0A0F.0069: item fetching failed at offset 0/2 [ 3120.272325][T26256] hid-generic 0005:0C45:0A0F.0069: probe with driver hid-generic failed with error -22 [ 3120.946009][T32129] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9069'. [ 3120.982772][T32129] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9069'. [ 3121.008350][T32131] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9070'. [ 3121.620327][T32141] netlink: 'syz.6.9073': attribute type 1 has an invalid length. [ 3121.630502][T32141] netlink: 'syz.6.9073': attribute type 10 has an invalid length. [ 3121.639565][T32141] netlink: 'syz.6.9073': attribute type 4 has an invalid length. [ 3121.647598][T32141] netlink: 216 bytes leftover after parsing attributes in process `syz.6.9073'. [ 3122.928297][T32155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9079'. [ 3123.051300][T32154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9080'. [ 3123.281187][T32161] pim6reg: entered allmulticast mode [ 3123.368434][T23963] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 3123.598483][T23963] usb 2-1: Using ep0 maxpacket: 16 [ 3123.622848][T23963] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 3123.632078][T23963] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 3123.640958][T23963] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3123.650518][T23963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3123.663726][T23963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3123.675999][T23963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3123.735611][T23963] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3123.745445][T23963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3123.753874][T23963] usb 2-1: Product: syz [ 3123.761375][T23963] usb 2-1: Manufacturer: syz [ 3123.766243][T23963] usb 2-1: SerialNumber: syz [ 3123.819558][T23963] usb 2-1: config 0 descriptor?? [ 3123.840997][T23963] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 3123.849029][T23963] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 3123.857220][T23963] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 3123.872288][T23963] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 3123.881940][T23963] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 3123.890673][T23963] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 3123.898897][T23963] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 3123.907097][T23963] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 3123.945757][T32169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9084'. [ 3124.025437][T23963] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3124.037000][T23963] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 3124.045928][T23963] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 3124.054200][T23963] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 3124.062580][T23963] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 3124.240210][T23963] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3124.317139][T23963] usb 2-1: USB disconnect, device number 17 [ 3124.389448][T23963] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3124.439398][T23963] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3124.450958][T23963] keyspan 2-1:0.0: device disconnected [ 3124.713476][T32179] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 3126.657071][T32204] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9098'. [ 3127.066877][T32214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9101'. [ 3127.179387][T32219] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9102'. [ 3127.680021][T23963] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 3127.908521][T23963] usb 3-1: Using ep0 maxpacket: 16 [ 3127.929289][T23963] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 3127.938951][T23963] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 3127.947240][T23963] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3127.959588][T23963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3127.970271][T23963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3127.981418][T23963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3128.168449][T23963] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3128.178351][T23963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3128.186673][T23963] usb 3-1: Product: syz [ 3128.191245][T23963] usb 3-1: Manufacturer: syz [ 3128.196158][T23963] usb 3-1: SerialNumber: syz [ 3128.207006][T23963] usb 3-1: config 0 descriptor?? [ 3128.221736][T23963] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 3128.229751][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 3128.237761][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 3128.246835][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 3128.254892][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 3128.267557][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 3128.276343][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 3128.284848][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 3128.480667][T23963] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3128.491956][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 3128.500481][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 3128.508783][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 3128.516878][T23963] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 3128.527457][T23963] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3130.324139][T16957] usb 3-1: USB disconnect, device number 24 [ 3130.427314][T16957] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3130.497445][T16957] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3130.509663][T16957] keyspan 3-1:0.0: device disconnected [ 3130.981255][T32249] pim6reg: entered allmulticast mode [ 3131.086273][T32252] netlink: 264 bytes leftover after parsing attributes in process `syz.2.9116'. [ 3131.705381][T32259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9117'. [ 3131.808350][T16957] hid-generic 0005:0C45:0A0F.006A: item fetching failed at offset 0/2 [ 3131.864431][T16957] hid-generic 0005:0C45:0A0F.006A: probe with driver hid-generic failed with error -22 [ 3133.330252][T32281] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9126'. [ 3133.988720][T28247] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 3134.168778][T28247] usb 10-1: Using ep0 maxpacket: 16 [ 3134.195251][T28247] usb 10-1: config index 0 descriptor too short (expected 1828, got 36) [ 3134.208554][T28247] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 3134.217064][T28247] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3134.226491][T28247] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3134.236681][T28247] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3134.248106][T28247] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3134.275528][T28247] usb 10-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3134.285042][T28247] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3134.293969][T28247] usb 10-1: Product: syz [ 3134.298460][T28247] usb 10-1: Manufacturer: syz [ 3134.306898][T28247] usb 10-1: SerialNumber: syz [ 3134.371065][T28247] usb 10-1: config 0 descriptor?? [ 3134.395424][T28247] keyspan 10-1:0.0: Keyspan 2 port adapter converter detected [ 3134.403476][T28247] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 87 [ 3134.414821][T28247] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 7 [ 3134.424855][T28247] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 81 [ 3134.433003][T28247] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 1 [ 3134.442019][T28247] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 2 [ 3134.450153][T28247] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 85 [ 3134.458377][T28247] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 5 [ 3134.589765][T28247] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3134.600151][T28247] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 83 [ 3134.608488][T28247] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 4 [ 3134.620274][T28247] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 86 [ 3134.629282][T28247] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 6 [ 3134.641669][T28247] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3136.425314][T32170] usb 10-1: USB disconnect, device number 34 [ 3136.452973][T32306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9135'. [ 3136.495985][T32170] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3136.534172][T32170] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3136.545596][T32170] keyspan 10-1:0.0: device disconnected [ 3137.233978][T32319] tipc: Failed to remove unknown binding: 66,2,2/0:4148501787/4148501788 [ 3138.182998][T32335] pim6reg: entered allmulticast mode [ 3138.831280][T32343] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9149'. [ 3139.478565][T28247] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 3139.661911][T28247] usb 7-1: Using ep0 maxpacket: 16 [ 3139.704006][T28247] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 3139.712699][T28247] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 3139.721016][T28247] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3139.730135][T28247] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3139.744213][T28247] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3139.755311][T28247] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3139.815102][T32352] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9154'. [ 3139.884913][T23963] hid-generic 0005:0C45:0A0F.006B: item fetching failed at offset 0/2 [ 3139.943962][T23963] hid-generic 0005:0C45:0A0F.006B: probe with driver hid-generic failed with error -22 [ 3139.962934][T28247] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3139.972444][T28247] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3139.981178][T28247] usb 7-1: Product: syz [ 3139.985496][T28247] usb 7-1: Manufacturer: syz [ 3139.990354][T28247] usb 7-1: SerialNumber: syz [ 3140.070051][T28247] usb 7-1: config 0 descriptor?? [ 3140.091758][T32358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9156'. [ 3140.105638][T32358] hsr_slave_0: left promiscuous mode [ 3140.116701][T32358] hsr_slave_1: left promiscuous mode [ 3140.331154][T28247] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected [ 3140.339178][T28247] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87 [ 3140.351997][T28247] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 3140.362084][T28247] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 3140.370161][T28247] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 3140.378323][T28247] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 3140.386300][T28247] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 3140.394407][T28247] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 3140.445375][T28247] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3140.461595][T28247] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83 [ 3140.470880][T28247] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 3140.478950][T28247] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86 [ 3140.486961][T28247] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 3140.497308][T28247] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3141.963470][T32170] usb 7-1: USB disconnect, device number 17 [ 3142.033239][T32170] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3142.121135][T32170] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3142.133947][T32170] keyspan 7-1:0.0: device disconnected [ 3142.569881][T32381] netlink: 'syz.6.9167': attribute type 1 has an invalid length. [ 3142.950769][T32386] vlan2: entered promiscuous mode [ 3142.956114][T32386] veth0_virt_wifi: entered promiscuous mode [ 3142.966990][T32386] vlan2: entered allmulticast mode [ 3142.972578][T32386] veth0_virt_wifi: entered allmulticast mode [ 3143.076298][T32386] netlink: 'syz.1.9168': attribute type 4 has an invalid length. [ 3143.130467][T32387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9168'. [ 3143.310207][T32387] hsr_slave_1 (unregistering): left promiscuous mode [ 3144.574646][T32411] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9177'. [ 3145.008353][T32251] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3145.251359][T32251] usb 3-1: Using ep0 maxpacket: 8 [ 3145.309584][T32251] usb 3-1: config 0 has no interfaces? [ 3145.315600][T32251] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3145.325420][T32251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3145.444872][T32251] usb 3-1: config 0 descriptor?? [ 3145.694123][T32412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9179'. [ 3145.704135][T32412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9179'. [ 3145.784590][T32170] usb 3-1: USB disconnect, device number 25 [ 3150.846886][T32492] loop6: detected capacity change from 0 to 512 [ 3150.948446][T32492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3150.962292][T32492] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3151.207309][ T30] audit: type=1800 audit(1747377115.527:225): pid=32492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9216" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 3151.476454][T26516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3153.314319][T32528] syzkaller1: entered promiscuous mode [ 3153.320282][T32528] syzkaller1: entered allmulticast mode [ 3156.849441][T32566] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9246'. [ 3156.870991][T32566] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9246'. [ 3157.234182][T32542] loop6: detected capacity change from 0 to 32768 [ 3159.975704][T32593] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9258'. [ 3160.014443][T32593] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9258'. [ 3162.613831][T32625] netlink: 48 bytes leftover after parsing attributes in process `syz.9.9270'. [ 3162.676538][T32625] netlink: 48 bytes leftover after parsing attributes in process `syz.9.9270'. [ 3163.420073][T32635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9275'. [ 3164.357235][T32652] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9284'. [ 3164.419275][T32652] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9284'. [ 3165.344887][T32668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9290'. [ 3166.514890][T32688] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9299'. [ 3166.551270][T32688] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9299'. [ 3167.193980][T32698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9304'. [ 3169.010031][T32721] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9314'. [ 3169.055619][T32721] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9314'. [ 3170.492119][T32741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9323'. [ 3174.143895][ T316] loop6: detected capacity change from 0 to 4096 [ 3174.180320][ T316] ntfs3(loop6): ino=3, Correct links count -> 2. [ 3174.860247][ T329] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9350'. [ 3175.374463][T14122] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 3175.628376][T14122] usb 2-1: Using ep0 maxpacket: 16 [ 3175.641502][T14122] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 3175.650180][T14122] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 3175.658835][T14122] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3175.668109][T14122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3175.680561][T14122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3175.692444][T14122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3175.718840][T14122] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3175.728408][T14122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3175.736690][T14122] usb 2-1: Product: syz [ 3175.741294][T14122] usb 2-1: Manufacturer: syz [ 3175.746186][T14122] usb 2-1: SerialNumber: syz [ 3175.870972][T14122] usb 2-1: config 0 descriptor?? [ 3175.893316][T14122] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 3175.901159][T14122] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 3175.909271][T14122] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 3175.918528][T14122] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 3175.926529][T14122] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 3175.934548][T14122] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 3175.942561][T14122] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 3175.950630][T14122] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 3175.960998][T14122] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3175.971818][T14122] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 3175.980395][T14122] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 3175.991685][T14122] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 3176.000310][T14122] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 3176.058894][T14122] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3177.755021][T32170] usb 2-1: USB disconnect, device number 18 [ 3177.775452][T32170] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3177.830145][T32170] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3177.842515][T32170] keyspan 2-1:0.0: device disconnected [ 3178.611462][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 3179.788756][ T374] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9368'. [ 3184.841062][ T427] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9391'. [ 3185.050046][T32170] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3185.278425][T32170] usb 3-1: Using ep0 maxpacket: 16 [ 3185.289876][T32170] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3185.304981][T32170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3185.358711][T32170] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3185.368353][T32170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3185.376617][T32170] usb 3-1: Product: syz [ 3185.381227][T32170] usb 3-1: Manufacturer: syz [ 3185.386046][T32170] usb 3-1: SerialNumber: syz [ 3185.460970][T32170] usb 3-1: config 0 descriptor?? [ 3185.476697][T32170] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3185.486543][T32170] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 3186.173237][T32170] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 3186.227763][T32170] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 3186.915329][T32170] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 3187.425115][T32170] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 3187.494428][T32170] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 3187.534138][T32170] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 3187.603213][T32170] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 3187.626556][T32170] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 3187.708515][T32170] usb 3-1: USB disconnect, device number 26 [ 3192.790366][ T463] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9410'. [ 3194.277673][ T30] audit: type=1326 audit(1747377158.607:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=475 comm="syz.1.9415" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f48539 code=0x0 [ 3197.368489][T32170] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3197.621908][T32170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3197.633351][T32170] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3197.642820][T32170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3197.725649][T32170] usb 3-1: config 0 descriptor?? [ 3198.083058][T32170] usbhid 3-1:0.0: can't add hid device: -71 [ 3198.090185][T32170] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3198.122646][T32170] usb 3-1: USB disconnect, device number 27 [ 3198.453510][ T512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9430'. [ 3198.608892][T32170] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3198.789740][T32170] usb 3-1: Using ep0 maxpacket: 32 [ 3198.841557][T32170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3198.853407][T32170] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 3198.863011][T32170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3198.892387][T32170] usb 3-1: config 0 descriptor?? [ 3198.908215][T32170] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3198.969983][T32170] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3199.011918][ T517] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9432'. [ 3199.318910][T32170] usb 3-1: USB disconnect, device number 28 [ 3199.340871][T32170] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 3199.488511][T14122] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 3199.688873][T14122] usb 7-1: device descriptor read/64, error -71 [ 3200.081704][T14122] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 3200.321569][T14122] usb 7-1: device descriptor read/64, error -71 [ 3200.465697][T14122] usb usb7-port1: attempt power cycle [ 3200.929971][T14122] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 3201.046256][T14122] usb 7-1: device descriptor read/8, error -71 [ 3201.362111][T14122] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 3201.473409][T14122] usb 7-1: device descriptor read/8, error -71 [ 3201.600320][T14122] usb usb7-port1: unable to enumerate USB device [ 3204.644886][ T563] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9452'. [ 3205.112090][T32170] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 3205.308684][T32170] usb 2-1: device descriptor read/64, error -71 [ 3205.578872][T32170] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 3205.828063][T32170] usb 2-1: device descriptor read/64, error -71 [ 3205.939059][T32170] usb usb2-port1: attempt power cycle [ 3206.288291][T32170] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 3206.323826][T32170] usb 2-1: device descriptor read/8, error -71 [ 3206.590641][T32170] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 3206.737403][T32170] usb 2-1: device descriptor read/8, error -71 [ 3206.859148][T32170] usb usb2-port1: unable to enumerate USB device [ 3208.614012][ T583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9460'. [ 3208.741153][ T586] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9461'. [ 3210.922550][ T601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9468'. [ 3211.698685][T16957] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 3211.888837][T16957] usb 2-1: device descriptor read/64, error -71 [ 3212.148667][T16957] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 3212.368834][T16957] usb 2-1: device descriptor read/64, error -71 [ 3212.488326][T16957] usb usb2-port1: attempt power cycle [ 3212.768434][ T610] batman_adv: batadv0: Adding interface: ip6gretap2 [ 3212.775332][ T610] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3212.802466][ T610] batman_adv: batadv0: Interface activated: ip6gretap2 [ 3212.883307][T16957] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 3213.002249][T16957] usb 2-1: device descriptor read/8, error -71 [ 3213.328328][T16957] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 3213.388704][T16957] usb 2-1: device descriptor read/8, error -71 [ 3213.515455][T16957] usb usb2-port1: unable to enumerate USB device [ 3214.125891][ T613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9472'. [ 3214.199641][ T615] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9473'. [ 3216.578589][T14122] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 3216.769097][T14122] usb 7-1: Using ep0 maxpacket: 16 [ 3216.781492][ T636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9483'. [ 3216.820931][T14122] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3216.832877][T14122] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3216.902667][T14122] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3216.912279][T14122] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3216.920651][T14122] usb 7-1: Product: syz [ 3216.925059][T14122] usb 7-1: Manufacturer: syz [ 3216.929897][T14122] usb 7-1: SerialNumber: syz [ 3216.952410][T14122] usb 7-1: config 0 descriptor?? [ 3216.967652][T14122] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3216.977793][T14122] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 3217.115838][ T639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9484'. [ 3217.592229][T14122] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 3217.619852][T14122] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 3217.763218][ T642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9485'. [ 3217.784982][ T644] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9486'. [ 3218.326283][T14122] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 3218.772646][T14122] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 3218.780546][T14122] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 3218.798845][T14122] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 3218.809340][T14122] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 3218.821805][T14122] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 3218.836306][T14122] usb 7-1: USB disconnect, device number 22 [ 3221.178569][T14122] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 3221.409270][T14122] usb 10-1: Using ep0 maxpacket: 32 [ 3221.435745][T14122] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 3221.445588][T14122] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3221.492822][T14122] usb 10-1: config 0 descriptor?? [ 3221.512793][T14122] gspca_main: sunplus-2.14.0 probing 041e:400b [ 3221.852874][ T669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9497'. [ 3222.946435][T14122] gspca_sunplus: reg_w_riv err -71 [ 3222.952516][T14122] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 3223.002701][T14122] usb 10-1: USB disconnect, device number 35 [ 3223.670212][T14122] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3223.890227][T14122] usb 3-1: Using ep0 maxpacket: 16 [ 3223.918260][T14122] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3223.930599][T14122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3223.999161][T14122] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3224.011694][T14122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3224.021064][T14122] usb 3-1: Product: syz [ 3224.025779][T14122] usb 3-1: Manufacturer: syz [ 3224.030926][T14122] usb 3-1: SerialNumber: syz [ 3224.099177][T14122] usb 3-1: config 0 descriptor?? [ 3224.134179][T14122] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3224.144061][T14122] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 3224.765513][T14122] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 3224.809006][T14122] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 3225.491759][T14122] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 3225.654755][T14122] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 3225.699976][T14122] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 3225.712589][ T690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9504'. [ 3225.779799][T14122] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 3225.819340][T14122] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 3226.017710][T14122] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 3226.289678][T14122] usb 3-1: USB disconnect, device number 29 [ 3229.133272][ T702] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9508'. [ 3230.462734][T32385] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3230.486538][T32385] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3230.497185][T32385] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3230.514288][T32385] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3230.550343][T32385] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3231.932637][ T723] loop6: detected capacity change from 0 to 2048 [ 3231.989133][T16957] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3232.036442][ T723] loop6: p4 < > [ 3232.271350][T16957] usb 3-1: Using ep0 maxpacket: 16 [ 3232.296126][ T717] chnl_net:caif_netlink_parms(): no params data found [ 3232.361449][T16957] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3232.373926][T16957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3232.521364][T16957] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3232.531585][T16957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3232.540022][T16957] usb 3-1: Product: syz [ 3232.544449][T16957] usb 3-1: Manufacturer: syz [ 3232.549439][T16957] usb 3-1: SerialNumber: syz [ 3232.662605][T32385] Bluetooth: hci5: command tx timeout [ 3232.678352][T16957] usb 3-1: config 0 descriptor?? [ 3232.703983][T16957] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3232.719338][T16957] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 3233.367437][T16957] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 3233.388379][ T739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9521'. [ 3233.399663][T16957] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 3234.048726][T16957] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 3234.068966][T16957] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 3234.081577][T16957] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 3234.089170][T32170] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 3234.108659][T16957] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 3234.116718][T16957] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 3234.136503][T16957] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 3234.213943][T16957] usb 3-1: USB disconnect, device number 30 [ 3234.281666][ T717] bridge0: port 1(bridge_slave_0) entered blocking state [ 3234.292043][ T717] bridge0: port 1(bridge_slave_0) entered disabled state [ 3234.300109][ T717] bridge_slave_0: entered allmulticast mode [ 3234.303397][T32170] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3234.310806][ T717] bridge_slave_0: entered promiscuous mode [ 3234.316155][T32170] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3234.336169][T32170] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3234.345594][T32170] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3234.477434][ T717] bridge0: port 2(bridge_slave_1) entered blocking state [ 3234.485365][ T717] bridge0: port 2(bridge_slave_1) entered disabled state [ 3234.493354][ T717] bridge_slave_1: entered allmulticast mode [ 3234.503313][ T717] bridge_slave_1: entered promiscuous mode [ 3234.689447][T32170] usb 7-1: GET_CAPABILITIES returned 11 [ 3234.695765][T32170] usbtmc 7-1:16.0: can't read capabilities [ 3234.709269][ T717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3234.752761][T32385] Bluetooth: hci5: command tx timeout [ 3234.836926][ T717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3234.914817][T14122] usb 7-1: USB disconnect, device number 23 [ 3235.343084][ T717] team0: Port device team_slave_0 added [ 3235.444647][ T717] team0: Port device team_slave_1 added [ 3235.734632][ T717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3235.743906][ T717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3235.770930][ T717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3235.934112][ T717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3235.942289][ T717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3235.968428][ C0] vkms_vblank_simulate: vblank timer overrun [ 3235.975470][ T717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3236.390571][ T717] hsr_slave_0: entered promiscuous mode [ 3236.404267][ T717] hsr_slave_1: entered promiscuous mode [ 3236.413063][ T717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3236.420965][ T717] Cannot create hsr debugfs directory [ 3236.818504][T32385] Bluetooth: hci5: command tx timeout [ 3238.524733][ T617] syz_tun (unregistering): left allmulticast mode [ 3238.901205][ T5804] Bluetooth: hci5: command tx timeout [ 3239.204138][T29369] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3239.259035][ T717] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3239.375230][T29369] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3239.422383][ T717] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3239.517041][T29369] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3239.580252][ T717] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3239.634800][ T717] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3239.667094][T29369] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3239.850660][ T780] fuse: Bad value for 'fd' [ 3240.075384][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 3241.220293][T29369] bond0 (unregistering): Released all slaves [ 3241.886458][ T717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3241.995189][T29369] hsr_slave_0: left promiscuous mode [ 3242.052270][T29369] veth1_macvtap: left promiscuous mode [ 3242.058766][T29369] veth0_macvtap: left promiscuous mode [ 3242.064839][T29369] veth1_vlan: left promiscuous mode [ 3242.070588][T29369] veth0_vlan: left promiscuous mode [ 3242.364111][T29369] pim6reg (unregistering): left allmulticast mode [ 3243.639183][ T717] 8021q: adding VLAN 0 to HW filter on device team0 [ 3243.755317][T23482] bridge0: port 1(bridge_slave_0) entered blocking state [ 3243.762997][T23482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3243.883419][T23482] bridge0: port 2(bridge_slave_1) entered blocking state [ 3243.891130][T23482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3244.126669][ T809] fuse: Bad value for 'fd' [ 3244.885634][ T815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9550'. [ 3246.668492][T14109] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3246.863523][T14109] usb 3-1: Using ep0 maxpacket: 16 [ 3246.888969][T14109] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3246.901828][T14109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3246.981431][T14109] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3246.991131][T14109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3246.999581][T14109] usb 3-1: Product: syz [ 3247.003984][T14109] usb 3-1: Manufacturer: syz [ 3247.008922][T14109] usb 3-1: SerialNumber: syz [ 3247.104227][T14109] usb 3-1: config 0 descriptor?? [ 3247.134061][T14109] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3247.143948][T14109] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 3247.892897][T14109] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 3247.926598][T14109] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 3248.457676][ T717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3248.738909][ T845] netlink: 104 bytes leftover after parsing attributes in process `syz.9.9560'. [ 3248.749328][ T845] netlink: 104 bytes leftover after parsing attributes in process `syz.9.9560'. [ 3248.967060][T14109] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 3248.990822][T14109] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 3249.023313][T14109] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 3249.065103][T14109] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 3249.088470][T14109] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 3249.107881][T14109] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 3249.133669][T14109] usb 3-1: USB disconnect, device number 31 [ 3249.449090][T32251] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 3249.618811][T32251] usb 10-1: Using ep0 maxpacket: 16 [ 3249.652943][T32251] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3249.665251][T32251] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3249.758387][T32251] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3249.768854][T32251] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3249.777238][T32251] usb 10-1: Product: syz [ 3249.782026][T32251] usb 10-1: Manufacturer: syz [ 3249.786966][T32251] usb 10-1: SerialNumber: syz [ 3249.881820][T32251] usb 10-1: config 0 descriptor?? [ 3249.901633][T32251] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3249.918550][T32251] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 3250.260299][ T717] veth0_vlan: entered promiscuous mode [ 3250.390117][ T717] veth1_vlan: entered promiscuous mode [ 3250.591274][T32251] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 3250.602758][T32251] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 3250.674433][ T717] veth0_macvtap: entered promiscuous mode [ 3250.717009][ T717] veth1_macvtap: entered promiscuous mode [ 3250.843124][ T717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3251.001581][ T717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3251.070941][ T717] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3251.080452][ T717] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3251.089622][ T717] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3251.098894][ T717] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3251.254967][T32251] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 3251.314971][T32251] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 3251.549543][T32251] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 3251.604973][T32251] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 3251.669104][T32251] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 3251.716042][T32251] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 3251.788851][T32251] usb 10-1: USB disconnect, device number 36 [ 3254.590677][ T883] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9571'. [ 3254.600271][ T883] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9571'. [ 3254.823623][ T5804] Bluetooth: hci2: Malformed Event: 0x02 [ 3255.082789][T14122] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3255.268339][T14122] usb 3-1: Using ep0 maxpacket: 16 [ 3255.301284][T14122] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3255.313530][T14122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3255.407540][T14122] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3255.417384][T14122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3255.425823][T14122] usb 3-1: Product: syz [ 3255.430393][T14122] usb 3-1: Manufacturer: syz [ 3255.435247][T14122] usb 3-1: SerialNumber: syz [ 3255.543383][T14122] usb 3-1: config 0 descriptor?? [ 3255.624220][T14122] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3255.634146][T14122] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 3256.208576][T14122] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 3256.238474][T14122] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 3256.854793][ T9350] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 3257.025393][ T9350] usb 7-1: Using ep0 maxpacket: 32 [ 3257.052219][ T9350] usb 7-1: config 1 has an invalid interface number: 242 but max is 0 [ 3257.062402][ T9350] usb 7-1: config 1 has no interface number 0 [ 3257.069809][ T9350] usb 7-1: config 1 interface 242 has no altsetting 0 [ 3257.140131][ T9350] usb 7-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 3257.150166][ T9350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3257.158560][ T9350] usb 7-1: Product: syz [ 3257.162982][ T9350] usb 7-1: Manufacturer: syz [ 3257.167835][ T9350] usb 7-1: SerialNumber: syz [ 3257.384697][T14122] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 3257.429204][T14122] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 3257.469740][T14122] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 3257.518485][T14122] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 3257.568847][T14122] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 3257.618739][T14122] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 3257.642998][T14122] usb 3-1: USB disconnect, device number 32 [ 3258.977073][ T9350] aqc111 7-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 3258.990335][ T9350] aqc111 7-1:1.242: probe with driver aqc111 failed with error -71 [ 3259.089930][ T9350] usb 7-1: USB disconnect, device number 24 [ 3260.170498][ T945] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9584'. [ 3260.180820][ T945] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9584'. [ 3261.123460][ T960] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9590'. [ 3261.256388][T29367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3261.264685][T29367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3261.456447][T29367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3261.466387][T29367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3261.521014][ T965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9592'. [ 3262.408947][T14122] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3262.643794][T14122] usb 3-1: Using ep0 maxpacket: 32 [ 3262.696821][T14122] usb 3-1: config 1 has an invalid interface number: 242 but max is 0 [ 3262.705728][T14122] usb 3-1: config 1 has no interface number 0 [ 3262.712383][T14122] usb 3-1: config 1 interface 242 has no altsetting 0 [ 3262.874408][T14122] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 3262.885143][T14122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3262.894499][T14122] usb 3-1: Product: syz [ 3262.900607][T14122] usb 3-1: Manufacturer: syz [ 3262.905480][T14122] usb 3-1: SerialNumber: syz [ 3262.956850][ T979] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9597'. [ 3262.966925][ T979] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9597'. [ 3264.836992][ T994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9602'. [ 3265.077107][T14122] aqc111 3-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 3265.089081][T14122] aqc111 3-1:1.242: probe with driver aqc111 failed with error -71 [ 3265.106976][T14122] usb 3-1: USB disconnect, device number 33 [ 3265.764734][ T1001] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9604'. [ 3266.526440][ T1011] netlink: 104 bytes leftover after parsing attributes in process `syz.9.9609'. [ 3266.536404][ T1011] netlink: 104 bytes leftover after parsing attributes in process `syz.9.9609'. [ 3266.571873][ T1009] batman_adv: batadv0: Adding interface: ip6gretap1 [ 3266.579237][ T1009] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3266.609030][ T1009] batman_adv: batadv0: Interface activated: ip6gretap1 [ 3269.381479][ T1041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9619'. [ 3271.085515][ T1060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9624'. [ 3271.155503][ T1060] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9624'. [ 3271.166439][ T1060] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9624'. [ 3272.603117][ T1077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9632'. [ 3276.829916][ T1093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9638'. [ 3276.891410][ T1093] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9638'. [ 3276.900976][ T1093] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9638'. [ 3276.921524][ T5804] Bluetooth: hci5: link tx timeout [ 3276.927068][ T5804] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 3277.844916][ T1106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9645'. [ 3278.937149][T32385] Bluetooth: hci5: link tx timeout [ 3278.943138][T32385] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 3278.989801][T32385] Bluetooth: hci5: command 0x0406 tx timeout [ 3279.925334][ T1126] loop6: detected capacity change from 0 to 512 [ 3279.977472][ T1126] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 3280.155305][ T1126] EXT4-fs (loop6): 1 truncate cleaned up [ 3280.164052][ T1126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3281.708273][ T1142] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9659'. [ 3283.543284][T26516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3284.373639][ T1174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9673'. [ 3285.569666][ T9350] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 3285.781074][ T9350] usb 7-1: Using ep0 maxpacket: 16 [ 3285.825153][ T9350] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3285.837680][ T9350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3286.031024][ T9350] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3286.041073][ T9350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3286.049507][ T9350] usb 7-1: Product: syz [ 3286.053914][ T9350] usb 7-1: Manufacturer: syz [ 3286.058810][ T9350] usb 7-1: SerialNumber: syz [ 3286.248342][ T9350] usb 7-1: config 0 descriptor?? [ 3286.327183][ T9350] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3286.337167][ T9350] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 3286.928753][ T9350] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 3286.966714][ T9350] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 3287.428133][ T9350] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 3287.435490][ T9350] em28xx 7-1:0.0: No AC97 audio processor [ 3288.817384][ T9350] usb 7-1: USB disconnect, device number 25 [ 3288.831306][ T9350] em28xx 7-1:0.0: Disconnecting em28xx [ 3288.878961][ T9350] em28xx 7-1:0.0: Freeing device [ 3288.993882][ T1205] loop5: detected capacity change from 0 to 47 [ 3289.656584][ T1209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9687'. [ 3290.910349][T14122] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 3291.119605][T14122] usb 6-1: Using ep0 maxpacket: 8 [ 3292.135649][T14122] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3292.145402][T14122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3292.153963][T14122] usb 6-1: Product: syz [ 3292.158650][T14122] usb 6-1: Manufacturer: syz [ 3292.163718][T14122] usb 6-1: SerialNumber: syz [ 3292.175129][T14122] usb 6-1: config 0 descriptor?? [ 3292.195600][T14122] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3292.206925][T14122] usb 6-1: setting power ON [ 3292.213030][T14122] dvb-usb: bulk message failed: -22 (2/0) [ 3293.167247][T14122] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3293.179475][T14122] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3293.188432][T14122] usb 6-1: media controller created [ 3293.251707][T14122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3293.942162][T14122] usb 6-1: selecting invalid altsetting 6 [ 3293.954635][T14122] usb 6-1: digital interface selection failed (-22) [ 3293.961927][T14122] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3294.003077][T14122] usb 6-1: setting power OFF [ 3294.008706][T14122] dvb-usb: bulk message failed: -22 (2/0) [ 3294.014771][T14122] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3294.025143][T14122] (NULL device *): no alternate interface [ 3294.345934][ T1236] binder: BINDER_SET_CONTEXT_MGR already set [ 3294.361235][ T1236] binder: 1234:1236 ioctl 4018620d 80000040 returned -16 [ 3294.549429][T14122] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3294.596106][T14122] usb 6-1: USB disconnect, device number 13 [ 3294.648462][T32251] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 3294.842580][T32251] usb 7-1: Using ep0 maxpacket: 16 [ 3294.870399][T32251] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3294.882384][ T1239] input: syz1 as /devices/virtual/input/input80 [ 3294.882365][T32251] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3294.905204][T32251] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3294.914954][T32251] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3294.923903][T32251] usb 7-1: Product: syz [ 3294.928665][T32251] usb 7-1: Manufacturer: syz [ 3294.933624][T32251] usb 7-1: SerialNumber: syz [ 3295.000197][T32251] usb 7-1: config 0 descriptor?? [ 3295.029607][T32251] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3295.040273][T32251] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 3295.625444][ T1244] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9700'. [ 3295.644442][T32251] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 3295.666933][T32251] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 3296.085016][T32251] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 3296.092911][T32251] em28xx 7-1:0.0: No AC97 audio processor [ 3297.258731][ T9350] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3297.446614][ T9350] usb 3-1: Using ep0 maxpacket: 8 [ 3297.484815][ T9350] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3297.494655][ T9350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3297.503170][ T9350] usb 3-1: Product: syz [ 3297.507595][ T9350] usb 3-1: Manufacturer: syz [ 3297.512639][ T9350] usb 3-1: SerialNumber: syz [ 3297.524392][ T9350] usb 3-1: config 0 descriptor?? [ 3297.578789][T32251] usb 7-1: USB disconnect, device number 26 [ 3297.583423][ T9350] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3297.586763][T32251] em28xx 7-1:0.0: Disconnecting em28xx [ 3297.593192][ T9350] usb 3-1: setting power ON [ 3297.593283][ T9350] dvb-usb: bulk message failed: -22 (2/0) [ 3297.652726][ T9350] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3297.666048][ T9350] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3297.675138][ T9350] usb 3-1: media controller created [ 3297.699588][T32251] em28xx 7-1:0.0: Freeing device [ 3297.853095][ T9350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3298.230138][ T9350] usb 3-1: selecting invalid altsetting 6 [ 3298.236719][ T9350] usb 3-1: digital interface selection failed (-22) [ 3298.243661][ T9350] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3298.371979][ T9350] usb 3-1: setting power OFF [ 3298.376867][ T9350] dvb-usb: bulk message failed: -22 (2/0) [ 3298.383075][ T9350] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3298.392818][ T9350] (NULL device *): no alternate interface [ 3298.418790][T32385] Bluetooth: hci4: command 0x0406 tx timeout [ 3300.457405][ T9350] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3300.595624][ T9350] usb 3-1: USB disconnect, device number 34 [ 3301.070408][T32385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3301.081170][T32385] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3301.094790][T32385] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3301.118662][T32385] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3301.142231][T32385] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3301.494010][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 3302.000418][ T1276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9711'. [ 3302.939546][ T1269] chnl_net:caif_netlink_parms(): no params data found [ 3303.048254][T14109] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3303.219571][T32385] Bluetooth: hci3: command tx timeout [ 3303.238279][T14109] usb 3-1: Using ep0 maxpacket: 16 [ 3303.257534][T14109] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3303.275459][T14109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3303.315179][T14109] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3303.324945][T14109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3303.333426][T14109] usb 3-1: Product: syz [ 3303.337994][T14109] usb 3-1: Manufacturer: syz [ 3303.343363][T14109] usb 3-1: SerialNumber: syz [ 3303.410343][T14109] usb 3-1: config 0 descriptor?? [ 3303.429669][T14109] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3303.439433][T14109] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 3303.478994][ T9350] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 3303.668291][ T9350] usb 7-1: Using ep0 maxpacket: 8 [ 3303.729274][ T9350] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3303.738930][ T9350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3303.747354][ T9350] usb 7-1: Product: syz [ 3303.752309][ T9350] usb 7-1: Manufacturer: syz [ 3303.757353][ T9350] usb 7-1: SerialNumber: syz [ 3303.831940][ T9350] usb 7-1: config 0 descriptor?? [ 3303.871776][ T9350] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3303.888249][ T9350] usb 7-1: setting power ON [ 3303.892998][ T9350] dvb-usb: bulk message failed: -22 (2/0) [ 3303.969632][ T9350] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3304.061906][ T9350] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3304.071554][ T9350] usb 7-1: media controller created [ 3304.111555][T14109] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 3304.126859][T14109] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 3304.270645][ T9350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3304.555941][T14109] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 3304.563763][T14109] em28xx 3-1:0.0: No AC97 audio processor [ 3304.583017][ T9350] usb 7-1: selecting invalid altsetting 6 [ 3304.589457][ T9350] usb 7-1: digital interface selection failed (-22) [ 3304.605254][ T9350] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3304.639206][ T9350] usb 7-1: setting power OFF [ 3304.644097][ T9350] dvb-usb: bulk message failed: -22 (2/0) [ 3304.650889][ T9350] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3304.661567][ T9350] (NULL device *): no alternate interface [ 3304.756632][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 3304.770360][ T1269] bridge0: port 1(bridge_slave_0) entered disabled state [ 3304.778270][ T1269] bridge_slave_0: entered allmulticast mode [ 3304.788401][ T1269] bridge_slave_0: entered promiscuous mode [ 3304.826558][ T1306] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9721'. [ 3304.911803][ T1160] syz_tun (unregistering): left allmulticast mode [ 3305.100174][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 3305.111337][ T1269] bridge0: port 2(bridge_slave_1) entered disabled state [ 3305.119473][ T1269] bridge_slave_1: entered allmulticast mode [ 3305.125374][ T9350] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3305.129908][ T1269] bridge_slave_1: entered promiscuous mode [ 3305.141869][ T9350] usb 7-1: USB disconnect, device number 27 [ 3305.338242][T32385] Bluetooth: hci3: command tx timeout [ 3305.896285][ T1269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3305.971770][ T1269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3307.198491][ T9350] usb 3-1: USB disconnect, device number 35 [ 3307.206246][ T9350] em28xx 3-1:0.0: Disconnecting em28xx [ 3307.285836][ T9350] em28xx 3-1:0.0: Freeing device [ 3307.358257][ T1269] team0: Port device team_slave_0 added [ 3307.412722][T32385] Bluetooth: hci3: command tx timeout [ 3307.522916][ T1269] team0: Port device team_slave_1 added [ 3307.620707][ T1321] Bluetooth: MGMT ver 1.23 [ 3307.691119][ T1319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9724'. [ 3308.214160][ T1323] geneve1: entered promiscuous mode [ 3308.222917][ T1323] geneve1: entered allmulticast mode [ 3308.274524][ T1269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3308.289244][ T1269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3308.316026][ T1269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3308.532353][ T1269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3308.539800][ T1269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3308.567614][ T1269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3309.040439][ T1269] hsr_slave_0: entered promiscuous mode [ 3309.051461][ T1269] hsr_slave_1: entered promiscuous mode [ 3309.468652][T32385] Bluetooth: hci3: command tx timeout [ 3309.836690][ T9350] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 3309.969026][ T1338] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9733'. [ 3310.034419][ T9350] usb 6-1: Using ep0 maxpacket: 8 [ 3310.098897][ T9350] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3310.110262][ T9350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3310.119610][ T9350] usb 6-1: Product: syz [ 3310.130886][ T9350] usb 6-1: Manufacturer: syz [ 3310.135839][ T9350] usb 6-1: SerialNumber: syz [ 3310.150900][ T9350] usb 6-1: config 0 descriptor?? [ 3310.170735][ T9350] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3310.179329][ T9350] usb 6-1: setting power ON [ 3310.184074][ T9350] dvb-usb: bulk message failed: -22 (2/0) [ 3310.195558][ T9350] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3310.212682][ T9350] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3310.222035][ T9350] usb 6-1: media controller created [ 3310.339427][ T9350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3310.472262][ T9350] usb 6-1: selecting invalid altsetting 6 [ 3310.478821][ T9350] usb 6-1: digital interface selection failed (-22) [ 3310.485682][ T9350] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3310.498267][ T9350] usb 6-1: setting power OFF [ 3310.503109][ T9350] dvb-usb: bulk message failed: -22 (2/0) [ 3310.509373][ T9350] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3310.519045][ T9350] (NULL device *): no alternate interface [ 3310.677018][ T9350] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3310.770173][ T9350] usb 6-1: USB disconnect, device number 14 [ 3310.871748][ T1269] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3310.899221][ T1269] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3310.925845][ T1269] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3310.955981][ T1269] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3311.099357][T14109] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 3311.308330][T14109] usb 10-1: Using ep0 maxpacket: 16 [ 3311.348773][T14109] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3311.366315][T14109] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3311.463829][T14109] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3311.473508][T14109] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3311.482050][T14109] usb 10-1: Product: syz [ 3311.486532][T14109] usb 10-1: Manufacturer: syz [ 3311.491609][T14109] usb 10-1: SerialNumber: syz [ 3311.594460][T14109] usb 10-1: config 0 descriptor?? [ 3311.633778][T14109] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3311.643912][T14109] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 3312.288888][ T1269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3313.528494][ T1269] 8021q: adding VLAN 0 to HW filter on device team0 [ 3313.558987][T14109] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 3314.600344][T14109] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 3314.906622][T14109] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 3314.914085][T14109] em28xx 10-1:0.0: No AC97 audio processor [ 3314.934641][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state [ 3314.942338][ T9232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3315.338516][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state [ 3315.346154][ T9232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3315.596527][T14109] usb 10-1: USB disconnect, device number 37 [ 3315.605357][T14109] em28xx 10-1:0.0: Disconnecting em28xx [ 3315.673649][T14109] em28xx 10-1:0.0: Freeing device [ 3315.762713][ T1355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9738'. [ 3316.949164][ T1375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9745'. [ 3317.431562][ T1378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9746'. [ 3317.472824][ T1269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3318.068240][T14109] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 3318.278288][T14109] usb 7-1: Using ep0 maxpacket: 8 [ 3318.322956][T14109] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3318.332480][T14109] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3318.340919][T14109] usb 7-1: Product: syz [ 3318.345336][T14109] usb 7-1: Manufacturer: syz [ 3318.350338][T14109] usb 7-1: SerialNumber: syz [ 3319.118588][T32251] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3319.202115][T14109] usb 7-1: config 0 descriptor?? [ 3319.226803][T14109] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3319.235452][T14109] usb 7-1: setting power ON [ 3319.248831][T14109] dvb-usb: bulk message failed: -22 (2/0) [ 3320.227946][T14109] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3320.240751][T14109] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3320.249614][T14109] usb 7-1: media controller created [ 3320.250663][T32251] usb 3-1: Using ep0 maxpacket: 16 [ 3320.488563][T14109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3321.129263][T14109] usb 7-1: selecting invalid altsetting 6 [ 3321.135511][T14109] usb 7-1: digital interface selection failed (-22) [ 3321.143497][T14109] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3321.228138][T32251] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3321.240125][T32251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3321.272347][T32251] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3321.282077][T32251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3321.292447][T32251] usb 3-1: Product: syz [ 3321.296855][T32251] usb 3-1: Manufacturer: syz [ 3321.303758][T14109] usb 7-1: setting power OFF [ 3321.303844][T14109] dvb-usb: bulk message failed: -22 (2/0) [ 3321.303932][T14109] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3321.304015][T14109] (NULL device *): no alternate interface [ 3321.326756][T32251] usb 3-1: SerialNumber: syz [ 3321.749367][T32251] usb 3-1: config 0 descriptor?? [ 3321.773862][T32251] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3321.784614][T32251] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 3322.144838][T14109] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3322.247028][T14109] usb 7-1: USB disconnect, device number 28 [ 3322.359784][T32251] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 3322.379114][T32251] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 3322.419169][T32251] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 3322.426413][T32251] em28xx 3-1:0.0: No AC97 audio processor [ 3322.475381][ T1397] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9751'. [ 3322.523372][T32251] usb 3-1: USB disconnect, device number 36 [ 3322.531511][T32251] em28xx 3-1:0.0: Disconnecting em28xx [ 3322.607025][T32251] em28xx 3-1:0.0: Freeing device [ 3322.634760][ T1269] veth0_vlan: entered promiscuous mode [ 3322.739056][ T1269] veth1_vlan: entered promiscuous mode [ 3323.145791][ T1269] veth0_macvtap: entered promiscuous mode [ 3323.185746][ T1269] veth1_macvtap: entered promiscuous mode [ 3323.324465][ T1269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3323.428459][ T1410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9756'. [ 3323.455660][ T1269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3323.568461][ T1269] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3323.577641][ T1269] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3323.588266][ T1269] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3323.597488][ T1269] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3324.094214][ T1417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9758'. [ 3324.480628][T14122] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 3324.505315][T32251] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3324.706283][T14122] usb 10-1: Using ep0 maxpacket: 16 [ 3324.728925][T32251] usb 3-1: Using ep0 maxpacket: 8 [ 3324.857009][T14122] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3324.871049][T14122] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3324.922675][T32251] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3324.932484][T32251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3324.941020][T32251] usb 3-1: Product: syz [ 3324.945453][T32251] usb 3-1: Manufacturer: syz [ 3324.950691][T32251] usb 3-1: SerialNumber: syz [ 3326.052863][T14122] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3326.062707][T14122] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3326.073044][T14122] usb 10-1: Product: syz [ 3326.077579][T14122] usb 10-1: Manufacturer: syz [ 3326.082680][T14122] usb 10-1: SerialNumber: syz [ 3326.809296][T14109] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 3327.043749][T32251] usb 3-1: config 0 descriptor?? [ 3327.051018][T14109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3327.063806][T14109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3327.064043][T32251] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3327.073948][T14109] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 3327.082165][T32251] usb 3-1: setting power ON [ 3327.082257][T32251] dvb-usb: bulk message failed: -22 (2/0) [ 3327.091518][T14109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3327.380230][T14109] usb 6-1: config 0 descriptor?? [ 3327.561244][T14122] usb 10-1: config 0 descriptor?? [ 3327.570224][T32251] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3327.583945][T32251] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3327.593175][T32251] usb 3-1: media controller created [ 3327.676008][T32251] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3327.940364][T32251] usb 3-1: selecting invalid altsetting 6 [ 3327.949742][T32251] usb 3-1: digital interface selection failed (-22) [ 3327.956631][T32251] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3327.988156][T14109] usbhid 6-1:0.0: can't add hid device: -71 [ 3327.990929][T14122] usb 10-1: can't set config #0, error -71 [ 3327.994896][T14109] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3328.030039][T14122] usb 10-1: USB disconnect, device number 38 [ 3328.075127][T14109] usb 6-1: USB disconnect, device number 15 [ 3328.100538][T32251] usb 3-1: setting power OFF [ 3328.105423][T32251] dvb-usb: bulk message failed: -22 (2/0) [ 3328.113393][T32251] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3328.124570][T32251] (NULL device *): no alternate interface [ 3328.371805][ T1439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9764'. [ 3328.539840][ T1441] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9765'. [ 3328.751979][T32251] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3328.839619][T32251] usb 3-1: USB disconnect, device number 37 [ 3329.878494][ T1464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9771'. [ 3330.128612][T32251] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 3330.319496][T32251] usb 10-1: Using ep0 maxpacket: 8 [ 3330.355040][T32251] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3330.364951][T32251] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3330.373602][T32251] usb 10-1: Product: syz [ 3330.378236][T32251] usb 10-1: Manufacturer: syz [ 3330.383178][T32251] usb 10-1: SerialNumber: syz [ 3330.443577][ T1470] loop6: detected capacity change from 0 to 512 [ 3330.452331][T32251] usb 10-1: config 0 descriptor?? [ 3330.482385][ T1470] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3330.500158][T32251] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3330.511304][T32251] usb 10-1: setting power ON [ 3330.516159][T32251] dvb-usb: bulk message failed: -22 (2/0) [ 3330.530640][T14122] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3330.621090][ T1470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3330.634614][ T1470] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3330.665257][T32251] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3330.730997][T14122] usb 3-1: Using ep0 maxpacket: 16 [ 3330.746054][T32251] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3330.755060][T32251] usb 10-1: media controller created [ 3330.780100][T14122] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3330.792119][T14122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3330.866939][ T1470] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9775: bg 0: block 304: padding at end of block bitmap is not set [ 3330.889906][T32251] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3330.904333][ T1470] EXT4-fs (loop6): Remounting filesystem read-only [ 3330.963992][ T1470] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.6.9775: cleanup dec ref error -117 [ 3330.978549][T14122] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3330.988078][T14122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3330.996343][T14122] usb 3-1: Product: syz [ 3331.000899][T14122] usb 3-1: Manufacturer: syz [ 3331.005857][T14122] usb 3-1: SerialNumber: syz [ 3331.016873][T32251] usb 10-1: selecting invalid altsetting 6 [ 3331.023138][T32251] usb 10-1: digital interface selection failed (-22) [ 3331.030343][T32251] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3331.045820][T14122] usb 3-1: config 0 descriptor?? [ 3331.064628][T14122] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3331.074521][T14122] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 3331.141602][T32251] usb 10-1: setting power OFF [ 3331.146793][T32251] dvb-usb: bulk message failed: -22 (2/0) [ 3331.153281][T32251] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3331.163189][T32251] (NULL device *): no alternate interface [ 3331.489623][ T1478] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9776'. [ 3331.504484][ T9232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3331.512737][ T9232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3331.575305][T29354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3331.583654][T29354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3331.593067][T26516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3331.608917][T29373] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 3331.622743][T29373] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 3331.796404][T14122] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 3331.808707][T14122] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 3331.846827][T14122] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 3331.854405][T14122] em28xx 3-1:0.0: No AC97 audio processor [ 3331.889780][T32251] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3331.949601][T32251] usb 10-1: USB disconnect, device number 39 [ 3332.068304][ T1480] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9778'. [ 3333.467067][ T1507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9785'. [ 3333.585638][T26848] usb 3-1: USB disconnect, device number 38 [ 3333.593912][T26848] em28xx 3-1:0.0: Disconnecting em28xx [ 3333.595137][ T1509] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9788'. [ 3333.623532][T26848] em28xx 3-1:0.0: Freeing device [ 3333.668549][T32251] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 3333.830296][T14122] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 3333.863540][T32251] usb 8-1: Using ep0 maxpacket: 8 [ 3333.901471][T32251] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3333.911065][T32251] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3333.919554][T32251] usb 8-1: Product: syz [ 3333.924002][T32251] usb 8-1: Manufacturer: syz [ 3333.929094][T32251] usb 8-1: SerialNumber: syz [ 3333.968496][T32251] usb 8-1: config 0 descriptor?? [ 3334.007366][T32251] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3334.016066][T32251] usb 8-1: setting power ON [ 3334.021072][T32251] dvb-usb: bulk message failed: -22 (2/0) [ 3334.029860][T14122] usb 6-1: device descriptor read/64, error -71 [ 3334.049241][T32251] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3334.088692][T32251] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3334.097500][T32251] usb 8-1: media controller created [ 3334.121968][T14109] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3334.197037][T32251] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3334.281371][T14122] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 3334.322159][T14109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3334.334636][T14109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3334.345009][T14109] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 3334.354686][T14109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3334.375271][T14109] usb 3-1: config 0 descriptor?? [ 3334.453223][T14122] usb 6-1: device descriptor read/64, error -71 [ 3334.515001][T32251] usb 8-1: selecting invalid altsetting 6 [ 3334.521396][T32251] usb 8-1: digital interface selection failed (-22) [ 3334.528457][T32251] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3334.567656][T32251] usb 8-1: setting power OFF [ 3334.572838][T32251] dvb-usb: bulk message failed: -22 (2/0) [ 3334.579138][T32251] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3334.588883][T32251] (NULL device *): no alternate interface [ 3334.636989][T14122] usb usb6-port1: attempt power cycle [ 3334.846997][T14109] usbhid 3-1:0.0: can't add hid device: -71 [ 3334.853971][T14109] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3334.902017][T14109] usb 3-1: USB disconnect, device number 39 [ 3334.999638][T32251] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3335.017585][T14122] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 3335.069234][T14122] usb 6-1: device descriptor read/8, error -71 [ 3335.097779][T32251] usb 8-1: USB disconnect, device number 15 [ 3335.309486][T14122] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 3335.367163][T14122] usb 6-1: device descriptor read/8, error -71 [ 3335.485482][T14122] usb usb6-port1: unable to enumerate USB device [ 3336.098456][T14122] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3336.290499][T14122] usb 3-1: Using ep0 maxpacket: 16 [ 3336.344748][T14122] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3336.357020][T14122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3336.376083][ T1537] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9801'. [ 3336.376214][ T1534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9800'. [ 3336.394950][ T1534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9800'. [ 3336.453076][T14122] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3336.462786][T14122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3336.471187][T14122] usb 3-1: Product: syz [ 3336.475611][T14122] usb 3-1: Manufacturer: syz [ 3336.480973][T14122] usb 3-1: SerialNumber: syz [ 3336.514424][T14122] usb 3-1: config 0 descriptor?? [ 3336.553438][T14122] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3336.563271][T14122] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 3337.388190][T14122] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 3337.590447][T14122] em28xx 3-1:0.0: Config register raw data: 0x00 [ 3340.472191][T14122] usb 3-1: USB disconnect, device number 40 [ 3340.480417][T14122] em28xx 3-1:0.0: Disconnecting em28xx [ 3340.520625][T14122] em28xx 3-1:0.0: Freeing device [ 3342.829389][T14122] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3342.858704][ T1575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9814'. [ 3342.868300][ T1575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9814'. [ 3342.980252][T14122] usb 3-1: device descriptor read/64, error -71 [ 3342.990353][ T1583] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9815'. [ 3343.220041][T14122] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3343.388904][T14122] usb 3-1: device descriptor read/64, error -71 [ 3343.505636][T14122] usb usb3-port1: attempt power cycle [ 3343.893623][T14122] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3343.966345][T14122] usb 3-1: device descriptor read/8, error -71 [ 3344.221739][T14109] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 3344.227709][T14122] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 3344.270873][T14122] usb 3-1: device descriptor read/8, error -71 [ 3344.398211][T14122] usb usb3-port1: unable to enumerate USB device [ 3344.439030][T14109] usb 7-1: Using ep0 maxpacket: 8 [ 3344.482862][T14109] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3344.493524][T14109] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3344.501986][T14109] usb 7-1: Product: syz [ 3344.506413][T14109] usb 7-1: Manufacturer: syz [ 3344.511376][T14109] usb 7-1: SerialNumber: syz [ 3344.574699][T14109] usb 7-1: config 0 descriptor?? [ 3344.602809][T14109] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3344.611918][T14109] usb 7-1: setting power ON [ 3344.616678][T14109] dvb-usb: bulk message failed: -22 (2/0) [ 3344.671817][T14109] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3344.725114][T14109] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3344.734581][T14109] usb 7-1: media controller created [ 3344.819603][ T1595] dvb-usb: bulk message failed: -22 (3/0) [ 3344.866481][T14109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3345.105464][T14109] usb 7-1: selecting invalid altsetting 6 [ 3345.111743][T14109] usb 7-1: digital interface selection failed (-22) [ 3345.119255][T14109] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3345.202346][T14109] usb 7-1: setting power OFF [ 3345.207491][T14109] dvb-usb: bulk message failed: -22 (2/0) [ 3345.214090][T14109] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3345.229462][T14109] (NULL device *): no alternate interface [ 3345.806719][T14109] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3345.847158][ T1611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9830'. [ 3345.856562][ T1611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9830'. [ 3345.924891][T14109] usb 7-1: USB disconnect, device number 29 [ 3346.533215][ T1623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9834'. [ 3347.979179][T14109] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 3348.155449][T14109] usb 3-1: device descriptor read/64, error -71 [ 3348.418753][T14109] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 3348.558490][T14122] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 3348.588779][T14109] usb 3-1: device descriptor read/64, error -71 [ 3348.701235][T14109] usb usb3-port1: attempt power cycle [ 3348.717166][ T1647] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9846'. [ 3348.726867][ T1647] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9846'. [ 3348.768461][T14122] usb 8-1: Using ep0 maxpacket: 8 [ 3348.829170][T14122] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3348.840351][T14122] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3348.849330][T14122] usb 8-1: Product: syz [ 3348.853751][T14122] usb 8-1: Manufacturer: syz [ 3348.859032][T14122] usb 8-1: SerialNumber: syz [ 3348.898724][T14122] usb 8-1: config 0 descriptor?? [ 3348.919723][T14122] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3348.928179][T14122] usb 8-1: setting power ON [ 3348.932938][T14122] dvb-usb: bulk message failed: -22 (2/0) [ 3348.959911][T14122] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3348.997415][T14122] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3349.007233][T14122] usb 8-1: media controller created [ 3349.058617][T14109] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 3349.116543][T14109] usb 3-1: device descriptor read/8, error -71 [ 3349.116992][T14122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3349.181601][ T1643] dvb-usb: bulk message failed: -22 (3/0) [ 3349.378478][T14109] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 3349.439808][T14109] usb 3-1: device descriptor read/8, error -71 [ 3349.449798][T14122] usb 8-1: selecting invalid altsetting 6 [ 3349.449922][T14122] usb 8-1: digital interface selection failed (-22) [ 3349.450016][T14122] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3349.462227][T14122] usb 8-1: setting power OFF [ 3349.485036][T14122] dvb-usb: bulk message failed: -22 (2/0) [ 3349.493103][T14122] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3349.505582][T14122] (NULL device *): no alternate interface [ 3349.606361][T14109] usb usb3-port1: unable to enumerate USB device [ 3350.142531][T14122] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3350.195406][T14122] usb 8-1: USB disconnect, device number 16 [ 3350.327410][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3350.339198][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3350.354737][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3350.377107][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3350.409860][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3351.439253][ T1666] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9851'. [ 3351.586912][ T1655] chnl_net:caif_netlink_parms(): no params data found [ 3352.499751][T32385] Bluetooth: hci4: command tx timeout [ 3353.398679][ T1682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9857'. [ 3353.408845][ T1682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9857'. [ 3353.530557][T26516] syz_tun (unregistering): left allmulticast mode [ 3353.781926][ T1655] bridge0: port 1(bridge_slave_0) entered blocking state [ 3353.789999][ T1655] bridge0: port 1(bridge_slave_0) entered disabled state [ 3353.798137][ T1655] bridge_slave_0: entered allmulticast mode [ 3353.808467][ T1655] bridge_slave_0: entered promiscuous mode [ 3353.965483][ T1655] bridge0: port 2(bridge_slave_1) entered blocking state [ 3353.973470][ T1655] bridge0: port 2(bridge_slave_1) entered disabled state [ 3353.981659][ T1655] bridge_slave_1: entered allmulticast mode [ 3353.991740][ T1655] bridge_slave_1: entered promiscuous mode [ 3354.178466][T14122] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 3354.305337][ T1655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3354.353297][T14122] usb 8-1: Using ep0 maxpacket: 8 [ 3354.388938][T14122] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3354.398749][T14122] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3354.407480][T14122] usb 8-1: Product: syz [ 3354.412194][T14122] usb 8-1: Manufacturer: syz [ 3354.417033][T14122] usb 8-1: SerialNumber: syz [ 3354.437211][ T1655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3354.496191][T14122] usb 8-1: config 0 descriptor?? [ 3354.515082][T14122] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3354.523669][T14122] usb 8-1: setting power ON [ 3354.528556][T14122] dvb-usb: bulk message failed: -22 (2/0) [ 3354.578329][T32385] Bluetooth: hci4: command 0x041b tx timeout [ 3354.601743][T14122] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3354.634600][T14122] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3354.643700][T14122] usb 8-1: media controller created [ 3354.714234][T14122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3354.746949][ T1687] dvb-usb: bulk message failed: -22 (3/0) [ 3354.773594][ T1655] team0: Port device team_slave_0 added [ 3354.801501][ T1655] team0: Port device team_slave_1 added [ 3354.862554][ T1693] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9862'. [ 3354.900745][T32251] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 3354.989590][T14122] usb 8-1: selecting invalid altsetting 6 [ 3354.995639][T14122] usb 8-1: digital interface selection failed (-22) [ 3355.002707][T14122] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3355.108452][T14122] usb 8-1: setting power OFF [ 3355.113428][T14122] dvb-usb: bulk message failed: -22 (2/0) [ 3355.119569][T14122] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3355.129270][T14122] (NULL device *): no alternate interface [ 3355.166527][T32251] usb 3-1: device descriptor read/64, error -71 [ 3355.216514][ T1655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3355.224124][ T1655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3355.250929][ T1655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3355.371325][ T1655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3355.379687][ T1655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3355.408570][ T1655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3355.478864][T32251] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 3355.552401][T14122] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3355.596549][T14122] usb 8-1: USB disconnect, device number 17 [ 3355.688940][T32251] usb 3-1: device descriptor read/64, error -71 [ 3355.810165][T32251] usb usb3-port1: attempt power cycle [ 3355.943600][ T1655] hsr_slave_0: entered promiscuous mode [ 3355.954994][ T1655] hsr_slave_1: entered promiscuous mode [ 3355.964596][ T1655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3355.972590][ T1655] Cannot create hsr debugfs directory [ 3356.270111][T32251] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 3356.334299][T32251] usb 3-1: device descriptor read/8, error -71 [ 3356.395754][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9865'. [ 3356.588549][T32251] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 3356.648775][T32251] usb 3-1: device descriptor read/8, error -71 [ 3356.658652][T32385] Bluetooth: hci4: command 0x041b tx timeout [ 3356.803599][T32251] usb usb3-port1: unable to enumerate USB device [ 3357.149452][ T1655] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3357.285120][ T1655] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3357.508709][ T1655] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3357.734830][ T1655] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3358.197067][ T1655] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3358.205332][ T1712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9870'. [ 3358.215364][ T1712] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9870'. [ 3358.294160][ T1712] macvlan0: entered promiscuous mode [ 3358.301528][ T1712] macvlan0: entered allmulticast mode [ 3358.307206][ T1712] veth1_vlan: entered allmulticast mode [ 3358.317505][ T1655] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3358.380731][ T1655] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3358.424338][ T1716] veth1_vlan: left allmulticast mode [ 3358.480900][ T1655] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3358.588391][T32251] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 3358.738241][ T5804] Bluetooth: hci4: command 0x041b tx timeout [ 3358.748667][ T1719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9872'. [ 3358.768424][T32251] usb 10-1: device descriptor read/64, error -71 [ 3359.040719][T32251] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 3359.218956][T32251] usb 10-1: device descriptor read/64, error -71 [ 3359.298754][ T9350] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 3359.330691][T32251] usb usb10-port1: attempt power cycle [ 3359.503602][ T9350] usb 8-1: Using ep0 maxpacket: 8 [ 3359.536351][ T9350] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3359.546169][ T9350] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3359.554672][ T9350] usb 8-1: Product: syz [ 3359.559263][ T9350] usb 8-1: Manufacturer: syz [ 3359.564144][ T9350] usb 8-1: SerialNumber: syz [ 3359.648905][ T1655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3359.697255][ T9350] usb 8-1: config 0 descriptor?? [ 3359.711995][T32251] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 3359.716179][ T9350] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3359.728496][ T9350] usb 8-1: setting power ON [ 3359.733304][ T9350] dvb-usb: bulk message failed: -22 (2/0) [ 3359.778193][ T9350] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3359.814632][T32251] usb 10-1: device descriptor read/8, error -71 [ 3359.819721][ T9350] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3359.830070][ T9350] usb 8-1: media controller created [ 3359.919244][ T9350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3359.955333][ T1655] 8021q: adding VLAN 0 to HW filter on device team0 [ 3359.966868][ T1729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9876'. [ 3360.008855][ T1721] dvb-usb: bulk message failed: -22 (3/0) [ 3360.015149][ T1721] ===================================================== [ 3360.020037][T29354] bridge0: port 1(bridge_slave_0) entered blocking state [ 3360.023369][ T1721] BUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x1303/0x18e0 [ 3360.029679][T29354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3360.036587][ T1721] cxusb_i2c_xfer+0x1303/0x18e0 [ 3360.049405][ T1721] __i2c_transfer+0xec7/0x30e0 [ 3360.054402][ T1721] i2c_transfer+0x300/0x4b0 [ 3360.059284][ T1721] i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 3360.064441][ T1721] compat_i2cdev_ioctl+0xaa3/0xb40 [ 3360.070025][ T1721] __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 3360.076390][ T1721] ia32_sys_call+0x2d07/0x42c0 [ 3360.081600][ T1721] __do_fast_syscall_32+0xb0/0x110 [ 3360.086999][ T1721] do_fast_syscall_32+0x38/0x80 [ 3360.092260][ T1721] do_SYSENTER_32+0x1f/0x30 [ 3360.105401][ T1721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3360.114152][ T1721] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3360.116609][ T1721] Local variable timer created at: [ 3360.122694][ T1721] schedule_timeout+0x44/0x240 [ 3360.127720][ T1721] wait_for_completion_interruptible+0x345/0x8a0 [ 3360.129366][T32251] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 3360.134412][ T1721] [ 3360.134495][ T1721] CPU: 1 UID: 0 PID: 1721 Comm: syz.7.9873 Not tainted 6.15.0-rc6-syzkaller-00173-gf1f2797f8a24 #0 PREEMPT(undef) [ 3360.157261][ T1721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3360.168609][ T1721] ===================================================== [ 3360.175694][ T1721] Disabling lock debugging due to kernel taint [ 3360.182717][ T1721] Kernel panic - not syncing: kmsan.panic set ... [ 3360.189331][ T1721] CPU: 1 UID: 0 PID: 1721 Comm: syz.7.9873 Tainted: G B 6.15.0-rc6-syzkaller-00173-gf1f2797f8a24 #0 PREEMPT(undef) [ 3360.203230][ T1721] Tainted: [B]=BAD_PAGE [ 3360.207544][ T1721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3360.217813][ T1721] Call Trace: [ 3360.221245][ T1721] [ 3360.224321][ T1721] __dump_stack+0x26/0x30 [ 3360.228881][ T1721] dump_stack_lvl+0x53/0x270 [ 3360.233738][ T1721] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 3360.239941][ T1721] dump_stack+0x1e/0x25 [ 3360.244340][ T1721] panic+0x4bd/0xd50 [ 3360.248530][ T1721] kmsan_report+0x29d/0x2a0 [ 3360.253307][ T1721] ? vprintk_default+0x3f/0x50 [ 3360.258330][ T1721] ? __msan_warning+0x96/0x120 [ 3360.263356][ T1721] ? cxusb_i2c_xfer+0x1303/0x18e0 [ 3360.268644][ T1721] ? __i2c_transfer+0xec7/0x30e0 [ 3360.273799][ T1721] ? i2c_transfer+0x300/0x4b0 [ 3360.278698][ T1721] ? i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 3360.284031][ T1721] ? compat_i2cdev_ioctl+0xaa3/0xb40 [ 3360.289522][ T1721] ? __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 3360.295503][ T1721] ? ia32_sys_call+0x2d07/0x42c0 [ 3360.300664][ T1721] ? __do_fast_syscall_32+0xb0/0x110 [ 3360.306242][ T1721] ? do_fast_syscall_32+0x38/0x80 [ 3360.311587][ T1721] ? do_SYSENTER_32+0x1f/0x30 [ 3360.316544][ T1721] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3360.323321][ T1721] ? kmsan_get_metadata+0x105/0x1b0 [ 3360.328828][ T1721] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 3360.335448][ T1721] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 3360.341812][ T1721] ? kmsan_get_metadata+0x105/0x1b0 [ 3360.347310][ T1721] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 3360.353949][ T1721] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 3360.360292][ T1721] ? mutex_unlock+0x29/0x50 [ 3360.365084][ T1721] ? kmsan_get_metadata+0x105/0x1b0 [ 3360.370571][ T1721] __msan_warning+0x96/0x120 [ 3360.375442][ T1721] cxusb_i2c_xfer+0x1303/0x18e0 [ 3360.380674][ T1721] ? __kmalloc_noprof+0xa1/0x1310 [ 3360.385961][ T1721] ? kmsan_get_metadata+0x105/0x1b0 [ 3360.391483][ T1721] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 3360.397602][ T1721] ? kmsan_get_metadata+0x105/0x1b0 [ 3360.403131][ T1721] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 3360.408588][ T1721] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 3360.414040][ T1721] __i2c_transfer+0xec7/0x30e0 [ 3360.419037][ T1721] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 3360.425646][ T1721] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 3360.431625][ T1721] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 3360.438004][ T1721] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 3360.443966][ T1721] i2c_transfer+0x300/0x4b0 [ 3360.448735][ T1721] i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 3360.453944][ T1721] compat_i2cdev_ioctl+0xaa3/0xb40 [ 3360.459332][ T1721] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 3360.465341][ T1721] __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 3360.471192][ T1721] ? kmsan_get_metadata+0x105/0x1b0 [ 3360.476698][ T1721] ? kmsan_get_metadata+0x105/0x1b0 [ 3360.482230][ T1721] ia32_sys_call+0x2d07/0x42c0 [ 3360.487223][ T1721] __do_fast_syscall_32+0xb0/0x110 [ 3360.492636][ T1721] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 3360.498620][ T1721] do_fast_syscall_32+0x38/0x80 [ 3360.503767][ T1721] do_SYSENTER_32+0x1f/0x30 [ 3360.508553][ T1721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3360.515167][ T1721] RIP: 0023:0xf7fa4539 [ 3360.519433][ T1721] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3360.539308][ T1721] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 3360.547989][ T1721] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 3360.556175][ T1721] RDX: 0000000080002580 RSI: 0000000000000000 RDI: 0000000000000000 [ 3360.564350][ T1721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3360.572515][ T1721] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3360.580691][ T1721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3360.589007][ T1721] [ 3360.592562][ T1721] Kernel Offset: disabled [ 3360.597005][ T1721] Rebooting in 86400 seconds..