last executing test programs: 15m19.409143375s ago: executing program 3 (id=641): pipe(0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x8) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000002000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002134001180050001006c696d6974000000240002800c0002400000fe00000000060c0001"], 0xb8}}, 0x0) socket$kcm(0x29, 0x0, 0x0) 15m19.087825498s ago: executing program 3 (id=646): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca0102030109021200010000000009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x1, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="7e8e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x20, 0xb, 0x1, "b5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m15.866834311s ago: executing program 3 (id=662): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602210000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) 15m15.747722904s ago: executing program 3 (id=663): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000200)={'8255\x00', [0x4f27, 0xa, 0xffffffff, 0x401, 0x1, 0xcd7, 0xfff, 0x5c952399, 0xffffffff, 0x3ff, 0xfffff000, 0x1600, 0xfffffffe, 0x1, 0x9, 0xe1cb, 0x7bbd, 0x4, 0x3, 0x396, 0x80000089, 0xfffffffe, 0x0, 0xfffffff1, 0xffffeadb, 0x3, 0x3a, 0x1, 0x4, 0x8000000, 0xdffffffa]}) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x210200, 0x0) 15m15.747536173s ago: executing program 3 (id=664): socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x22, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100f0ffffff000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15m15.511425809s ago: executing program 3 (id=665): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}]}}) 15m5.455025818s ago: executing program 0 (id=705): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xb000000}, 0x0) 15m5.380348851s ago: executing program 0 (id=706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a00fe8000ffffff890000000000000000aaff020000000000000000000000000001"], 0xffe) 15m5.364898398s ago: executing program 0 (id=707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x14) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r3, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) setrlimit(0x8, &(0x7f0000000240)={0xaf7, 0x2}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(0x3) 15m5.320039561s ago: executing program 0 (id=708): syz_80211_inject_frame(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x21) 15m4.691780257s ago: executing program 0 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9741, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r1, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x6, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000d4d000/0x3000)=nil, 0x339a, &(0x7f00000001c0)=[{0x680f, 0x6, 0x3}], 0x1, 0xfffffffffffffffa, 0x10, 0x64, 0x28, 0x40}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4010}, {}], 0x2, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x10) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r2, 0x6f000) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x2, 'syz0\x00', @null, 0x2, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 15m3.77687273s ago: executing program 0 (id=712): syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b80), 0x3, 0x0) utimensat(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) (async) utimensat(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000000000014006f166a07010033d43afffe0b27bbaf02633bba00000000000010ff020000000000000000000000000001"], 0x340a) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000010c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000000240)={0x14, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000831}, 0x10010) (async) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000010c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000000240)={0x14, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000831}, 0x10010) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4002000}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) write$tun(r1, &(0x7f00000003c0)={@void, @val={0x2, 0x0, 0x28f, 0x0, 0x2, 0xfffb}, @eth={@remote, @empty, @val={@val={0x88a8, 0x3}, {0x8100, 0x4, 0x1, 0x2}}, {@llc={0x4, {@llc={0x0, 0x8a, 'Y', "23bd54b0de163af0a8b135f28edc19c38e05a7c715e037bcf7dfc3a212fbdd7ceab3cdc4f6b6d5106986a9c9ca33bc6a1c575d58f964a0f53665fb980b76d458f1eb3ea6f6b27309"}}}}}}, 0x6b) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0xa0, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x100, 0x7ff, 0x7]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x36, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xa6}, @device_a, @device_a, @from_mac, {0x6, 0xa4d}}, @vht_group_id={0x15, 0x1, {0x3, "e42141dcb454d6bbed7e8e63739b90a1"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x94}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) timerfd_create(0x0, 0x800) (async) timerfd_create(0x0, 0x800) 14m59.33437859s ago: executing program 32 (id=665): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}]}}) 14m47.662446612s ago: executing program 33 (id=712): syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b80), 0x3, 0x0) utimensat(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) (async) utimensat(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000000000014006f166a07010033d43afffe0b27bbaf02633bba00000000000010ff020000000000000000000000000001"], 0x340a) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000010c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000000240)={0x14, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000831}, 0x10010) (async) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000010c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000000240)={0x14, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000831}, 0x10010) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4002000}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) write$tun(r1, &(0x7f00000003c0)={@void, @val={0x2, 0x0, 0x28f, 0x0, 0x2, 0xfffb}, @eth={@remote, @empty, @val={@val={0x88a8, 0x3}, {0x8100, 0x4, 0x1, 0x2}}, {@llc={0x4, {@llc={0x0, 0x8a, 'Y', "23bd54b0de163af0a8b135f28edc19c38e05a7c715e037bcf7dfc3a212fbdd7ceab3cdc4f6b6d5106986a9c9ca33bc6a1c575d58f964a0f53665fb980b76d458f1eb3ea6f6b27309"}}}}}}, 0x6b) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0xa0, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x100, 0x7ff, 0x7]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x36, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xa6}, @device_a, @device_a, @from_mac, {0x6, 0xa4d}}, @vht_group_id={0x15, 0x1, {0x3, "e42141dcb454d6bbed7e8e63739b90a1"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x94}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) timerfd_create(0x0, 0x800) (async) timerfd_create(0x0, 0x800) 13m24.536549508s ago: executing program 5 (id=1462): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x838, 0x0, 0x3, 0x0, 0x19, "2af01c3d0040fbffffffffffffff00"}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) syz_fuse_handle_req(r1, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000004200)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x40903144, 0xa, 0x8, 0x7, 0xcdd, 0x0, 0x0, 0x80, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0xa, {0x3, 0x2, 0x5, 0x1, 0x44e, 0xc, {0x0, 0xb, 0xb, 0x1, 0x4, 0x4, 0x9, 0x7fffffff, 0x4, 0xa000, 0x0, 0x0, 0x0, 0x20000006, 0x8b29}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2083) write$FUSE_DIRENTPLUS(r1, &(0x7f0000003d40)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0xd) 13m24.42704937s ago: executing program 5 (id=1463): pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede-generic)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc048) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f0000000540)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0xc4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES16=r2, @ANYRESDEC=r2, @ANYRES32=r4, @ANYRESOCT=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 13m24.367853297s ago: executing program 5 (id=1466): munmap(&(0x7f0000ff5000/0x9000)=nil, 0x9000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x404800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)="385d4c7ae0fc0124231c37c07c081e48c361fb1265c21dbf0803a30bc5526c439febd5288d8bb3e97d8283a76186727ce1a8c86ee786c739b5c9995aef5becf3040c72de86b8470562da7fc0936a1404f33960c77dfc8b93986e0aaf3eeadec7d8185bf01b8a1740ce306cd7010866c0dd7e03417792e95beca46dbcf499c5da67dabc0247ea65635df6a97bc99f331babc66d17448f4ee3f596901fec8cbe85044f631eb162153477f792d0b098ef9182748b39540b4146d5dbeb32f6adbc983c7bfc8f1a39c6f37a9ced8491cb72119b2f778b3944ae82da0259431135d944e0d32fa834086774c5", 0xe9, r0}, 0x68) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ff9000/0x2000)=nil, 0x2000}) getdents(r0, &(0x7f0000000200)=""/199, 0xc7) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, '\x00'}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x50}, {r0, 0x400}, {r2, 0x400}, {r0, 0x40}], 0x4, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000400), 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000440)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x20, 0x20, 0x9, 0x0, {{0x19, 0x4, 0x2, 0x1, 0x64, 0x66, 0x0, 0x0, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @lsrr={0x83, 0x2b, 0xc4, [@rand_addr=0x64010102, @empty, @multicast1, @broadcast, @private=0xa010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010102, @remote, @multicast2]}, @cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x5, 0x6, "dd18e7f3"}, {0x5, 0x12, "98cfb222bb1fc727225c3b5ae646e6d8"}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000780)={&(0x7f0000000540), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x837}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xd6c}, @ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xaec1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000007c0)='bridge0\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000800)) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000840)={0x0, 0xb}) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000880), 0x280100, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000008c0)={0x1, 0xb}, 0x2) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000900)) renameat(r0, &(0x7f0000000a00)='./file0\x00', r2, &(0x7f0000000a40)='./file0\x00') r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), r1) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc001}, 0x20000800) openat(r0, &(0x7f0000000bc0)='./file0\x00', 0x20000, 0x12a) r8 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000c00)={{&(0x7f0000ff7000/0x4000)=nil, 0x4000}, 0x6}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), r1) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x64, r10, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x44) 13m24.259221631s ago: executing program 5 (id=1468): syz_usb_connect$hid(0x2, 0x3f, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x77, &(0x7f0000000240)=ANY=[@ANYBLOB="7703bfa7a811f09b2aaad087451cd6e65ff0f03e41cc920b70b037f89029fa760e20d27e4cae47857cfdb17388ed0c3533f523d7b1d5ef71d8e69c7943896bfe9f54fd41f252d51f26eb42a2c00f3d8924ca1876d1806ab6d06b505adb61b95db217fd490122077eef931336d1d2eb1e956d49ecea2136c056b4f5c5250e9d839b0ed66dcee93b0340bcec1cd6956bf048479654e329722ed4c4764288340918da88883bfda47023ba1bcaa708dc4ec4e3d2af20143293f843"]}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x13, 0x0, "a67c6529a492ee44a7aeb1679841c1f30e527690e4569988c268c2c2445fcdd77562eaac1a43fc8644c6461503ee9513ec578aeb3b028f4e18d0a5d7ac4ce545bd12522d2b61a51909d13bfb34d0f729"}, 0xd8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, 0x0, &(0x7f0000000040)=0xc00) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a"], 0xffe) 13m23.678750159s ago: executing program 5 (id=1475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0xb}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x21}, 0x0) 13m23.261528036s ago: executing program 5 (id=1480): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) wait4(0x0, 0x0, 0x8, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf2507000000"], 0x14}}, 0x5) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) unshare(0x62040200) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000100ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="440000001400010000000000000000000200000004000000140004000000000600000000200000000000000115000280", @ANYBLOB="e0"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) r8 = syz_genetlink_get_family_id$batadv(0x0, r7) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, 0x0, 0x2000040) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4080) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0xd32, 0x10001) ioctl$FE_READ_SIGNAL_STRENGTH(r9, 0x80026f47, &(0x7f0000000140)) sendto$inet(r0, 0x0, 0x0, 0x4c840, 0x0, 0x0) 13m22.995661243s ago: executing program 34 (id=1480): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) wait4(0x0, 0x0, 0x8, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf2507000000"], 0x14}}, 0x5) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) unshare(0x62040200) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000100ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="440000001400010000000000000000000200000004000000140004000000000600000000200000000000000115000280", @ANYBLOB="e0"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) r8 = syz_genetlink_get_family_id$batadv(0x0, r7) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, 0x0, 0x2000040) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4080) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0xd32, 0x10001) ioctl$FE_READ_SIGNAL_STRENGTH(r9, 0x80026f47, &(0x7f0000000140)) sendto$inet(r0, 0x0, 0x0, 0x4c840, 0x0, 0x0) 12m18.968767428s ago: executing program 2 (id=1957): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600b40900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600b40900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r4, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0xb963}) (async) ioctl$KVM_CAP_MAX_VCPU_ID(r4, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0xb963}) syz_usb_connect$cdc_ncm(0x1, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x81) 12m15.615773953s ago: executing program 2 (id=1982): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x0, 0x6, 0xfd, {0xfd, 0x23, "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"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0xe, 0xca, "dd03a64b4261b7edc76b964abf9cfad279485ff61d07992e1b03f0d405460b8efc5fc36cd408a6f355a0dad914e6359ae9e3743038bc6cbb99ca1f018570f466fdb069c45c865d81f5869baa85a8f79f43636f871e6abf08466538b5c699adc94a85f8cd635f03e08d3ea4efbb6445f3c8dd24013fd1304040283b5158e3f794bc101cd33c663e9dfe5c09b4e0ae981aea0df858ef01836bff91a25ec401d0af824a6d9f95d2bc45b37151607e2ef5d93c71dce0315c15f5d1cc58aeeab9d4fd1175c72c2656468afa88"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x8, 0x3, 0x10001000, 0x7, 0xd, 0xd373, 0x4, 0x8, 0x200, 0x9, 0x101, 0x4}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x40, 0x11, 0xec, {0xec, 0x24, "4ee6cf8722971afa91ebdba9dd226f23211a4032d7e9b8ccddbd6bb9656f831233ea253cbd357ef40bc7717ff4adddace7dbcd0c0b941f9119e8aabace809f353c56d10de07dc1e26960b6c61439019f9c78848f9294ac7cfde52d75f18bb1c8dd15786be5d47ee35579e19e75d8921b339df234c42637e5e90cbc8e00d11d936b9c420e3a5bf0873ba825a2a1669df59a0b980625b9c2e6ca1b69ee21b80ea78245e9918b01692a59b9c9ad4a13dac32f209479bbcdfbff3e7e51e54b6d65686f8e026c2a4bbe98c84768ea82c7e72de6bba4636bd637480f8da1f6cfda112c85b38c246d0e8e2c5b49"}}, &(0x7f0000000640)=ANY=[@ANYBLOB="00030404000000000000"]}, &(0x7f0000000840)={0x34, &(0x7f00000006c0)={0x40, 0xa, 0x30, "d1c3f5733fd563f53d419abba52d50c7e50969c63ec3d32e6dd97bb17fb3464028e10c1df3938991ce06c0660bd96faa"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f00000007c0)={0x40, 0xa0, 0x4, 0xb04}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "8274dad0050f2aa3538176a4d94840ea553d62bfbeaa973cbbe7ff19b3173c052b92aea6514a75a65ffe64b337dee7"}}) 12m12.182968789s ago: executing program 2 (id=2005): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x1a0, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@multicast2, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x7, 0x5000000, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) 12m12.091659101s ago: executing program 2 (id=2007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r1, 0x801, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) write$P9_RSTATu(r2, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) 12m12.061429311s ago: executing program 2 (id=2009): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000280)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0xf0744000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xe8a40, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xf) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt(r5, 0x6, 0xfff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1100000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}}) 12m11.891541967s ago: executing program 2 (id=2010): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @fd={0x73622a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xd}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 11m55.810027426s ago: executing program 35 (id=2010): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @fd={0x73622a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xd}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 9m23.114378403s ago: executing program 1 (id=3613): syz_usb_connect$hid(0x2, 0x3f, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x77, &(0x7f0000000100)=@string={0x77, 0x3, "bfa7ecbda811f09b2aaad087451cd6e65ff0f03e41cc920b70b037f89029fa760e20d27e4cae47855cfdb17388ed0c3533813051bdd5ef71d8e69c7943896bfe9f54fd41f252d51f26eb42a2c00f3d89245db217fd490122077eef931336d1d2eb1e956d49ecea2136c056b4f5c5250e9d839b0ed6"}}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a00fe8000000000001100000000000000aaff020000000000000000000000000001"], 0xffe) 9m22.431270038s ago: executing program 1 (id=3617): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x1403, 0xf72c1c349d520077, 0x70bd26, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20088049}, 0x800) r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r3, &(0x7f0000000b00), 0x91) splice(r2, 0x0, r1, &(0x7f0000000140)=0x8008, 0x5, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='aio\x00', 0x2288004, 0x0) 9m22.144203111s ago: executing program 1 (id=3621): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {0x0, 0x3000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) 9m22.075888228s ago: executing program 1 (id=3622): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r0, r0, 0x0, 0x101) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e147e03000000000000000089", 0xd, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) 9m22.075651996s ago: executing program 1 (id=3623): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x94) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40), 0x0, 0x0, 0xfffffffffffffea1}, 0x8000) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) 9m21.883400855s ago: executing program 1 (id=3624): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x200000801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) 9m21.704945439s ago: executing program 36 (id=3624): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x200000801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) 7m4.687620437s ago: executing program 8 (id=4935): socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x22, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a60fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7m4.671391887s ago: executing program 8 (id=4936): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x3, 0x7fffffffffffffff) syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000b80)={{0x12, 0x1, 0xc2c837444fab22da, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0xf5, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xe}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0x205, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x22, 0x1, 0x6, 0x7f, 0x33}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x61, 0x4, {0x7, 0x25, 0x1, 0x2, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x41}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x65, 0xac, {0x7, 0x25, 0x1, 0x2, 0x50, 0x7ff}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_netrom_SIOCADDRT(r0, 0x891e, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setreuid(0x0, 0xee01) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) listen(r2, 0x50) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e60, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x9, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x2, 0x3, 'hash:ip,mac\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000000)={0x3, 0x4, 0xc2f, 0x101, 0xa82}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r9, 0x29, 0x46, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b41300002c0007012bbd7000ffdbdf25047c0000080001800400dd809813038014008400000000000000000000000000000000017f1303"], 0x13b4}}, 0xc010) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7m1.373258872s ago: executing program 8 (id=4972): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4000000, 0x8496714a32a14324) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) (async) write$hidraw(r0, &(0x7f00000000c0)="79d40a5dc62f4d3930eb319bc67bc6311718184319279ec22486c390f4bc30c5f785c088f61bcd99fadad6f616732fceaa9f80502627d89b7715000e6ba7972ba68b79bab7e76145697ec4d14eeda714f8b0d05e210584dea24c9346370f107a56263f2069e2ec0103e092027e1e659b0a59b8181e029157a36d37246e0fc01c64566be35d7d352ccdb7c69198e1766c992cb8c8972dffafb9925cb7edc4c3690d007970116b4274029080304740ca48e5402f84f3c75c46ac8b0563dc14dd9869ee4dd046fcec3915cf63568d056eed0854250d3fa4838406b71f0d1968dd", 0xdf) 6m58.131496008s ago: executing program 8 (id=4999): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) r0 = getpid() r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x6, @pix_mp={0x0, 0x80000001, 0x3031334d, 0x5, 0x0, [{0x218, 0x8}, {0x1, 0x8000}, {0xa, 0x3}, {0x1, 0xb4}, {0x7fffffff, 0x7fffffff}, {0x4, 0x7f}, {0x7, 0xc64d}, {0xfffffffa, 0x400}], 0xe, 0x4, 0x6, 0x1, 0x4}}) syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x80000, &(0x7f0000000280)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x39]}}], [{@subj_role={'subj_role', 0x3d, '[,%{^'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@appraise}, {@dont_measure}, {@hash}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500000000000d000300686173683a6d6163"], 0x5c}}, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000a0a050000000000000000010100a37a3100000000c77c2da6ec55bf9ee1f25561487257a59b5bf9a9607a6390ec283fe0d33868ddde10503337e8b26d0332bfbdbd02a3ec2e7bbbfca230826b9f70429c841962fb06d8af15459958c032556d598ae4328adf1f0c42af1febb791683173698ba279d63037d747a7de41501d1894d2a947d2c517ed9229766161b121b1f458f4440da0bcb2518412d14fa3f2d25a84710d9c29cbeb4d22c96ab75c1ad1cc3edb9c03c756"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000d0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x19c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xe8, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, {0x58, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x19}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14}}, 0x1c4}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x2, r4, 'id1\x00'}) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000600)={0x9, {{0xa, 0x4e23, 0xffff, @private1, 0x4}}, 0x1, 0x8, [{{0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x75}}, {{0xa, 0x4e20, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}, {{0xa, 0x4e22, 0x6, @mcast1, 0xffff}}, {{0xa, 0x4e21, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x60}}, {{0xa, 0x4e21, 0xffff, @rand_addr=' \x01\x00', 0x8}}, {{0xa, 0x4e20, 0xae, @loopback, 0xe}}, {{0xa, 0x4e24, 0xfff, @local, 0x6}}, {{0xa, 0x4e22, 0xa, @empty, 0x642}}]}, 0x490) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x8010, r4, 0xfeab1000) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x0, &(0x7f0000000080)=0x488, 0x4) 6m58.009508183s ago: executing program 8 (id=5000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x4008840) 6m57.751503507s ago: executing program 8 (id=5001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000005000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000"], 0xd8}}, 0x8080) 6m57.668129353s ago: executing program 37 (id=5001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000005000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000"], 0xd8}}, 0x8080) 10.62042015s ago: executing program 4 (id=8174): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a0000000f00000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 10.491725655s ago: executing program 4 (id=8175): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x7, 0xfff}) syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000200)=ANY=[@ANYBLOB="12015002020000102505a1a4400001020301090264000201a400e90904000001020d0000052406000105240002000d240f01ffffffff6b0b0000dc06241aff030008241c0200deffff0905810300040502030904010000020d00000904010102020d0000090582021000087f0609050302200087000732dbeb8fef88951031abb8dd57ce2e3b75ee45b0aa34ce"], &(0x7f0000000600)={0x0, 0x0, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f0200010b10765f035f000000000000"]}) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 9.056146383s ago: executing program 4 (id=8179): syz_usb_connect$hid(0x2, 0x3f, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x77, &(0x7f0000000100)=@string={0x77, 0x3, "bfa7ecbda811f09b2aaad087451cd6e65ff0f03e41cc920b70b037f89029fa760e20d27e4cae47855cfdb17388ed0c3533813051bdd5ef71d8e69c7943896bfe9f54fd41f252d51f26eb42a2c00f3d89245db217fd490122077eef931336d1d2eb1e956d49ecea2136c056b4f5c5250e9d839b0ed6"}}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000110000000000000001"], 0xffe) 8.382271569s ago: executing program 4 (id=8181): socketpair(0x11, 0x2, 0xc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x800, 0x4) r2 = dup(r0) ppoll(&(0x7f0000000080)=[{r0, 0x1212}, {r2, 0x2000}, {r0, 0x8000}, {r0, 0x14}, {r1, 0x2}, {r1}, {r1, 0x8400}], 0x7, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0x77]}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x8001, 0x2, 0x3, 0x1, 0xc, 0x6, 0x256, 0x5, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x800, @loopback, 0xdc4}}, 0x7, 0x2, 0xb83f, 0xf286, 0x10, 0x6, 0xa}, 0x9c) r4 = dup(r0) splice(r2, &(0x7f0000000280), r4, &(0x7f00000002c0)=0x8, 0xc729, 0xe) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000300)={{0x3b, @multicast2, 0x4e21, 0x0, 'sed\x00', 0x9, 0x41c30f37, 0x14}, {@remote, 0x4e21, 0x2, 0x3cb, 0x1, 0x2}}, 0x44) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000480)=0xe8) write$P9_RSETATTR(r2, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000600)={r0, &(0x7f0000000500)='sed\x00', 0x22000, &(0x7f0000000540)={@_ha_fsid={[0xf, 0xfffffeff]}, {0xb474, 0x7f, 0x6036, 0x1}}, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x4}) ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f0000000640)={0x0, 0x0, {0x400, 0x3, 0x7, 0x3ff}}) pipe2$watch_queue(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = accept4$inet6(r5, &(0x7f00000006c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000700)=0x1c, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000740)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000045}, 0x4000000) ioctl$BLKCRYPTOIMPORTKEY(r2, 0xc0401289, &(0x7f0000000940)={&(0x7f00000008c0)="50ddbbe023b17ad0c094c70bdb29bd5dd7796bd19e4f9f32ac4dfc2f42860fe8e536cce6b0c7cc3b092dcbd642e63c83", 0x30, &(0x7f0000000900)=""/15, 0xf}) r10 = accept4$x25(r1, &(0x7f0000000980), &(0x7f00000009c0)=0x12, 0x800) ioctl$SIOCX25CALLACCPTAPPRV(r10, 0x89e8) r11 = syz_open_pts(r8, 0x404a01) sendfile(r11, r2, 0x0, 0xc3af) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000a00)=0x1) ioctl$VIDIOC_QUERYMENU(r8, 0xc02c5625, &(0x7f0000000a40)={0x80, 0x3ee, @name="d03906d0eb0e88c963a4ad09333f6be6dfa76821ab75e3ef5ba28d28b45a3937"}) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), r8) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r12, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0x48080}, 0x800) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000dc0)={0x90, 0x0, &(0x7f0000000cc0)=[@acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c00)={@fda={0x66646185, 0x6, 0x0, 0x6}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000c80)={0x0, 0x20, 0x38}}}, @enter_looper, @decrefs, @acquire_done={0x40106309, 0x2}, @request_death={0x400c630e, 0x3}], 0x23, 0x0, &(0x7f0000000d80)="90d926473d6239847be68c2990b1d94b7da2256addc5d3cda466644b0849a0df04bc09"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000e00)="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", 0xfd, 0x8000, &(0x7f0000000f40)={0x11, 0x16, r13, 0x1, 0xcc, 0x6, @local}, 0x14) 6.074749205s ago: executing program 9 (id=8193): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x4}) 5.523058701s ago: executing program 9 (id=8196): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x7ffffffe, 0x0, 0x0, 0x1, 0xd}}, &(0x7f0000000240)={0x0, 0x68, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 5.389302508s ago: executing program 9 (id=8197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000200021002ebd7000000000000ae40000050000000000000014"], 0x30}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x8}, 0x1c) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f0000001200)=0xffffffffffff6f95, 0xa00, 0x0) fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000280)={r2, &(0x7f0000000140)='ip6tnl0\x00', 0x10001, &(0x7f0000000180)={@_ha_fsid={[0x7f, 0xfffffff7]}, {0x200, 0x1, 0x2, 0x6db}}, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x9}) ioctl$VHOST_VDPA_SET_CONFIG(r5, 0x4008af74, &(0x7f0000000300)={0x8, 0x21, "8ed4ffcd94e5b707e94feb801838117c9bd9a9bd4bda909429ddcb8a2fb2d1ab0c"}) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0xfffffdcf) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xc, 0x2, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c51400030069703667726530ee390000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4.684180577s ago: executing program 7 (id=8203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x2100000000000000) 4.311312078s ago: executing program 7 (id=8205): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host16=0xc02, 0x3, 0xfff, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x4}], 0x50}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x9, 0x41, 0x9, 0xfffffffffffff3d3, 0x2004cb, 0x9, 0xa1d, 0x6, 0x5, 0x0, 0x3, 0x5], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@vmx={0x9, 0x0, 0x2080, {0x4000, 0x3000, {}, 0x1, 0x6}, {"d07ee511cd72b653a8570092138cc70013f0853eab03c8dbab297ead745d4e087c735366f067289401204ab46286481c9fc9b34039aaaded1e8068e28cdafec8d1b4a81d99cb7387f8abbfc11ea898c9141330736dea8dacef5fc1cfd8997f29c85bbd8d9722f2b39a40f79bb342eee5f40b1e0a08befdd3e1b959c2dc23dfb45602c0a8b5267415204d04ba36bc8d090a256668a708b78df1449433ff322346ffd349319bf2881b2cd0a48d1b65b9bcff7cb69976323bc169184b217176342b5e8b46bcbb93e54522c2bdc9dfc1acff741f79e48c6d4e20e8de32506d6619cbac80b77b3cade64e8b39320623d19d52e487c106af52af9d9cb72bb168bccfbe939df813ebdbd14e84116671966bd76ebc37c2e8194d77eefbd53e343a6f7cf65c211958d2118841da37c9fe5f673f07b363c61f4d24de444260e0808ebcbaad4d199824ba5555458fdc33b4d1ec5aa1af2308d9b91e6bd2fdfb2c89682f92edb5e4dfa889844185d4c066356e0cc83437ea29d4c55ef513b254b9864934b69bf2fcbd2ffd0a01fd85b63efecf18c512ff4f33f86a771a6835436b2a2d3f25c18c0953e6203fedb2873918e33e66e2a01748cd8065f44333e200a91258ed6a93fb49e20ad24532adc108cbe0b23d08b155c2d30bc0de2ddb62536c4486f167f541bb33ad8912f6c20adb0b62431bcc77d532b2079d869a39e1936d927c63c4304b0603fea112d62179e14a65b6d7b2093f2636ec64eee40cdae01986266ee9517f5cd1de6da14bb8b0439a4d5b55d45a1baef217d99e622f40dd11ef8b090d9daf1301ac6f9f42b1ab9038e6d0ab8ed23f1132b6d4a64a34ce037aefb0f15ff073786cd54b7072132afd8d3f162f2fa6de3a238aac5160ecaf526dda92bc1545a88a501a3beef2f634fd081c0d92505565a53cf6d9aaf7207dee99cad9cde097c6a76cccc3defe1213f4048ad3c5083ad4bd7cc0d0adecdd124909f17dbd90aafcd5d564a258a7de73d99b5d5547d35f9e1a53ebc8cf1914671acaa80491f15fb4166a883235f44d28660da30013fb721ba824dab6419fe8079f0f0a946662cc4a1e644ef925a2c60a852188f83620c4ac02a07a31ddd33f3ac403bbdceb03119485e2f2804a3406ce98aaf947d36e5e70f9415e4cbcc13397e39308b4742181dad22a2ec4bfeced6972e435c0295bf124701ab0fe1f3cde68d742a1a29f6a226f37251d91a6f4cf453474115a875f1b2735618623c35e6de86832c8af93258cc8f793f69c35933a247851cc42d2c4c8a86eaa9d3e19323557147d97d9c73f9e6efdcaf64c2ef087fcb1a36bb7336e8fbbcf8026eb2fb1fb0d3f7e6cb965b3bd1eb46506451232c09d797e77fe46f2c79525aa9ac2986b5a322d5fe5910be3c55b5b4951f5cacd9ecaa5199ac1c9a3f0aee70ed5ff4c9d299194913ae226d4877c6f8e441aa4f4272120824d7077077a15179fc9423d5884c6b3987a7662c91c0d8f0c72c0638a954806a5b6f8e49d59d46891a2d0ad2596593bdc30ebafc8af1aa4a7ca71437ecc0fa245d62380ebf6b38ddac8b55ff9cd81d60560998459a7f8286fbcc2d541b6c0b23df97955a8aa48a523890c75b2cfb05fbb9b8044d9df78f914ce276e7c0fb183b68d1d83ed403bba0f6c94fe64d3183567dcd54f7074dcaa1a193d80cbdec690fa4e42679a7eb0a0b49e9c9663bf8b76a0535c1723e10827a5cc965e42dbf89b7f959ce90b91f8423f1258a5ffe1120b541134148b9a52e540e588b58e9f583a4a6c77e261486b975222fcedea4a8d6470f367a2616a981bb3d2b3fe5fb11e951f6400eb60a945f92f5ef1078107702b11000b0122034fea7c4221ea1bcc5e6210edc149c16736607ad542d977f1b013afa948ea43516f3ff0c4d7c4fb4efd67dedc44e622e4573e7f5d0c102c866b1eacda3d864d361517dcd3ed57250453a35ffd96ba4905a999a2a09996147c7ac46e19e47d673d2f2a97a3d3407c80675a58036eeea34ad8b958618ae9a213f2458b6a013e04c81366e9d42c80eccd45fc6b2806314194e5f75a19397a5f34b508329dedad8909b6d5be46459166a9f3ff88fadbbc324b1769aec890f5cc2b442b632f29c275d4888b38dc47ebe0235a63d896e4f9dd3408fc837effbbebe6b4d5d12334b780cf46358e9e51ec74e7fb30cf2826d6311c3a19419f0164f96cf09c02d8cab3a97f5eaaff757124c71f80efa31046fec8b729f9853fda8d454df9bd47a2f9a50f1dc37fb2709f0f784297caad7073ecdbf2397d14f01175ee8ce28ea2c103186d9e53e5829a0101384da6ee6c1d514400624eb5e11f1146dcebb8eb1dd6605fd65694b60b6204232c5d821f7a67fe82d63ba5c1cd6851f9d7d6bc438a43b2379ebdee7f84c9a509b5b1b5381bafebed35b856ed2e9e33264e6ea44a5d05ac5fd93abd54b31dee7a301fe6f201abf39657d2aed95ecabcf7601608ae9b083fb49bab452c38d5370c057daffab880b21603b18e98f8ccdbabbef959c240aee6546db9de2316c0feca99b276af23148bce353070fad42a35b4ac005e9c832c3f4ab83a44dfe6d8fd4440f20870329fc2d645a2c29ebd571b7006d92ad400d824d2981a9c69df0ef5692c9d87432abe845bee7ab415a1ae5d8a5a05a607bd1512d556730ded4fc8ee70260c2201f3a2ac63c2b397834474a18308a979b8ee781e7348504dcaf702092c133a4ec9d9de1f22c70cb70f8b4e3c7b15dc7032c9c35141d4457a9685a52c4c47d43d9a20ce2ad41cf5fb6edd91dad19021cf6212593638234bd032c11cf6582aa1110348f3bff66583d360f54db403f6aae4550ce6285ad487fc467d320a3878c77061b109f6e2fe74659d8dc3bfd91ff7c23b64babfb7df1617776c254dc87804f6c4ea46df27e952b1393d4f3a5efe4ebaa94d11c115d8eb052e4119bb9b5d9fffe6975ee97295cfa4f2a877ceca70841d6b9f5b6138aace2efa7a0443fb93603d026be4d10106a11720e8dfc9e04fe17359665f75052a34af42b3f39bd27156357630e4eb44f1908d4f8c512de8dd17a925dabd5656e3205e97f8b69868a289981cc83576e72a714ad209d1904e7a0cf8956bd3842e3f8a8b6a7f2b5db4beaca71ea23daf2c340dc38f87971a1ad92a63df5c23e798736fdb7e08df92121f360f3b7f639d379b7100b152d263d344e38d2ed9a953954cfa39dfc3f970e06079ca5ebc0a69ff957949c9afcf2be20f340bfba56441949fedf4ea6632cd748ad52fdeea4fa7f56f360445169f4b9b361c4f53c996a5b862a6a664572bca6a7de541bc5540a818e787c564f9fd101cb2664e9aeed613851edafbdcc8df83d3471f7ed6ec527264e9396626c755af01f4ed227db051383ebbe5c52de0e7a96292c690966df12eab369b2f846de9a847d2d0f2b9a36f2ea47f367074278a956ddbe587dbc49d949cf8a5be1bef14269f42cc5e98f5ed070f02c7db29e1fe3abdec02502354f02e72a9f39f2d18dcb5b8b965b46433b51205a041fa135775074027fb2c57820886aa4b0af320f2aa629bbb98eefeb39ed6e587e83bf7b45bff760d92ac670df9cb1aa10409c52dff7586bdd1ab94220e4b3d441010ce6edb1b73b74ccf2bcacf385e8a9b5bd17b40045d965a3741372188cb404069c6620cf8763c47209846888d0b3b35069cb10b2fc115613b4da37e9a7ca0e3cd4396043589e322c7ffa4e5b912f9837889a087b9a3ca095ae390ab09527a01b0d24c141d2806eab10cc4907922916c1f027d1b45a8b14d70dea82e0606973bca709d298505e6d2b689188ce2c473232818ebf65405f1f950273725d53e6a269f391f320fbaff80cfc97dc6ef0eb019e7c408aadf8a9e5f5bb783c9f559a759365320b3af270eefdbe4481ffa03962d908664855ee557d0200715d95f69caa9a2ecd78b13052454b5b73329860157d1bb45c945aa7a830628173a91280aa42c6e88f08bb4333364ef4ed1d13a804a07a0976689f6f49d1b2c2b4eb267accd661964b10e532394a695b6a5d558233c41f2bb99c5df3d59ca76fa419a1dda057514c99522ec903ae0c0f7570c7d30f6e9ad7d12c2e644bdee1e6d64e67958ffee6ddebc6dfc4478fae8453238a179887f47c67298af5445553e7ba36a49dbc838d1772e4786c38ef30ac51e5147ed8e5da0c36eae45376c356da5602b11009f6f00f1f86fc99b2570cf3c79a989bf77d04d668fcf3404a722fe7f1ab605aaf47647c8abb20d72512ff6c8a9b1752bf4d6dda43dc8fb81f701a87f5477c37a3a07a2b811f9f239cadface4a4a976580e89c49100fe2a56d182edaaa53b3988c933fb9c440402977cd3297c076904d1fe44598765a5436d98e8c92304e3d7dac1441af80d6dc91df0ca72af34d55cb3b7c1870b0f13a90ebc82a449557cbbdf0b7839a717983cedd0053183f40cb4bfde0e3a42c90ba9aa61e674e205a349c14106b81c582e359d918c1ae93c9d4404f45bc0e91fc0ca929eb03c1f66bb03e2b9f145a9d36b0eec9b66ed850430758511cfd482835d099c25c940ae43b9cde8d15ca036c8a338295a3334118a193d0b8317f9a078b11394a57f5360e883fb04c028a39a7bacf73aef592fc20f93d896171478c5e3f15abfc0c10d9ff7afb80c67bf477bcec2cee253ae8bc00b363b379d631f8eae65fff1da1b07e3097ae7e07eaec3e4c410b92ad6a14b6a71944ae9a2b0f70347248ea0f6d88bac46fdc2ab2b3598793a14cc515d74cd1242ffe76d0852cb7f7d6b5221ee10d18789933f275c59ad5e972218ce63713ad873db7d12b1c7be02ecc213c0f4f81d6c151c1759eb4d972acd7d3edc0e513545b4402394c9e19d1ea54f23d3b8beb8689ba449126a0dc071f772e45e383466e1f5bede4023abadde6fb3a868b612602f1f220a7afa26996aa56fee437ce6c098bac0eac4d17ed9b3f8aee8f51879a199f804723dfaf1f6b50d75f58b8e8dc486998afc848307ee16322a003d902dd5d32c586fa1cee88ba70c6ab4e8b2ca862cf03f9d46690783b52a13fa3a17c054ebec1d36dba69e5417fd770124550258808c93395fb1cc1552b3f814614cd5206621773f3e5fea79a3b65596e0d0eca0345ebb28b78208d9d5423696c45205f3218a05792175aa0adc7970a51d019af57631ffeb4eb020eaad5cc178ea50501cdf13ac644646ac630206ee598f941d7524d519ee169e44d4fcd011ebd7c5d87439298b1ae5d8e4d9ab8b6f6d139d2b6dec3ef75700d3f119cf85a081a0e1dd7dbc5db09deab95d52c477aca0796de896553cd4e1e989356862754f1a4f2af1c8c63c04822bcb899a31e22e4c7a823262dd363d086698bada1576d807933ccaad2a419c6cb675c9b0c28240169ca37eb3d904a2dd8070a36b0f041606d9b1f378c9e5bd276fa20a3d4b59623d546e4cd2df052a29baf29f3eccc9100ca7a4a86341048897fa87556690feab3304ba7c9730faf90e5753d8af5d94101456a1dd8b98e417c88f77c984a8981018ea73ddc6ff58c53c17849439b9427854d838087dfff118df6afc7404afbd15ec4f8b9cbb8e745e9607f73db0ab26958f4f671fcabb2198c5194c36be0f119d63484c92eab63810f92337a4635716de915b246fb3f6807d1fb3598150b0f19e6ee4121cb5f198dbc34eb177603f868a6c94718b54ab71542dcc37216036dfb42c28a15f367d075f984b0d68a84081050104383b9bfd827f4f7374582bd1875a3740c7a3aca2e920dd906223a720752aa8cdae04add2fb0e1dd8a609", "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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e7000905", @ANYRES32], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) 4.054044327s ago: executing program 9 (id=8207): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) r2 = getpid() prctl$PR_SCHED_CORE(0x53564d41, 0x0, r2, 0x0, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x2e, 0x2, @tid=r2}, &(0x7f0000000040)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) lseek(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r6 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000001100)=[@in6={0xa, 0x4e21, 0x6, @private0, 0x389}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000001000/0x4000)=nil, 0x4000, &(0x7f0000000200)='9p\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2202014, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000,fsname=9p\x00,euid<', @ANYRESOCT=0x0, @ANYBLOB=',\x00']) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRES32], 0x15) 3.847533267s ago: executing program 9 (id=8208): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0xff, 0x1}) syz_usb_connect(0x4, 0x34, &(0x7f0000000240)=ANY=[], 0x0) (async) syz_usb_connect(0x4, 0x34, &(0x7f0000000240)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0) (async) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x12022, 0x0) (async) recvmmsg(r3, 0x0, 0x0, 0x12022, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES8, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000000000000030000000000000200000000000000"], 0xfc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) ioctl(r4, 0x8b2a, &(0x7f0000000040)) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000687a5a20720c110075090102030109022400010000000009040000026fc6df0009050200"], 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a00000002100010000000000fefffdfffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e0a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000005000110000000000000000000000ffffac1414aae000000200000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000aa3c0000000000000102000800"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80000002600000828bd7000fedbdf2518000000cd1bba37599cf4ed43c37c7dc163100221dcedf1c9568fd7c5f9713b4896c3da4216c90bae578ef598af56873734db04e387f487fc99715c238cac3a3b923b5e9847227f227e749b2549383cc9690e1f95dca62ba8aae825510391777f9d7d7fcdb7bb3dc157a7d8e7d4f642b9d46a2fb6280aa8fc724fa0893eb4c0260940880a369581a1d6914832447aab000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) getsockopt(r1, 0x100, 0x1000, &(0x7f00000003c0)=""/81, &(0x7f0000000440)=0x51) 1.878849535s ago: executing program 7 (id=8214): madvise(&(0x7f0000588000/0x1000)=nil, 0x1000, 0xa) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x82, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'vlan1\x00', {0x2, 0x4e23, @empty}}) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000040)) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80080) inotify_add_watch(r2, 0x0, 0x1) (async) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 1.878314608s ago: executing program 9 (id=8216): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000580)={0x40, 0x31, 0x2, "ca58"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x283, 0x0, 0x8702}]}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000) 1.544814159s ago: executing program 7 (id=8218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x60000000, 0x0, 0x78, 0x18, &(0x7f0000000480)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xd}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1.427462377s ago: executing program 7 (id=8219): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000102, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x32315659, 0x2, @stepwise={0xbf1, 0x401, 0x100000, 0x3, 0x3, 0x27b7}}) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x400) accept$inet(r1, &(0x7f0000000380)={0x2, 0x0, @private}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000340)=@phonet={0x23, 0x3, 0x0, 0x14}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="270502001cffba000600002f86dd", 0xe}], 0x1}, 0x800) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r3, r3) (async) r4 = dup2(r3, r3) sendmmsg$inet_sctp(r4, &(0x7f0000000940)=[{&(0x7f0000000580)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000000)='+', 0x241a0}], 0x1, 0x0, 0x0, 0x4004040}], 0x1, 0x24054094) (async) sendmmsg$inet_sctp(r4, &(0x7f0000000940)=[{&(0x7f0000000580)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000000)='+', 0x241a0}], 0x1, 0x0, 0x0, 0x4004040}], 0x1, 0x24054094) 1.380128525s ago: executing program 6 (id=8220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000586500000001"], 0xffe) 1.14865857s ago: executing program 6 (id=8221): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001f40)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x29}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x44000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) close(0xffffffffffffffff) r6 = socket(0x11, 0x800000003, 0x0) bind$packet(r6, &(0x7f0000000d00)={0x11, 0x0, r5, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb5}}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40057040000000000000000", 0x39}], 0x1) 935.511427ms ago: executing program 6 (id=8222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_usb_connect$uac1(0x4, 0xcb, 0x0, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x10, 0x2, 0x0, 0x35, 0x10, 0x8}, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000070001"], 0xffe) 453.890227ms ago: executing program 4 (id=8182): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="08001efbb07d5a6e", 0x8}], 0x1}, 0x48d0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x105, 0xfa, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000a80)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x1404, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40884) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000700)={0x0, 0xfff, 0x20}, &(0x7f0000000740)=0xc) sendmmsg$inet_sctp(r2, &(0x7f0000000800)=[{&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x9, @remote, 0xc}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="02f4e483e0fb4a5430b1d0e4e19933a5accd17aa50062aefb64f7ab30ce856056087c00169bd35aaa2fb8349e13773ca4acf86054a3e6c744161e2eceb8b0741386a5fbd9a69d939b6ddd4d5ccafae2c005621de2f87b054dde028d5a84773d60187", 0x62}], 0x1, 0x0, 0x0, 0x2805}, {&(0x7f0000000180)=@in6={0xa, 0x4e20, 0xfffffffa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)="413aa948acf5da87f148887842d968c6ac234b792bbcae7b994cada18feca4156f46751ad0180e87649669057f409581b9e55ed67138a18f5b305f7e8e7075eb55cae20e6c7a33e665694e84801e42404ae688ccf73e406ea81d0c0b3c18296b9658b72ff53580b9addc0fdc1c7d020891972e56485df8f633", 0x79}, {&(0x7f0000000280)="65142facf669bcffd96a303f3fb2da9d9820a04b3cb5bd2a", 0x18}], 0x2, &(0x7f0000000300)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}, @init={0x18, 0x84, 0x0, {0x1000, 0x8, 0xe, 0x4}}], 0x58, 0xc0}, {&(0x7f0000000380)=@in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000003c0)="7bc359f7417f3c4929eab8c766fa76f5a149aad428bfc0daddd28299b10f4d34ff0fecb0ea6b9cddae3cbaba09766b88aec3828e5c648f0f959d044b432cfa7b1eb55f2b7a476c25f96e0557c7cc259fe72f2948957bb68fc136ddbe43046ded6cb9910bff19011a68b4e7974aaea0a46a6812e474db44221556e8813c3f813ad753ec7da4179dcf82c16566727c2bc08bb7a8aa250881c2393d3d5b11340797ab2249f0e3e13e0dff5f7e25af320e826a310e29b61d9b04ed6a0d9ab11d06f5f3cfb2cb040bb762b8a6c06d71db3fec822b1fd7450c77caf75fcbfe13cb615badab36fac242f8c9d602", 0xea}, {&(0x7f0000000580)="7aef7d5689684a2db76c10749b39b01a91039316017c0cbd7998f4b4eab72195905cd656f004bbd92d6bc7516a2222262495e0cedaff87a9fe8c6f8809d2d8bb903ed5e553edcdd9c013e351843e41fd8caca8d9df861f64aa90a3bd37d25bb931cafe5255cc5a9d04661eb4fb57fcfe60769817aeaf2997f58e31bbfa4ecf6dbec0c5248c33d346a861ad0f423bd8dfd327e37dd22ebe07bf556fdec4d281cdeae111277c695b", 0xa7}, {&(0x7f00000004c0)="6ee79148cafddc81aa002038629084dff3fadacc998b71b29508210d9fbac5efaa873346e38efeb68fa0ad7159103fe99243", 0x32}, {&(0x7f0000000640)="b7be29430e1d3b4924bc3aac97395f6e4a81b85b6a8534b06f7463bf28ef55ff77c7e3c770dd572d647e41d1340641f6a98218889df6d4a5ffeae2bb3c728ec66f36b758c4535876b5b1aef1d5e1cb2ab1ea235cfa5cd253ecf4ad68905b996aa48787ebe617cc5d9ed8a2e97bb299a27731bbd787df06f02d01deaabc7adecedbd46c0381ea1ab6d722ebb0100e465c6d521b45c2ab4c0edad94e8f086cc3bef7755518e2c282d8e957cf6b043d9400debaf3bfd411", 0xb6}], 0x4, &(0x7f0000000780)=[@init={0x18, 0x84, 0x0, {0x81, 0x8, 0xfffb, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x7a, 0xc, 0x4, 0x9, 0x6, 0x1, 0x9d, 0x8, r3}}], 0x48, 0x8000}], 0x3, 0x4004010) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f00000009c0)={0x2, 0x0, 0x1, 'queue0\x00', 0x2}) 396.298504ms ago: executing program 7 (id=8223): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/128, &(0x7f00000000c0)=0x80) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000100)={0x6, 0x4, 0x3ade, 0xa, 0x3, 0xffffffcc, 0x1}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000200)="27522c0579f044498b2b3e3b0d268b457efb7ccf7a52e03c6b935d66606e99fc05f7fb88e533c0674511571463eccb6a6bce03846fad46a035886f825bf137762fe4f77debbcfc7c1e8d4b6ffeb1561fd53aa375051ba0496d71661b9dc4eb2bbcf838e5d610ac9dabeac90e8fab96d5b5f1bf7a5a694d4a8c6b298d8438873926c5b25fc9c824d8ae7822b442a27ba85a503633f31ccf62ffb5a3f91d02ffc6f0c4", 0xa2}], 0x1) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000002b80)={0x1, [{0x1, 0x460, 0x0, &(0x7f0000000300)="beba006a1c0fd2335b4d2b4bccd3ef2ad5238dbfd560c521d61906bc143f1599b792c3610b6241e0b7826e6884d17f44334de5d537d5d38808c074c4784d627b194ab5de7f93cf898e5270d787d9e9eb4003e71cd802432c42c1470a3125ebf67ccfdee4913341d71a12585ce0fddd932b0e0463497f0c5fa43bd6db7d4fbc45c5d9ab2a4504c7d6e8b8cfc4"}, {0x3, 0x410, 0x1000, &(0x7f00000003c0)="b60931df0373d60ca87121ac11d501eafcb1c2a569b07f59036860217022bf735123ef2b8405bd37d6e4622e921131f1437c18a4723e4fe22ae09bf1ad736801dc919b4abf25f1a82e5c7a675aac1c4d8aaf5f81f8613842568207415ed6fd2d13d43b4e2b047617d53b68df47d990e29276f26f50c04379e8a88d3c6e888b5f337c"}, {0x1, 0x720, 0x8, &(0x7f0000000480)="4cda120fa8b288ea52869cca3d25d79d435f63c9c267ab2835caf9298e67b13fb4aa2a90545b6f58211befec90fe50dc785dc37a7fb096f3d276ada61cda9d9c306de5a4e5311e276576caa8f3c66aa46d3fb17478f2ab8acf674d8f21753c9282c38e5dd9cc9c333d7e102e58035d5f50117cb0d32c478d6602c50c58281524bfeafc1a89f36760a176133f25318082488b32393227c5a2b6cf324c579f5bdebcef70b13a9b83b71356ac1e06a3972cd23ab1ed7fc00f023a0ee7d9d3d68484159e887b65584ed0877ee34e39e1b5166997161a880f7c9abf7b7c47b9a0289f2206c24c"}, {0x1, 0x278, 0x6, &(0x7f0000000580)="82aab85f6d4487d5a0a241cf30f49c332988f72642b9533197250f93f6f508b923ffb1f4701515704c666d612b6d603188a422c1b1e8db9fa431021ffe78a4f6f1da69bf73d305416eaca6a5e3a0b2"}, {0x1, 0x318, 0x7, &(0x7f0000000600)="8211a85139d0255d586b8506ba9f9b13a665636907ab27e242f1845353cbe684a46d64e05838672d786e3ff65cbfc4ca43ddf0335905feddabc84c530922eaf689c9f3c4a30ff9ddd5e1ee8a0140474cbb494632df0214146c3cf0b176d49e8e16c24f"}, {0x0, 0x4d8, 0x4, &(0x7f0000000680)="f046f5edd064bfa57ed5225e1db0452c39db5e379fd4b850ed23dbca1ae78c23073d5fc9a69be7c7349a64b6dd57d4acf7f4e65798047a118676a374885ff554568d8e7fc22986aacb3071996bd841d6038c07e09d27b1db1315ed6ef72dae21e564e7adc76401d4f0f21aa95b324e0b4de614ea203590f7693c7c166b99dbbfa787cad0a2aff3994c0bd2dfa08165110396165b160ef334c2544f"}, {0x2, 0x8000, 0x6, &(0x7f0000000740)="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"}, {0x2, 0x0, 0x6, &(0x7f0000001740)}, {0x4, 0x2b0, 0x400, &(0x7f0000001780)="4c8f8cc8d2174585ca6259df757c55e97eb0def3dc827eb861c0f3a25e3ed64563d6e90eee4d31166d799a85434803736c3c09934058148eccb59c63d526a7f9e79164a05963d06e2d8eb541b0d332827559e219d1d2"}, {0x1, 0x290, 0x73, &(0x7f0000001800)="1444f09c06591f4291842aa2aa0fdc253207809eae1343c441ef84b2dfa711c7e9a47c2620390d039152037d118cf949545b14c9020df6bb3667b7f403a8c6e4378ea6f9ad398ffe7c7fb32941a7631858e8"}, {0x3, 0x40, 0x8, &(0x7f0000001880)="34dfbf9898d94729"}, {0x1, 0x248, 0x7, &(0x7f00000018c0)="1429704ea321e543e322c2f97fd70ef87b63816852234ede34c2f2f3e2d5bc538ef1e0ccacebb38748a2d741cb9b2ccdf8ddcf8baf96fe19f5578066782d83b62bdc5419e248fe6081"}, {0x2, 0x2e0, 0x5, &(0x7f0000001940)="3c00407aa05aa9abd023e18601e676953f96aef5b67d343cdedcd1f24cad2bcd62ef084cd69e90b337e837e860c5ae8d69d5de7d0e2b23296d06e07742138dd23f5c328dc621657cd0dd391ce373d94809a029ff9af805ae70f4854e"}, {0x0, 0x670, 0x3, &(0x7f00000019c0)="a12060f13ff0052943c3c55668045043ca0f4ddb5dd01103750a4b9f7903448a7ea9c9e77b749f69009a2b2ee061748af177061bd44e76189f4cba39c78e4b67b7116ca7bc9576bc594757f2c4a5632ea364b8a75d398d6d69d0803f2aa384da178e41965a83cc6deee947fed69e2f631a4fedb953cc6401c16470a86e22ce641c3c0a748cd799ac82046ed58a1d28c53df397ef8812ee541fc22df690334657201be4c8024feff49481b566e92ddb8652934cb287fc75d4c334ef8f4251930dc9c3c9a6afe938d1788d26426585"}, {0x1, 0x8000, 0x81, &(0x7f0000001ac0)="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"}, {0x2, 0x408, 0x400, &(0x7f0000002ac0)="33ec75d44f1541bb1a635e1dee6a5d407ae011239671c64d53ae2ac2e42e24d6b54f87121067cea07e0e20b888aa5d6b3d5e4c18b929edaa3cc41a3c480b8698ca47e66eaffe603ce5a72835c05a7c16228a6e7b68cd365e328db0ff0a76b4d8ffb65dcd7bf152e4edf2c95a407480385fa34c591afcebe7d283007a09f0cba059"}]}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) close_range(r3, r1, 0x2) readv(r0, &(0x7f0000002ec0)=[{&(0x7f0000002d40)=""/107, 0x6b}, {&(0x7f0000002dc0)=""/222, 0xde}], 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000002f00)=0x16, 0x4) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000002f40)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002f80)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000002fc0)={0x0, 0x5, 0x9}, &(0x7f0000003000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000003040)={0x0, 0x8200, 0x5, 0x3, r4}, &(0x7f0000003080)=0x10) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3f) write$P9_RLCREATE(r1, &(0x7f00000030c0)={0x18, 0xf, 0x1, {{0x1, 0x2}, 0x3ff}}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x1c, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20004080) r7 = accept4$llc(r1, &(0x7f0000003240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000003280)=0x10, 0x40000) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000032c0), &(0x7f0000003300)=0xc) ioctl$KVM_CAP_VM_TYPES(r1, 0x4068aea3, &(0x7f0000003340)={0xeb, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000033c0)={0x14ef, 0x1, 0x7, 0x0, 0xe, 0x100}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003440), r5) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000003580)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x24, r8, 0xa00, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044060) 267.629341ms ago: executing program 6 (id=8224): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 243.416446ms ago: executing program 4 (id=8226): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b0000904000001362434000905df03"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x2590f58a) r2 = socket(0x2b, 0x80801, 0x1) getsockopt$inet6_mreq(r2, 0x11e, 0x1a, 0x0, &(0x7f0000000240)) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="c553f163f64de5e9384f9046fe81af867a99341ceaddc794b6ffc23caf82a17d71996978c769f9c461eb85017ec58756c2a0adf1bb7bea34b010b3e0325803c1c70ec87140a2fc0fd1e512c76a8090e3dd6358eeb975cecd0c2bbf9bf2fd5c17d8f29c629df94f35a39be7cdcf4929f0dd93336e23f854d5377e7f6036f1f9c67976ac49d060c5f4637079d3c0bd3697196996e1b7b718804811220f884ea018573a197681540b4fa09a031f8f84ffd875b784509705b183f542e13dbaeb41bcb3b3b725c5cb595b", 0xc8, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000480)='\x00', 0x1, 0xffffffffffffffff) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a00000006000000000000000300060000000000020000003b8bffff"], 0x50}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000250001002bbd7000fcdbdf2526dd187513"], 0xa0}], 0x1, 0x0, 0x0, 0x4050}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) syz_usb_control_io$lan78xx(r0, &(0x7f00000007c0)={0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)=ANY=[@ANYBLOB="00030400008023140747c255961d5cf85cf95ed4437d0dc509147dbdec329d706dab4ebb2f34d36fe3d81f707bd9aa37623f0b84848349592eb07227ce42cc3960f1e2ce69f9c0548e0551d0ab2039ae5b31b846ae6761631d6f7ea6f800767f143be922c526324bfd16d6e8fcf2b4091465d8a3eece420386fa16738f4a577986e5d40fc06e81b1274c110357fc7da63980f5fb8e05d157b6486b1c6d0e17bd7f8cfdaac0ae8b9d304fa7371d3d5017505ba4964c62bfd683f94e3aa26f7c8ff724a3613d0012c554d80c1c7870f4cb4ea71eb000bb5fbe505784fb0b50855c9261da1a2b5c9a05d550e900"/248]}, &(0x7f00000009c0)={0x34, &(0x7f0000000800)=ANY=[@ANYBLOB="20006b000000812c83ca4ece7cdcbf3c8fd23779bad17d2a6a1724b06e304c3b2d962a888b0947fe1769d5b500e5ca5f18e6ed7d44ff90bb72d1b6955fdf9367b77000000000b080e6aa000aa2831efed3237872c8dc9ff5f53ef5749907a4e7e080e6f8641c61981036cb87fc27d83be4"], &(0x7f0000000880)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xa0}, &(0x7f0000000900)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000940)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000980)={0xc0, 0xa2, 0x2f, "96ad29e58339aca076aa9a5c168d491356a07a63455c53f61777534d945e5c2f003275130168d13b34e8143b5cd34b"}}) sendmsg$IEEE802154_LLSEC_LIST_DEV(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r8, 0x701, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/80, 0x50, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000440)={0x0, r3, r5}, &(0x7f0000000480)=""/205, 0xcd, &(0x7f0000000640)={&(0x7f0000000580)={'cbcmac(aes)\x00'}, &(0x7f00000005c0)="854ccb516e5d63d2805aed4c15486e112266f1a9bd3081578c97ff2df6ce9736804a16612c34ccf2e7f39cb1025e153e85e83cfbc71a640f9992e86b3742375dd079c35a668a9311a4f790dfca71ce85db318ca270ae8daed94826b8078867430c5bf3ea7cbf11c3d4e342f80882", 0x6e}) r11 = socket$inet(0xa, 0x801, 0x84) connect$inet(r11, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r11, 0x8) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmmsg$unix(r12, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) 155.543898ms ago: executing program 6 (id=8227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c001700000315b7386000006e68be52cd66c5ff857963fa9b31958932ce3192f358be4e01f99132291110d457f6efa3c1f75f68e851bed389d05280"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x40010) (async, rerun: 32) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc5) (async) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x10040) (async) ioctl$VT_WAITACTIVE(r1, 0x5607) 0s ago: executing program 6 (id=8228): socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x22, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d30fcffffff00000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): 6][ T5918] em28xx 5-1:0.89: Freeing device [ 1022.397820][T27186] netlink: 'syz.6.7776': attribute type 21 has an invalid length. [ 1022.417934][T27186] netlink: 'syz.6.7776': attribute type 4 has an invalid length. [ 1022.628634][ T5887] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1022.640252][ T5887] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1022.649467][ T1209] gspca_stk1135: reg_w 0x5 err -71 [ 1022.656845][ T5887] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1022.668431][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 1022.675642][T27200] overlayfs: failed to resolve './file2': -2 [ 1022.679740][ T1209] gspca_stk1135: Sensor write failed [ 1022.688064][ T5887] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 1022.688977][T27200] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1022.703892][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 1022.714783][ T1209] gspca_stk1135: Sensor write failed [ 1022.721812][ T5887] usb 8-1: USB disconnect, device number 114 [ 1022.728021][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 1022.734361][ T1209] gspca_stk1135: Sensor read failed [ 1022.743741][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 1022.750202][ T1209] gspca_stk1135: Sensor read failed [ 1022.755455][ T1209] gspca_stk1135: Detected sensor type unknown (0x0) [ 1022.762753][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 1022.769109][ T1209] gspca_stk1135: Sensor read failed [ 1022.774455][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 1022.781850][ T1209] gspca_stk1135: Sensor read failed [ 1022.787054][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 1022.794592][ T1209] gspca_stk1135: Sensor write failed [ 1022.799917][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 1022.806291][ T1209] gspca_stk1135: Sensor write failed [ 1022.811611][ T1209] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71 [ 1022.822263][ T1209] usb 10-1: USB disconnect, device number 24 [ 1023.232060][T27208] __nla_validate_parse: 6 callbacks suppressed [ 1023.232076][T27208] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7782'. [ 1023.232096][T27208] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7782'. [ 1023.237930][T27210] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7783'. [ 1023.237949][T27210] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7783'. [ 1023.237966][T27210] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7783'. [ 1023.238020][T27210] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7783'. [ 1023.257999][T27212] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7784'. [ 1023.260219][T27213] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7784'. [ 1023.315896][T27215] overlayfs: failed to resolve './file2': -2 [ 1023.334733][T27215] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1023.975790][T27230] AppArmor: change_hat: Invalid input '9tun' [ 1024.018088][T27234] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7792'. [ 1024.094705][T27234] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7792'. [ 1024.150209][T27238] sp0: Synchronizing with TNC [ 1024.278067][T27242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1024.287290][T27242] validate_nla: 1 callbacks suppressed [ 1024.287300][T27242] netlink: 'syz.4.7794': attribute type 1 has an invalid length. [ 1024.441055][ T5873] usb 8-1: new high-speed USB device number 115 using dummy_hcd [ 1024.526465][T27250] netlink: 'syz.4.7796': attribute type 6 has an invalid length. [ 1024.539622][T27250] netlink: 'syz.4.7796': attribute type 5 has an invalid length. [ 1024.550242][T27250] netlink: 'syz.4.7796': attribute type 4 has an invalid length. [ 1024.575661][T27252] binder: 27251:27252 ioctl c0306201 2000000003c0 returned -14 [ 1024.601129][ T5873] usb 8-1: Using ep0 maxpacket: 8 [ 1024.609628][ T5873] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1024.619082][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.627454][ T5873] usb 8-1: Product: syz [ 1024.631676][ T5873] usb 8-1: Manufacturer: syz [ 1024.637613][ T5873] usb 8-1: SerialNumber: syz [ 1024.644114][ T5873] usb 8-1: config 0 descriptor?? [ 1024.689911][T27255] overlayfs: failed to resolve './file2': -2 [ 1024.696969][T27255] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1024.816855][ T5887] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1024.872855][ T5873] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1024.975604][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 1024.982171][ T5887] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1024.991019][ T5887] usb 5-1: config 0 has no interface number 0 [ 1024.997246][ T5887] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1025.010374][ T5887] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1025.019603][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1025.027702][ T5887] usb 5-1: Product: syz [ 1025.031939][ T5887] usb 5-1: SerialNumber: syz [ 1025.038792][ T5887] usb 5-1: config 0 descriptor?? [ 1025.047187][ T5887] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 1025.263130][ T5887] usb 5-1: USB disconnect, device number 104 [ 1025.883708][T27259] netlink: 'syz.4.7801': attribute type 29 has an invalid length. [ 1025.896050][T27259] netlink: 'syz.4.7801': attribute type 29 has an invalid length. [ 1026.228613][ T5880] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1026.467759][ T5873] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1026.486159][ T5873] usb 8-1: USB disconnect, device number 115 [ 1027.319272][T27301] netlink: 'syz.6.7814': attribute type 1 has an invalid length. [ 1027.327272][T27301] netlink: 'syz.6.7814': attribute type 2 has an invalid length. [ 1027.335031][T27301] netlink: 'syz.6.7814': attribute type 1 has an invalid length. [ 1027.342345][ T5880] usb 5-1: device descriptor read/64, error -71 [ 1027.342856][T27301] netlink: 'syz.6.7814': attribute type 3 has an invalid length. [ 1027.449418][ T1209] usb 8-1: new full-speed USB device number 116 using dummy_hcd [ 1027.599369][ T5880] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1027.603579][T27308] binder: 27307:27308 ioctl c0306201 2000000003c0 returned -14 [ 1027.624979][ T1209] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1027.643142][ T1209] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.651207][ T1209] usb 8-1: Product: syz [ 1027.656781][ T1209] usb 8-1: Manufacturer: syz [ 1027.661788][ T1209] usb 8-1: SerialNumber: syz [ 1027.669397][ T1209] usb 8-1: config 0 descriptor?? [ 1027.683986][T27312] binder: 27311:27312 ioctl c0306201 2000000003c0 returned -14 [ 1027.710980][T27313] overlayfs: failed to resolve './file2': -2 [ 1027.718531][T27313] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1027.783051][ T5880] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1027.783078][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.785276][ T5880] usb 5-1: config 0 descriptor?? [ 1027.900500][ T1209] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1028.220041][ T5880] ath6kl: Failed to submit usb control message: -71 [ 1028.227313][ T5880] ath6kl: unable to send the bmi data to the device: -71 [ 1028.234424][ T5880] ath6kl: Unable to send get target info: -71 [ 1028.241178][ T5880] ath6kl: Failed to init ath6kl core: -71 [ 1028.255727][ T5873] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1028.264991][ T5880] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1028.280738][ T5880] usb 5-1: USB disconnect, device number 106 [ 1028.434629][ T5873] usb 10-1: Using ep0 maxpacket: 32 [ 1028.441222][ T5873] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 1028.449995][ T5873] usb 10-1: config 0 has no interface number 0 [ 1028.456343][ T5873] usb 10-1: config 0 interface 89 has no altsetting 0 [ 1028.465501][ T5873] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1028.474737][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.482875][ T5873] usb 10-1: Product: syz [ 1028.487134][ T5873] usb 10-1: Manufacturer: syz [ 1028.492352][ T5873] usb 10-1: SerialNumber: syz [ 1028.499814][ T5873] usb 10-1: config 0 descriptor?? [ 1028.797227][T27323] __nla_validate_parse: 13 callbacks suppressed [ 1028.797239][T27323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7823'. [ 1028.854308][T27323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7823'. [ 1028.935605][T27323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7823'. [ 1029.106091][T27334] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7826'. [ 1029.118540][T27334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7826'. [ 1029.131820][T27334] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7826'. [ 1029.141122][T27334] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7826'. [ 1029.690642][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1029.858449][ T1209] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1029.870616][ T9] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 1029.878797][ T9] usb 5-1: config 0 has no interface number 0 [ 1029.885566][ T9] usb 5-1: config 0 interface 122 has no altsetting 0 [ 1029.894429][ T1209] usb 8-1: USB disconnect, device number 116 [ 1029.907261][ T9] usb 5-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1029.916658][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.926035][ T9] usb 5-1: Product: syz [ 1029.930178][ T9] usb 5-1: Manufacturer: syz [ 1029.934851][ T9] usb 5-1: SerialNumber: syz [ 1029.941933][ T9] usb 5-1: config 0 descriptor?? [ 1030.154902][T27346] validate_nla: 1 callbacks suppressed [ 1030.154912][T27346] netlink: 'syz.6.7830': attribute type 4 has an invalid length. [ 1030.181613][T27346] netlink: 25 bytes leftover after parsing attributes in process `syz.6.7830'. [ 1030.386273][ T5873] usb 5-1: USB disconnect, device number 107 [ 1030.394611][ T5873] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1030.578356][T27357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7834'. [ 1030.588090][T27357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7834'. [ 1030.859915][T27364] overlayfs: failed to resolve './file2': -2 [ 1030.866851][T27364] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1031.044341][T27369] binder: BINDER_SET_CONTEXT_MGR already set [ 1031.050646][T27369] binder: 27367:27369 ioctl 4018620d 200000000000 returned -16 [ 1031.052822][T27368] netlink: 'syz.7.7838': attribute type 4 has an invalid length. [ 1031.061623][T27369] binder: BINDER_SET_CONTEXT_MGR already set [ 1031.072258][T27369] binder: 27367:27369 ioctl 4018620d 200000000040 returned -16 [ 1031.081670][T27369] binder: 27367:27369 ioctl c0306201 2000000003c0 returned -14 [ 1031.211604][ T5873] usb 10-1: USB disconnect, device number 25 [ 1031.289916][T27377] netlink: 'syz.7.7843': attribute type 4 has an invalid length. [ 1031.331391][T27381] netlink: 'syz.9.7845': attribute type 4 has an invalid length. [ 1031.344673][T27381] netlink: 'syz.9.7845': attribute type 4 has an invalid length. [ 1031.391158][ T796] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1031.395131][T27383] overlayfs: failed to resolve './file2': -2 [ 1031.413256][T27383] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1031.569309][ T796] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1031.579796][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.597790][ T796] usb 5-1: Product: syz [ 1031.601975][ T796] usb 5-1: Manufacturer: syz [ 1031.607206][ T796] usb 5-1: SerialNumber: syz [ 1031.613463][ T796] usb 5-1: config 0 descriptor?? [ 1031.836980][ T796] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1031.980444][ T5873] usb 8-1: new high-speed USB device number 117 using dummy_hcd [ 1032.140405][ T5873] usb 8-1: Using ep0 maxpacket: 32 [ 1032.147497][ T5873] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1032.156172][ T5873] usb 8-1: config 0 has no interface number 0 [ 1032.166409][ T5873] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1032.185437][ T5873] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1032.195383][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.203377][ T5873] usb 8-1: Product: syz [ 1032.208076][ T5873] usb 8-1: Manufacturer: syz [ 1032.212799][ T5873] usb 8-1: SerialNumber: syz [ 1032.220754][ T5873] usb 8-1: config 0 descriptor?? [ 1032.597000][T27409] xt_HMARK: proto mask must be zero with L3 mode [ 1032.676623][T27411] xt_HMARK: proto mask must be zero with L3 mode [ 1032.779810][T27413] overlayfs: failed to resolve './file2': -2 [ 1032.788076][T27413] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1032.956019][T27416] binder: 27415:27416 ioctl c0306201 2000000003c0 returned -14 [ 1033.134776][T27420] netlink: 'syz.9.7860': attribute type 4 has an invalid length. [ 1033.542983][ T5880] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1033.610926][T27432] netlink: 'syz.6.7864': attribute type 4 has an invalid length. [ 1033.624095][T27432] netlink: 'syz.6.7864': attribute type 4 has an invalid length. [ 1033.735545][ T5880] usb 10-1: Using ep0 maxpacket: 32 [ 1033.742325][ T5880] usb 10-1: config 137 has too many interfaces: 197, using maximum allowed: 32 [ 1033.751983][ T5880] usb 10-1: config 137 has an invalid descriptor of length 182, skipping remainder of the config [ 1033.763321][ T5880] usb 10-1: config 137 has 0 interfaces, different from the descriptor's value: 197 [ 1033.774772][ T5880] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1033.784277][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.795364][ T796] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1033.804884][ T5880] usb 10-1: Product: syz [ 1033.809123][ T5880] usb 10-1: Manufacturer: syz [ 1033.815286][ T5880] usb 10-1: SerialNumber: syz [ 1033.820958][ T796] usb 5-1: USB disconnect, device number 108 [ 1033.889913][T27436] overlayfs: failed to resolve './file2': -2 [ 1033.899601][T27436] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1034.058318][ T5880] usb 10-1: USB disconnect, device number 26 [ 1034.368898][T27442] netlink: 'syz.4.7868': attribute type 2 has an invalid length. [ 1034.377786][T27442] netlink: 'syz.4.7868': attribute type 1 has an invalid length. [ 1034.710135][ T1209] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1034.792459][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1034.805179][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1034.814667][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1034.822883][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1034.831015][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1034.894233][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 1034.918712][ T1209] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1034.954657][T27451] lo speed is unknown, defaulting to 1000 [ 1034.960961][ T1209] usb 5-1: config 0 has no interface number 0 [ 1034.978275][ T1209] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1035.012648][ T1209] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1035.024621][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.034771][ T5887] usb 8-1: USB disconnect, device number 117 [ 1035.066417][ T1209] usb 5-1: Product: syz [ 1035.081458][ T1209] usb 5-1: Manufacturer: syz [ 1035.092250][ T1209] usb 5-1: SerialNumber: syz [ 1035.113850][ T1209] usb 5-1: config 0 descriptor?? [ 1035.126675][ T1209] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1035.147183][ T1209] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1035.301231][T27461] overlayfs: failed to resolve './file2': -2 [ 1035.328305][T27451] chnl_net:caif_netlink_parms(): no params data found [ 1035.338336][T27461] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1035.554798][T27451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.564304][T27451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.571850][T27451] bridge_slave_0: entered allmulticast mode [ 1035.580288][T27451] bridge_slave_0: entered promiscuous mode [ 1035.589942][T27451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.597568][T27451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.606262][T27451] bridge_slave_1: entered allmulticast mode [ 1035.614939][T27451] bridge_slave_1: entered promiscuous mode [ 1035.657870][T27451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.771962][ T1209] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1035.885288][T27451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.886602][ T5887] usb 8-1: new full-speed USB device number 118 using dummy_hcd [ 1035.949025][ T131] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.975852][T27451] team0: Port device team_slave_0 added [ 1035.987115][T27451] team0: Port device team_slave_1 added [ 1036.015689][T27451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.022714][T27451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.050134][T27451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.072780][ T131] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.087275][ T5887] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1036.096550][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.104836][ T5887] usb 8-1: Product: syz [ 1036.106023][T27451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.109115][ T5887] usb 8-1: Manufacturer: syz [ 1036.116202][T27451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.123084][ T5887] usb 8-1: SerialNumber: syz [ 1036.146791][T27451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.176646][ T5887] usb 8-1: config 0 descriptor?? [ 1036.214503][ T131] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.234598][T27451] hsr_slave_0: entered promiscuous mode [ 1036.241672][T27451] hsr_slave_1: entered promiscuous mode [ 1036.248278][T27451] debugfs: 'hsr0' already exists in 'hsr' [ 1036.254307][T27451] Cannot create hsr debugfs directory [ 1036.289016][ T131] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.419057][ T5887] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1036.431775][ T1209] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1036.443132][ T1209] em28xx 5-1:0.89: board has no eeprom [ 1036.520327][ T1209] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1036.529353][ T1209] em28xx 5-1:0.89: analog set to bulk mode. [ 1036.545107][ T9] em28xx 5-1:0.89: Registering V4L2 extension [ 1036.556081][ T131] bridge_slave_1: left allmulticast mode [ 1036.561739][ T131] bridge_slave_1: left promiscuous mode [ 1036.587446][ T131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.590247][ T1209] usb 5-1: USB disconnect, device number 109 [ 1036.619416][ T131] bridge_slave_0: left allmulticast mode [ 1036.625063][ T131] bridge_slave_0: left promiscuous mode [ 1036.635125][ T131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.636921][ T1209] em28xx 5-1:0.89: Disconnecting em28xx [ 1036.662307][ T9] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1036.669296][ T9] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1036.679102][ T9] em28xx 5-1:0.89: No AC97 audio processor [ 1036.689508][ T9] usb 5-1: Decoder not found [ 1036.696876][ T9] em28xx 5-1:0.89: failed to create media graph [ 1036.704308][ T9] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1036.713244][ T9] em28xx 5-1:0.89: Registering snapshot button... [ 1036.723593][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input130 [ 1036.736588][ T9] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1036.745834][ T1209] em28xx 5-1:0.89: Closing input extension [ 1036.751732][ T1209] em28xx 5-1:0.89: Deregistering snapshot button [ 1036.850519][ T1209] em28xx 5-1:0.89: Freeing device [ 1037.007473][ T131] dvmrp0 (unregistering): left allmulticast mode [ 1037.055320][ T5825] Bluetooth: hci5: command tx timeout [ 1037.091980][ T131] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1037.114969][T27485] binder: BINDER_SET_CONTEXT_MGR already set [ 1037.121853][T27485] binder: 27483:27485 ioctl 4018620d 200000000000 returned -16 [ 1037.138274][T27485] binder: BINDER_SET_CONTEXT_MGR already set [ 1037.145056][T27485] binder: 27483:27485 ioctl 4018620d 200000000040 returned -16 [ 1037.154921][T27485] binder: 27483:27485 ioctl c0306201 2000000003c0 returned -14 [ 1037.192543][ T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.250064][ T131] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1037.292004][ T131] bond0 (unregistering): Released all slaves [ 1037.299495][T27489] validate_nla: 2 callbacks suppressed [ 1037.299507][T27489] netlink: 'syz.4.7879': attribute type 4 has an invalid length. [ 1037.318961][T27489] netlink: 'syz.4.7879': attribute type 4 has an invalid length. [ 1037.353109][ T9] lo speed is unknown, defaulting to 1000 [ 1037.372233][ T9] syz0: Port: 1 Link ACTIVE [ 1037.385732][ T131] tipc: Left network mode [ 1037.519071][ T131] IPVS: stopping master sync thread 24869 ... [ 1037.598808][T27497] netlink: 'syz.4.7880': attribute type 10 has an invalid length. [ 1037.634622][T27497] __nla_validate_parse: 4 callbacks suppressed [ 1037.634637][T27497] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7880'. [ 1038.099772][ T131] hsr_slave_0: left promiscuous mode [ 1038.125848][ T131] hsr_slave_1: left promiscuous mode [ 1038.151699][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.187485][ T131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.240489][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.251620][ T131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.273438][ T131] veth1_macvtap: left promiscuous mode [ 1038.286640][ T131] veth0_macvtap: left promiscuous mode [ 1038.426859][ T5887] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1038.458465][ T5887] usb 8-1: USB disconnect, device number 118 [ 1038.586760][ T131] team0 (unregistering): Port device team_slave_1 removed [ 1038.601763][ T131] team0 (unregistering): Port device team_slave_0 removed [ 1038.810988][T27451] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1038.857219][T27451] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1038.882568][T27451] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1038.894414][T27451] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1039.138920][T27451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.171079][T27451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.205129][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.212312][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.220326][ T5887] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 1039.253642][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.260856][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.286992][ T5825] Bluetooth: hci5: command tx timeout [ 1039.365132][T27451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1039.403239][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.421980][ T5887] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1039.435226][T27548] netlink: 'syz.7.7888': attribute type 4 has an invalid length. [ 1039.456204][ T5887] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1039.491703][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.509861][ T5887] usb 5-1: config 0 descriptor?? [ 1039.531588][ T5887] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1039.549144][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 1039.587409][ T5887] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1039.608621][ T5887] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1039.625633][ T5887] usb 5-1: media controller created [ 1039.640361][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1039.662641][T27451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.686913][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 1039.704495][ T5887] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1039.737110][T27561] x_tables: duplicate underflow at hook 4 [ 1039.754462][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input131 [ 1039.797396][ T5887] dvb-usb: schedule remote query interval to 150 msecs. [ 1039.804426][ T5887] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1039.831253][ T5887] usb 5-1: USB disconnect, device number 110 [ 1039.898861][ T5887] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1040.022205][ T5880] usb 8-1: new full-speed USB device number 119 using dummy_hcd [ 1040.079755][T27451] veth0_vlan: entered promiscuous mode [ 1040.095800][T27451] veth1_vlan: entered promiscuous mode [ 1040.156694][T27451] veth0_macvtap: entered promiscuous mode [ 1040.169515][T27451] veth1_macvtap: entered promiscuous mode [ 1040.175917][ T5880] usb 8-1: device descriptor read/64, error -71 [ 1040.213524][T27451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.244190][T27451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.262251][ T131] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.282031][ T131] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.308011][ T131] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.319022][ T131] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.432687][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.434905][T27582] binder: BINDER_SET_CONTEXT_MGR already set [ 1040.449503][ T5880] usb 8-1: new full-speed USB device number 120 using dummy_hcd [ 1040.452698][T27582] binder: 27581:27582 ioctl 4018620d 200000000000 returned -16 [ 1040.460158][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.471743][T27582] binder: BINDER_SET_CONTEXT_MGR already set [ 1040.478808][T27582] binder: 27581:27582 ioctl 4018620d 200000000040 returned -16 [ 1040.489181][T27582] binder: 27581:27582 ioctl c0306201 2000000003c0 returned -14 [ 1040.545068][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.566016][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.601423][T27587] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7892'. [ 1040.625486][ T5880] usb 8-1: device descriptor read/64, error -71 [ 1040.675726][T27592] binder: 27590:27592 ioctl c0306201 2000000003c0 returned -14 [ 1040.686955][T27587] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7892'. [ 1040.749929][ T5880] usb usb8-port1: attempt power cycle [ 1040.754241][T27597] netlink: 388 bytes leftover after parsing attributes in process `syz.9.7893'. [ 1040.855948][T27587] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7892'. [ 1040.909602][T27607] netlink: 'syz.9.7894': attribute type 4 has an invalid length. [ 1041.003331][T27615] netlink: 'syz.9.7896': attribute type 4 has an invalid length. [ 1041.065940][T27615] netlink: 'syz.9.7896': attribute type 4 has an invalid length. [ 1041.126020][ T5880] usb 8-1: new full-speed USB device number 121 using dummy_hcd [ 1041.161230][ T5880] usb 8-1: device descriptor read/8, error -71 [ 1041.423983][ T5880] usb 8-1: new full-speed USB device number 122 using dummy_hcd [ 1041.434611][ T796] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1041.446473][ T5880] usb 8-1: device descriptor read/8, error -71 [ 1041.509988][ T5825] Bluetooth: hci5: command tx timeout [ 1041.574410][ T5880] usb usb8-port1: unable to enumerate USB device [ 1041.609643][ T796] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.620082][ T796] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1041.630618][ T796] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1041.640120][ T796] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.653376][ T796] usb 10-1: config 0 descriptor?? [ 1041.663938][ T796] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1041.671636][ T796] dvb-usb: bulk message failed: -22 (3/0) [ 1041.679283][ T796] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1041.690867][ T796] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1041.698098][ T796] usb 10-1: media controller created [ 1041.704719][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1041.717945][ T796] dvb-usb: bulk message failed: -22 (6/0) [ 1041.723997][ T796] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1041.732938][ T796] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input133 [ 1041.748858][ T796] dvb-usb: schedule remote query interval to 150 msecs. [ 1041.755952][ T796] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1041.939560][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 1041.945364][ T796] dvb-usb: error while querying for an remote control event. [ 1041.959906][T27580] usb 10-1: USB disconnect, device number 27 [ 1042.033526][T27580] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1042.340936][T27636] binder: BINDER_SET_CONTEXT_MGR already set [ 1042.340946][T27636] binder: 27635:27636 ioctl 4018620d 200000000000 returned -16 [ 1042.343076][T27636] binder: BINDER_SET_CONTEXT_MGR already set [ 1042.343085][T27636] binder: 27635:27636 ioctl 4018620d 200000000040 returned -16 [ 1042.343260][T27636] binder: 27635:27636 ioctl c0306201 2000000003c0 returned -14 [ 1042.538016][T27645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7908'. [ 1042.552532][T27647] netlink: 'syz.9.7909': attribute type 4 has an invalid length. [ 1042.594818][T27645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7908'. [ 1042.697871][T27645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7908'. [ 1042.788438][T27662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7914'. [ 1042.788460][T27662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7914'. [ 1042.950775][T27667] netlink: 'syz.9.7916': attribute type 4 has an invalid length. [ 1042.970199][T27669] netlink: 'syz.7.7917': attribute type 5 has an invalid length. [ 1043.114687][T27676] binder: 27675:27676 ioctl c0306201 2000000003c0 returned -14 [ 1043.170428][T27677] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1043.182926][T27677] block device autoloading is deprecated and will be removed. [ 1043.262102][T27685] overlayfs: failed to resolve './file2': -2 [ 1043.270356][T27685] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1043.416261][T27696] program syz.9.7927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1043.429733][T27698] program syz.9.7927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1043.526999][T27704] binder: 27701:27704 ioctl c0306201 2000000003c0 returned -14 [ 1043.536439][T27664] Process accounting resumed [ 1043.602764][T27708] __nla_validate_parse: 1 callbacks suppressed [ 1043.602778][T27708] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7932'. [ 1043.621984][T27708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7932'. [ 1043.684646][T27712] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7934'. [ 1043.688771][T27714] netlink: 'syz.4.7935': attribute type 4 has an invalid length. [ 1043.699437][T27580] lo speed is unknown, defaulting to 1000 [ 1043.699464][T27580] syz0: Port: 1 Link DOWN [ 1043.744576][ T5825] Bluetooth: hci5: command tx timeout [ 1043.887894][T27722] binder: 27721:27722 ioctl c0306201 2000000003c0 returned -14 [ 1044.025866][T27580] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1044.209218][T27580] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1044.217321][T27580] usb 5-1: config 0 has no interface number 0 [ 1044.225133][T27580] usb 5-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid maxpacket 47936, setting to 64 [ 1044.236342][T27580] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1044.244911][T27580] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1044.254042][T27580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.262041][T27580] usb 5-1: Product: syz [ 1044.266184][T27580] usb 5-1: Manufacturer: syz [ 1044.270784][T27580] usb 5-1: SerialNumber: syz [ 1044.277889][T27580] usb 5-1: config 0 descriptor?? [ 1044.284576][T27716] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1044.293703][T19768] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1044.455806][T19768] usb 10-1: Using ep0 maxpacket: 32 [ 1044.464234][T19768] usb 10-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 1044.474460][T19768] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.482728][T19768] usb 10-1: Product: syz [ 1044.487060][T19768] usb 10-1: Manufacturer: syz [ 1044.491751][T19768] usb 10-1: SerialNumber: syz [ 1044.498670][T19768] usb 10-1: config 0 descriptor?? [ 1044.509183][T27716] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1044.666063][T27734] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.7945'. [ 1044.723274][T27728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.733384][T27728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.745754][T19768] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 1044.760046][T19768] usb 10-1: USB disconnect, device number 28 [ 1044.961360][T27580] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1044.974201][T27580] usb 5-1: USB disconnect, device number 111 [ 1045.374143][T27744] binder: 27743:27744 ioctl c0306201 2000000003c0 returned -14 [ 1045.422701][T27746] netlink: 'syz.7.7950': attribute type 4 has an invalid length. [ 1045.429978][T27748] netlink: 'syz.9.7951': attribute type 4 has an invalid length. [ 1045.434719][T27746] netlink: 'syz.7.7950': attribute type 4 has an invalid length. [ 1045.749843][T27580] usb 8-1: new high-speed USB device number 123 using dummy_hcd [ 1045.912459][T27580] usb 8-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1045.922883][T27580] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.939857][T27580] usb 8-1: config 0 descriptor?? [ 1045.949615][T27580] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1046.167418][ T9] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1046.180841][T27580] gspca_sunplus: reg_w_riv err -71 [ 1046.186051][T27580] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 1046.198973][T27580] usb 8-1: USB disconnect, device number 123 [ 1046.249111][T27773] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7962'. [ 1046.258990][T27773] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7962'. [ 1046.268420][T27773] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7962'. [ 1046.277944][T27773] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7962'. [ 1046.315506][T27775] [U]  [ 1046.318831][T27775] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7963'. [ 1046.349363][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1046.356479][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1046.364108][T27777] binder: 27776:27777 ioctl c0306201 2000000003c0 returned -14 [ 1046.376813][ T9] usb 5-1: config 111 interface 0 altsetting 5 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1046.389290][ T9] usb 5-1: config 111 interface 0 has no altsetting 0 [ 1046.407229][ T9] usb 5-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=b8.4b [ 1046.417488][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.426323][ T9] usb 5-1: Product: syz [ 1046.430511][ T9] usb 5-1: Manufacturer: syz [ 1046.435453][ T9] usb 5-1: SerialNumber: syz [ 1046.436634][T27779] netlink: 'syz.9.7965': attribute type 4 has an invalid length. [ 1046.667975][T27769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.679611][T27769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.701006][ T9] xbox_remote_probe: Unexpected endpoint_in [ 1046.713540][ T9] usb 5-1: USB disconnect, device number 112 [ 1046.739405][T27580] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1046.859980][T27796] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7971'. [ 1046.869038][T27796] tipc: Started in network mode [ 1046.876422][T27796] tipc: Node identity ffffffff, cluster identity 4711 [ 1046.883295][T27796] tipc: Node number set to 4294967295 [ 1046.889415][T27796] tipc: Cannot configure node identity twice [ 1046.906565][T27580] usb 10-1: device descriptor read/64, error -71 [ 1047.163555][T27580] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1047.303905][T27580] usb 10-1: device descriptor read/64, error -71 [ 1047.420591][T27580] usb usb10-port1: attempt power cycle [ 1047.559369][ T9] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 1047.732849][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1047.733311][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 1047.734225][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.734246][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1047.734285][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1047.736109][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 8.40 [ 1047.736133][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1047.736144][ T9] usb 5-1: Product: syz [ 1047.736151][ T9] usb 5-1: Manufacturer: syz [ 1047.736159][ T9] usb 5-1: SerialNumber: syz [ 1047.817640][T27580] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1047.870751][T27580] usb 10-1: device descriptor read/8, error -71 [ 1047.971698][ T9] usb 5-1: USB disconnect, device number 113 [ 1048.126836][T27580] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1048.148808][T27580] usb 10-1: device descriptor read/8, error -71 [ 1048.266658][T27580] usb usb10-port1: unable to enumerate USB device [ 1048.631554][T27819] binder: 27818:27819 ioctl c0306201 2000000003c0 returned -14 [ 1048.642960][T27819] binder: 27818:27819 ioctl 8914 200000000040 returned -22 [ 1048.854973][T27580] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1049.016952][T27580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1049.026741][T27580] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 1049.038431][T27580] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 1049.047477][T27580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.055827][T27580] usb 5-1: Product: syz [ 1049.060251][T27580] usb 5-1: Manufacturer: syz [ 1049.064858][T27580] usb 5-1: SerialNumber: syz [ 1049.071463][T27580] usb 5-1: config 0 descriptor?? [ 1049.078201][T27580] aircable 5-1:0.0: aircable converter detected [ 1049.086480][T27580] usb 5-1: aircable converter now attached to ttyUSB0 [ 1049.295820][T27580] usb 5-1: USB disconnect, device number 114 [ 1049.305084][T27580] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 1049.313681][T27580] aircable 5-1:0.0: device disconnected [ 1049.661131][T27824] netlink: 'syz.7.7984': attribute type 4 has an invalid length. [ 1049.706764][T27826] netlink: 'syz.7.7985': attribute type 10 has an invalid length. [ 1049.743761][T27828] __nla_validate_parse: 3 callbacks suppressed [ 1049.743770][T27828] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7986'. [ 1049.795303][T27826] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1049.942106][T27837] binder: BINDER_SET_CONTEXT_MGR already set [ 1049.950381][T27837] binder: 27836:27837 ioctl 4018620d 200000000000 returned -16 [ 1049.963169][T27837] binder: BINDER_SET_CONTEXT_MGR already set [ 1049.969337][T27837] binder: 27836:27837 ioctl 4018620d 200000000040 returned -16 [ 1049.977143][T27837] binder: 27836:27837 ioctl c0306201 2000000003c0 returned -14 [ 1050.063412][T27580] usb 8-1: new high-speed USB device number 124 using dummy_hcd [ 1050.182652][ T9] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1050.250178][T27580] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1050.259550][T27580] usb 8-1: New USB device strings: Mfr=1, Product=255, SerialNumber=0 [ 1050.267711][T27580] usb 8-1: Product: syz [ 1050.272192][T27580] usb 8-1: Manufacturer: syz [ 1050.278347][T27580] usb 8-1: config 0 descriptor?? [ 1050.364573][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1050.371197][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1050.382359][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1050.392239][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1050.402048][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1050.413426][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1050.424439][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1050.433669][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.445052][ T9] usb 10-1: config 0 descriptor?? [ 1050.451353][T27835] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1050.502570][T27826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.511831][T27826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.522393][T27825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1050.525557][T27580] usb-storage 8-1:0.0: USB Mass Storage device detected [ 1050.566491][T27580] usb 8-1: USB disconnect, device number 124 [ 1050.958212][ T5825] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 1050.967989][T27580] usb 10-1: USB disconnect, device number 33 [ 1050.996296][ T5880] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1051.104054][T27853] netlink: 'syz.7.7995': attribute type 4 has an invalid length. [ 1051.112359][T27853] netlink: 'syz.7.7995': attribute type 4 has an invalid length. [ 1051.160337][ T5880] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1051.171678][ T5880] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1051.187902][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1051.199795][ T5880] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1051.209848][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.222184][ T5880] usb 5-1: config 0 descriptor?? [ 1051.487644][T27863] binder: 27862:27863 ioctl c0306201 2000000003c0 returned -14 [ 1051.584506][T27869] binder: 27868:27869 ioctl c0306201 2000000003c0 returned -14 [ 1051.659420][T27851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.662201][T27871] lo speed is unknown, defaulting to 1000 [ 1051.692691][T27851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.700649][T27876] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8005'. [ 1051.701818][ T5880] pyra 0003:1E7D:2C24.0028: ignoring exceeding usage max [ 1051.731112][T27876] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8005'. [ 1051.739207][ T5880] pyra 0003:1E7D:2C24.0028: hidraw0: USB HID v0.07 Device [HID 1e7d:2c24] on usb-dummy_hcd.4-1/input0 [ 1051.756508][T27876] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8005'. [ 1051.798998][T27876] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8005'. [ 1051.803718][ T5880] pyra 0003:1E7D:2C24.0028: couldn't init struct pyra_device [ 1051.815765][ T5880] pyra 0003:1E7D:2C24.0028: couldn't install mouse [ 1051.827642][ T5880] pyra 0003:1E7D:2C24.0028: probe with driver pyra failed with error -71 [ 1051.870464][ T5880] usb 5-1: USB disconnect, device number 115 [ 1051.901713][T27878] fido_id[27878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1051.958268][T27884] sctp: [Deprecated]: syz.4.8007 (pid 27884) Use of int in max_burst socket option. [ 1051.958268][T27884] Use struct sctp_assoc_value instead [ 1052.204095][T27895] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.222481][T27895] binder: 27894:27895 ioctl 4018620d 200000000000 returned -16 [ 1052.234536][T27895] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.241966][T27895] binder: 27894:27895 ioctl 4018620d 200000000040 returned -16 [ 1052.250548][T27895] binder: 27894:27895 ioctl c0306201 2000000003c0 returned -14 [ 1052.264585][T27897] netlink: 'syz.7.8012': attribute type 4 has an invalid length. [ 1052.420314][ T5880] usb 10-1: new low-speed USB device number 34 using dummy_hcd [ 1052.525279][T27905] netlink: 'syz.7.8016': attribute type 4 has an invalid length. [ 1052.535458][T27905] netlink: 'syz.7.8016': attribute type 4 has an invalid length. [ 1052.583176][ T5880] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1052.592966][ T5880] usb 10-1: config 1 has no interface number 1 [ 1052.599136][ T5880] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 1052.604570][T27580] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1052.614581][ T5880] usb 10-1: string descriptor 0 read error: -22 [ 1052.625869][ T5880] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1052.646080][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.663999][T27909] binder: 27908:27909 ioctl c0306201 2000000003c0 returned -14 [ 1052.672888][ T5880] usb 10-1: low speed audio streaming not supported [ 1052.763400][T27580] usb 5-1: device descriptor read/64, error -71 [ 1052.880356][ T9] usb 10-1: USB disconnect, device number 34 [ 1053.019988][T27580] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1053.159112][T27580] usb 5-1: device descriptor read/64, error -71 [ 1053.278271][T27580] usb usb5-port1: attempt power cycle [ 1053.492795][T27919] overlayfs: failed to resolve './file2': -2 [ 1053.500486][T27919] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1053.562815][T27924] netlink: 'syz.7.8024': attribute type 4 has an invalid length. [ 1053.632699][T27926] netlink: 830 bytes leftover after parsing attributes in process `syz.6.8025'. [ 1053.648651][T27928] binder: 27927:27928 ioctl c0306201 2000000003c0 returned -14 [ 1053.677145][T27580] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1053.716703][T27580] usb 5-1: device descriptor read/8, error -71 [ 1053.732954][T27935] binder: 27934:27935 ioctl c0306201 2000000003c0 returned -14 [ 1053.839772][T27939] netlink: 'syz.7.8031': attribute type 4 has an invalid length. [ 1053.848445][T27939] netlink: 'syz.7.8031': attribute type 4 has an invalid length. [ 1053.963664][T27948] binder: 27947:27948 ioctl c0306201 2000000003c0 returned -14 [ 1053.972868][T27580] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1054.005716][T27580] usb 5-1: device descriptor read/8, error -71 [ 1054.007310][T19768] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1054.094377][T27955] overlayfs: failed to resolve './file2': -2 [ 1054.101491][T27955] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1054.123050][T27580] usb usb5-port1: unable to enumerate USB device [ 1054.178007][T19768] usb 10-1: Using ep0 maxpacket: 32 [ 1054.185030][T19768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.197853][T19768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.209634][T19768] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1054.218811][T19768] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.231294][T19768] usb 10-1: config 0 descriptor?? [ 1054.391083][T27961] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8039'. [ 1054.549068][T27964] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8040'. [ 1054.558523][T27964] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8040'. [ 1054.676422][T27937] CIFS mount error: No usable UNC path provided in device string! [ 1054.676422][T27937] [ 1054.686643][T27937] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1054.699294][T19768] usbhid 10-1:0.0: can't add hid device: -71 [ 1054.708707][T19768] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1054.721509][T19768] usb 10-1: USB disconnect, device number 35 [ 1055.005741][T27969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.015349][T27969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.025319][T27969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.035427][T27969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.044272][T27969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.052913][T27969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.061309][T27969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.070021][T27969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.079143][T27969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.088954][T27969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.321758][T27981] binder: 27978:27981 ioctl c0306201 2000000003c0 returned -14 [ 1055.351837][T27982] overlayfs: failed to resolve './file2': -2 [ 1055.360684][T27982] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1055.374901][T27984] netlink: 'syz.6.8048': attribute type 4 has an invalid length. [ 1055.391622][T27984] netlink: 'syz.6.8048': attribute type 4 has an invalid length. [ 1055.520667][T27990] infiniband: Added to hash: ib_dev=ffff888037244000 (0)() ndev=ffff88805e230000 (24)(wg2) [ 1055.533112][T27990] wg2 speed is unknown, defaulting to 1000 [ 1055.554567][T27990] wg2 speed is unknown, defaulting to 1000 [ 1055.574044][T27990] wg2 speed is unknown, defaulting to 1000 [ 1055.655773][T27995] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8053'. [ 1055.666255][T27995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8053'. [ 1055.677998][T27995] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8053'. [ 1055.689693][T27995] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8053'. [ 1055.787197][T19768] usb 8-1: new high-speed USB device number 125 using dummy_hcd [ 1055.885818][T27990] infiniband syz2: set active [ 1055.891116][ T5866] wg2 speed is unknown, defaulting to 1000 [ 1055.898674][T27990] infiniband syz2: added wg2 [ 1055.926092][T27990] RDS/IB: syz2: added [ 1055.931059][T27990] smc: adding ib device syz2 with port count 1 [ 1055.939780][T27990] smc: ib device syz2 port 1 has no pnetid [ 1055.946164][ T5866] wg2 speed is unknown, defaulting to 1000 [ 1055.954028][T27990] wg2 speed is unknown, defaulting to 1000 [ 1055.966001][T19768] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1055.976145][T19768] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1055.993783][T19768] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1056.003557][T19768] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.013579][T19768] usb 8-1: Product: syz [ 1056.020731][T19768] usb 8-1: Manufacturer: syz [ 1056.025383][T19768] usb 8-1: SerialNumber: syz [ 1056.033356][T19768] usb 8-1: config 0 descriptor?? [ 1056.125519][ T5873] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1056.145894][T27990] wg2 speed is unknown, defaulting to 1000 [ 1056.306891][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 1056.319481][ T5873] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1056.333488][ T5873] usb 5-1: config 0 has no interface number 0 [ 1056.342036][ T5873] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1056.367250][ T5873] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1056.377141][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.385949][ T5873] usb 5-1: Product: syz [ 1056.390242][ T5873] usb 5-1: Manufacturer: syz [ 1056.400731][ T5873] usb 5-1: SerialNumber: syz [ 1056.417232][ T5873] usb 5-1: config 0 descriptor?? [ 1056.432431][ T5873] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1056.442602][ T5873] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1056.458889][T27990] wg2 speed is unknown, defaulting to 1000 [ 1056.477397][T27980] netlink: 'syz.7.8047': attribute type 13 has an invalid length. [ 1056.506507][T27980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.524100][T27980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.570857][T27980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.580018][T27980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.677570][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.733664][T27990] wg2 speed is unknown, defaulting to 1000 [ 1056.885029][T19768] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1056.893876][T27990] wg2 speed is unknown, defaulting to 1000 [ 1057.047915][T19768] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.058520][T19768] usb 10-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1057.070010][T19768] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1057.086876][ T5873] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1057.093095][T19768] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1057.104248][T19768] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.121708][T19768] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1057.181610][T19768] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1057.337540][T27580] usb 10-1: USB disconnect, device number 36 [ 1057.546803][ T5873] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1057.561538][ T5873] em28xx 5-1:0.89: board has no eeprom [ 1057.623743][ T5873] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1057.630933][ T5873] em28xx 5-1:0.89: analog set to bulk mode. [ 1057.638770][T19768] em28xx 5-1:0.89: Registering V4L2 extension [ 1057.654618][ T5873] usb 5-1: USB disconnect, device number 120 [ 1057.667899][ T5873] em28xx 5-1:0.89: Disconnecting em28xx [ 1057.681318][T19768] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1057.688300][T19768] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1057.695346][T19768] em28xx 5-1:0.89: No AC97 audio processor [ 1057.711183][T19768] usb 5-1: Decoder not found [ 1057.715787][T19768] em28xx 5-1:0.89: failed to create media graph [ 1057.722115][T19768] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1057.730276][T19768] em28xx 5-1:0.89: Registering snapshot button... [ 1057.741921][T19768] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input134 [ 1057.761014][T19768] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1057.770761][ T5873] em28xx 5-1:0.89: Closing input extension [ 1057.776647][ T5873] em28xx 5-1:0.89: Deregistering snapshot button [ 1057.865772][ T5873] em28xx 5-1:0.89: Freeing device [ 1058.118028][T28021] XFS (loop9): SB validate failed with error -5. [ 1058.152973][T28028] overlayfs: failed to resolve './file2': -2 [ 1058.175478][T28028] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1058.214921][T28030] random: crng reseeded on system resumption [ 1058.539844][ T5873] usb 8-1: USB disconnect, device number 125 [ 1058.545966][ T5880] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1058.717704][ T5880] usb 10-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1058.729120][ T5880] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1058.737739][ T5880] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1058.746936][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1058.755223][ T5880] usb 10-1: Product: syz [ 1058.760354][ T5880] usb 10-1: Manufacturer: syz [ 1058.765066][ T5880] usb 10-1: SerialNumber: syz [ 1058.772098][ T5880] usb 10-1: config 0 descriptor?? [ 1058.777715][T28034] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1058.788101][ T5880] usb 10-1: selecting invalid altsetting 0 [ 1058.980117][T28041] netlink: 'syz.4.8070': attribute type 4 has an invalid length. [ 1059.015607][ T5873] usb 8-1: new high-speed USB device number 126 using dummy_hcd [ 1059.039232][ T5880] usb 10-1: USB disconnect, device number 37 [ 1059.188141][ T5873] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.198930][ T5873] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1059.209827][ T5873] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1059.222820][ T5873] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1059.232003][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.247972][ T5873] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1059.294393][ T5873] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1059.467670][ T5873] usb 8-1: USB disconnect, device number 126 [ 1059.796033][T28053] overlayfs: failed to resolve './file2': -2 [ 1059.803372][T28053] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1059.882873][ T5873] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1060.028391][T28057] netlink: 'syz.7.8078': attribute type 4 has an invalid length. [ 1060.044248][ T5873] usb 10-1: Using ep0 maxpacket: 32 [ 1060.051202][ T5873] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 1060.061666][ T5873] usb 10-1: config 0 has no interface number 0 [ 1060.072903][ T5873] usb 10-1: config 0 interface 89 has no altsetting 0 [ 1060.082637][ T5873] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1060.092142][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.102218][ T5873] usb 10-1: Product: syz [ 1060.106490][ T5873] usb 10-1: Manufacturer: syz [ 1060.111266][ T5873] usb 10-1: SerialNumber: syz [ 1060.118893][ T5873] usb 10-1: config 0 descriptor?? [ 1060.130795][ T5873] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1060.142169][ T5873] em28xx 10-1:0.89: Video interface 89 found: bulk [ 1060.190804][T28064] netlink: 'syz.7.8081': attribute type 4 has an invalid length. [ 1060.236147][ T5880] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1060.418189][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 1060.424873][ T5880] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1060.425657][T28071] binder: 28070:28071 ioctl c0306201 2000000003c0 returned -14 [ 1060.434578][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.471762][ T5880] usb 5-1: config 0 has no interface number 0 [ 1060.479390][ T5880] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1060.516171][ T5880] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1060.527330][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.535346][ T5880] usb 5-1: Product: syz [ 1060.540596][ T5880] usb 5-1: Manufacturer: syz [ 1060.545282][ T5880] usb 5-1: SerialNumber: syz [ 1060.565862][ T5880] usb 5-1: config 0 descriptor?? [ 1060.574921][T28075] overlayfs: failed to resolve './file2': -2 [ 1060.582835][ T5880] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 1060.590456][ T5880] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 1060.591728][T28075] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1060.774270][ T5873] em28xx 10-1:0.89: unknown em28xx chip ID (0) [ 1060.793922][ T5880] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1060.810592][T28080] binder: BINDER_SET_CONTEXT_MGR already set [ 1060.817132][T28080] binder: 28079:28080 ioctl 4018620d 200000004a80 returned -16 [ 1061.017071][T28055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.025897][T28055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.093349][ T5880] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 1061.103361][ T5880] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 1061.125057][ T5880] usb 5-1: USB disconnect, device number 121 [ 1061.131855][ T5880] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 1061.216477][ T5873] em28xx 10-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1061.224797][ T5873] em28xx 10-1:0.89: board has no eeprom [ 1061.285340][ T5873] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67) [ 1061.292689][ T5873] em28xx 10-1:0.89: analog set to bulk mode. [ 1061.300035][ T24] em28xx 10-1:0.89: Registering V4L2 extension [ 1061.330252][ T5873] usb 10-1: USB disconnect, device number 38 [ 1061.337741][ T24] em28xx 10-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 1061.348074][ T5873] em28xx 10-1:0.89: Disconnecting em28xx [ 1061.353990][ T24] em28xx 10-1:0.89: Config register raw data: 0xffffffed [ 1061.361295][ T24] em28xx 10-1:0.89: AC97 chip type couldn't be determined [ 1061.368414][ T24] em28xx 10-1:0.89: No AC97 audio processor [ 1061.376639][ T24] usb 10-1: Decoder not found [ 1061.381335][ T24] em28xx 10-1:0.89: failed to create media graph [ 1061.390836][ T24] em28xx 10-1:0.89: V4L2 device video103 deregistered [ 1061.398651][ T24] em28xx 10-1:0.89: Registering snapshot button... [ 1061.405986][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input135 [ 1061.418216][ T24] em28xx 10-1:0.89: Remote control support is not available for this card. [ 1061.426908][ T5873] em28xx 10-1:0.89: Closing input extension [ 1061.432813][ T5873] em28xx 10-1:0.89: Deregistering snapshot button [ 1061.514595][ T5873] em28xx 10-1:0.89: Freeing device [ 1061.909541][T28094] netlink: 180 bytes leftover after parsing attributes in process `syz.7.8094'. [ 1061.967473][T28099] overlayfs: failed to resolve './file2': -2 [ 1061.968327][T28099] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1062.090329][T28101] binder: BINDER_SET_CONTEXT_MGR already set [ 1062.096321][T28101] binder: 28100:28101 ioctl 4018620d 200000000000 returned -16 [ 1062.107216][T28101] binder: BINDER_SET_CONTEXT_MGR already set [ 1062.113787][T28101] binder: 28100:28101 ioctl 4018620d 200000000040 returned -16 [ 1062.123028][T28101] binder: 28100:28101 ioctl c0306201 2000000003c0 returned -14 [ 1062.243286][T28107] binder: 28106:28107 ioctl c0306201 2000000003c0 returned -14 [ 1062.463042][ T5880] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1062.548687][ T5866] usb 8-1: new high-speed USB device number 127 using dummy_hcd [ 1062.585955][T28113] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8103'. [ 1062.596057][T28113] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8103'. [ 1062.605146][T28113] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8103'. [ 1062.614792][T28113] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8103'. [ 1062.646766][ T5880] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1062.659433][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1062.669831][ T5880] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1062.682706][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.692772][ T5880] usb 5-1: Product: syz [ 1062.696939][ T5880] usb 5-1: Manufacturer: syz [ 1062.704772][ T5880] usb 5-1: SerialNumber: syz [ 1062.713241][ T5880] usb 5-1: config 0 descriptor?? [ 1062.719951][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 1062.724714][ T5880] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1062.726556][T28117] 9p: Unknown access argument Š: -22 [ 1062.738412][ T5880] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1062.748908][ T5866] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1062.750693][ T5880] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1062.762812][ T5866] usb 8-1: config 0 has no interface number 0 [ 1062.766359][ T5880] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1062.781268][ T5866] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1062.781915][ T5880] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1062.797421][ T5866] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1062.798219][ T5880] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1062.811470][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.819160][ T5880] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1062.840128][ T5866] usb 8-1: Product: syz [ 1062.841260][ T5880] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1062.844365][ T5866] usb 8-1: Manufacturer: syz [ 1062.856404][ T5880] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1062.864789][ T5866] usb 8-1: SerialNumber: syz [ 1062.865296][ T5880] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 1062.877451][ T5880] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1062.879902][ T5866] usb 8-1: config 0 descriptor?? [ 1062.891055][ T5880] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1062.894477][ T5866] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1062.899313][ T5880] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1062.909787][ T5866] em28xx 8-1:0.89: Video interface 89 found: bulk [ 1062.926841][ T5880] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1062.943429][ T5880] usb 5-1: USB disconnect, device number 122 [ 1062.961473][ T5880] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1062.983096][ T5880] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1062.993733][ T5880] keyspan 5-1:0.0: device disconnected [ 1063.083986][ T24] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1063.245956][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.257887][ T24] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1063.267140][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.277590][ T24] usb 10-1: config 0 descriptor?? [ 1063.502317][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 1063.510125][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1063.529430][ T24] usb 10-1: USB disconnect, device number 39 [ 1063.543322][ T5866] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1063.815264][T28130] binder: 28129:28130 ioctl c0306201 2000000003c0 returned -14 [ 1063.867534][T28128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8109'. [ 1064.026263][T27580] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1064.213816][T27580] usb 10-1: Using ep0 maxpacket: 16 [ 1064.219570][ T5866] em28xx 8-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1064.229121][ T5866] em28xx 8-1:0.89: board has no eeprom [ 1064.246559][T27580] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.258834][T27580] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1064.268300][T27580] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.278416][T27580] usb 10-1: config 0 descriptor?? [ 1064.347294][ T5866] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1064.355170][ T5866] em28xx 8-1:0.89: analog set to bulk mode. [ 1064.361247][ T9] em28xx 8-1:0.89: Registering V4L2 extension [ 1064.387225][ T5866] usb 8-1: USB disconnect, device number 127 [ 1064.402973][ T5866] em28xx 8-1:0.89: Disconnecting em28xx [ 1064.415696][ T9] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1064.424089][ T9] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1064.431128][ T9] em28xx 8-1:0.89: No AC97 audio processor [ 1064.440652][ T9] usb 8-1: Decoder not found [ 1064.445341][ T9] em28xx 8-1:0.89: failed to create media graph [ 1064.451658][ T9] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1064.461034][ T9] em28xx 8-1:0.89: Registering snapshot button... [ 1064.468589][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input136 [ 1064.482006][ T9] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1064.491040][ T5866] em28xx 8-1:0.89: Closing input extension [ 1064.496878][ T5866] em28xx 8-1:0.89: Deregistering snapshot button [ 1064.504620][T28127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.513296][T28127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.577150][ T5866] em28xx 8-1:0.89: Freeing device [ 1064.836219][T27580] usbhid 10-1:0.0: can't add hid device: -71 [ 1064.861286][T27580] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1064.874785][T27580] usb 10-1: USB disconnect, device number 40 [ 1065.289435][ T24] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1065.457515][T28154] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8119'. [ 1065.467473][T28153] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8119'. [ 1065.478624][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.509754][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1065.521210][ T24] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1065.534501][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1065.543693][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.569999][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1065.583153][ T24] usb 5-1: invalid MIDI out EP 0 [ 1065.668944][ T24] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1065.749743][ T5866] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1065.798638][T27580] usb 5-1: USB disconnect, device number 123 [ 1065.910346][ T5866] usb 8-1: Using ep0 maxpacket: 16 [ 1065.917060][ T5866] usb 8-1: config 0 has an invalid interface number: 107 but max is 0 [ 1065.925763][ T5866] usb 8-1: config 0 has no interface number 0 [ 1065.932262][ T5866] usb 8-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 1065.944374][ T5866] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1065.953467][ T5866] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1065.961632][ T5866] usb 8-1: Product: syz [ 1065.965890][ T5866] usb 8-1: Manufacturer: syz [ 1065.970497][ T5866] usb 8-1: SerialNumber: syz [ 1065.977265][ T5866] usb 8-1: config 0 descriptor?? [ 1065.982715][T28156] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1066.234229][T28156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.243141][T28156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.257575][ T5866] keyspan 8-1:0.107: Keyspan 4 port adapter converter detected [ 1066.266619][ T5866] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 81 [ 1066.276253][ T5866] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 1 [ 1066.285859][ T5866] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1066.295334][ T5866] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 2 [ 1066.304756][ T5866] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1066.314545][ T5866] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 4 [ 1066.324024][ T5866] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1066.333622][ T5866] keyspan 8-1:0.107: found no endpoint descriptor for endpoint 6 [ 1066.342560][ T5866] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1066.355174][ T5866] usb 8-1: USB disconnect, device number 2 [ 1066.390736][ T5866] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1066.410595][ T5866] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1066.424816][ T5866] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1066.441666][ T5866] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1066.453189][ T5866] keyspan 8-1:0.107: device disconnected [ 1066.490014][T28161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8122'. [ 1066.505040][T28161] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8122'. [ 1066.775054][T28171] netlink: 'syz.4.8126': attribute type 83 has an invalid length. [ 1066.821002][T28173] netlink: 'syz.4.8127': attribute type 4 has an invalid length. [ 1066.839677][ T24] lo speed is unknown, defaulting to 1000 [ 1066.846603][ T24] syz0: Port: 1 Link ACTIVE [ 1066.913257][T28175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1066.948928][ T5866] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1066.999440][T28180] netlink: 'syz.7.8130': attribute type 4 has an invalid length. [ 1067.109810][ T5866] usb 10-1: Using ep0 maxpacket: 32 [ 1067.118214][ T5866] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 1067.127129][ T5866] usb 10-1: config 0 has no interface number 0 [ 1067.137521][ T5866] usb 10-1: config 0 interface 89 has no altsetting 0 [ 1067.147784][ T5866] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1067.155131][T28186] binder: 28185:28186 ioctl c0306201 2000000003c0 returned -14 [ 1067.158039][ T5866] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.175026][ T5866] usb 10-1: Product: syz [ 1067.179335][ T5866] usb 10-1: Manufacturer: syz [ 1067.184850][ T5866] usb 10-1: SerialNumber: syz [ 1067.193071][ T5866] usb 10-1: config 0 descriptor?? [ 1067.202926][ T5866] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1067.214653][ T5866] em28xx 10-1:0.89: Video interface 89 found: bulk [ 1067.238084][ T9] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1067.325284][ T5873] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1067.410355][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.423294][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1067.434592][ T9] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1067.447757][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1067.456874][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.472767][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1067.481371][ T9] usb 5-1: invalid MIDI out EP 0 [ 1067.502660][ T5873] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.524335][ T5873] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1067.534480][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.543324][ T5873] usb 8-1: Product: syz [ 1067.547566][ T5873] usb 8-1: Manufacturer: syz [ 1067.552840][ T5873] usb 8-1: SerialNumber: syz [ 1067.567579][ T5873] usb 8-1: config 0 descriptor?? [ 1067.625242][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1067.690974][ T5873] usb 5-1: USB disconnect, device number 124 [ 1067.790795][ T9] usb 8-1: USB disconnect, device number 3 [ 1067.864121][ T5866] em28xx 10-1:0.89: unknown em28xx chip ID (0) [ 1068.383007][T28201] netlink: 'syz.7.8139': attribute type 4 has an invalid length. [ 1068.391948][T28201] __nla_validate_parse: 2 callbacks suppressed [ 1068.391962][T28201] netlink: 25 bytes leftover after parsing attributes in process `syz.7.8139'. [ 1068.529555][ T5866] em28xx 10-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1068.552737][ T5866] em28xx 10-1:0.89: board has no eeprom [ 1068.554218][T28206] netlink: 'syz.6.8141': attribute type 4 has an invalid length. [ 1068.629614][ T5866] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67) [ 1068.653158][ T5866] em28xx 10-1:0.89: analog set to bulk mode. [ 1068.659189][ T9] em28xx 10-1:0.89: Registering V4L2 extension [ 1068.690971][ T5866] usb 10-1: USB disconnect, device number 41 [ 1068.717104][ T5866] em28xx 10-1:0.89: Disconnecting em28xx [ 1068.772806][ T9] em28xx 10-1:0.89: Config register raw data: 0xffffffed [ 1068.797235][ T9] em28xx 10-1:0.89: AC97 chip type couldn't be determined [ 1068.806107][T28217] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8145'. [ 1068.807534][ T9] em28xx 10-1:0.89: No AC97 audio processor [ 1068.830139][T28217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8145'. [ 1068.844287][ T9] usb 10-1: Decoder not found [ 1068.850483][ T9] em28xx 10-1:0.89: failed to create media graph [ 1068.857655][ T9] em28xx 10-1:0.89: V4L2 device video103 deregistered [ 1068.866373][ T9] em28xx 10-1:0.89: Registering snapshot button... [ 1068.873774][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input137 [ 1068.891274][ T9] em28xx 10-1:0.89: Remote control support is not available for this card. [ 1068.909719][ T5866] em28xx 10-1:0.89: Closing input extension [ 1068.919648][ T5866] em28xx 10-1:0.89: Deregistering snapshot button [ 1068.993655][T27580] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1069.008754][ T5866] em28xx 10-1:0.89: Freeing device [ 1069.154187][T27580] usb 8-1: device descriptor read/64, error -71 [ 1069.366528][T28237] overlayfs: failed to resolve './file2': -2 [ 1069.378218][T28237] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1069.433322][T27580] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1069.582500][T27580] usb 8-1: device descriptor read/64, error -71 [ 1069.700797][T27580] usb usb8-port1: attempt power cycle [ 1069.721768][ T796] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1069.910093][ T796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1069.919537][ T796] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1069.927410][ T796] usb 5-1: can't read configurations, error -71 [ 1070.074960][T27580] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1070.096722][T27580] usb 8-1: device descriptor read/8, error -71 [ 1070.353350][T27580] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1070.376069][T27580] usb 8-1: device descriptor read/8, error -71 [ 1070.504505][T27580] usb usb8-port1: unable to enumerate USB device [ 1070.792157][T27580] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1070.952693][T27580] usb 10-1: Using ep0 maxpacket: 32 [ 1070.959075][T27580] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 1070.967559][T27580] usb 10-1: config 0 has no interface number 0 [ 1070.973737][T27580] usb 10-1: config 0 interface 89 has no altsetting 0 [ 1070.982141][T27580] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1070.991361][T27580] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.999541][T27580] usb 10-1: Product: syz [ 1071.003779][T27580] usb 10-1: Manufacturer: syz [ 1071.008489][T27580] usb 10-1: SerialNumber: syz [ 1071.014866][T27580] usb 10-1: config 0 descriptor?? [ 1071.022423][T27580] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1071.032034][T27580] em28xx 10-1:0.89: Video interface 89 found: bulk [ 1071.060291][ T796] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1071.220589][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 1071.227252][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.237318][ T796] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1071.250315][ T796] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1071.260137][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.270559][ T796] usb 5-1: config 0 descriptor?? [ 1071.506369][ T796] usbhid 5-1:0.0: can't add hid device: -71 [ 1071.521534][ T796] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1071.542955][ T796] usb 5-1: USB disconnect, device number 126 [ 1071.603592][T28264] netlink: 'syz.4.8164': attribute type 4 has an invalid length. [ 1071.614860][ T24] lo speed is unknown, defaulting to 1000 [ 1071.616250][T28264] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8164'. [ 1071.622319][ T24] syz0: Port: 1 Link DOWN [ 1071.639873][ T5866] lo speed is unknown, defaulting to 1000 [ 1071.648824][ T5866] syz0: Port: 1 Link ACTIVE [ 1071.703154][T27580] em28xx 10-1:0.89: unknown em28xx chip ID (0) [ 1071.988425][T28270] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8167'. [ 1071.997478][T28270] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8167'. [ 1072.034323][ T796] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1072.205309][ T796] usb 5-1: Using ep0 maxpacket: 8 [ 1072.211725][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.222862][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.232715][ T796] usb 5-1: New USB device found, idVendor=056a, idProduct=1200, bcdDevice= 0.00 [ 1072.242484][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.252908][ T796] usb 5-1: config 0 descriptor?? [ 1072.323116][ T5918] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1072.388021][T27580] em28xx 10-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1072.397628][T27580] em28xx 10-1:0.89: board has no eeprom [ 1072.462723][T27580] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67) [ 1072.470226][T27580] em28xx 10-1:0.89: analog set to bulk mode. [ 1072.477425][ T5866] em28xx 10-1:0.89: Registering V4L2 extension [ 1072.483715][ T5918] usb 8-1: Using ep0 maxpacket: 16 [ 1072.505712][T27580] usb 10-1: USB disconnect, device number 42 [ 1072.525978][T27580] em28xx 10-1:0.89: Disconnecting em28xx [ 1072.531937][ T5918] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1072.541477][ T5866] em28xx 10-1:0.89: Config register raw data: 0xffffffed [ 1072.548724][ T5866] em28xx 10-1:0.89: AC97 chip type couldn't be determined [ 1072.555848][ T5866] em28xx 10-1:0.89: No AC97 audio processor [ 1072.562752][ T5918] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.571167][ T5918] usb 8-1: Product: syz [ 1072.575339][ T5918] usb 8-1: Manufacturer: syz [ 1072.581010][ T5918] usb 8-1: SerialNumber: syz [ 1072.585856][ T5866] usb 10-1: Decoder not found [ 1072.590543][ T5866] em28xx 10-1:0.89: failed to create media graph [ 1072.598558][ T5866] em28xx 10-1:0.89: V4L2 device video103 deregistered [ 1072.610683][ T5918] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1072.617015][ T5918] r8152-cfgselector 8-1: config 0 descriptor?? [ 1072.623999][ T5866] em28xx 10-1:0.89: Registering snapshot button... [ 1072.631620][ T5866] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input138 [ 1072.647687][ T5866] em28xx 10-1:0.89: Remote control support is not available for this card. [ 1072.656777][T27580] em28xx 10-1:0.89: Closing input extension [ 1072.662731][T27580] em28xx 10-1:0.89: Deregistering snapshot button [ 1072.697954][ T796] wacom 0003:056A:1200.0029: unbalanced delimiter at end of report description [ 1072.707491][ T796] wacom 0003:056A:1200.0029: parse failed [ 1072.715743][ T796] wacom 0003:056A:1200.0029: probe with driver wacom failed with error -22 [ 1072.744518][T27580] em28xx 10-1:0.89: Freeing device [ 1072.922137][ T5918] usb 5-1: USB disconnect, device number 127 [ 1072.929500][ T5866] r8152-cfgselector 8-1: USB disconnect, device number 8 [ 1073.026305][T28282] overlayfs: failed to resolve './file2': -2 [ 1073.035194][T28284] netlink: 'syz.9.8171': attribute type 10 has an invalid length. [ 1073.043777][T28284] netlink: 228 bytes leftover after parsing attributes in process `syz.9.8171'. [ 1073.046263][T28282] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1073.065142][T28286] openvswitch: netlink: Flow key attr not present in new flow. [ 1073.143473][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888029f10000 (13)(wlan0) start [ 1073.193008][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888029f10000 (10)(wlan0) end [ 1073.415026][ T5866] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1073.564874][ T5866] usb 8-1: device descriptor read/64, error -71 [ 1073.649858][T28306] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8173'. [ 1073.803924][T28321] netlink: 'syz.9.8176': attribute type 4 has an invalid length. [ 1073.821823][ T5866] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1073.907922][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1073.997440][ T5866] usb 8-1: device descriptor read/64, error -71 [ 1074.105816][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 1074.121973][ T5866] usb usb8-port1: attempt power cycle [ 1074.128345][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1074.143071][ T5918] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1074.149870][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1074.160177][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.168502][ T24] usb 5-1: Product: syz [ 1074.172768][ T24] usb 5-1: Manufacturer: syz [ 1074.177680][ T24] usb 5-1: SerialNumber: syz [ 1074.185882][T28311] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1074.314304][ T5918] usb 10-1: Using ep0 maxpacket: 32 [ 1074.321083][ T5918] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 1074.330807][ T5918] usb 10-1: config 0 has no interface number 0 [ 1074.339404][ T5918] usb 10-1: config 0 interface 89 has no altsetting 0 [ 1074.351095][ T5918] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1074.361096][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.369429][ T5918] usb 10-1: Product: syz [ 1074.373854][ T5918] usb 10-1: Manufacturer: syz [ 1074.381672][ T5918] usb 10-1: SerialNumber: syz [ 1074.394461][ T5918] usb 10-1: config 0 descriptor?? [ 1074.404366][ T5918] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1074.411105][T28311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.416400][ T5918] em28xx 10-1:0.89: Video interface 89 found: bulk [ 1074.436666][T28311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.456695][ T24] cdc_ncm 5-1:1.0: bind() failure [ 1074.479164][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1074.487570][ T24] cdc_ncm 5-1:1.1: bind() failure [ 1074.496932][ T5866] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1074.502761][ T24] usb 5-1: USB disconnect, device number 2 [ 1074.529283][ T5866] usb 8-1: device descriptor read/8, error -71 [ 1074.785280][ T5866] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1074.807223][ T5866] usb 8-1: device descriptor read/8, error -71 [ 1074.924692][ T5866] usb usb8-port1: unable to enumerate USB device [ 1075.050443][ T5918] em28xx 10-1:0.89: unknown em28xx chip ID (0) [ 1075.720887][ T5918] em28xx 10-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1075.734344][ T5918] em28xx 10-1:0.89: board has no eeprom [ 1075.802261][ T5918] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67) [ 1075.809642][ T5918] em28xx 10-1:0.89: analog set to bulk mode. [ 1075.817149][ T1209] em28xx 10-1:0.89: Registering V4L2 extension [ 1075.832310][ T5918] usb 10-1: USB disconnect, device number 43 [ 1075.859903][ T5918] em28xx 10-1:0.89: Disconnecting em28xx [ 1075.923709][ T1209] em28xx 10-1:0.89: Config register raw data: 0xffffffed [ 1075.943772][ T1209] em28xx 10-1:0.89: AC97 chip type couldn't be determined [ 1075.965390][ T1209] em28xx 10-1:0.89: No AC97 audio processor [ 1075.985661][ T1209] usb 10-1: Decoder not found [ 1075.990405][ T1209] em28xx 10-1:0.89: failed to create media graph [ 1076.005779][ T1209] em28xx 10-1:0.89: V4L2 device video103 deregistered [ 1076.021974][ T1209] em28xx 10-1:0.89: Registering snapshot button... [ 1076.039173][ T1209] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input140 [ 1076.068364][ T1209] em28xx 10-1:0.89: Remote control support is not available for this card. [ 1076.078324][ T5918] em28xx 10-1:0.89: Closing input extension [ 1076.084457][ T5918] em28xx 10-1:0.89: Deregistering snapshot button [ 1076.086499][T21756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1076.106007][T21756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1076.114247][T21756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1076.122077][T21756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1076.131441][T21756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1076.140476][ T5918] em28xx 10-1:0.89: Freeing device [ 1076.228202][T28379] lo speed is unknown, defaulting to 1000 [ 1076.240995][T28379] wg2 speed is unknown, defaulting to 1000 [ 1076.407898][T28383] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8183'. [ 1076.461804][ T1084] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88802a6e8000 (24)(syz_tun) start [ 1076.478559][ T1084] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88802a6e8000 (20)(syz_tun) end [ 1076.499858][T28383] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8183'. [ 1076.510112][T28383] tipc: Started in network mode [ 1076.514994][T28383] tipc: Node identity 1, cluster identity 129 [ 1076.523001][T28383] tipc: Node number set to 1 [ 1076.527736][T28383] tipc: Cannot configure node identity twice [ 1076.685683][T28395] overlayfs: failed to resolve './file2': -2 [ 1076.693640][T28395] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1076.848263][T28389] dvmrp0: entered allmulticast mode [ 1076.911290][T28400] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8187'. [ 1076.921632][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff8880347ac000 (13)(netdevsim3) start [ 1076.923995][ T1084] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.938872][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff8880347ac000 (8)(netdevsim3) end [ 1077.018831][T28400] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8187'. [ 1077.039561][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807a92c000 (16)(netdevsim2) start [ 1077.041695][ T1084] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.056535][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807a92c000 (11)(netdevsim2) end [ 1077.160322][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88806b2a8000 (16)(netdevsim1) start [ 1077.182579][ T1084] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.196939][T28400] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8187'. [ 1077.212308][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88806b2a8000 (6)(netdevsim1) end [ 1077.236956][T28379] chnl_net:caif_netlink_parms(): no params data found [ 1077.305410][ T1084] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.311868][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805e234000 (11)(netdevsim0) start [ 1077.333371][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805e234000 (4)(netdevsim0) end [ 1077.398547][T28379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.405760][T28379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.413381][T28379] bridge_slave_0: entered allmulticast mode [ 1077.422478][T28379] bridge_slave_0: entered promiscuous mode [ 1077.431846][T28379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.439151][T28379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.446475][T28379] bridge_slave_1: entered allmulticast mode [ 1077.455174][T28379] bridge_slave_1: entered promiscuous mode [ 1077.472521][ T796] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1077.503334][T28415] binder: 28414:28415 ioctl c0306201 2000000003c0 returned -14 [ 1077.513600][T28379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.533105][T28379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.585416][T28417] netlink: 'syz.9.8191': attribute type 4 has an invalid length. [ 1077.614678][T28379] team0: Port device team_slave_0 added [ 1077.631409][T28379] team0: Port device team_slave_1 added [ 1077.643986][ T796] usb 8-1: Using ep0 maxpacket: 16 [ 1077.663172][ T796] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1077.673664][ T796] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.686701][ T796] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1077.711705][ T796] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1077.731428][T28379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.738446][ T796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.746860][ T796] usb 8-1: Product: syz [ 1077.751480][T28379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.777420][ T796] usb 8-1: Manufacturer: syz [ 1077.777712][T28379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.782016][ T796] usb 8-1: SerialNumber: syz [ 1077.798333][ T1084] bridge_slave_1: left allmulticast mode [ 1077.803990][ T1084] bridge_slave_1: left promiscuous mode [ 1077.818796][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.963417][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88802cfd0000 (15)(ip6gretap0) start [ 1077.996801][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88802cfd0000 (7)(ip6gretap0) end [ 1078.027027][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888035a30000 (7)(erspan0) start [ 1078.053098][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888035a30000 (7)(erspan0) end [ 1078.070261][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807844e000 (7)(gretap0) start [ 1078.087281][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807844e000 (7)(gretap0) end [ 1078.115180][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff8880299ce000 (7)(geneve1) start [ 1078.131772][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff8880299ce000 (7)(geneve1) end [ 1078.131900][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff8880236ea000 (7)(geneve0) start [ 1078.131943][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff8880236ea000 (7)(geneve0) end [ 1078.132057][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888035be8000 (11)(bridge0) start [ 1078.132095][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888035be8000 (11)(bridge0) end [ 1078.154997][T28379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.155007][T28379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.155021][T28379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.213477][T28379] hsr_slave_0: entered promiscuous mode [ 1078.215644][T28379] hsr_slave_1: entered promiscuous mode [ 1078.217435][T28379] debugfs: 'hsr0' already exists in 'hsr' [ 1078.217453][T28379] Cannot create hsr debugfs directory [ 1078.220744][ T1084] tipc: Left network mode [ 1078.293879][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807d610000 (6)(wlan2) start [ 1078.293929][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807d610000 (6)(wlan2) end [ 1078.363192][T21756] Bluetooth: hci0: command tx timeout [ 1078.381400][ T796] usb 8-1: 0:2 : does not exist [ 1078.494045][ T796] usb 8-1: USB disconnect, device number 13 [ 1078.624228][T28436] binder: 28435:28436 ioctl c0306201 2000000003c0 returned -14 [ 1078.663865][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff8880553e0000 (15)(wlan1) start [ 1078.707957][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff8880553e0000 (3)(wlan1) end [ 1078.773081][T28440] overlayfs: failed to resolve './file2': -2 [ 1078.780633][T28440] overlayfs: failed to resolve 'workdir=./file2/file0': -2 [ 1078.981848][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807c2ec000 (16)(wlan0) start [ 1079.024929][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807c2ec000 (4)(wlan0) end [ 1079.102545][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88806aa88000 (12)(eth24) start [ 1079.138272][ T1163] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88806aa88000 (12)(eth24) end [ 1079.251978][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88806aa8c000 (6)(eth23) start [ 1079.305130][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88806aa8c000 (6)(eth23) end [ 1079.338936][T28461] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8201'. [ 1079.379397][T28461] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8201'. [ 1079.421421][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88806df78000 (12)(eth22) start [ 1079.454930][T28463] binder: BINDER_SET_CONTEXT_MGR already set [ 1079.461113][T28463] binder: 28462:28463 ioctl 4018620d 200000000040 returned -16 [ 1079.472602][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88806df78000 (4)(eth22) end [ 1079.490948][T28463] binder: 28462:28463 ioctl c0306201 2000000003c0 returned -14 [ 1079.526880][T28466] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8203'. [ 1079.552248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1079.563809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1079.572330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1079.580878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1079.600704][T28466] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8203'. [ 1079.633917][T28466] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8203'. [ 1079.660623][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807e8cc000 (12)(eth21) start [ 1079.696604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1079.710457][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807e8cc000 (3)(eth21) end [ 1079.744693][ T1084] hsr_slave_0: left promiscuous mode [ 1079.750514][ T1084] hsr_slave_1: left promiscuous mode [ 1079.761883][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.783419][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.805083][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.823912][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.867619][ T1084] veth1_macvtap: left promiscuous mode [ 1079.894877][ T1084] veth0_macvtap: left promiscuous mode [ 1079.903682][ T1084] veth1_vlan: left promiscuous mode [ 1079.931378][ T1084] veth0_vlan: left promiscuous mode [ 1079.956424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1080.002102][T28480] netlink: 'syz.6.8206': attribute type 4 has an invalid length. [ 1080.103442][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888036650000 (15)(macsec0) start [ 1080.175411][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888036650000 (6)(macsec0) end [ 1080.191790][ T5866] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1080.210312][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807d5d8000 (7)(macvtap0) start [ 1080.250448][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807d5d8000 (7)(macvtap0) end [ 1080.296076][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888050a76000 (7)(veth0_macvtap) start [ 1080.314632][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888050a76000 (7)(veth0_macvtap) end [ 1080.353530][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88803556c000 (7)(veth1_macvtap) start [ 1080.380599][ T5866] usb 8-1: Using ep0 maxpacket: 8 [ 1080.381539][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88803556c000 (7)(veth1_macvtap) end [ 1080.406779][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88803507a000 (6)(ipvlan1) start [ 1080.417909][ T5866] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 1080.437111][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88803507a000 (6)(ipvlan1) end [ 1080.437869][ T5866] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.474566][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807b95a000 (6)(ipvlan0) start [ 1080.494894][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807b95a000 (6)(ipvlan0) end [ 1080.494932][ T5866] usb 8-1: config 0 has no interface number 0 [ 1080.525645][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807d078000 (5)(macvlan1) start [ 1080.539285][ T5866] usb 8-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1080.542975][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807d078000 (5)(macvlan1) end [ 1080.575735][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888059198000 (5)(macvlan0) start [ 1080.576534][ T5866] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1080.608549][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888059198000 (5)(macvlan0) end [ 1080.609439][T21756] Bluetooth: hci0: command tx timeout [ 1080.626903][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888053416000 (6)(vlan1) start [ 1080.631224][ T5918] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1080.647825][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888053416000 (6)(vlan1) end [ 1080.672454][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805963a000 (6)(vlan0) start [ 1080.683726][ T5866] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1080.690520][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805963a000 (6)(vlan0) end [ 1080.705169][ T5866] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1080.728974][ T5866] usb 8-1: config 0 interface 52 has no altsetting 0 [ 1080.735687][ T5866] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1080.753111][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.761745][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888037278000 (8)(veth0_vlan) start [ 1080.775217][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807bab8000 (7)(syz0) start [ 1080.780194][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888037278000 (8)(veth0_vlan) end [ 1080.805823][ T5866] usb 8-1: config 0 descriptor?? [ 1080.813557][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888050a08000 (7)(veth1_vlan) start [ 1080.831161][ T9] lo speed is unknown, defaulting to 1000 [ 1080.837332][ T9] syz0: Port: 1 Link DOWN [ 1080.841858][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888050a08000 (6)(veth1_vlan) end [ 1080.858471][ T5918] usb 10-1: Using ep0 maxpacket: 32 [ 1080.869590][ T5918] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.885575][ T5918] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1080.924984][ T131] infiniband: Removed from hash: ib_dev=ffff88807bab8000 (0)(syz0) ndev=ffff888050a72000 (3)(lo) [ 1080.935850][ T5918] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1080.951220][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff8880790f4000 (5)(virt_wifi0) start [ 1080.970512][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff8880790f4000 (5)(virt_wifi0) end [ 1080.988693][ T5918] usb 10-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 1081.004581][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.022784][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807dbbe000 (4)(veth0_virt_wifi) start [ 1081.041174][ T131] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807bab8000 (0)(syz0) end [ 1081.052894][ T5918] usb 10-1: Product: syz [ 1081.057156][ T5918] usb 10-1: Manufacturer: syz [ 1081.067493][ T5866] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input141 [ 1081.083046][ T5918] usb 10-1: SerialNumber: syz [ 1081.087792][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807dbbe000 (4)(veth0_virt_wifi) end [ 1081.105484][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff8880348cc000 (4)(veth1_virt_wifi) start [ 1081.134156][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff8880348cc000 (4)(veth1_virt_wifi) end [ 1081.176264][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807c60e000 (4)(hsr0) start [ 1081.220473][ T5918] usb 10-1: config 0 descriptor?? [ 1081.253809][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807c60e000 (4)(hsr0) end [ 1081.278728][T28379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1081.284356][ T9] usb 8-1: USB disconnect, device number 14 [ 1081.285548][ C1] synaptics_usb 8-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1081.302210][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805654e000 (3)(hsr_slave_1) start [ 1081.342364][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805654e000 (3)(hsr_slave_1) end [ 1081.378250][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807d37e000 (4)(veth1_to_hsr) start [ 1081.408546][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807d37e000 (4)(veth1_to_hsr) end [ 1081.455562][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888077bf6000 (3)(hsr_slave_0) start [ 1081.461308][T28379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1081.480446][ T5918] peak_usb 10-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1081.508795][ T5918] peak_usb 10-1:0.0: unable to read PCAN-USB Pro FD firmware info (err -71) [ 1081.526419][T28379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1081.533228][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888077bf6000 (3)(hsr_slave_0) end [ 1081.574764][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807ceb0000 (4)(veth0_to_hsr) start [ 1081.592030][T28379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1081.624530][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807ceb0000 (4)(veth0_to_hsr) end [ 1081.632898][ T5918] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71 [ 1081.669705][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88802c89e000 (4)(batadv_slave_1) start [ 1081.685947][ T5918] usb 10-1: USB disconnect, device number 44 [ 1081.701581][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88802c89e000 (4)(batadv_slave_1) end [ 1081.704439][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88802c89c000 (4)(veth1_to_batadv) start [ 1081.704468][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88802c89c000 (4)(veth1_to_batadv) end [ 1081.704539][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805b810000 (4)(batadv_slave_0) start [ 1081.704563][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805b810000 (4)(batadv_slave_0) end [ 1081.704627][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805b816000 (4)(veth0_to_batadv) start [ 1081.704650][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805b816000 (4)(veth0_to_batadv) end [ 1081.704712][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805f1a4000 (3)(team_slave_1) start [ 1081.704736][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805f1a4000 (3)(team_slave_1) end [ 1081.704776][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805f1a6000 (4)(veth1_to_team) start [ 1081.704799][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805f1a6000 (4)(veth1_to_team) end [ 1081.704863][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88802c37e000 (3)(team_slave_0) start [ 1081.704887][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88802c37e000 (3)(team_slave_0) end [ 1081.704926][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888077a06000 (4)(veth0_to_team) start [ 1081.704950][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888077a06000 (4)(veth0_to_team) end [ 1081.705012][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805ef10000 (3)(bond_slave_1) start [ 1081.705035][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88805ef10000 (3)(bond_slave_1) end [ 1081.705075][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888065966000 (4)(veth1_to_bond) start [ 1081.705099][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888065966000 (4)(veth1_to_bond) end [ 1081.705179][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807da86000 (3)(bond_slave_0) start [ 1081.705205][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807da86000 (3)(bond_slave_0) end [ 1081.705246][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807ebc2000 (4)(veth0_to_bond) start [ 1081.705270][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807ebc2000 (4)(veth0_to_bond) end [ 1081.705333][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807b8e6000 (3)(bridge_slave_1) start [ 1081.705356][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807b8e6000 (3)(bridge_slave_1) end [ 1081.705396][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807b8e2000 (4)(veth1_to_bridge) start [ 1081.705420][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff88807b8e2000 (4)(veth1_to_bridge) end [ 1081.716868][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888027a08000 (4)(veth1) start [ 1081.716917][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888027a08000 (4)(veth1) end [ 1081.717040][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888069db6000 (4)(veth0) start [ 1081.717082][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888069db6000 (4)(veth0) end [ 1081.717190][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888051160000 (4)(batadv0) start [ 1081.717229][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037244000 (13)(syz2) rdma_ndev=ffff88805e230000 (26)(wg2) cookie=ffff888051160000 (4)(batadv0) end [ 1081.901975][T28379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.942469][T28379] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.969116][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.230935][T28539] netlink: 'syz.6.8215': attribute type 4 has an invalid length. [ 1082.242496][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.309151][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.471507][ T24] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1082.475777][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.606547][T28547] binder: 28546:28547 ioctl c0306201 2000000003c0 returned -14 [ 1082.653674][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1082.662221][ T24] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 1082.671102][ T24] usb 10-1: config 0 has no interface number 0 [ 1082.699998][ T24] usb 10-1: config 0 interface 89 has no altsetting 0 [ 1082.727371][ T24] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1082.749978][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.758069][ T24] usb 10-1: Product: syz [ 1082.779697][ T24] usb 10-1: Manufacturer: syz [ 1082.788816][ T24] usb 10-1: SerialNumber: syz [ 1082.829174][ T24] usb 10-1: config 0 descriptor?? [ 1082.842890][ T24] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1082.859300][ T24] em28xx 10-1:0.89: Video interface 89 found: bulk [ 1082.878626][ T5825] Bluetooth: hci0: command tx timeout [ 1082.947222][T28379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.075538][T28568] netlink: 'syz.6.8221': attribute type 4 has an invalid length. [ 1083.302446][T28379] veth0_vlan: entered promiscuous mode [ 1083.318285][T28379] veth1_vlan: entered promiscuous mode [ 1083.356486][T28379] veth0_macvtap: entered promiscuous mode [ 1083.368056][T28379] veth1_macvtap: entered promiscuous mode [ 1083.392836][T28379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.412288][T28379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.434302][ T1163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.443260][ T1163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.453915][ T1163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.463897][ T1163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.486121][ T24] em28xx 10-1:0.89: unknown em28xx chip ID (0) [ 1083.550551][T21920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.564625][T21920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.591637][T21920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.599698][T21920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.698169][T28578] netlink: 'syz.4.8182': attribute type 10 has an invalid length. [ 1083.706942][T28578] __nla_validate_parse: 1 callbacks suppressed [ 1083.706956][T28578] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8182'. [ 1084.021162][T28589] netlink: 'syz.6.8227': attribute type 23 has an invalid length. [ 1084.084007][T22820] ================================================================== [ 1084.092094][T22820] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x40a/0x4d0 [ 1084.100256][T22820] Read of size 4 at addr ffff88802c1c223c by task syz.7.6120/22820 [ 1084.108139][T22820] [ 1084.110470][T22820] CPU: 1 UID: 0 PID: 22820 Comm: syz.7.6120 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.110495][T22820] Tainted: [L]=SOFTLOCKUP [ 1084.110501][T22820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1084.110511][T22820] Call Trace: [ 1084.110518][T22820] [ 1084.110525][T22820] dump_stack_lvl+0xe8/0x150 [ 1084.110546][T22820] print_report+0xba/0x230 [ 1084.110565][T22820] ? dvb_frontend_release+0x40a/0x4d0 [ 1084.110580][T22820] kasan_report+0x117/0x150 [ 1084.110598][T22820] ? dvb_frontend_release+0x40a/0x4d0 [ 1084.110618][T22820] dvb_frontend_release+0x40a/0x4d0 [ 1084.110635][T22820] ? __pfx_dvb_frontend_release+0x10/0x10 [ 1084.110651][T22820] __fput+0x44f/0xa70 [ 1084.110673][T22820] task_work_run+0x1d9/0x270 [ 1084.110691][T22820] ? __pfx_task_work_run+0x10/0x10 [ 1084.110707][T22820] ? do_raw_spin_unlock+0xf5/0x210 [ 1084.110725][T22820] do_exit+0x69b/0x2320 [ 1084.110744][T22820] ? __pfx_do_exit+0x10/0x10 [ 1084.110764][T22820] do_group_exit+0x21b/0x2d0 [ 1084.110779][T22820] ? _raw_spin_unlock_irq+0x23/0x50 [ 1084.110796][T22820] get_signal+0x1284/0x1330 [ 1084.110822][T22820] arch_do_signal_or_restart+0xbc/0x830 [ 1084.110839][T22820] ? __pfx_get_timespec64+0x10/0x10 [ 1084.110857][T22820] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1084.110878][T22820] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1084.110902][T22820] exit_to_user_mode_loop+0x86/0x480 [ 1084.110919][T22820] ? rcu_is_watching+0x15/0xb0 [ 1084.110939][T22820] do_syscall_64+0x32d/0xf80 [ 1084.110955][T22820] ? trace_irq_disable+0x3b/0x150 [ 1084.110975][T22820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.110991][T22820] ? clear_bhb_loop+0x40/0x90 [ 1084.111009][T22820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.111024][T22820] RIP: 0033:0x7f795f35c84e [ 1084.111038][T22820] Code: Unable to access opcode bytes at 0x7f795f35c824. [ 1084.111054][T22820] RSP: 002b:00007f79601eff58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1084.111072][T22820] RAX: fffffffffffffdfc RBX: 00007f79601f06c0 RCX: 00007f795f35c84e [ 1084.111083][T22820] RDX: 00007f79601effb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1084.111093][T22820] RBP: 00007f795f4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1084.111103][T22820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.111112][T22820] R13: 00007f795f616128 R14: 00007f795f616090 R15: 00007fff0dcfb948 [ 1084.111129][T22820] [ 1084.111136][T22820] [ 1084.122052][T22820] Allocated by task 1: [ 1084.122063][T22820] kasan_save_track+0x3e/0x80 [ 1084.122080][T22820] __kasan_kmalloc+0x93/0xb0 [ 1084.122095][T22820] __kmalloc_cache_noprof+0x31c/0x660 [ 1084.122110][T22820] dvb_register_device+0x2fd/0x2210 [ 1084.122124][T22820] dvb_register_frontend+0x649/0x950 [ 1084.122138][T22820] vidtv_bridge_probe+0x9aa/0xf80 [ 1084.122156][T22820] platform_probe+0xf9/0x190 [ 1084.122176][T22820] really_probe+0x267/0xaf0 [ 1084.122189][T22820] __driver_probe_device+0x18c/0x320 [ 1084.122209][T22820] driver_probe_device+0x4f/0x240 [ 1084.122223][T22820] __driver_attach+0x3e7/0x710 [ 1084.122242][T22820] bus_for_each_dev+0x23b/0x2c0 [ 1084.122258][T22820] bus_add_driver+0x345/0x670 [ 1084.122275][T22820] driver_register+0x23a/0x320 [ 1084.122289][T22820] vidtv_bridge_init+0x28/0x50 [ 1084.122402][T22820] do_one_initcall+0x250/0x8d0 [ 1084.122420][T22820] do_initcall_level+0x104/0x190 [ 1084.122469][T22820] do_initcalls+0x59/0xa0 [ 1084.122486][T22820] kernel_init_freeable+0x2a6/0x3e0 [ 1084.122504][T22820] kernel_init+0x1d/0x1d0 [ 1084.122522][T22820] ret_from_fork+0x51e/0xb90 [ 1084.122539][T22820] ret_from_fork_asm+0x1a/0x30 [ 1084.122559][T22820] [ 1084.122564][T22820] Freed by task 22820: [ 1084.122574][T22820] kasan_save_track+0x3e/0x80 [ 1084.122587][T22820] kasan_save_free_info+0x46/0x50 [ 1084.122606][T22820] __kasan_slab_free+0x5c/0x80 [ 1084.122620][T22820] kfree+0x1c1/0x630 [ 1084.122638][T22820] dvb_generic_release+0x11d/0x1b0 [ 1084.122653][T22820] dvb_frontend_release+0x132/0x4d0 [ 1084.122667][T22820] __fput+0x44f/0xa70 [ 1084.122684][T22820] task_work_run+0x1d9/0x270 [ 1084.122696][T22820] do_exit+0x69b/0x2320 [ 1084.122707][T22820] do_group_exit+0x21b/0x2d0 [ 1084.122719][T22820] get_signal+0x1284/0x1330 [ 1084.122734][T22820] arch_do_signal_or_restart+0xbc/0x830 [ 1084.122750][T22820] exit_to_user_mode_loop+0x86/0x480 [ 1084.122766][T22820] do_syscall_64+0x32d/0xf80 [ 1084.122781][T22820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.122795][T22820] [ 1084.122800][T22820] The buggy address belongs to the object at ffff88802c1c2200 [ 1084.122800][T22820] which belongs to the cache kmalloc-256 of size 256 [ 1084.122815][T22820] The buggy address is located 60 bytes inside of [ 1084.122815][T22820] freed 256-byte region [ffff88802c1c2200, ffff88802c1c2300) [ 1084.122832][T22820] [ 1084.122837][T22820] The buggy address belongs to the physical page: [ 1084.122852][T22820] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c1c2 [ 1084.122871][T22820] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1084.122885][T22820] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1084.122900][T22820] page_type: f5(slab) [ 1084.122914][T22820] raw: 00fff00000000040 ffff88813ff1db40 dead000000000122 0000000000000000 [ 1084.122928][T22820] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1084.122942][T22820] head: 00fff00000000040 ffff88813ff1db40 dead000000000122 0000000000000000 [ 1084.122954][T22820] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1084.122967][T22820] head: 00fff00000000001 ffffea0000b07081 00000000ffffffff 00000000ffffffff [ 1084.122979][T22820] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1084.122987][T22820] page dumped because: kasan: bad access detected [ 1084.122999][T22820] page_owner tracks the page as allocated [ 1084.661746][T22820] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10983197054, free_ts 0 [ 1084.681432][T22820] post_alloc_hook+0x231/0x280 [ 1084.686184][T22820] get_page_from_freelist+0x24dc/0x2580 [ 1084.691709][T22820] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1084.697491][T22820] allocate_slab+0x77/0x660 [ 1084.701974][T22820] refill_objects+0x331/0x3c0 [ 1084.706631][T22820] __pcs_replace_empty_main+0x2b9/0x620 [ 1084.712156][T22820] __kmalloc_cache_noprof+0x392/0x660 [ 1084.717502][T22820] bus_add_driver+0x162/0x670 [ 1084.722159][T22820] driver_register+0x23a/0x320 [ 1084.726918][T22820] usb_register_driver+0x1e4/0x390 [ 1084.732018][T22820] do_one_initcall+0x250/0x8d0 [ 1084.736769][T22820] do_initcall_level+0x104/0x190 [ 1084.741718][T22820] do_initcalls+0x59/0xa0 [ 1084.746033][T22820] kernel_init_freeable+0x2a6/0x3e0 [ 1084.751219][T22820] kernel_init+0x1d/0x1d0 [ 1084.755537][T22820] ret_from_fork+0x51e/0xb90 [ 1084.760107][T22820] page_owner free stack trace missing [ 1084.765452][T22820] [ 1084.767765][T22820] Memory state around the buggy address: [ 1084.773386][T22820] ffff88802c1c2100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1084.781424][T22820] ffff88802c1c2180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1084.789462][T22820] >ffff88802c1c2200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1084.797526][T22820] ^ [ 1084.803403][T22820] ffff88802c1c2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1084.811448][T22820] ffff88802c1c2300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1084.819491][T22820] ================================================================== [ 1084.845823][T21756] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1084.859710][T21756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1084.869143][T21756] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1084.877278][T21756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1084.884966][T21756] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1084.905146][ T5918] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1084.932249][T22820] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1084.939444][T22820] CPU: 1 UID: 0 PID: 22820 Comm: syz.7.6120 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.950366][T22820] Tainted: [L]=SOFTLOCKUP [ 1084.954682][T22820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1084.964719][T22820] Call Trace: [ 1084.967984][T22820] [ 1084.970899][T22820] vpanic+0x56c/0xa60 [ 1084.974868][T22820] ? __pfx_vpanic+0x10/0x10 [ 1084.979365][T22820] ? __pfx___schedule+0x10/0x10 [ 1084.984203][T22820] panic+0xc5/0xd0 [ 1084.987909][T22820] ? __pfx_panic+0x10/0x10 [ 1084.992310][T22820] ? preempt_schedule_common+0x82/0xd0 [ 1084.997751][T22820] ? dvb_frontend_release+0x40a/0x4d0 [ 1085.003127][T22820] check_panic_on_warn+0x89/0xb0 [ 1085.008048][T22820] ? dvb_frontend_release+0x40a/0x4d0 [ 1085.013399][T22820] end_report+0x73/0x180 [ 1085.017624][T22820] ? dvb_frontend_release+0x40a/0x4d0 [ 1085.022978][T22820] kasan_report+0x128/0x150 [ 1085.027476][T22820] ? dvb_frontend_release+0x40a/0x4d0 [ 1085.032830][T22820] dvb_frontend_release+0x40a/0x4d0 [ 1085.038016][T22820] ? __pfx_dvb_frontend_release+0x10/0x10 [ 1085.043714][T22820] __fput+0x44f/0xa70 [ 1085.047682][T22820] task_work_run+0x1d9/0x270 [ 1085.052263][T22820] ? __pfx_task_work_run+0x10/0x10 [ 1085.057355][T22820] ? do_raw_spin_unlock+0xf5/0x210 [ 1085.062454][T22820] do_exit+0x69b/0x2320 [ 1085.066595][T22820] ? __pfx_do_exit+0x10/0x10 [ 1085.071175][T22820] do_group_exit+0x21b/0x2d0 [ 1085.075756][T22820] ? _raw_spin_unlock_irq+0x23/0x50 [ 1085.080943][T22820] get_signal+0x1284/0x1330 [ 1085.085448][T22820] arch_do_signal_or_restart+0xbc/0x830 [ 1085.090979][T22820] ? __pfx_get_timespec64+0x10/0x10 [ 1085.096164][T22820] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1085.102309][T22820] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1085.108041][T22820] exit_to_user_mode_loop+0x86/0x480 [ 1085.113317][T22820] ? rcu_is_watching+0x15/0xb0 [ 1085.118066][T22820] do_syscall_64+0x32d/0xf80 [ 1085.122638][T22820] ? trace_irq_disable+0x3b/0x150 [ 1085.127646][T22820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.133691][T22820] ? clear_bhb_loop+0x40/0x90 [ 1085.138350][T22820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.144223][T22820] RIP: 0033:0x7f795f35c84e [ 1085.148626][T22820] Code: Unable to access opcode bytes at 0x7f795f35c824. [ 1085.155621][T22820] RSP: 002b:00007f79601eff58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1085.164041][T22820] RAX: fffffffffffffdfc RBX: 00007f79601f06c0 RCX: 00007f795f35c84e [ 1085.171998][T22820] RDX: 00007f79601effb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1085.179965][T22820] RBP: 00007f795f4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1085.187957][T22820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1085.195914][T22820] R13: 00007f795f616128 R14: 00007f795f616090 R15: 00007fff0dcfb948 [ 1085.203885][T22820] [ 1085.207228][T22820] Kernel Offset: disabled [ 1085.211533][T22820] Rebooting in 86400 seconds..