last executing test programs: 10m16.054771502s ago: executing program 0 (id=1): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xfffffde1, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x41004) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xc, 0xfff3}}, [{0x8, 0xb, 0x778}]}, 0x2c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffde86}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x15aa2}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc100}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) 10m10.568014697s ago: executing program 3 (id=4): socket$nl_generic(0x10, 0x3, 0x10) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{&(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c844) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) unshare(0x40000400) 10m7.174475293s ago: executing program 4 (id=5): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_io_uring_setup(0x54a0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000000)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10m4.677031932s ago: executing program 0 (id=10): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x2, 0x0, 0xe7}}}}}}, 0x0) 10m3.848865754s ago: executing program 0 (id=11): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2695, 0x1, 0x1, 0x0, 0x6}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 10m2.027098155s ago: executing program 4 (id=13): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f00000003c0)={{0x9, 0x1, 0x4, 0x6, 'syz0\x00', 0x63}, 0x0, [0xfffffd5f, 0x2, 0x5, 0x687, 0x74859516, 0x6, 0x40000002, 0x4, 0x2, 0x2, 0x8000, 0xc59, 0x4a13, 0xa, 0x6, 0x8, 0xfffffff8, 0xfffffff8, 0x10, 0xc, 0x7ff, 0x9, 0x10, 0x7, 0x10000, 0xacb, 0x10000, 0x3, 0x81, 0xfffffffe, 0x4003, 0x5, 0x15, 0x1, 0x10000, 0x2, 0x6, 0x4, 0x8, 0x7, 0xfffffff7, 0x401, 0x1, 0x1, 0x5, 0x1, 0x1, 0xffffff95, 0x1, 0x5354fdb3, 0x6, 0x9, 0xcd, 0xb, 0x2, 0xfff, 0x2, 0x6, 0x800, 0x3, 0x80000000, 0x8, 0xa, 0x7, 0x4, 0x5, 0xc, 0x6, 0x1ff, 0x3, 0x7, 0x101, 0x6, 0x7, 0x2, 0x1, 0x9, 0x3, 0x4, 0x800, 0x800004, 0x3ff, 0x0, 0x275, 0x2, 0x4, 0x9, 0x0, 0x2, 0x3ff, 0x81, 0x8, 0x8, 0x893a, 0x3, 0x800, 0xf38f, 0xd926, 0x2, 0x1, 0x80000002, 0x3, 0x9, 0x3, 0x3, 0x4, 0x6, 0x10000, 0x8, 0x32284b62, 0x5, 0x48f, 0xdd00, 0xb, 0xfffff801, 0x7bd6, 0x7, 0xfffffbff, 0x6, 0x2, 0x10000, 0x1, 0x1, 0x549ac63b, 0x1, 0x4, 0x8001, 0x2]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000100)=""/87) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket(0x2, 0x80805, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x42, 0x1, 0x539e09df839dfe94, "d3fa5b89042b7205fe7bafe9e6415dbf6b34944d164ce8cd4e0d4c7b546787a7", 0x3631564e}) r3 = openat$audio(0xffffff9c, &(0x7f0000000000), 0x404802, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x1ff) syz_emit_ethernet(0x5a, &(0x7f0000000800)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@lsrr={0x83, 0xb, 0x75, [@multicast2, @broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000e80)=@ccm_128={{0x303}, "e1e92da68a9d3124", "9235424ae2d743ea3f9f091b019fc5c5", "11b56504", "2e57f18d332d35c9"}, 0x28) mkdir(0x0, 0x20) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x27) 9m59.20541437s ago: executing program 4 (id=16): r0 = openat$dlm_monitor(0xffffff9c, 0x0, 0x600, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x200) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 9m58.710128348s ago: executing program 0 (id=17): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = mq_open(0x0, 0x9998bdb00e53b971, 0x80, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x1a39, &(0x7f0000002c80)={0x0, 0xe3d3, 0x0, 0x800005, 0x21ed}, 0x0, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r2 = mq_open(&(0x7f00000001c0)='&\xaf\x12}N\xf3oW\'\x00', 0x1, 0x2, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xa19, 0x0) 9m57.82186816s ago: executing program 0 (id=19): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x203, 0x80742, 0x41414770, 0x32315659, 0x2, 0x490, 0x1, 0xfffffffd, 0xfeedcafe, 0x3, 0x0, 0x1}}) 9m56.367265814s ago: executing program 0 (id=20): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x11) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000040)='&:}\x00', &(0x7f00000002c0)="1b98", 0x2) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x20000, 0x3, 0x103}, &(0x7f0000002000), &(0x7f0000000000), &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="9b4307000001aaaaaaaafcb308004500001c000000000001907800000000ff7adaffe0009078fffd0000"], 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0x2d0, 0x198, 0x1, 0x2, 0xdd9f83, 0x2800, 0x9, 0x1, 0x2, 0x8, 0x722, 0x13, 0x7, 0x7b, 0x3f, 0xc, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e22, 0x1, @loopback, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r6 = dup2(r2, r2) r7 = socket(0x23, 0x80000, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(r9, 0xffffffffffffffff, 0x0) 9m54.234198554s ago: executing program 32 (id=4): socket$nl_generic(0x10, 0x3, 0x10) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{&(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c844) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) unshare(0x40000400) 9m43.150696302s ago: executing program 33 (id=16): r0 = openat$dlm_monitor(0xffffff9c, 0x0, 0x600, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x200) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 9m40.784337785s ago: executing program 34 (id=20): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x11) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000040)='&:}\x00', &(0x7f00000002c0)="1b98", 0x2) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x20000, 0x3, 0x103}, &(0x7f0000002000), &(0x7f0000000000), &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="9b4307000001aaaaaaaafcb308004500001c000000000001907800000000ff7adaffe0009078fffd0000"], 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0x2d0, 0x198, 0x1, 0x2, 0xdd9f83, 0x2800, 0x9, 0x1, 0x2, 0x8, 0x722, 0x13, 0x7, 0x7b, 0x3f, 0xc, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e22, 0x1, @loopback, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r6 = dup2(r2, r2) r7 = socket(0x23, 0x80000, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(r9, 0xffffffffffffffff, 0x0) 9m19.948976406s ago: executing program 2 (id=37): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000180)="6e1b5e7221e2eb0000af76005d00", 0xe, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r3 = memfd_create(0x0, 0x2) fcntl$addseals(r3, 0x409, 0xe) ftruncate(r3, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYBLOB], 0x68}}, 0x24040800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 9m12.971366762s ago: executing program 2 (id=40): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x2, 0xffff, @mcast2}}, 0x0, 0x1, [{{0xa, 0xfffc, 0x0, @private2}}]}, 0x10c) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600080000fc020000000000000000000000000000ff02000000000000000000000000000129"], 0x0) 9m12.566629153s ago: executing program 2 (id=41): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0x6, 0x707000a1, 0xdcf, 0xdb, 0xb, 0x7fe, 0x0, 0x0, 0x100, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x22020600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000100000100000000000000", @ANYRES32, @ANYBLOB="2300f2ff00000000dd0000000000", @ANYRES32=0x0], 0x50) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, &(0x7f0000000000)) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 9m12.201348882s ago: executing program 2 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000060601080000000000000000000000000d0003006c6973743a73657400000000"], 0x48}}, 0x0) 9m11.988150967s ago: executing program 2 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9m11.681274636s ago: executing program 2 (id=44): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340), &(0x7f0000000080)=0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140ff1600ff0c00028008000140594ce14ac3edf711d3fc2f2be394d5d7"], 0x44}, 0x1, 0x0, 0x0, 0x30008003}, 0x4000050) 8m55.948381629s ago: executing program 35 (id=44): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340), &(0x7f0000000080)=0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140ff1600ff0c00028008000140594ce14ac3edf711d3fc2f2be394d5d7"], 0x44}, 0x1, 0x0, 0x0, 0x30008003}, 0x4000050) 7m53.070743027s ago: executing program 5 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map, 0x2f, 0x1, 0x42c, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x20000, 0x0, [@sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, @sadb_address={0x2, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x4e21, @loopback}}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x68}}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e64"], 0x48}}, 0x0) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d5"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x14, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc0405602, &(0x7f0000000480)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "023d2134"}, 0x0, 0x2, {0x0}}) r5 = syz_open_dev$video4linux(&(0x7f0000000300), 0x4, 0x101a82) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VIDIOC_OVERLAY(r5, 0xc0405627, 0x0) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) syz_io_uring_setup(0x790c, &(0x7f0000000980)={0x0, 0xfe14, 0x8000, 0x0, 0x1b4, 0x0, r1}, &(0x7f0000000a00), &(0x7f0000000a40)=0x0, &(0x7f0000000000)) read$watch_queue(0xffffffffffffffff, &(0x7f0000000100)=""/39, 0x27) dup3(r3, r3, 0x80000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, 0x0, &(0x7f0000000000)) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$kcm(0x29, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x250, 0x34, 0x400, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0xc, 0x20, 0x0, 0x0, @u64=0x100000000}, @generic="c11a9a596ff56289cf6cb8ff448f3200c78b52a73ad38f73bfb65bc1d59e36c72b948534a44a4da8c031ee32ad3c0a3492466a07d79cc3deafef553e7bde40a45bdedfb2a67af7a74d7df368e8c920bec83baa5ef09fdfcea95e587f5ea516548c166fb51ace71141d9b5a1e23caace5dde1183a17ae1413efa0fd7c77b48246745991c1d5703b1544453ccaf1a0f2eab9eb757a678a3e84a9d716f6b2c74269327a453b2055b759fa1d6c2eb15eb2b8de712b30dcc1c12e71169f07cc2529cfdf7e4b2b178f410bbc05f8d57fdec90b14989055d935c48026dac7b3775ea95ff208aa9724", @typed={0xa, 0x4b, 0x0, 0x0, @str='vcan0\x00'}, @nested={0x4, 0x28}, @typed={0x15, 0x78, 0x0, 0x0, @str='/dev/v4l-subdev#\x00'}, @nested={0x4, 0xf3}, @generic="31188e54551feb96596d64d1a7d6cf70", @typed={0x8, 0x59, 0x0, 0x0, @fd=r1}, @nested={0x12, 0x92, 0x0, 0x1, [@generic="ba3f0ee1504559cccdb77fe71fca"]}, @generic="357e161d5fd9ff39378eb88ee223e140547a40a242397b3a982ad257f1017ec9634549dd6724f04f786aca28d1590d76306b7f8e73ba33eaea77be81afa7c401c8fd8f3939023c9ec530c80e3d22271ed11af2798b2f825adc39b69f6052297acedeecfeab3965f3180f09af4517747997cfd0a8e88ee3614856a4d5a057cc0395ed85db8be61c6f6c3fa7df59a35ffdb507881291d02fb515e3247c67143713560d38ec68a87786fde88cd70150bc5a9b3ff2a164bf242b0105ffe0de6ab12f9ab5d6a9b1f02a65b25bdb3d0253e54f10327126c47a5bbe1784e46dfe5c674b130e9b140ed80a9e76a39a4e459b019f22"]}, 0x250}, 0x1, 0x0, 0x0, 0x4414}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 7m48.963716983s ago: executing program 5 (id=76): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r2, 0x2}, &(0x7f0000000100)=0x8) 7m48.010848189s ago: executing program 5 (id=77): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="06000000040000005b0000008a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ec000000000000000000000000000000f95d7688232705f200f932cb3ad635067932c2a7cfa2944e6dfaa3e49037ea6d902bb3b5d798e3a773cb12f99e87f456"], 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x9, 0x2, 0x80000001}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000140)=0x9a7, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7m47.090264021s ago: executing program 7 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000060601080000000000000000000000000d0003006c6973743a73657400000000"], 0x48}}, 0x0) 7m45.796802879s ago: executing program 7 (id=80): r0 = syz_io_uring_setup(0x497, &(0x7f0000000240)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000140), &(0x7f0000000600), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 7m43.957159008s ago: executing program 7 (id=82): syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbc02, 0x10, 0x0, 0x30f}, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7}) 7m41.983284984s ago: executing program 7 (id=85): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) 7m41.170499574s ago: executing program 7 (id=87): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="513b5a9d0c0000fb4c4245fc", 0xc}, {&(0x7f0000000180)="0508", 0x2}], 0x2}, 0x40000) 7m40.595510895s ago: executing program 7 (id=88): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000000c0)={0x5, 0x7, 0x1, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xe1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) shmctl$IPC_RMID(0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 7m32.364932557s ago: executing program 36 (id=77): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="06000000040000005b0000008a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ec000000000000000000000000000000f95d7688232705f200f932cb3ad635067932c2a7cfa2944e6dfaa3e49037ea6d902bb3b5d798e3a773cb12f99e87f456"], 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x9, 0x2, 0x80000001}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000140)=0x9a7, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7m24.963929239s ago: executing program 37 (id=88): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000000c0)={0x5, 0x7, 0x1, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xe1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) shmctl$IPC_RMID(0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 5m10.926839437s ago: executing program 8 (id=241): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) 5m10.118849574s ago: executing program 8 (id=242): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="b51c4496e539001002"], 0xc}}], 0x1, 0x4000900) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x3, 0x0, 'queue0\x00', 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x40440d0}, 0x24048800) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, 0x0) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000040)=[{r8, 0x241a}, {r8, 0x1000}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000140)={0x1, 0x3, 0x46, 0x0, 0x4}) 4m57.462896083s ago: executing program 8 (id=259): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000000640), 0x0) 4m56.829919507s ago: executing program 8 (id=260): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100), 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x4}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) 4m55.818858298s ago: executing program 8 (id=262): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x4, 0x6, 0xd, 0x5, 0x0, 0x9, 0xee, 0x7, 0xf4, 0x64, 0x8, 0xfb, 0x10}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400)={r1}, &(0x7f0000000540)=0x8) 4m55.162091846s ago: executing program 8 (id=264): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r3 = socket(0x1d, 0x2, 0x6) recvfrom$l2tp6(r3, &(0x7f00000002c0)=""/75, 0x4b, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r6, r7, 0x0, &(0x7f0000000000)) io_uring_enter(r5, 0x48e9, 0x4, 0x2, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtfilter={0x898, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x864, 0x2, [@TCA_U32_POLICE={0x860, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000000, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0x1ff, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x4, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x7, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x8, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x81, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x200080, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x2, 0x9, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0xfffffff8, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x2, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0xfff, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x4, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7176, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0x13, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x3, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x898}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) 4m39.532634732s ago: executing program 38 (id=264): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r3 = socket(0x1d, 0x2, 0x6) recvfrom$l2tp6(r3, &(0x7f00000002c0)=""/75, 0x4b, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r6, r7, 0x0, &(0x7f0000000000)) io_uring_enter(r5, 0x48e9, 0x4, 0x2, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtfilter={0x898, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x864, 0x2, [@TCA_U32_POLICE={0x860, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000000, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0x1ff, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x4, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x7, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x8, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x81, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x200080, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x2, 0x9, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0xfffffff8, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x2, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0xfff, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x4, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7176, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0x13, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x3, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x898}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) 11.797133014s ago: executing program 6 (id=512): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) syz_io_uring_setup(0x23e, &(0x7f0000000680)={0x0, 0x525e4, 0x10100, 0x3, 0x202e0, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x40000000}) read$dsp(r0, &(0x7f0000000380)=""/116, 0x94) 10.583917636s ago: executing program 6 (id=513): openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x5a, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x7, 0x80000000, 0x2, 0x3}, 0x0) 10.147610862s ago: executing program 6 (id=514): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c5, 0x3000}, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="2014120000003219fad1a560da0781c2106a5bd2cb999f14"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, 0x0) 7.800681045s ago: executing program 6 (id=517): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x1593, &(0x7f0000000100)={0x0, 0x7701, 0x40, 0x2, 0x1b0}, 0x0, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x3, 0xff) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 7.136889828s ago: executing program 6 (id=518): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f00000000c0)) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0xaf0, 0x101100) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x20040, 0x0, 0x63, 0x0, 0x0}) 6.438657883s ago: executing program 1 (id=520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) 6.137318885s ago: executing program 1 (id=521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) 5.774216071s ago: executing program 6 (id=522): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) clock_settime(0x0, &(0x7f0000000140)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008ff4b0000340000000000019078ac1e0001ac1414aa8617000000030611848a83989c24887c"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780050015000200000008001240"], 0x64}}, 0x0) 1.469756658s ago: executing program 1 (id=523): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2004019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r1], 0xfc, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20, 0x0) 1.011962939s ago: executing program 1 (id=524): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000480)="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", &(0x7f0000000340)="48cca82c117d786376dc6ddf72e2426bec4d0c1fe73f3e4381e1fd34a744ea9e300c42ef1317766ffb69aac228d9f9775e9645ad1fe95ea58cf59d9489912e4899e8c0c4e860e4b8863c8cc4672d5eb918f70073cd540c109b3c3cde65e11c3b911017f28836d0cbbada2155f01413f9db39d3455b71d6824e2c2f8245d3af3b2b77"}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x6) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$alg(0x26, 0x5, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x424441, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 489.869371ms ago: executing program 1 (id=525): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x6, 0x1, 0x0, 0xb, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = memfd_secret(0x0) futimesat(r2, 0x0, 0x0) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500, 0x0, 0xe2}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) unshare(0x24020400) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) file_setattr(r3, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) 0s ago: executing program 1 (id=526): socket(0x11, 0x80a, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)={0x28f6c81d26a0207, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x3, &(0x7f0000000100)={0x8, "c6c1a8b51034c4b7c55816b040ce4110000000000000005452b3b94bce47509d40"}}) r5 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c", @ANYRES16=r5], 0x38}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB], 0x14}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x2}) kernel console output (not intermixed with test programs): ous mode [ 587.240079][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.383772][ T5824] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 587.559498][ T5824] usb 7-1: Using ep0 maxpacket: 32 [ 587.584944][ T5824] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.613422][ T5824] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.634898][ T5824] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 587.645838][ T5824] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 587.669231][ T5824] usb 7-1: Product: syz [ 587.676364][ T5824] usb 7-1: Manufacturer: syz [ 587.738914][ T5824] hub 7-1:4.0: USB hub found [ 587.974018][ T5824] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 588.081761][ T5824] usb 7-1: USB disconnect, device number 6 [ 588.103751][ T5783] Bluetooth: hci4: command tx timeout [ 588.215857][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.315518][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.398918][ T130] bond0 (unregistering): Released all slaves [ 588.984190][ T130] hsr_slave_0: left promiscuous mode [ 589.033122][ T130] hsr_slave_1: left promiscuous mode [ 589.042070][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.115666][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.400715][ T5824] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 589.589910][ T5824] usb 2-1: Using ep0 maxpacket: 8 [ 589.652306][ T5824] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 589.708354][ T5824] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 589.731847][ T5824] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 589.768804][ T5824] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 589.797099][ T5824] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 589.846017][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.109783][ T5824] usb 2-1: GET_CAPABILITIES returned 2f [ 590.169822][ T5783] Bluetooth: hci4: command tx timeout [ 590.193118][ T5824] usbtmc 2-1:16.0: can't read capabilities [ 590.350311][ T5824] usb 2-1: USB disconnect, device number 20 [ 591.041167][ T130] team0 (unregistering): Port device team_slave_1 removed [ 591.127510][ T130] team0 (unregistering): Port device team_slave_0 removed [ 591.223049][ T5095] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 591.413608][ T5095] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.429253][ T5095] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.443398][ T5095] usb 7-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 591.454357][ T5095] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.495479][ T5095] usb 7-1: config 0 descriptor?? [ 591.815815][ T7829] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.836273][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.847799][ T7829] bridge_slave_0: entered allmulticast mode [ 591.887501][ T7829] bridge_slave_0: entered promiscuous mode [ 591.940833][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.954884][ T5095] playstation 0003:054C:0BA0.0005: unknown main item tag 0x0 [ 591.973951][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.981797][ T7829] bridge_slave_1: entered allmulticast mode [ 592.022286][ T5095] playstation 0003:054C:0BA0.0005: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.6-1/input0 [ 592.047018][ T7829] bridge_slave_1: entered promiscuous mode [ 592.198404][ T5095] playstation 0003:054C:0BA0.0005: Failed to retrieve feature with reportID 18: -71 [ 592.243435][ T5095] playstation 0003:054C:0BA0.0005: Failed to retrieve DualShock4 pairing info: -71 [ 592.274750][ T5095] playstation 0003:054C:0BA0.0005: Failed to get MAC address from DualShock4 [ 592.321823][ T5095] playstation 0003:054C:0BA0.0005: Failed to create dualshock4. [ 592.389629][ T5095] playstation 0003:054C:0BA0.0005: probe with driver playstation failed with error -71 [ 592.450732][ T5095] usb 7-1: USB disconnect, device number 7 [ 592.589621][ T7829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.708082][ T7829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.749644][ T7950] fido_id[7950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 593.311440][ T7829] team0: Port device team_slave_0 added [ 593.768204][ T7829] team0: Port device team_slave_1 added [ 594.242610][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.288636][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.358406][ T7829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.701727][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.748609][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.908448][ T7829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.043222][ T6273] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 595.092578][ T7864] chnl_net:caif_netlink_parms(): no params data found [ 595.263061][ T6273] usb 7-1: Using ep0 maxpacket: 8 [ 595.323348][ T6273] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 595.383000][ T6273] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 595.416735][ T6273] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 595.453089][ T6273] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.488623][ T6273] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 595.523418][ T6273] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.812287][ T6273] usb 7-1: GET_CAPABILITIES returned 2f [ 595.828840][ T6273] usbtmc 7-1:16.0: can't read capabilities [ 596.023961][ T5824] usb 7-1: USB disconnect, device number 8 [ 596.354120][ T7829] hsr_slave_0: entered promiscuous mode [ 596.369546][ T7829] hsr_slave_1: entered promiscuous mode [ 596.423525][ T7829] debugfs: 'hsr0' already exists in 'hsr' [ 596.429470][ T7829] Cannot create hsr debugfs directory [ 597.825791][ T130] bridge_slave_1: left allmulticast mode [ 597.831701][ T130] bridge_slave_1: left promiscuous mode [ 597.984011][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.004379][ T6273] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 598.132229][ T130] bridge_slave_0: left allmulticast mode [ 598.160120][ T130] bridge_slave_0: left promiscuous mode [ 598.218885][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.224036][ T6273] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.257766][ T6273] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.270398][ T6273] usb 7-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 598.301452][ T6273] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.337635][ T6273] usb 7-1: config 0 descriptor?? [ 598.853418][ T6273] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0 [ 598.930000][ T6273] playstation 0003:054C:0BA0.0006: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.6-1/input0 [ 599.133440][ T6273] playstation 0003:054C:0BA0.0006: Failed to retrieve feature with reportID 18: -71 [ 599.182595][ T6273] playstation 0003:054C:0BA0.0006: Failed to retrieve DualShock4 pairing info: -71 [ 599.239609][ T6273] playstation 0003:054C:0BA0.0006: Failed to get MAC address from DualShock4 [ 599.296391][ T6273] playstation 0003:054C:0BA0.0006: Failed to create dualshock4. [ 599.429621][ T6273] playstation 0003:054C:0BA0.0006: probe with driver playstation failed with error -71 [ 599.522001][ T6273] usb 7-1: USB disconnect, device number 9 [ 599.812322][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.979448][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.123922][ T8013] fido_id[8013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 600.140052][ T130] bond0 (unregistering): Released all slaves [ 600.787426][ T7754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.920842][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.933657][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.941541][ T7864] bridge_slave_0: entered allmulticast mode [ 600.988074][ T7864] bridge_slave_0: entered promiscuous mode [ 601.042373][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.060077][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.083990][ T7864] bridge_slave_1: entered allmulticast mode [ 601.115071][ T7864] bridge_slave_1: entered promiscuous mode [ 601.531174][ T130] hsr_slave_0: left promiscuous mode [ 601.549441][ T130] hsr_slave_1: left promiscuous mode [ 601.576910][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.656029][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.772697][ T130] veth0_macvtap: left promiscuous mode [ 601.804936][ T130] veth1_vlan: left promiscuous mode [ 601.810586][ T130] veth0_vlan: left promiscuous mode [ 603.324672][ T130] team0 (unregistering): Port device team_slave_1 removed [ 603.375277][ T130] team0 (unregistering): Port device team_slave_0 removed [ 604.380085][ T7864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.468857][ T7864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.890019][ T7754] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.960072][ T7864] team0: Port device team_slave_0 added [ 605.001631][ T7864] team0: Port device team_slave_1 added [ 605.177092][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.184818][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.889412][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.897095][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.027690][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.059346][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.094073][ T5095] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 606.128598][ T7864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.190764][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.241090][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.304842][ T5095] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.329247][ T7864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.344240][ T5095] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 606.363117][ T5095] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.429077][ T5095] usb 7-1: config 0 descriptor?? [ 606.530143][ T5095] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 607.212260][ T7864] hsr_slave_0: entered promiscuous mode [ 607.267807][ T7864] hsr_slave_1: entered promiscuous mode [ 607.289818][ T7864] debugfs: 'hsr0' already exists in 'hsr' [ 607.304358][ T7864] Cannot create hsr debugfs directory [ 607.393007][ T7829] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 607.486874][ T8057] loop6: detected capacity change from 0 to 2640 [ 607.495778][ T8057] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.504466][ T8057] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.512561][ T8057] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.514159][ T7829] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 607.527817][ T8057] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.527998][ T8057] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.528204][ T8057] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.528442][ T8057] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.528601][ T8057] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.581145][ T8057] ldm_validate_partition_table(): Disk read failed. [ 607.594637][ T8057] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.611783][ T8057] Buffer I/O error on dev loop6, logical block 0, async page read [ 607.631154][ T8057] Dev loop6: unable to read RDB block 0 [ 607.667505][ T8057] loop6: unable to read partition table [ 607.685856][ T8057] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 607.791205][ T7829] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 608.172479][ T8064] input: syz1 as /devices/virtual/input/input8 [ 608.182214][ T7829] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 608.272690][ T5826] IPVS: starting estimator thread 0... [ 608.373645][ T8066] IPVS: using max 192 ests per chain, 9600 per kthread [ 609.449222][ T7290] usb 7-1: USB disconnect, device number 10 [ 611.460520][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.920535][ T7864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 612.057679][ T7864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 612.199102][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.310854][ T7864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 612.433380][ T5826] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 612.469071][ T7864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 612.673619][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 612.713648][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.737096][ T7829] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.763187][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.797698][ T5826] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 612.835530][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.859731][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.867599][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.900885][ T5826] usb 2-1: config 0 descriptor?? [ 613.114048][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.122153][ T5957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.645684][ T5826] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 613.864111][ T5826] usb 2-1: USB disconnect, device number 21 [ 614.317032][ T8114] input: syz1 as /devices/virtual/input/input9 [ 614.500199][ T8112] fido_id[8112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 615.777518][ T7754] veth0_vlan: entered promiscuous mode [ 616.126892][ T7864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.253326][ T7332] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 616.347676][ T7754] veth1_vlan: entered promiscuous mode [ 616.354682][ T8128] netlink: 'syz.1.337': attribute type 10 has an invalid length. [ 616.438480][ T8128] veth1_macvtap: left promiscuous mode [ 616.490669][ T7332] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.509528][ T7332] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 616.525121][ T7332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.542314][ T7332] usb 7-1: config 0 descriptor?? [ 616.608869][ T7864] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.630820][ T7332] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 616.720907][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.728578][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.740950][ T5826] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 616.882968][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.890513][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.928966][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 616.971535][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.984734][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.996305][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 617.016509][ T5826] usb 2-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 617.026704][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.084985][ T5826] usb 2-1: config 0 descriptor?? [ 617.344697][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.714933][ T7754] veth0_macvtap: entered promiscuous mode [ 617.795154][ T5826] hid-generic 0003:045E:FC40.0008: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.1-1/input0 [ 617.810328][ T8130] loop6: detected capacity change from 0 to 2640 [ 617.842420][ T8130] buffer_io_error: 11 callbacks suppressed [ 617.842516][ T8130] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.931795][ T8130] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.957378][ T7754] veth1_macvtap: entered promiscuous mode [ 617.964160][ T8130] Buffer I/O error on dev loop6, logical block 0, async page read [ 617.989306][ T5826] usb 2-1: USB disconnect, device number 22 [ 618.019929][ T8130] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.081827][ T8130] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.129472][ T8130] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.179132][ T8130] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.188277][ T8130] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.199145][ T8130] ldm_validate_partition_table(): Disk read failed. [ 618.215305][ T8130] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.247239][ T8130] Buffer I/O error on dev loop6, logical block 0, async page read [ 618.300270][ T8130] Dev loop6: unable to read RDB block 0 [ 618.326740][ T8130] loop6: unable to read partition table [ 618.347722][ T8130] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 618.621206][ T8134] fido_id[8134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 618.621436][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.877216][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.156981][ T5955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.211942][ T5955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.281399][ T5955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.314809][ T5955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.910779][ T7332] usb 7-1: USB disconnect, device number 11 [ 621.634498][ T7864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.682412][ T7829] veth0_vlan: entered promiscuous mode [ 621.936818][ T7829] veth1_vlan: entered promiscuous mode [ 622.843439][ T7864] veth0_vlan: entered promiscuous mode [ 622.945415][ T7829] veth0_macvtap: entered promiscuous mode [ 623.071833][ T7829] veth1_macvtap: entered promiscuous mode [ 623.297427][ T8171] netlink: 'syz.1.345': attribute type 10 has an invalid length. [ 623.320314][ T7864] veth1_vlan: entered promiscuous mode [ 623.551234][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.692027][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.736291][ T796] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 623.944832][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 623.986173][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.014690][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.023632][ T5955] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.027369][ T796] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 624.049420][ T796] usb 2-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 624.060652][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.075274][ T5955] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.101775][ T796] usb 2-1: config 0 descriptor?? [ 624.255283][ T5955] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.326833][ T5957] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.705647][ T796] hid-generic 0003:045E:FC40.0009: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.1-1/input0 [ 624.735503][ T7864] veth0_macvtap: entered promiscuous mode [ 624.848570][ T796] usb 2-1: USB disconnect, device number 23 [ 624.944456][ T7864] veth1_macvtap: entered promiscuous mode [ 625.348383][ T5826] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 625.465998][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.617100][ T5826] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.693002][ T5826] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 625.702376][ T5826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.735557][ T8181] fido_id[8181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 625.743167][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.865931][ T5826] usb 7-1: config 0 descriptor?? [ 625.980919][ T5826] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 625.997296][ T1127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.096753][ T1127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.223699][ T1127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.293434][ T1127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.811719][ T5772] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 626.823271][ T5772] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 626.833784][ T5772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 626.867022][ T5772] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 626.888146][ T5772] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 627.465492][ T8192] loop6: detected capacity change from 0 to 2640 [ 627.494913][ T8192] buffer_io_error: 11 callbacks suppressed [ 627.495002][ T8192] Buffer I/O error on dev loop6, logical block 0, async page read [ 627.593430][ T8192] Buffer I/O error on dev loop6, logical block 0, async page read [ 627.643857][ T8192] Buffer I/O error on dev loop6, logical block 0, async page read [ 627.652004][ T8192] Buffer I/O error on dev loop6, logical block 0, async page read [ 627.743364][ T8192] Buffer I/O error on dev loop6, logical block 0, async page read [ 627.751921][ T8192] Buffer I/O error on dev loop6, logical block 0, async page read [ 627.813401][ T8192] Buffer I/O error on dev loop6, logical block 0, async page read [ 627.821572][ T8192] Buffer I/O error on dev loop6, logical block 0, async page read [ 627.954292][ T8192] ldm_validate_partition_table(): Disk read failed. [ 627.961357][ T8192] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.043255][ T8192] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.051493][ T8192] Dev loop6: unable to read RDB block 0 [ 628.093766][ T8192] loop6: unable to read partition table [ 628.177286][ T8192] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 628.788083][ T5850] usb 7-1: USB disconnect, device number 12 [ 628.964967][ T5772] Bluetooth: hci5: command tx timeout [ 630.417240][ T130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.660952][ T8193] chnl_net:caif_netlink_parms(): no params data found [ 630.879736][ T130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.052932][ T5772] Bluetooth: hci5: command tx timeout [ 631.133701][ T8220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.352'. [ 631.209896][ T8221] netlink: 67 bytes leftover after parsing attributes in process `syz.1.352'. [ 631.315183][ T130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.756372][ T130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.903107][ T130] bridge_slave_1: left allmulticast mode [ 632.909014][ T130] bridge_slave_1: left promiscuous mode [ 632.921995][ T5826] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 632.986493][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.074508][ T130] bridge_slave_0: left allmulticast mode [ 633.080409][ T130] bridge_slave_0: left promiscuous mode [ 633.090285][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.119247][ T5826] usb 2-1: device descriptor read/64, error -71 [ 633.135661][ T5772] Bluetooth: hci5: command tx timeout [ 633.413161][ T5826] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 633.614894][ T5826] usb 2-1: device descriptor read/64, error -71 [ 633.734020][ T5826] usb usb2-port1: attempt power cycle [ 633.954721][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.997308][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.029765][ T130] bond0 (unregistering): Released all slaves [ 634.909919][ T8245] loop6: detected capacity change from 0 to 32768 [ 634.920977][ T5826] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 634.979163][ T5826] usb 2-1: device descriptor read/8, error -71 [ 635.207895][ T5772] Bluetooth: hci5: command tx timeout [ 635.277129][ T5826] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 636.250628][ T130] hsr_slave_0: left promiscuous mode [ 636.288214][ T5826] usb 2-1: device descriptor read/8, error -71 [ 636.329100][ T130] hsr_slave_1: left promiscuous mode [ 636.349981][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.413211][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.465024][ T5826] usb usb2-port1: unable to enumerate USB device [ 636.475379][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.491210][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.647599][ T130] veth1_macvtap: left promiscuous mode [ 636.713538][ T130] veth0_macvtap: left promiscuous mode [ 636.719527][ T130] veth1_vlan: left promiscuous mode [ 636.766475][ T130] veth0_vlan: left promiscuous mode [ 637.283553][ T5850] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 637.513130][ T5850] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.562191][ T5850] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 637.587139][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 637.616357][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 637.626245][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.630590][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 637.662331][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 637.675587][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 637.682599][ T5850] usb 2-1: config 0 descriptor?? [ 637.813500][ T5850] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 639.002039][ T130] team0 (unregistering): Port device team_slave_1 removed [ 639.110048][ T130] team0 (unregistering): Port device team_slave_0 removed [ 639.678753][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.702460][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.734957][ T8193] bridge_slave_0: entered allmulticast mode [ 639.749132][ T8193] bridge_slave_0: entered promiscuous mode [ 639.766212][ T5783] Bluetooth: hci1: command tx timeout [ 639.824957][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.832562][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.876505][ T8193] bridge_slave_1: entered allmulticast mode [ 639.913731][ T8193] bridge_slave_1: entered promiscuous mode [ 640.041404][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.050212][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 640.638582][ T8193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.847556][ T8193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.493667][ T5850] usb 2-1: USB disconnect, device number 28 [ 641.844490][ T8193] team0: Port device team_slave_0 added [ 641.846928][ T5783] Bluetooth: hci1: command tx timeout [ 641.967967][ T8193] team0: Port device team_slave_1 added [ 642.166596][ T130] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.755028][ T5772] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 642.766589][ T5772] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 642.784972][ T5772] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 642.812521][ T5772] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 642.828007][ T5772] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 643.016022][ T130] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.182542][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.227789][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.368578][ T8193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.642984][ T130] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.703229][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.710601][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.846603][ T8193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.925401][ T5772] Bluetooth: hci1: command tx timeout [ 644.042057][ T130] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.883641][ T5772] Bluetooth: hci6: command tx timeout [ 646.004859][ T5772] Bluetooth: hci1: command tx timeout [ 646.379808][ T8305] loop6: detected capacity change from 0 to 32768 [ 646.963088][ T5772] Bluetooth: hci6: command tx timeout [ 647.749022][ T8193] hsr_slave_0: entered promiscuous mode [ 647.761515][ T8193] hsr_slave_1: entered promiscuous mode [ 647.791634][ T8193] debugfs: 'hsr0' already exists in 'hsr' [ 647.808942][ T8193] Cannot create hsr debugfs directory [ 648.423503][ T5830] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 648.629765][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 648.663441][ T5830] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 648.684240][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.720054][ T5830] usb 2-1: config 0 descriptor?? [ 648.842031][ T5830] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 648.888379][ T130] bridge_slave_1: left allmulticast mode [ 648.933019][ T130] bridge_slave_1: left promiscuous mode [ 648.939837][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.028973][ T130] bridge_slave_0: left allmulticast mode [ 649.043053][ T5772] Bluetooth: hci6: command tx timeout [ 649.070325][ T130] bridge_slave_0: left promiscuous mode [ 649.089951][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.876398][ T8323] loop6: detected capacity change from 0 to 2640 [ 649.924421][ T6608] buffer_io_error: 11 callbacks suppressed [ 649.924507][ T6608] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.984043][ T6608] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.016972][ T6608] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.059067][ T6608] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.095294][ T6608] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.123221][ T6608] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.131525][ T6608] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.190043][ T6608] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.229911][ T6608] ldm_validate_partition_table(): Disk read failed. [ 650.267632][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.268508][ T6608] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.320063][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.324001][ T6608] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.368561][ T6608] Dev loop6: unable to read RDB block 0 [ 650.372463][ T130] bond0 (unregistering): Released all slaves [ 650.389428][ T6608] loop6: unable to read partition table [ 650.469288][ T8323] ldm_validate_partition_table(): Disk read failed. [ 650.488120][ T8323] Dev loop6: unable to read RDB block 0 [ 650.501708][ T8323] loop6: unable to read partition table [ 650.570118][ T8323] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 650.822434][ T130] hsr_slave_0: left promiscuous mode [ 650.850293][ T130] hsr_slave_1: left promiscuous mode [ 650.870990][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.894399][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.919204][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.945852][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.024234][ T130] veth1_macvtap: left promiscuous mode [ 651.045688][ T130] veth0_macvtap: left promiscuous mode [ 651.051664][ T130] veth1_vlan: left promiscuous mode [ 651.060508][ T130] veth0_vlan: left promiscuous mode [ 651.123165][ T5772] Bluetooth: hci6: command tx timeout [ 651.960961][ T5826] usb 2-1: USB disconnect, device number 29 [ 653.763840][ T130] team0 (unregistering): Port device team_slave_1 removed [ 653.885774][ T130] team0 (unregistering): Port device team_slave_0 removed [ 654.906748][ T8255] chnl_net:caif_netlink_parms(): no params data found [ 657.983308][ T130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.296430][ T8279] chnl_net:caif_netlink_parms(): no params data found [ 658.562615][ T130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.950849][ T130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.497547][ T130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.623340][ T8255] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.659914][ T8255] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.710096][ T8255] bridge_slave_0: entered allmulticast mode [ 659.727639][ T8255] bridge_slave_0: entered promiscuous mode [ 659.885047][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.892429][ T8255] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.933939][ T8255] bridge_slave_1: entered allmulticast mode [ 659.974114][ T8255] bridge_slave_1: entered promiscuous mode [ 660.746129][ T8255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.838917][ T8255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.348113][ T8193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 661.923299][ T8193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 662.141178][ T8255] team0: Port device team_slave_0 added [ 662.233476][ T8255] team0: Port device team_slave_1 added [ 662.545479][ T8193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 662.737601][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.763855][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.776814][ T8279] bridge_slave_0: entered allmulticast mode [ 662.807454][ T8279] bridge_slave_0: entered promiscuous mode [ 662.865587][ T8193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 662.958090][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.993203][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.063598][ T8255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.087434][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.121559][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.137546][ T8279] bridge_slave_1: entered allmulticast mode [ 663.166770][ T8279] bridge_slave_1: entered promiscuous mode [ 663.208794][ T130] bridge_slave_1: left allmulticast mode [ 663.230951][ T130] bridge_slave_1: left promiscuous mode [ 663.268380][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.341871][ T130] bridge_slave_0: left allmulticast mode [ 663.363195][ T130] bridge_slave_0: left promiscuous mode [ 663.372944][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.729695][ T8394] loop1: detected capacity change from 0 to 32768 [ 665.713834][ T5826] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 665.940995][ T5826] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.961875][ T5826] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 665.973938][ T5826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.008855][ T5826] usb 7-1: config 0 descriptor?? [ 666.061019][ T5826] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 666.257542][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.304431][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.336129][ T130] bond0 (unregistering): Released all slaves [ 666.366830][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.374819][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.435580][ T8255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.664413][ T130] hsr_slave_0: left promiscuous mode [ 666.702150][ T130] hsr_slave_1: left promiscuous mode [ 666.730308][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.758567][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.786031][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.833068][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.930700][ T130] veth1_macvtap: left promiscuous mode [ 666.968847][ T130] veth0_macvtap: left promiscuous mode [ 666.990558][ T130] veth1_vlan: left promiscuous mode [ 667.013168][ T130] veth0_vlan: left promiscuous mode [ 667.077119][ T8405] loop6: detected capacity change from 0 to 2640 [ 667.104666][ T8405] buffer_io_error: 32 callbacks suppressed [ 667.104754][ T8405] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.159514][ T8405] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.199810][ T8405] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.248383][ T8405] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.293582][ T8405] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.333889][ T8405] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.342476][ T8405] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.395162][ T8405] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.436168][ T8405] ldm_validate_partition_table(): Disk read failed. [ 667.483939][ T8405] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.492096][ T8405] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.553419][ T8405] Dev loop6: unable to read RDB block 0 [ 667.559760][ T8405] loop6: unable to read partition table [ 667.587001][ T8405] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 669.017397][ T10] usb 7-1: USB disconnect, device number 13 [ 669.149752][ T130] team0 (unregistering): Port device team_slave_1 removed [ 669.409830][ T130] team0 (unregistering): Port device team_slave_0 removed [ 670.987259][ T8279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.454021][ T8279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.201639][ T8448] fuse: Bad value for 'group_id' [ 682.207512][ T8448] fuse: Bad value for 'group_id' [ 682.356980][ T8255] hsr_slave_0: entered promiscuous mode [ 682.386792][ T8255] hsr_slave_1: entered promiscuous mode [ 682.428951][ T8255] debugfs: 'hsr0' already exists in 'hsr' [ 682.448766][ T8255] Cannot create hsr debugfs directory [ 682.742008][ T8279] team0: Port device team_slave_0 added [ 682.827790][ T8279] team0: Port device team_slave_1 added [ 683.494411][ T5830] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 683.712471][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.784138][ T5830] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 683.835962][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.858728][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.890571][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.896149][ T5830] usb 2-1: config 0 descriptor?? [ 684.019880][ T8279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.064202][ T5830] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 684.329128][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.369195][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.403956][ T8279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.016013][ T8475] loop6: detected capacity change from 0 to 2640 [ 685.049969][ T8475] buffer_io_error: 11 callbacks suppressed [ 685.050056][ T8475] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.107760][ T8475] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.143091][ T8475] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.151272][ T8475] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.214185][ T8475] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.222399][ T8475] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.271760][ T8475] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.299287][ T8475] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.337299][ T8475] ldm_validate_partition_table(): Disk read failed. [ 685.363259][ T8475] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.402344][ T8279] hsr_slave_0: entered promiscuous mode [ 685.406808][ T8475] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.429947][ T8279] hsr_slave_1: entered promiscuous mode [ 685.437373][ T8475] Dev loop6: unable to read RDB block 0 [ 685.445449][ T8279] debugfs: 'hsr0' already exists in 'hsr' [ 685.460997][ T8279] Cannot create hsr debugfs directory [ 685.467717][ T8475] loop6: unable to read partition table [ 685.510869][ T8475] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 686.233628][ T5133] ldm_validate_partition_table(): Disk read failed. [ 686.275800][ T5133] Dev loop6: unable to read RDB block 0 [ 686.333905][ T5133] loop6: unable to read partition table [ 686.937111][ T5830] usb 2-1: USB disconnect, device number 30 [ 687.336994][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 687.353332][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 687.364946][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 687.380259][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 687.399092][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 687.987035][ T8499] fuse: Bad value for 'group_id' [ 687.992230][ T8499] fuse: Bad value for 'group_id' [ 688.247179][ T8255] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 688.415466][ T8255] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 688.660269][ T8255] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 688.990635][ T8255] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 689.453353][ T5783] Bluetooth: hci4: command tx timeout [ 691.397998][ T8279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 691.470294][ T8279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 691.524136][ T5783] Bluetooth: hci4: command tx timeout [ 691.701978][ T8279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 692.091147][ T8279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 692.368487][ T8494] chnl_net:caif_netlink_parms(): no params data found [ 692.857982][ T8544] loop6: detected capacity change from 0 to 32768 [ 693.603298][ T5783] Bluetooth: hci4: command tx timeout [ 693.778109][ T8547] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 695.689649][ T5783] Bluetooth: hci4: command tx timeout [ 695.783762][ T13] bridge_slave_1: left allmulticast mode [ 695.827239][ T13] bridge_slave_1: left promiscuous mode [ 695.884310][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.942653][ T13] bridge_slave_0: left allmulticast mode [ 695.952139][ T13] bridge_slave_0: left promiscuous mode [ 695.983856][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.145764][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.306046][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.459561][ T13] bond0 (unregistering): Released all slaves [ 698.103536][ T13] hsr_slave_0: left promiscuous mode [ 698.129872][ T13] hsr_slave_1: left promiscuous mode [ 698.173642][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.187619][ T5772] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 698.204435][ T5772] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 698.214217][ T5772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 698.232024][ T5772] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 698.244689][ T5772] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 698.285171][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.365658][ T13] team0 (unregistering): Port device team_slave_1 removed [ 699.518891][ T13] team0 (unregistering): Port device team_slave_0 removed [ 700.323209][ T5772] Bluetooth: hci5: command tx timeout [ 700.385932][ T8494] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.438514][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.471260][ T8494] bridge_slave_0: entered allmulticast mode [ 700.509251][ T8494] bridge_slave_0: entered promiscuous mode [ 700.559352][ T8494] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.574692][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.582542][ T8494] bridge_slave_1: entered allmulticast mode [ 700.634350][ T8494] bridge_slave_1: entered promiscuous mode [ 701.184278][ T8494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.419086][ T8494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.481589][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 701.493487][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 702.404572][ T5772] Bluetooth: hci5: command tx timeout [ 702.521672][ T8494] team0: Port device team_slave_0 added [ 702.913891][ T8494] team0: Port device team_slave_1 added [ 703.377394][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 703.395871][ T5071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 703.405678][ T5071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 703.422097][ T5071] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 703.456905][ T5071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 703.643521][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.661204][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.742855][ T8494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.995746][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.022270][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.077484][ T8494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.484341][ T5071] Bluetooth: hci5: command tx timeout [ 704.972245][ T8593] loop6: detected capacity change from 0 to 32768 [ 705.525215][ T5071] Bluetooth: hci1: command tx timeout [ 705.864068][ T8494] hsr_slave_0: entered promiscuous mode [ 705.877097][ T8494] hsr_slave_1: entered promiscuous mode [ 705.899394][ T8494] debugfs: 'hsr0' already exists in 'hsr' [ 705.905745][ T8494] Cannot create hsr debugfs directory [ 706.565376][ T5071] Bluetooth: hci5: command tx timeout [ 707.603152][ T5772] Bluetooth: hci1: command tx timeout [ 709.326343][ T8563] chnl_net:caif_netlink_parms(): no params data found [ 709.699356][ T5772] Bluetooth: hci1: command tx timeout [ 710.494099][ T13] bridge_slave_1: left allmulticast mode [ 710.499996][ T13] bridge_slave_1: left promiscuous mode [ 710.565121][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.607879][ T13] bridge_slave_0: left allmulticast mode [ 710.684476][ T13] bridge_slave_0: left promiscuous mode [ 710.691295][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.163269][ T5830] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 711.340510][ T5830] usb 7-1: device descriptor read/64, error -71 [ 711.603100][ T5830] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 711.648368][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.748206][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.763394][ T5772] Bluetooth: hci1: command tx timeout [ 711.774729][ T5830] usb 7-1: device descriptor read/64, error -71 [ 711.799051][ T13] bond0 (unregistering): Released all slaves [ 711.894528][ T5830] usb usb7-port1: attempt power cycle [ 712.153077][ T13] hsr_slave_0: left promiscuous mode [ 712.195318][ T13] hsr_slave_1: left promiscuous mode [ 712.244183][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.285995][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.026442][ T8647] loop1: detected capacity change from 0 to 32768 [ 713.053171][ T5830] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 713.295607][ T13] team0 (unregistering): Port device team_slave_1 removed [ 713.456678][ T13] team0 (unregistering): Port device team_slave_0 removed [ 713.834866][ T5830] usb 7-1: device descriptor read/8, error -71 [ 715.894451][ T5830] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 716.124582][ T5830] usb 7-1: device not accepting address 17, error -71 [ 716.190890][ T5830] usb usb7-port1: unable to enumerate USB device [ 717.262026][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.309646][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.360670][ T8563] bridge_slave_0: entered allmulticast mode [ 717.435093][ T8563] bridge_slave_0: entered promiscuous mode [ 717.687509][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.718253][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.745424][ T8563] bridge_slave_1: entered allmulticast mode [ 717.765969][ T8563] bridge_slave_1: entered promiscuous mode [ 717.938794][ T8587] chnl_net:caif_netlink_parms(): no params data found [ 718.265655][ T8563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.601166][ T8563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.115215][ T8563] team0: Port device team_slave_0 added [ 719.387982][ T8563] team0: Port device team_slave_1 added [ 720.700525][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.733468][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.824814][ T8563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.046069][ T130] bridge_slave_1: left allmulticast mode [ 721.072998][ T130] bridge_slave_1: left promiscuous mode [ 721.079929][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.140852][ T130] bridge_slave_0: left allmulticast mode [ 721.168745][ T130] bridge_slave_0: left promiscuous mode [ 721.170646][ T8692] loop1: detected capacity change from 0 to 32768 [ 721.204177][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.614357][ T5826] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 721.807021][ T5826] usb 7-1: device descriptor read/64, error -71 [ 722.130749][ T5826] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 722.365473][ T5826] usb 7-1: device descriptor read/64, error -71 [ 722.535062][ T5826] usb usb7-port1: attempt power cycle [ 722.753644][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.895886][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.973249][ T5826] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 723.003773][ T130] bond0 (unregistering): Released all slaves [ 723.057372][ T5826] usb 7-1: device descriptor read/8, error -71 [ 723.122219][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.217657][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.363149][ T5826] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 723.471399][ T5826] usb 7-1: device descriptor read/8, error -71 [ 723.560232][ T8563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.677005][ T5826] usb usb7-port1: unable to enumerate USB device [ 723.874261][ T8494] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 724.040752][ T8494] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 724.248789][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.333497][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.403344][ T8587] bridge_slave_0: entered allmulticast mode [ 724.441515][ T8587] bridge_slave_0: entered promiscuous mode [ 724.500226][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.532123][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.566272][ T8587] bridge_slave_1: entered allmulticast mode [ 724.638973][ T8587] bridge_slave_1: entered promiscuous mode [ 724.806990][ T130] hsr_slave_0: left promiscuous mode [ 724.852519][ T130] hsr_slave_1: left promiscuous mode [ 724.861026][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.945780][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.226425][ T130] team0 (unregistering): Port device team_slave_1 removed [ 726.340990][ T8719] netlink: 52 bytes leftover after parsing attributes in process `syz.6.434'. [ 726.341109][ T8719] netlink: 56 bytes leftover after parsing attributes in process `syz.6.434'. [ 726.357944][ T130] team0 (unregistering): Port device team_slave_0 removed [ 726.677811][ T8724] netlink: 72 bytes leftover after parsing attributes in process `syz.6.434'. [ 726.677928][ T8724] netlink: 28 bytes leftover after parsing attributes in process `syz.6.434'. [ 727.080138][ T8494] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 727.343179][ T7290] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 727.476310][ T8494] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 727.513870][ T7290] usb 2-1: config index 0 descriptor too short (expected 8192, got 18) [ 727.514029][ T7290] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.514160][ T7290] usb 2-1: config 0 has no interfaces? [ 727.558647][ T7290] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 727.558912][ T7290] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 727.559055][ T7290] usb 2-1: Product: syz [ 727.559170][ T7290] usb 2-1: SerialNumber: syz [ 727.572518][ T7290] usb 2-1: config 0 descriptor?? [ 727.654451][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.028630][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.135140][ T8563] hsr_slave_0: entered promiscuous mode [ 728.156362][ T8563] hsr_slave_1: entered promiscuous mode [ 728.174251][ T8563] debugfs: 'hsr0' already exists in 'hsr' [ 728.174349][ T8563] Cannot create hsr debugfs directory [ 728.761630][ T7290] usb 2-1: USB disconnect, device number 31 [ 729.001026][ T8587] team0: Port device team_slave_0 added [ 729.095883][ T8587] team0: Port device team_slave_1 added [ 729.392474][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.423377][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.492928][ T8587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.536565][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.563188][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.623333][ T8587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.280142][ T8587] hsr_slave_0: entered promiscuous mode [ 730.349475][ T8587] hsr_slave_1: entered promiscuous mode [ 730.387951][ T8587] debugfs: 'hsr0' already exists in 'hsr' [ 730.424671][ T8587] Cannot create hsr debugfs directory [ 730.676992][ T8750] libceph: resolve '0..' (ret=-3): failed [ 731.913264][ T5824] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 732.134979][ T5824] usb 2-1: Using ep0 maxpacket: 16 [ 732.157326][ T5824] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.206710][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 732.253027][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 732.303165][ T5824] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 732.318639][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.393562][ T5824] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 732.425055][ T5824] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 732.491752][ T5824] usb 2-1: Manufacturer: syz [ 732.525879][ T5824] usb 2-1: config 0 descriptor?? [ 733.229456][ T5824] rc_core: IR keymap rc-hauppauge not found [ 733.249973][ T5824] Registered IR keymap rc-empty [ 733.301895][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 733.353585][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 733.431051][ T5824] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 733.527988][ T5824] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 733.662155][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 733.758100][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 733.836939][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 733.905001][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 733.955225][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 734.005696][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 734.043304][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 734.084898][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 734.177605][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 734.244800][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 734.311459][ T5824] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 734.351713][ T5824] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 734.448976][ T5824] usb 2-1: USB disconnect, device number 32 [ 734.689913][ T8494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.777277][ T8563] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 734.935436][ T8563] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 735.269422][ T8563] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 735.483171][ T5826] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 735.535652][ T8563] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 735.635229][ T5826] usb 2-1: device descriptor read/64, error -71 [ 735.678191][ T8494] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.923126][ T5826] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 735.966065][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.973923][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.113670][ T5826] usb 2-1: device descriptor read/64, error -71 [ 736.210380][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.218017][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.254382][ T5826] usb usb2-port1: attempt power cycle [ 736.673251][ T5826] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 736.745062][ T5826] usb 2-1: device descriptor read/8, error -71 [ 737.034511][ T5826] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 737.115045][ T5826] usb 2-1: device descriptor read/8, error -71 [ 737.225054][ T5826] usb usb2-port1: unable to enumerate USB device [ 737.420406][ T8587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 737.628744][ T8587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 737.752651][ T8587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 737.908718][ T8587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 738.601447][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.933500][ T8796] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.973811][ T8796] bridge_slave_1: left allmulticast mode [ 738.984344][ T8796] bridge_slave_1: left promiscuous mode [ 739.014319][ T8796] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.139320][ T8796] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 739.472529][ T8563] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.811400][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.819127][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.021054][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.028934][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.571384][ T8563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 741.699527][ T8494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.102384][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.589117][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.804893][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.812630][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.957110][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.964897][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.816719][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.833320][ T7332] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 745.023120][ T7332] usb 2-1: Using ep0 maxpacket: 32 [ 745.064558][ T7332] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 745.100548][ T7332] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 745.139201][ T7332] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 745.181862][ T7332] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 745.250371][ T7332] usb 2-1: Product: syz [ 745.266177][ T7332] usb 2-1: Manufacturer: syz [ 746.978000][ T7290] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 747.157238][ T8587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.185171][ T7290] usb 7-1: Using ep0 maxpacket: 16 [ 747.220992][ T7290] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.270761][ T7290] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.331051][ T7290] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 747.376942][ T7290] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 747.441611][ T7290] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 747.508164][ T7290] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 747.563313][ T7290] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 747.609905][ T7290] usb 7-1: Manufacturer: syz [ 747.660305][ T7290] usb 7-1: config 0 descriptor?? [ 748.048900][ T7286] usb 2-1: USB disconnect, device number 37 [ 748.325490][ T8587] veth0_vlan: entered promiscuous mode [ 748.397391][ T5071] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 748.408306][ T5071] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 748.419759][ T5071] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 748.444034][ T5071] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 748.496080][ T5071] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 748.646044][ T7290] rc_core: IR keymap rc-hauppauge not found [ 748.652242][ T7290] Registered IR keymap rc-empty [ 748.705138][ T7290] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 748.787832][ T8587] veth1_vlan: entered promiscuous mode [ 748.805200][ T7290] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 748.874880][ T7290] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 749.013640][ T7290] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input12 [ 749.154852][ T7290] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 749.293676][ T7290] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 749.359122][ T7290] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 749.433493][ T7290] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 749.475406][ T7290] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 749.557090][ T7290] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 749.613651][ T7290] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 749.653260][ T7290] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 749.694574][ T7290] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 749.730157][ T7290] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 749.814254][ T7290] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 749.893043][ T7290] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 749.957739][ T7290] usb 7-1: USB disconnect, device number 22 [ 750.212256][ T8563] veth0_vlan: entered promiscuous mode [ 750.563234][ T5772] Bluetooth: hci6: command tx timeout [ 751.132984][ T7332] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 751.181865][ T8587] veth0_macvtap: entered promiscuous mode [ 751.291581][ T8563] veth1_vlan: entered promiscuous mode [ 751.363548][ T7332] usb 7-1: device descriptor read/64, error -71 [ 751.596781][ T8587] veth1_macvtap: entered promiscuous mode [ 751.603933][ T7332] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 751.823052][ T7332] usb 7-1: device descriptor read/64, error -71 [ 751.944905][ T7332] usb usb7-port1: attempt power cycle [ 752.360793][ T7332] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 752.474048][ T7332] usb 7-1: device descriptor read/8, error -71 [ 752.648812][ T5772] Bluetooth: hci6: command tx timeout [ 752.753581][ T7332] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 752.799002][ T7332] usb 7-1: device descriptor read/8, error -71 [ 752.936911][ T7332] usb usb7-port1: unable to enumerate USB device [ 753.469927][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.523366][ T8857] chnl_net:caif_netlink_parms(): no params data found [ 753.590302][ T8563] veth0_macvtap: entered promiscuous mode [ 753.649602][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.214862][ T8563] veth1_macvtap: entered promiscuous mode [ 754.645517][ T1127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.646664][ T1127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.647736][ T1127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.648562][ T1127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.724123][ T5772] Bluetooth: hci6: command tx timeout [ 755.292640][ T144] bridge_slave_1: left allmulticast mode [ 755.293133][ T144] bridge_slave_1: left promiscuous mode [ 755.294212][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.340260][ T144] bridge_slave_0: left allmulticast mode [ 755.340380][ T144] bridge_slave_0: left promiscuous mode [ 755.341468][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.689355][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.804472][ T5772] Bluetooth: hci6: command tx timeout [ 756.830226][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.905890][ T144] bond0 (unregistering): Released all slaves [ 757.413072][ T144] hsr_slave_0: left promiscuous mode [ 757.464799][ T144] hsr_slave_1: left promiscuous mode [ 757.526018][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.609624][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.963529][ T5826] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 758.173169][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 758.236167][ T5826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.329012][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 758.393298][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 758.452227][ T5826] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 758.529721][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.659610][ T5826] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 758.697491][ T5826] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 758.753115][ T5826] usb 2-1: Manufacturer: syz [ 758.806254][ T5826] usb 2-1: config 0 descriptor?? [ 759.444373][ T5071] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 759.472057][ T5071] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 759.489873][ T5071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 759.516630][ T5071] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 759.535372][ T5071] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 759.913420][ T5826] rc_core: IR keymap rc-hauppauge not found [ 759.954838][ T5826] Registered IR keymap rc-empty [ 759.984311][ T5826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.041241][ T5826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.125714][ T5826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 760.317351][ T5826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 760.448325][ T5826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.574591][ T5826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.641870][ T5826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.725765][ T5826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.812253][ T5826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.913650][ T5826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.003785][ T5826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.044829][ T144] team0 (unregistering): Port device team_slave_1 removed [ 761.045871][ T5826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.102555][ T5826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.204002][ T5826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.217268][ T144] team0 (unregistering): Port device team_slave_0 removed [ 761.274739][ T5826] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 761.368362][ T5826] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 761.542538][ T5826] usb 2-1: USB disconnect, device number 38 [ 761.683567][ T5772] Bluetooth: hci4: command tx timeout [ 762.906043][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 762.917529][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 763.766951][ T5772] Bluetooth: hci4: command tx timeout [ 763.839613][ T8857] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.889757][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.963322][ T8857] bridge_slave_0: entered allmulticast mode [ 764.010225][ T8857] bridge_slave_0: entered promiscuous mode [ 764.154390][ T8857] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.161999][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.239551][ T8857] bridge_slave_1: entered allmulticast mode [ 764.271947][ T8857] bridge_slave_1: entered promiscuous mode [ 764.661551][ T29] audit: type=1326 audit(1774907790.281:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1119c819 code=0x7ffc0000 [ 764.887839][ T29] audit: type=1326 audit(1774907790.281:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1119c819 code=0x7ffc0000 [ 764.938955][ T8857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.045074][ T8857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.093514][ T29] audit: type=1326 audit(1774907790.281:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4f1119c819 code=0x7ffc0000 [ 765.173340][ T29] audit: type=1326 audit(1774907790.311:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1119c819 code=0x7ffc0000 [ 765.379687][ T29] audit: type=1326 audit(1774907790.311:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1119c819 code=0x7ffc0000 [ 765.473157][ T29] audit: type=1326 audit(1774907790.311:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f4f1119c819 code=0x7ffc0000 [ 765.603644][ T29] audit: type=1326 audit(1774907790.311:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1119c819 code=0x7ffc0000 [ 765.822973][ T29] audit: type=1326 audit(1774907790.311:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1119c819 code=0x7ffc0000 [ 765.843467][ T5772] Bluetooth: hci4: command tx timeout [ 765.965283][ T29] audit: type=1326 audit(1774907790.331:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f4f1119c819 code=0x7ffc0000 [ 766.051018][ T5071] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 766.059410][ T29] audit: type=1326 audit(1774907790.341:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1119c819 code=0x7ffc0000 [ 766.093020][ T5071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 766.114410][ T5071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 766.182937][ T5071] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 766.197886][ T5071] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 767.509881][ T8857] team0: Port device team_slave_0 added [ 767.744753][ T8971] netlink: 68 bytes leftover after parsing attributes in process `syz.1.458'. [ 767.910327][ T8857] team0: Port device team_slave_1 added [ 767.932629][ T5772] Bluetooth: hci4: command tx timeout [ 768.259527][ T5772] Bluetooth: hci5: command tx timeout [ 768.788994][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.832883][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.023483][ T8857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.513982][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.562929][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.668315][ T8857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.327820][ T5772] Bluetooth: hci5: command tx timeout [ 771.407895][ T8857] hsr_slave_0: entered promiscuous mode [ 771.453501][ T8857] hsr_slave_1: entered promiscuous mode [ 771.491720][ T8857] debugfs: 'hsr0' already exists in 'hsr' [ 771.511915][ T8857] Cannot create hsr debugfs directory [ 771.981393][ T144] bridge_slave_1: left allmulticast mode [ 772.006368][ T144] bridge_slave_1: left promiscuous mode [ 772.043689][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.134503][ T144] bridge_slave_0: left allmulticast mode [ 772.151659][ T144] bridge_slave_0: left promiscuous mode [ 772.184740][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.407044][ T5772] Bluetooth: hci5: command tx timeout [ 773.266694][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.282429][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.296955][ T144] bond0 (unregistering): Released all slaves [ 773.803540][ T144] hsr_slave_0: left promiscuous mode [ 773.850379][ T144] hsr_slave_1: left promiscuous mode [ 773.872057][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.882119][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.023916][ T144] veth1_macvtap: left promiscuous mode [ 774.030015][ T144] veth0_macvtap: left promiscuous mode [ 774.073499][ T144] veth1_vlan: left promiscuous mode [ 774.078961][ T144] veth0_vlan: left promiscuous mode [ 774.484078][ T5772] Bluetooth: hci5: command tx timeout [ 775.256085][ T6273] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 775.256130][ T9018] loop7: detected capacity change from 0 to 7 [ 775.450839][ T6273] usb 7-1: Using ep0 maxpacket: 16 [ 775.497330][ T6273] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.531640][ T6273] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 775.543416][ T6273] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 775.555777][ T6273] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 775.580062][ T6273] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 775.620012][ T6273] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 775.640826][ T6273] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 775.649367][ T6273] usb 7-1: Manufacturer: syz [ 775.668306][ T6273] usb 7-1: config 0 descriptor?? [ 775.748197][ T144] team0 (unregistering): Port device team_slave_1 removed [ 775.879479][ T144] team0 (unregistering): Port device team_slave_0 removed [ 776.129637][ T9018] Dev loop7: unable to read RDB block 7 [ 776.136714][ T9018] loop7: unable to read partition table [ 776.151144][ T9018] loop7: partition table beyond EOD, truncated [ 776.159120][ T9018] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 776.208476][ T6273] rc_core: IR keymap rc-hauppauge not found [ 776.272948][ T6273] Registered IR keymap rc-empty [ 776.303625][ T6273] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 776.343223][ T6273] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 776.430553][ T6273] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 776.465873][ T6273] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input14 [ 776.515796][ T6273] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 776.616359][ T6273] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 776.682127][ T6273] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 776.743816][ T6273] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 776.792281][ T6273] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 776.855533][ T6273] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 776.934008][ T6273] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 776.973370][ T6273] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 777.014183][ T6273] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 777.054693][ T6273] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 777.090566][ T6273] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 777.164803][ T6273] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 777.251395][ T6273] usb 7-1: USB disconnect, device number 27 [ 777.468484][ T8936] chnl_net:caif_netlink_parms(): no params data found [ 778.403653][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 778.403726][ T29] audit: type=1326 audit(1774907804.021:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.6.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc1b9c819 code=0x7ffc0000 [ 778.584141][ T29] audit: type=1326 audit(1774907804.071:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.6.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc1b9c819 code=0x7ffc0000 [ 778.681836][ T29] audit: type=1326 audit(1774907804.081:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.6.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fadc1b9c819 code=0x7ffc0000 [ 778.760806][ T29] audit: type=1326 audit(1774907804.111:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.6.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc1b9c819 code=0x7ffc0000 [ 778.880390][ T29] audit: type=1326 audit(1774907804.111:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.6.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc1b9c819 code=0x7ffc0000 [ 779.063544][ T29] audit: type=1326 audit(1774907804.121:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.6.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadc1b9c819 code=0x7ffc0000 [ 779.104365][ T8964] chnl_net:caif_netlink_parms(): no params data found [ 779.177780][ T29] audit: type=1326 audit(1774907804.121:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.6.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc1b9c819 code=0x7ffc0000 [ 779.290458][ T29] audit: type=1326 audit(1774907804.121:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.6.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc1b9c819 code=0x7ffc0000 [ 779.425833][ T29] audit: type=1326 audit(1774907804.131:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.6.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadc1b9c819 code=0x7ffc0000 [ 779.552147][ T29] audit: type=1326 audit(1774907804.281:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.6.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc1b9c819 code=0x7ffc0000 [ 779.906039][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.325326][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.755432][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.977467][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.695467][ T8936] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.743498][ T8936] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.782542][ T8936] bridge_slave_0: entered allmulticast mode [ 781.815655][ T8936] bridge_slave_0: entered promiscuous mode [ 781.938437][ T8936] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.979653][ T8936] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.003928][ T8936] bridge_slave_1: entered allmulticast mode [ 782.036529][ T8936] bridge_slave_1: entered promiscuous mode [ 782.654507][ T8936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.877517][ T8936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.015941][ T8964] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.033813][ T8964] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.063540][ T8964] bridge_slave_0: entered allmulticast mode [ 784.095845][ T8964] bridge_slave_0: entered promiscuous mode [ 784.166667][ T8964] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.174475][ T8964] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.188915][ T8964] bridge_slave_1: entered allmulticast mode [ 784.223235][ T8964] bridge_slave_1: entered promiscuous mode [ 784.293705][ T8936] team0: Port device team_slave_0 added [ 784.301154][ T144] bridge_slave_1: left allmulticast mode [ 784.323224][ T144] bridge_slave_1: left promiscuous mode [ 784.339562][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.414566][ T144] bridge_slave_0: left allmulticast mode [ 784.420468][ T144] bridge_slave_0: left promiscuous mode [ 784.449697][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.055243][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.153060][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.190573][ T144] bond0 (unregistering): Released all slaves [ 786.562431][ T8936] team0: Port device team_slave_1 added [ 786.687016][ T8857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 786.854396][ T8964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.927375][ T8964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.070430][ T144] hsr_slave_0: left promiscuous mode [ 787.094211][ T144] hsr_slave_1: left promiscuous mode [ 787.121319][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.143185][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.183122][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.190770][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.317023][ T144] veth1_macvtap: left promiscuous mode [ 787.323583][ T144] veth0_macvtap: left promiscuous mode [ 787.329552][ T144] veth1_vlan: left promiscuous mode [ 787.342013][ T144] veth0_vlan: left promiscuous mode [ 787.943217][ T5095] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 788.154726][ T5095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.184759][ T5095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.213035][ T5095] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 788.233584][ T5095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.280163][ T5095] usb 2-1: config 0 descriptor?? [ 788.754110][ T5095] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 788.783410][ T5095] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 788.841351][ T5095] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000A/input/input15 [ 789.034297][ T5095] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 789.190536][ T5095] usb 2-1: USB disconnect, device number 39 [ 789.740608][ T9095] fido_id[9095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 790.063506][ T144] team0 (unregistering): Port device team_slave_1 removed [ 790.201669][ T144] team0 (unregistering): Port device team_slave_0 removed [ 790.887021][ T8857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 790.952290][ T9099] loop7: detected capacity change from 0 to 7 [ 791.059221][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.084015][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.127162][ T8936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.231653][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.240471][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.295525][ T8936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.320664][ T8857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 791.415475][ T8857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 791.748547][ T9099] Dev loop7: unable to read RDB block 7 [ 791.765345][ T9099] loop7: unable to read partition table [ 791.772037][ T9099] loop7: partition table beyond EOD, truncated [ 791.779148][ T9099] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 791.992597][ T8964] team0: Port device team_slave_0 added [ 792.023107][ T7332] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 792.199518][ T8964] team0: Port device team_slave_1 added [ 792.234841][ T7332] usb 2-1: Using ep0 maxpacket: 16 [ 792.251446][ T7332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.324705][ T7332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 792.383197][ T7332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 792.421762][ T7332] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 792.487876][ T7332] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 792.569846][ T7332] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 792.606109][ T7332] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 792.634753][ T7332] usb 2-1: Manufacturer: syz [ 792.656576][ T7332] usb 2-1: config 0 descriptor?? [ 793.036812][ T8964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.082050][ T8964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.213503][ T8964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.223884][ T7332] rc_core: IR keymap rc-hauppauge not found [ 793.230240][ T7332] Registered IR keymap rc-empty [ 793.250026][ T8964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.264960][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 793.280430][ T8964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.323244][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 793.371610][ T7332] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 793.398213][ T8964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.415108][ T7332] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 793.509295][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 793.606383][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 793.674185][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 793.703680][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 793.712280][ T8936] hsr_slave_0: entered promiscuous mode [ 793.725935][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 793.765629][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 793.770329][ T8936] hsr_slave_1: entered promiscuous mode [ 793.823648][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 793.835955][ T8936] debugfs: 'hsr0' already exists in 'hsr' [ 793.841984][ T8936] Cannot create hsr debugfs directory [ 793.850225][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 793.913384][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 793.953799][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 794.016381][ T7332] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 794.051467][ T7332] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 794.092433][ T7332] usb 2-1: USB disconnect, device number 40 [ 794.859920][ T8964] hsr_slave_0: entered promiscuous mode [ 794.879319][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 794.916337][ T8964] hsr_slave_1: entered promiscuous mode [ 794.936704][ T9133] netlink: 104 bytes leftover after parsing attributes in process `syz.1.478'. [ 794.950465][ T8964] debugfs: 'hsr0' already exists in 'hsr' [ 794.984323][ T8964] Cannot create hsr debugfs directory [ 795.739733][ T6273] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 795.935217][ T6273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.979654][ T6273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.013884][ T6273] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 796.033053][ T6273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.085158][ T6273] usb 2-1: config 0 descriptor?? [ 796.558673][ T6273] usbhid 2-1:0.0: can't add hid device: -71 [ 796.593577][ T6273] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 796.666641][ T6273] usb 2-1: USB disconnect, device number 41 [ 798.413376][ T8857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.605311][ T9156] loop7: detected capacity change from 0 to 7 [ 799.058152][ T8936] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 799.169153][ T8857] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.256446][ T8936] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 799.507185][ T8936] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 799.601133][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.608805][ T7580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.835970][ T8936] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 799.876449][ T8606] Dev loop7: unable to read RDB block 7 [ 799.882234][ T8606] loop7: unable to read partition table [ 799.917034][ T8606] loop7: partition table beyond EOD, truncated [ 800.119517][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.127319][ T7580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.334902][ T9156] Dev loop7: unable to read RDB block 7 [ 801.358733][ T9156] loop7: unable to read partition table [ 801.375455][ T9156] loop7: partition table beyond EOD, truncated [ 801.397737][ T9156] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 801.704581][ T8964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 802.023164][ T8964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 802.059467][ T8964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 802.202481][ T8964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 803.471660][ T8936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.058907][ T8936] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.087309][ T5095] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 804.238744][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.246360][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.295247][ T5095] usb 2-1: Using ep0 maxpacket: 16 [ 804.347957][ T5095] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.374708][ T5095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 804.429840][ T5095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 804.471690][ T5095] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 804.510881][ T5095] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 804.590645][ T5095] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 804.644826][ T5095] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 804.664488][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.671594][ T5095] usb 2-1: Manufacturer: syz [ 804.671983][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.735701][ T5095] usb 2-1: config 0 descriptor?? [ 805.365613][ T5095] rc_core: IR keymap rc-hauppauge not found [ 805.403579][ T5095] Registered IR keymap rc-empty [ 805.424375][ T5095] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 805.483986][ T5095] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 805.528217][ T5095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 805.584724][ T5095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 805.664531][ T5095] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 805.760304][ T5095] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 805.805158][ T5095] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 805.854123][ T5095] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 805.878275][ T5095] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 805.885415][ T8857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.914631][ T5095] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 805.985323][ T5095] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 806.055753][ T5095] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 806.065343][ T8964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.113883][ T5095] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 806.181218][ T5095] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 806.239028][ T5095] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 806.291722][ T5095] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 806.405220][ T5095] usb 2-1: USB disconnect, device number 42 [ 806.447219][ T8964] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.729489][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.737310][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.921074][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.928790][ T5957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.583222][ T8936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.795413][ T5071] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 809.834280][ T5071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 809.845581][ T5071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 809.892150][ T5071] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 809.918023][ T5071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 812.096690][ T5071] Bluetooth: hci1: command tx timeout [ 812.352225][ T8964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.844066][ T7332] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 814.049141][ T7332] usb 2-1: Using ep0 maxpacket: 16 [ 814.094657][ T7332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.120454][ T7332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 814.165056][ T5071] Bluetooth: hci1: command tx timeout [ 814.194074][ T7332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 814.218850][ T7332] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 814.257237][ T7332] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 814.277087][ T7332] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 814.305264][ T7332] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 814.333368][ T7332] usb 2-1: Manufacturer: syz [ 814.414193][ T7332] usb 2-1: config 0 descriptor?? [ 814.487261][ T9231] chnl_net:caif_netlink_parms(): no params data found [ 814.953199][ T7332] rc_core: IR keymap rc-hauppauge not found [ 814.961017][ T7332] Registered IR keymap rc-empty [ 815.001976][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 815.054943][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 815.078440][ T12] bridge_slave_1: left allmulticast mode [ 815.131493][ T7332] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 815.144545][ T12] bridge_slave_1: left promiscuous mode [ 815.150873][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.190365][ T7332] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 815.209797][ T12] bridge_slave_0: left allmulticast mode [ 815.224409][ T12] bridge_slave_0: left promiscuous mode [ 815.248503][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.269661][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 815.373622][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 815.410551][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 815.454344][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 815.493824][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 815.523601][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 815.555215][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 815.634990][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 815.673566][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 815.713732][ T7332] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 815.752143][ T7332] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 815.818441][ T7332] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 815.910173][ T7332] usb 2-1: USB disconnect, device number 43 [ 816.243931][ T5071] Bluetooth: hci1: command tx timeout [ 816.534489][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.590785][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.622221][ T12] bond0 (unregistering): Released all slaves [ 816.788985][ T8964] veth0_vlan: entered promiscuous mode [ 816.925207][ T8936] veth0_vlan: entered promiscuous mode [ 817.141174][ T12] hsr_slave_0: left promiscuous mode [ 817.172542][ T12] hsr_slave_1: left promiscuous mode [ 817.189025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.217990][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 818.332945][ T5071] Bluetooth: hci1: command tx timeout [ 818.341725][ T12] team0 (unregistering): Port device team_slave_1 removed [ 818.429248][ T12] team0 (unregistering): Port device team_slave_0 removed [ 819.547915][ T5772] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 819.560238][ T5772] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 819.577303][ T5772] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 819.651410][ T5772] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 819.666801][ T5772] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 819.880801][ T8964] veth1_vlan: entered promiscuous mode [ 821.075197][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.127953][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.163754][ T9231] bridge_slave_0: entered allmulticast mode [ 821.200538][ T9231] bridge_slave_0: entered promiscuous mode [ 821.246086][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.273347][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.281184][ T9231] bridge_slave_1: entered allmulticast mode [ 821.339673][ T9231] bridge_slave_1: entered promiscuous mode [ 821.769756][ T5772] Bluetooth: hci6: command tx timeout [ 822.489781][ T9231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.570102][ T9231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.781164][ T8964] veth0_macvtap: entered promiscuous mode [ 823.021931][ T9231] team0: Port device team_slave_0 added [ 823.140636][ T9231] team0: Port device team_slave_1 added [ 823.173155][ T5826] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 823.378569][ T5826] usb 7-1: Using ep0 maxpacket: 16 [ 823.382162][ T8964] veth1_macvtap: entered promiscuous mode [ 823.433322][ T5826] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.476164][ T5826] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 823.512919][ T5826] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 823.533001][ T5826] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 823.551153][ T5826] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 823.614205][ T5826] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 823.645386][ T5826] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 823.679823][ T5826] usb 7-1: Manufacturer: syz [ 823.737569][ T5826] usb 7-1: config 0 descriptor?? [ 823.787752][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.811603][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.847042][ T5772] Bluetooth: hci6: command tx timeout [ 823.854928][ T9231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.880763][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.895437][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.926369][ T9231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.364147][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 824.373257][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 824.468585][ T5826] rc_core: IR keymap rc-hauppauge not found [ 824.480819][ T5826] Registered IR keymap rc-empty [ 824.499300][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 824.547342][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 824.630143][ T5826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 824.669047][ T5826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input19 [ 824.798816][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 824.844319][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 824.868558][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 824.924325][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 824.991333][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.064339][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.091981][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.144693][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.204056][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.280843][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 825.381886][ T5826] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 825.456004][ T5826] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 825.536434][ T5826] usb 7-1: USB disconnect, device number 28 [ 825.738634][ T9231] hsr_slave_0: entered promiscuous mode [ 825.855186][ T9231] hsr_slave_1: entered promiscuous mode [ 825.915000][ T9231] debugfs: 'hsr0' already exists in 'hsr' [ 825.920970][ T9231] Cannot create hsr debugfs directory [ 825.927516][ T5772] Bluetooth: hci6: command tx timeout [ 826.329760][ T5071] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 826.341163][ T5071] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 826.364436][ T5071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 826.385548][ T5071] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 826.399943][ T5071] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 826.668074][ T9277] chnl_net:caif_netlink_parms(): no params data found [ 828.004715][ T5772] Bluetooth: hci6: command tx timeout [ 828.486359][ T5772] Bluetooth: hci4: command tx timeout [ 830.573523][ T5772] Bluetooth: hci4: command tx timeout [ 830.716501][ T130] bridge_slave_1: left allmulticast mode [ 830.726232][ T130] bridge_slave_1: left promiscuous mode [ 830.738639][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.791330][ T130] bridge_slave_0: left allmulticast mode [ 830.808896][ T130] bridge_slave_0: left promiscuous mode [ 830.825746][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.085421][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.139533][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.158492][ T130] bond0 (unregistering): Released all slaves [ 832.356202][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.377510][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.408658][ T9277] bridge_slave_0: entered allmulticast mode [ 832.437567][ T9277] bridge_slave_0: entered promiscuous mode [ 832.601479][ T9277] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.626019][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.643750][ T5772] Bluetooth: hci4: command tx timeout [ 832.680668][ T9277] bridge_slave_1: entered allmulticast mode [ 832.742548][ T9277] bridge_slave_1: entered promiscuous mode [ 832.881058][ T130] hsr_slave_0: left promiscuous mode [ 832.909807][ T130] hsr_slave_1: left promiscuous mode [ 832.927278][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.989389][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.067296][ T130] veth0_vlan: left promiscuous mode [ 833.496105][ T9355] program syz.1.515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 833.591903][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 833.683334][ T7332] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 833.852996][ T7332] usb 7-1: Using ep0 maxpacket: 16 [ 833.873998][ T7332] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.907648][ T7332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 833.939344][ T7332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 833.986821][ T7332] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 834.013109][ T7332] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 834.054694][ T7332] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 834.092917][ T7332] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 834.107070][ T7332] usb 7-1: Manufacturer: syz [ 834.151661][ T7332] usb 7-1: config 0 descriptor?? [ 834.395192][ T130] team0 (unregistering): Port device team_slave_1 removed [ 834.523035][ T130] team0 (unregistering): Port device team_slave_0 removed [ 834.734297][ T5772] Bluetooth: hci4: command tx timeout [ 834.835272][ T7332] rc_core: IR keymap rc-hauppauge not found [ 834.844181][ T7332] Registered IR keymap rc-empty [ 834.849977][ T7332] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 834.923467][ T7332] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 834.994412][ T7332] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 835.075886][ T7332] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input20 [ 835.138952][ T7332] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.163245][ T7332] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.188579][ T7332] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.293414][ T7332] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.346056][ T7332] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.388914][ T7332] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.485351][ T7332] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.523163][ T7332] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.543309][ T7332] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.593569][ T7332] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.649301][ T7332] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 835.692925][ T7332] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 835.804613][ T7332] usb 7-1: USB disconnect, device number 29 [ 836.140424][ T9277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.338744][ T9277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.860407][ T9277] team0: Port device team_slave_0 added [ 836.912042][ T9277] team0: Port device team_slave_1 added [ 837.028477][ T9317] chnl_net:caif_netlink_parms(): no params data found [ 837.659089][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.697054][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.758458][ T9277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.789663][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.816144][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.899828][ T9277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.255258][ T9231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 838.807176][ T9231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 839.077975][ T9277] hsr_slave_0: entered promiscuous mode [ 839.099518][ T9277] hsr_slave_1: entered promiscuous mode [ 839.132214][ T9277] debugfs: 'hsr0' already exists in 'hsr' [ 839.153015][ T9277] Cannot create hsr debugfs directory [ 839.326360][ T9231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 839.449996][ T9231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 839.976547][ T9378] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 840.811034][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.853398][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.861027][ T9317] bridge_slave_0: entered allmulticast mode [ 840.898081][ T9317] bridge_slave_0: entered promiscuous mode [ 841.076789][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.100691][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.122066][ T9317] bridge_slave_1: entered allmulticast mode [ 841.165469][ T9317] bridge_slave_1: entered promiscuous mode [ 841.661104][ T9317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.902521][ T130] bridge_slave_1: left allmulticast mode [ 841.908654][ T130] bridge_slave_1: left promiscuous mode [ 841.934276][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.024145][ T130] bridge_slave_0: left allmulticast mode [ 842.034943][ T130] bridge_slave_0: left promiscuous mode [ 842.051647][ T9390] fuse: Bad value for 'fd' [ 842.059913][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.357929][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.438279][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.471668][ T130] bond0 (unregistering): Released all slaves [ 843.529635][ T9317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.913650][ T5826] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 844.066580][ T9317] team0: Port device team_slave_0 added [ 844.083322][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 844.125801][ T5826] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 844.163659][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.213705][ T5826] usb 2-1: config 0 descriptor?? [ 844.243288][ T130] hsr_slave_0: left promiscuous mode [ 844.304499][ T130] hsr_slave_1: left promiscuous mode [ 844.374761][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.419508][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.456413][ T5826] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 844.516480][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 844.552457][ T130] veth1_macvtap: left promiscuous mode [ 844.609722][ T130] veth0_macvtap: left promiscuous mode [ 844.617141][ T130] veth1_vlan: left promiscuous mode [ 844.619784][ T5826] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 844.622904][ T130] veth0_vlan: left promiscuous mode [ 844.664745][ T9399] ===================================================== [ 844.672092][ T9399] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 844.683856][ T9399] _copy_to_user+0xcc/0x120 [ 844.688618][ T9399] i2cdev_ioctl_smbus+0x586/0x660 [ 844.695537][ T9399] i2cdev_ioctl+0xa14/0xf40 [ 844.700315][ T9399] __se_sys_ioctl+0x23c/0x400 [ 844.705403][ T9399] __x64_sys_ioctl+0x97/0xe0 [ 844.710236][ T9399] x64_sys_call+0x1975/0x3ea0 [ 844.715503][ T9399] do_syscall_64+0x134/0xf80 [ 844.720462][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.726740][ T9399] [ 844.729109][ T9399] Uninit was stored to memory at: [ 844.734490][ T9399] __i2c_smbus_xfer+0x25a0/0x3120 [ 844.739617][ T9399] i2c_smbus_xfer+0x2d8/0x480 [ 844.744504][ T9399] i2cdev_ioctl_smbus+0x4a1/0x660 [ 844.749661][ T9399] i2cdev_ioctl+0xa14/0xf40 [ 844.754506][ T9399] __se_sys_ioctl+0x23c/0x400 [ 844.759355][ T9399] __x64_sys_ioctl+0x97/0xe0 [ 844.764258][ T9399] x64_sys_call+0x1975/0x3ea0 [ 844.769077][ T9399] do_syscall_64+0x134/0xf80 [ 844.774301][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.780317][ T9399] [ 844.785385][ T9399] Local variable msgbuf1.i created at: [ 844.790910][ T9399] __i2c_smbus_xfer+0x853/0x3120 [ 844.796855][ T9399] i2c_smbus_xfer+0x2d8/0x480 [ 844.801629][ T9399] [ 844.804888][ T9399] Bytes 0-1 of 2 are uninitialized [ 844.810061][ T9399] Memory access of size 2 starts at ffff888132883d06 [ 844.816894][ T9399] Data copied to user address 0000200000000100 [ 844.823294][ T9399] [ 844.825672][ T9399] CPU: 0 UID: 0 PID: 9399 Comm: syz.1.526 Not tainted syzkaller #0 PREEMPT(full) [ 844.835117][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 844.845440][ T9399] ===================================================== [ 844.852426][ T9399] Disabling lock debugging due to kernel taint [ 844.859044][ T5826] usb 2-1: media controller created [ 844.883951][ T9399] Kernel panic - not syncing: kmsan.panic set ... [ 844.890569][ T9399] CPU: 1 UID: 0 PID: 9399 Comm: syz.1.526 Tainted: G B syzkaller #0 PREEMPT(full) [ 844.901594][ T9399] Tainted: [B]=BAD_PAGE [ 844.905871][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 844.916253][ T9399] Call Trace: [ 844.919643][ T9399] [ 844.922677][ T9399] __dump_stack+0x26/0x30 [ 844.927237][ T9399] dump_stack_lvl+0x50/0x1c0 [ 844.932047][ T9399] ? dump_stack+0x12/0x25 [ 844.936579][ T9399] dump_stack+0x1e/0x25 [ 844.940923][ T9399] vpanic+0x7b4/0x1430 [ 844.945224][ T9399] panic+0x15d/0x160 [ 844.949391][ T9399] kmsan_report+0x31a/0x320 [ 844.954149][ T9399] ? kmsan_internal_check_memory+0x1e8/0x240 [ 844.960367][ T9399] ? kmsan_copy_to_user+0xef/0x190 [ 844.965729][ T9399] ? _copy_to_user+0xcc/0x120 [ 844.970622][ T9399] ? i2cdev_ioctl_smbus+0x586/0x660 [ 844.976055][ T9399] ? i2cdev_ioctl+0xa14/0xf40 [ 844.980944][ T9399] ? __se_sys_ioctl+0x23c/0x400 [ 844.986015][ T9399] ? __x64_sys_ioctl+0x97/0xe0 [ 844.991006][ T9399] ? x64_sys_call+0x1975/0x3ea0 [ 844.996072][ T9399] ? do_syscall_64+0x134/0xf80 [ 845.001053][ T9399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.007339][ T9399] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 845.012933][ T9399] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 845.018465][ T9399] ? __i2c_transfer+0x1179/0x3280 [ 845.023754][ T9399] ? kmsan_get_metadata+0xf1/0x160 [ 845.029042][ T9399] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 845.035624][ T9399] ? kmsan_get_metadata+0xf1/0x160 [ 845.040911][ T9399] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 845.046992][ T9399] ? __i2c_smbus_xfer+0x1f6c/0x3120 [ 845.052383][ T9399] ? kmsan_get_metadata+0xf1/0x160 [ 845.057692][ T9399] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 845.063778][ T9399] kmsan_internal_check_memory+0x1e8/0x240 [ 845.069848][ T9399] kmsan_copy_to_user+0xef/0x190 [ 845.075023][ T9399] _copy_to_user+0xcc/0x120 [ 845.079753][ T9399] i2cdev_ioctl_smbus+0x586/0x660 [ 845.085048][ T9399] i2cdev_ioctl+0xa14/0xf40 [ 845.089782][ T9399] ? kmsan_get_shadow_origin_ptr+0x19/0xb0 [ 845.095863][ T9399] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 845.101112][ T9399] __se_sys_ioctl+0x23c/0x400 [ 845.106033][ T9399] __x64_sys_ioctl+0x97/0xe0 [ 845.110946][ T9399] x64_sys_call+0x1975/0x3ea0 [ 845.115855][ T9399] do_syscall_64+0x134/0xf80 [ 845.120657][ T9399] ? clear_bhb_loop+0x50/0xa0 [ 845.125560][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.131646][ T9399] RIP: 0033:0x7f4f1119c819 [ 845.136205][ T9399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.156200][ T9399] RSP: 002b:00007f4f120dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.164813][ T9399] RAX: ffffffffffffffda RBX: 00007f4f11416180 RCX: 00007f4f1119c819 [ 845.173023][ T9399] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 000000000000000b [ 845.181149][ T9399] RBP: 00007f4f11232c91 R08: 0000000000000000 R09: 0000000000000000 [ 845.189260][ T9399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.197374][ T9399] R13: 00007f4f11416218 R14: 00007f4f11416180 R15: 00007ffe7f24b078 [ 845.205634][ T9399] [ 845.209027][ T9399] Kernel Offset: disabled [ 845.213417][ T9399] Rebooting in 86400 seconds..