last executing test programs: 26m22.206260352s ago: executing program 32 (id=267): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) truncate(0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 12m7.004144001s ago: executing program 33 (id=3331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x8, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRESHEX], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20001, @void, @value}, 0x94) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/card0/oss_mixer\x00', 0x232582, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5423, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r2, 0x0, 0x3}, 0x18) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="94e8e3feb5693625fae40d039b04eb7341c2ea76c1b111aad5d0d92f2f19ce7a1b06c18c2860746fc1d729b4aea3850bb637022ce5a42c615ab8e60d9f65490990b7520cd90fdccf662228d19bf41fc818e65c56b92330d2e41329d2c4278ded", @ANYBLOB="050000000000"], 0x14}, 0x1, 0xffffffff00000003}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046f41, &(0x7f0000000440)=0x1f) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x4, 0x1}, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 12m3.830001253s ago: executing program 34 (id=3340): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe2, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x10000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rename(0x0, &(0x7f0000000080)='./file0\x00') syz_open_dev$loop(0x0, 0xffffffff, 0x80000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002d00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002d40)=ANY=[@ANYRES32=0x0], 0x18}}, 0x0) memfd_create(0x0, 0x6) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) acct(&(0x7f0000000140)='./file0\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 12m0.709056323s ago: executing program 35 (id=3344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) membarrier(0x10, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000c938e3aa537caaefe85905a9ebd9c58584241046", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18070000000000000000400000d25350", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000004a90ff7f0700000018000000000000000000000000000000950000000000000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x2000000, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f0000000180), 0x80) keyctl$set_timeout(0xf, r2, 0x100) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000300)=0x1) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {}, {0x1ff}, {0x0, 0xffe}, {}, {}, {}, {}, {0x0, 0xe68b}], 0xc, 0x0, 0x0, 0x0, 0x0, 0x500}) write$sndseq(r3, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0xf5, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x38) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae09, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 11m50.826717944s ago: executing program 36 (id=3352): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x18}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000180000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000044000500ac1e0101000000000000000000000000000000003c000000020000007f000001000000000000000000000000000000000303000000000000"], 0xfc}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x4042, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa}) 11m26.930602936s ago: executing program 37 (id=3368): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) dup(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @mcast2, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x3f, 0x9, 0x0, 0x0, {0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10m4.621509405s ago: executing program 38 (id=3478): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0x980929, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create1(0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0) 9m52.922532772s ago: executing program 39 (id=3505): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8840}, 0x12000000) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0xc, 0x0, 0x402, 0x40, @empty, @loopback={0x300, 0xffff8881114a4aa8}, 0x0, 0x0, 0xfffffffc}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r3}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$6lowpan_control(r0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x200, 0x0) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000440)=""/154, 0x9a) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x9ef}, &(0x7f0000000080)=0x8) 9m36.684495498s ago: executing program 40 (id=3546): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0x3, &(0x7f0000000040)={0x2, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x40402) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x20002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) eventfd2(0x8001, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='cmdline\x00') read$FUSE(r8, 0x0, 0xffffff8d) r9 = eventfd(0x6) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r9}) 8m41.776728101s ago: executing program 41 (id=3644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r3, @ANYBLOB="000127bd7000fedbdf25170000000c00058007000100696200000c000901007564700008000100756470000800010065746800070001006962000008000100756470000800010075647000080001006574680054000280040004000400040008000200010000000c000380080001005954000004000400040003802c00018008000100090000000800020001000000080001000100000008000100ffffffff080002004f5900"/182], 0xbc}, 0x1, 0x0, 0x0, 0x24000040}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000240000000080500030000000000080001400000000d0900010073797a30000000000900020073797a3200000000"], 0x80}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa416cee93a4a608004500002800000000fd06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000290780000080a0000000600000000220f3a2a780948db7ad1acbc6903b60303ac080a0000020900000009050a0000000200000002220e54df942f7e09586180bbb068040222058537c8fe04f989000000"], 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) io_setup(0x2, &(0x7f0000000400)) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000005) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) 7m56.985010509s ago: executing program 42 (id=3764): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) rename(0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket(0x22, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f000001b740)={'#! ', './file1', [{0x20, '\x86`\x00\xd3\xae,\xf1\xed\x91\xe2\xedU\x1eB\a\xba\xf5w\x89*\xba\xd0\x0f\x83Y\xba\x94XMbj\xf2\xc1R\x83\x8f\xcb\x99\xeb\x19\x8d\x17f4\b\x8a$xb\xec\xca\xb0\xa6K\xe2\x8e\xa6\xee\xfc\x94G\xd5\xaan\n\x92\x96x\xf8BFu\xd3\x00\x00\x18\x95\xf4\xc7\xe8\x8c!m\xf23\xf6s\xc5\x93\xd0\x8c\x14}\xe1\xdd\xa8/\x16\x9b\xd0\x1e\xf3k\x9e\xaf+\xdc\xfej\x06b\x97\xcf\x8f\xd1\'{\xdfE2\xdc\xff\xe4\xdb\xb1\xd0\x7f>\xfc\xfb0qI\xf3\xdd\xe3\n\xa2;\x05\xb3\x917\xe1\x10\x13-\x17\xfd>\x9a\xef\xd3\x99wK\xea\x99\xe5\xc9\xf0\a\xd0\xd2\xbe\x9a\xb1m\xe8\xa6\xe5\xcddsk\xe4;\x16q\xb9x\xb1\x11\x13W\xdf\xee\x1an \x86}R_\xbb\x86\xecM\xc3\r\x03S\xc48\xb9\xe4\x19\x9d a+\x8b\x8b;k\x92\xed\xd7'}], 0xa, "09f804432986527894d6c622928d27936fe87e009b78e2dc5fba004222da264f217da833651e2c39888e"}, 0x110) close(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 7m30.390983371s ago: executing program 43 (id=3835): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x341000, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x486280, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0], 0x2}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x202, 0x2, {0x4, @pix={0xffffffff, 0x8, 0x34565559, 0x6, 0x3, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2, 0x3}}, 0x8}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYBLOB="00000000000000000004e80000000800"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2a, &(0x7f0000000040)) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x4) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r6, 0x0}]) 7m29.974229866s ago: executing program 44 (id=3836): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x22, &(0x7f0000000340), &(0x7f0000000380)=0x4) 6m27.73716006s ago: executing program 45 (id=3919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) membarrier(0x10, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000004a90ff7f070000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x2000000, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xbc) keyctl$set_timeout(0xf, r3, 0x100) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000300)=0x1) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r5 = fcntl$dupfd(r2, 0x0, r2) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {}, {0x1ff}, {0x0, 0xffe}, {}, {}, {}, {}, {0x0, 0xe68b}], 0xc, 0x0, 0x0, 0x0, 0x0, 0x500}) write$sndseq(r5, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xc8}}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae09, &(0x7f00000001c0)=ANY=[@ANYBLOB]) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f0000000280)=0x13) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 6m11.373464318s ago: executing program 46 (id=3964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000200)=""/73, 0x49}], 0x1, 0x3c, 0x0) 5m41.428944884s ago: executing program 47 (id=4006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000000)='illinois\x00', 0x9) r0 = socket$nl_audit(0x10, 0x3, 0x9) setfsuid(0x0) sendmsg$netlink(r0, 0x0, 0x4000000) fcntl$setown(r0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f00000008c0)='wchan\x00') pread64(r2, &(0x7f0000000280)=""/252, 0xfc, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000040)=0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x70}}, 0x40000) setsockopt(r5, 0x84, 0x14, 0x0, 0x0) 5m17.187456109s ago: executing program 48 (id=4041): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f0000000180), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x15, 0x10, 0x45798232, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fsopen(0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) ioctl$TIOCSETD(r0, 0x5423, 0x0) 4m45.859234482s ago: executing program 49 (id=4088): syz_open_dev$vim2m(&(0x7f0000000040), 0x80, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m33.77145526s ago: executing program 50 (id=4100): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0xee01) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x14800, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x240c81, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d0b, &(0x7f0000000200)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x8, &(0x7f0000000700)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000002900)=r6, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[], 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x22200, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000020c0)={0x48, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x34, 0x11, 0x0, 0x1, [@generic="04af486355d81deed1c38b1595828eb92bd575b58eea0621def7089c3813a6b0374ad9ca56fa3f7a6c49e88386184778"]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8}, 0x20000094) 3m51.0203015s ago: executing program 0 (id=4187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x0) 3m50.158089226s ago: executing program 0 (id=4191): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3m47.30430584s ago: executing program 0 (id=4197): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3m46.176315676s ago: executing program 0 (id=4200): r0 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x37, 0x2, 0x0, "bc3e098e0000f4ba89591da86b97000000002b00030400"}) 3m45.209678097s ago: executing program 0 (id=4205): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) lgetxattr(0x0, 0x0, 0x0, 0x0) 3m44.537943373s ago: executing program 0 (id=4208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmmsg$alg(r2, &(0x7f0000004280)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8014}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 3m37.002186648s ago: executing program 9 (id=4224): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3m33.569228877s ago: executing program 9 (id=4229): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x1f, 0x7, 0x12408, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000000c0)='./file0\x00', 0x20337, 0x20) close(r0) 3m33.205629424s ago: executing program 8 (id=4230): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180), 0x10) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) 3m32.58350607s ago: executing program 9 (id=4232): mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000200)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000340)='./file1\x00', 0x0) unlink(&(0x7f0000000000)='./file1\x00') 3m32.363370938s ago: executing program 8 (id=4233): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3m31.83410234s ago: executing program 9 (id=4234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 3m31.564427654s ago: executing program 8 (id=4236): sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x4000041) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbb1bb0180c200000386dd6830816200383b"], 0x0) 3m30.974541484s ago: executing program 9 (id=4237): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/81, 0x51}], 0x1}, 0x0) 3m30.789831661s ago: executing program 8 (id=4238): io_setup(0x30, &(0x7f0000000600)=0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x0, &(0x7f0000000180)) 3m30.025402299s ago: executing program 8 (id=4239): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3m29.11599637s ago: executing program 51 (id=4208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmmsg$alg(r2, &(0x7f0000004280)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8014}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 3m29.063899562s ago: executing program 9 (id=4243): socket$inet(0xa, 0x801, 0x84) ioperm(0x0, 0x2, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r1, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) 3m26.590974788s ago: executing program 8 (id=4247): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffff9c, 0x0, 0x480, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0xffffffffffffffb9}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x13, &(0x7f00000001c0)={0x5, 0xf, 0x13, 0x2, [@generic={0x3, 0x10, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0xff, 0x7}]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_create(0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000200)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 3m13.381721397s ago: executing program 52 (id=4243): socket$inet(0xa, 0x801, 0x84) ioperm(0x0, 0x2, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r1, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) 3m11.083335589s ago: executing program 53 (id=4247): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffff9c, 0x0, 0x480, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0xffffffffffffffb9}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x13, &(0x7f00000001c0)={0x5, 0xf, 0x13, 0x2, [@generic={0x3, 0x10, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0xff, 0x7}]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_create(0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000200)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 2m13.850933276s ago: executing program 2 (id=4339): io_setup(0x30, &(0x7f0000000600)=0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 2m8.965811566s ago: executing program 2 (id=4347): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x1f, 0x7, 0x12408, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000000c0)='./file0\x00', 0x20337, 0x20) close(r0) 2m8.123520016s ago: executing program 2 (id=4350): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xe1, &(0x7f0000000240)="b9425b446512d23236973599b76c4705397f00466e5b7462c24a16941ff5f4b4f1f0add7fc8280adbfa66d5b5ebe1adf42b8f59f90604e07d2388862672dfbf3e0c9d3969890524f3323746bde8946c7ec160f9e688f6b86781684ed273a5bd5531d459dc627ec0af211ebbf909987f5d2e8dcb3351da332165081af7d0814c57f5d65e4b436aa9f50bc0f19b7df372ff9ebcede1ff0cc752cf246a5d2da34a5a297dc14a469c3dd3e26b41c356484e06fd66e3f2c7807e8773ecd7b94fad89ab84feadec2ea95f65bba452eaef4b0cf962e05000000000000001107e2815e472c") ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x45, 0x2}, @const={0x3, {0x400, 0x5, 0x9, 0x3}}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b7500090583"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x9468, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001140)=""/80) syz_usb_disconnect(r2) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, 0x0}, {0x5a, 0x0}]}) r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x22, 0x0) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d1052120003201"], 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b042) write$hidraw(r5, &(0x7f0000000bc0), 0xffffffae) r6 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x9, 0x905040) read$hidraw(r6, &(0x7f0000000100)=""/106, 0xffffff39) syz_open_dev$hiddev(0x0, 0x0, 0x0) r7 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x9, 0x905040) read$hidraw(r7, &(0x7f0000000100)=""/106, 0xffffff39) 2m4.002090466s ago: executing program 2 (id=4358): socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) 1m59.077827731s ago: executing program 2 (id=4369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x0) 1m57.956497666s ago: executing program 2 (id=4371): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9, 0x0, 0x2}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffbd, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @private2}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r6, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r3, 0x1}, 0x20) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000d14090e000000000000000008000100000000000800030003"], 0x20}}, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab05, 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}]}, 0x44}}, 0x0) 1m42.444135737s ago: executing program 54 (id=4371): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9, 0x0, 0x2}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffbd, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @private2}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r6, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r3, 0x1}, 0x20) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000d14090e000000000000000008000100000000000800030003"], 0x20}}, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r8, 0xab05, 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}]}, 0x44}}, 0x0) 1m40.07884609s ago: executing program 4 (id=4414): openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m38.945739942s ago: executing program 4 (id=4416): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x48079000) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4}) 1m38.046894983s ago: executing program 4 (id=4420): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="a6", 0x1, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m37.196494856s ago: executing program 4 (id=4424): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x0) 1m35.621881741s ago: executing program 4 (id=4427): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000020058000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002"], 0xa0}}, 0x0) 1m34.898024232s ago: executing program 4 (id=4429): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000000)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x60) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @local, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@local, 0x2}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, 0x0) 1m18.773598275s ago: executing program 55 (id=4429): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000000)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x60) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @local, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@local, 0x2}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, 0x0) 43.571015858s ago: executing program 3 (id=4522): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="a6", 0x1, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 42.61372427s ago: executing program 3 (id=4525): iopl(0x3) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x6ef40) 41.998109089s ago: executing program 3 (id=4527): openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000280200001000000000005"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 40.907323012s ago: executing program 3 (id=4529): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 40.12621357s ago: executing program 3 (id=4532): socket(0x10, 0x80002, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dcd69f205a0410520101010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x60) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x2b9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000280)=[0x1], &(0x7f0000000200), 0x0, 0x0, 0x7f}) 37.3300195s ago: executing program 3 (id=4537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f00000005c0)={0x800, 0xc35}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[], 0xc4}}, 0x24060100) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0xc840) syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002800)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x40000) fsopen(&(0x7f0000000440)='msdos\x00', 0x1) socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_io_uring_setup(0x6ed3, &(0x7f0000000480)={0x0, 0x0, 0x8, 0x0, 0x28c}, &(0x7f0000000280), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b000100736f636b657400001c000280080002400000000b080001400000001308000300000000891800018008000100647570000c000280080001400000000c0900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)="9c4ffa2a7fc84756dd1d058a0e19e7b578ab2b06525ac40f48", &(0x7f0000000740), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) 21.835356388s ago: executing program 56 (id=4537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f00000005c0)={0x800, 0xc35}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[], 0xc4}}, 0x24060100) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0xc840) syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002800)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x40000) fsopen(&(0x7f0000000440)='msdos\x00', 0x1) socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_io_uring_setup(0x6ed3, &(0x7f0000000480)={0x0, 0x0, 0x8, 0x0, 0x28c}, &(0x7f0000000280), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b000100736f636b657400001c000280080002400000000b080001400000001308000300000000891800018008000100647570000c000280080001400000000c0900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)="9c4ffa2a7fc84756dd1d058a0e19e7b578ab2b06525ac40f48", &(0x7f0000000740), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) 10.883365191s ago: executing program 5 (id=4597): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x800, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x6}}]}}]}, 0x48}}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1a) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726afdac27f9b56", 0x9}], 0x1}}], 0x1, 0x20004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x7, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 9.140773031s ago: executing program 5 (id=4602): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x2, @raw_data="bb928919d2a0564b2f720d0c74075c2fc84a736cc2af64e7839613b354b7cc67fa5fc8b7e43aba9a4e41aee24577ffbaa47f320c25508aa592ba4614fac4da8680b51488c53215da110a29fde191ed1587df1d8d7dcc04f55781232005f873d0bba337af951162be75b6db39b9332bc493ee70fc0c72b13042509c6fceb9f36ab522200e73847d217425bf0b43ce57a830bf0ad82a70d1cf28423c2f33f4ac849d8f6677f11b14d1d9504f17447e2459bb3de8538bc47b4cdc7494a6331fe2c104ddf9b84bdd7a6e"}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174a", 0xa1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r2 = dup(r1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0xff, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 8.490819642s ago: executing program 1 (id=4604): openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002802000010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 7.981778324s ago: executing program 5 (id=4606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) 7.556837556s ago: executing program 1 (id=4607): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="a6", 0x1, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.973674024s ago: executing program 5 (id=4608): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 6.469014216s ago: executing program 1 (id=4609): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1}}}}}]}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000006640)) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x364e, &(0x7f0000006780)={0x0, 0xb5f, 0x400, 0x1, 0x29d}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$random(0xffffffffffffff9c, 0x0, 0x200800, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.511119443s ago: executing program 7 (id=4611): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00'}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1a) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726afdac27f9b56", 0x9}], 0x1}}], 0x1, 0x20004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x7, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 5.234035255s ago: executing program 6 (id=4612): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x34, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8, 0x800}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.874233196s ago: executing program 7 (id=4613): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 4.32774757s ago: executing program 6 (id=4614): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x48079000) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4}) 3.765380009s ago: executing program 7 (id=4615): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x2, @raw_data="bb928919d2a0564b2f720d0c74075c2fc84a736cc2af64e7839613b354b7cc67fa5fc8b7e43aba9a4e41aee24577ffbaa47f320c25508aa592ba4614fac4da8680b51488c53215da110a29fde191ed1587df1d8d7dcc04f55781232005f873d0bba337af951162be75b6db39b9332bc493ee70fc0c72b13042509c6fceb9f36ab522200e73847d217425bf0b43ce57a830bf0ad82a70d1cf28423c2f33f4ac849d8f6677f11b14d1d9504f17447e2459bb3de8538bc47b4cdc7494a6331fe2c104ddf9b84bdd7a6e"}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174a", 0xa1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r2 = dup(r1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0xff, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3.434618093s ago: executing program 5 (id=4616): openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002802000010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.386238031s ago: executing program 6 (id=4617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) 2.869960282s ago: executing program 1 (id=4618): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="a6", 0x1, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.73094377s ago: executing program 7 (id=4619): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x800, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x6}}]}}]}, 0x48}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x1a) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726afdac27f9b56", 0x9}], 0x1}}], 0x1, 0x20004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x7, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) sync() timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1900f9e8275fd7750c8f4b59220cd9d3a0000004617c88b1b5e1ff2000000003040000080000000000001d", @ANYRESDEC=0x0, @ANYRES16, @ANYRES16, @ANYBLOB="7b369e8ef5e7d76723719ee787a0dc46386bc57bdc251be1a51d443c06634c60321ca21d4d556978a95377d7703d949295c63b83279a7a482c6412d474b1e8b31c6595059536117c0c90d3672588d2748159fcc87c68315b4cd9de29b0aa771d2d713d1cc551b16c3b94a438e3aa43e34ade526c7c60706207212bae2c97758f686f73df229422b5450725591e8df6a94cff1f9f71"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="14000000100001000000d018000000000000000a7c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000050000480280001800a00010071756f74610000001800028008000240000000000c0001400000000000000008240001800b0001006f626a72656600001400028008000340"], 0xa4}}, 0x0) 1.528012449s ago: executing program 5 (id=4620): r0 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x300, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0xef, [{{0x9, 0x4, 0x0, 0x3d, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xe89}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xa, 0x2, 0x34}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x5, 0x3, 0xea, 0x10, 0x7}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41b}}, {0x94, &(0x7f00000008c0)=@string={0x94, 0x3, "e484c8e9204def2ba895720214677df691c40d082caff7d8e412367a176ec5616e259c323908d25ee990a167f518e5e5dc9c704d3386bfa9d1cd9ed1a9a6662e960228dd42117260210f6cfcf902dd337d5d432a58e724cf8ee3a42ee3752735b13a43cebb4d49a9f115ff2ef33ddf8ec153efd6701bb1e1f5847d85cbb0aba5d0bab3fd2fe773232b12e5ede88413378c68"}}, {0x67, &(0x7f0000000980)=@string={0x67, 0x3, "51270bf1420e4a4b4a278eaac17610d49ba40e69985b7e643b794eecfcdbe31f478eb6801a08e3f60fcb68a9e239a48ef4315fe898fff837fa293d73fcbaf0a4ebd3d47373e939b21471ab994f4d787783e53cca2942a59d2fe3026f11e8717d600f647d5b"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x439}}]}) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000040)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000b40)={0x100000000, 0x4f6a, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{0x0, 0x2}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000240)={0x40, 0x21, 0x81, {0x81, 0xe, "7cf7a0d37bc6f4f9bc07ef40a99a4717c164e116f48bb8ac94fee5a7ab7f0535343a1573b66e5db192819605729c3307fb30f7f96af7882143f11e8a905fed544f9841014df9f61cf45330d91208b97cbfaec2b299e913375bc30864d14f3809dfdeac531e7d83e375e6a4107a2eeeac5864774b903cbe548724450d45fa76"}}, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f2c000000050f2c000314300477405b72972473ddc047e8fe00d3058dc803100b108112000f000d00183f000000000000"], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0x48, 0x5, "391b29dc", "5d7d9574"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x46, 0x69, 0x0, 0x1, 0x9}}}, 0x0) 1.495744636s ago: executing program 6 (id=4621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xa0}}, 0x0) 1.3057702s ago: executing program 7 (id=4622): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00'}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1a) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726afdac27f9b56", 0x9}], 0x1}}], 0x1, 0x20004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x7, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 1.031312816s ago: executing program 1 (id=4623): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x34, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8, 0x800}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 763.876576ms ago: executing program 6 (id=4624): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(0x0, 0x0) 157.62023ms ago: executing program 7 (id=4625): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 63.337821ms ago: executing program 1 (id=4626): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x48079000) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4}) 0s ago: executing program 6 (id=4627): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1}}}}}]}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000006640)) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x364e, &(0x7f0000006780)={0x0, 0xb5f, 0x400, 0x1, 0x29d}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$random(0xffffffffffffff9c, 0x0, 0x200800, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): g interface: batadv_slave_1 [ 1742.828473][T15666] veth1_macvtap: left promiscuous mode [ 1742.834343][T15666] veth0_macvtap: left promiscuous mode [ 1742.840216][T15666] veth1_vlan: left promiscuous mode [ 1742.845875][T15666] veth0_vlan: left promiscuous mode [ 1743.565301][T15666] team0 (unregistering): Port device team_slave_1 removed [ 1743.679515][T15666] team0 (unregistering): Port device team_slave_0 removed [ 1743.826553][T11417] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1744.031132][T11417] usb 4-1: Using ep0 maxpacket: 8 [ 1744.050032][T11417] usb 4-1: config 6 has an invalid interface number: 51 but max is 1 [ 1744.061060][T11417] usb 4-1: config 6 has no interface number 1 [ 1744.067405][T11417] usb 4-1: config 6 interface 0 has no altsetting 0 [ 1744.074430][T11417] usb 4-1: config 6 interface 51 has no altsetting 0 [ 1744.144342][T19713] veth0_vlan: entered promiscuous mode [ 1744.271353][T19734] veth0_macvtap: entered promiscuous mode [ 1744.284661][T15710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.293305][T15710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.333583][T11417] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1744.343290][T11417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.353778][T11417] usb 4-1: Product: syz [ 1744.358173][T11417] usb 4-1: Manufacturer: syz [ 1744.363534][T11417] usb 4-1: SerialNumber: syz [ 1744.399512][T19734] veth1_macvtap: entered promiscuous mode [ 1744.474174][T19713] veth1_vlan: entered promiscuous mode [ 1744.703371][T19734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.714491][T19734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.729598][T19734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.741942][T19734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.752219][T19734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.763144][T19734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.773511][T19734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1744.784436][T19734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.795582][T19919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.801193][T19734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1744.805416][T19919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.922183][T19919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.935828][T19919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.951621][T19713] veth0_macvtap: entered promiscuous mode [ 1745.023283][T19713] veth1_macvtap: entered promiscuous mode [ 1745.118677][T15666] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.162492][T11417] xr_serial 4-1:6.51: xr_serial converter detected [ 1745.210935][T11417] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1745.217669][T11417] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1745.296181][T15666] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.321992][T11417] usb 4-1: USB disconnect, device number 17 [ 1745.332504][T11417] xr_serial 4-1:6.0: device disconnected [ 1745.401049][T19734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.411907][T19734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.422073][T19734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.432814][T19734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.448016][T19734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.460095][T19734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.470237][T19734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1745.481157][T19734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.495790][T19734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1745.626436][T15666] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.866244][T15666] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.911008][T12439] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1745.957767][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1745.968761][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.979001][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1745.989953][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.000185][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1746.011083][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.021288][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1746.032224][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.042479][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1746.053316][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.072060][T19713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1746.140125][T19734] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.150532][T19734] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.165578][T19734] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.176398][T19734] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.194836][T12439] usb 3-1: Using ep0 maxpacket: 8 [ 1746.233892][T12439] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.291177][T12439] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 1746.300813][T12439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.309168][T12439] usb 3-1: Product: syz [ 1746.313682][T12439] usb 3-1: Manufacturer: syz [ 1746.318503][T12439] usb 3-1: SerialNumber: syz [ 1746.402761][T12439] usb 3-1: config 0 descriptor?? [ 1746.423951][T12439] mct_u232 3-1:0.0: MCT U232 converter detected [ 1746.433768][T12439] mct_u232 ttyUSB0: expected endpoint missing [ 1746.621191][T11417] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1746.704116][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1746.704218][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.704300][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1746.704387][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.704462][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1746.704547][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.704621][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1746.704708][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.704789][T19713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1746.704876][T19713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1746.709263][T19713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1746.781914][T15666] bridge_slave_1: left allmulticast mode [ 1746.782012][T15666] bridge_slave_1: left promiscuous mode [ 1746.782908][T15666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.814425][T15666] bridge_slave_0: left allmulticast mode [ 1746.814526][T15666] bridge_slave_0: left promiscuous mode [ 1746.815389][T15666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.860524][T16372] usb 3-1: USB disconnect, device number 49 [ 1746.862943][T16372] mct_u232 3-1:0.0: device disconnected [ 1746.889027][T11417] usb 4-1: config 0 has no interfaces? [ 1746.936414][T11417] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1746.936567][T11417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.936687][T11417] usb 4-1: Product: syz [ 1746.936786][T11417] usb 4-1: Manufacturer: syz [ 1746.936884][T11417] usb 4-1: SerialNumber: syz [ 1746.941850][T11417] usb 4-1: config 0 descriptor?? [ 1747.259251][T11417] usb 4-1: USB disconnect, device number 18 [ 1747.779468][T15666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1747.804007][T15666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1747.825794][T15666] bond0 (unregistering): Released all slaves [ 1747.924353][T19713] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.924550][T19713] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.924729][T19713] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.924895][T19713] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.979915][T19001] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1748.155734][T19001] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.155987][T19001] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1748.156127][T19001] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.163926][T19001] usb 8-1: config 0 descriptor?? [ 1748.587223][T19001] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 1748.611571][T19001] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0003/input/input67 [ 1748.795000][T15666] hsr_slave_0: left promiscuous mode [ 1748.810477][T15666] hsr_slave_1: left promiscuous mode [ 1748.814018][T15666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1748.814268][T15666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.839697][T15666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1748.839907][T15666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.843560][T19001] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 1748.881371][T15666] veth1_macvtap: left promiscuous mode [ 1748.881568][T15666] veth0_macvtap: left promiscuous mode [ 1748.881969][T15666] veth1_vlan: left promiscuous mode [ 1748.882320][T15666] veth0_vlan: left promiscuous mode [ 1749.087710][T19946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.088856][T19946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1749.318672][T19946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.382663][T19946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1749.419370][T19946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.429470][T19946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1750.014432][T15666] team0 (unregistering): Port device team_slave_1 removed [ 1750.102007][T15666] team0 (unregistering): Port device team_slave_0 removed [ 1750.978036][T19964] random: crng reseeded on system resumption [ 1751.749897][T12896] usb 8-1: USB disconnect, device number 5 [ 1752.541352][T12896] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1752.742948][T12896] usb 4-1: Using ep0 maxpacket: 8 [ 1752.762192][T12896] usb 4-1: config 6 has an invalid interface number: 51 but max is 1 [ 1752.770859][T12896] usb 4-1: config 6 has no interface number 1 [ 1752.777184][T12896] usb 4-1: config 6 interface 0 has no altsetting 0 [ 1752.784365][T12896] usb 4-1: config 6 interface 51 has no altsetting 0 [ 1752.934837][T12896] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1752.944583][T12896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.954055][T12896] usb 4-1: Product: syz [ 1752.958450][T12896] usb 4-1: Manufacturer: syz [ 1752.964247][T12896] usb 4-1: SerialNumber: syz [ 1753.280946][T19001] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1753.306528][T19975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1753.317378][T19975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1753.464364][T19975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1753.474744][T19975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1753.551441][T19001] usb 8-1: config 0 has no interfaces? [ 1753.592456][T19001] usb 8-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1753.601988][T19001] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.610233][T19001] usb 8-1: Product: syz [ 1753.614800][T19001] usb 8-1: Manufacturer: syz [ 1753.619622][T19001] usb 8-1: SerialNumber: syz [ 1753.676340][T12896] xr_serial 4-1:6.51: xr_serial converter detected [ 1753.712050][T12896] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1753.718900][T12896] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1753.751904][T19001] usb 8-1: config 0 descriptor?? [ 1753.817548][T12896] usb 4-1: USB disconnect, device number 19 [ 1753.852369][T12896] xr_serial 4-1:6.0: device disconnected [ 1754.066910][T16372] usb 8-1: USB disconnect, device number 6 [ 1754.133944][T19001] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1754.361253][T19001] usb 3-1: Using ep0 maxpacket: 8 [ 1754.375107][T19001] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.438370][T19001] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 1754.448907][T19001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.459938][T19001] usb 3-1: Product: syz [ 1754.465171][T19001] usb 3-1: Manufacturer: syz [ 1754.470053][T19001] usb 3-1: SerialNumber: syz [ 1754.595071][T19001] usb 3-1: config 0 descriptor?? [ 1754.639106][T19001] mct_u232 3-1:0.0: MCT U232 converter detected [ 1754.648181][T19001] mct_u232 ttyUSB0: expected endpoint missing [ 1754.992059][T19001] usb 3-1: USB disconnect, device number 50 [ 1754.994330][T19001] mct_u232 3-1:0.0: device disconnected [ 1756.384827][T15779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.393388][T15779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.569771][T15779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.578804][T15779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.588394][T16372] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1756.816107][T16372] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1756.827815][T16372] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1756.838414][T16372] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.958557][T16372] usb 8-1: config 0 descriptor?? [ 1757.309519][ T3883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.317794][ T3883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.397298][T16372] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 1757.447488][T16372] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0004/input/input68 [ 1757.651852][T19883] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1757.692636][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.701144][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.765396][T16372] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 1757.816893][T20015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1757.826939][T20015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1757.891556][T19883] usb 4-1: Using ep0 maxpacket: 16 [ 1758.001257][T19883] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1758.001416][T19883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.001536][T19883] usb 4-1: Product: syz [ 1758.023710][T19883] usb 4-1: Manufacturer: syz [ 1758.028552][T19883] usb 4-1: SerialNumber: syz [ 1758.136756][T20015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.148639][T19883] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1758.148760][T19883] r8152-cfgselector 4-1: config 0 descriptor?? [ 1758.166652][T20015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.304074][T20015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.314549][T20015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.908659][T19883] r8152-cfgselector 4-1: USB disconnect, device number 20 [ 1760.193263][T16372] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1760.384610][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1760.391656][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1760.441079][T16372] usb 3-1: Using ep0 maxpacket: 8 [ 1760.463209][T16372] usb 3-1: config 6 has an invalid interface number: 51 but max is 1 [ 1760.472128][T16372] usb 3-1: config 6 has no interface number 1 [ 1760.478640][T16372] usb 3-1: config 6 interface 0 has no altsetting 0 [ 1760.485902][T16372] usb 3-1: config 6 interface 51 has no altsetting 0 [ 1760.606256][T16372] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1760.615955][T16372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.628001][T16372] usb 3-1: Product: syz [ 1760.632618][T16372] usb 3-1: Manufacturer: syz [ 1760.637618][T16372] usb 3-1: SerialNumber: syz [ 1760.710928][T19001] usb 8-1: USB disconnect, device number 7 [ 1760.796188][T19883] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1760.943358][T20039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.955689][T20039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.017559][T20039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.027557][T20039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.084506][T19883] usb 4-1: config 0 has no interfaces? [ 1761.146347][T19883] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1761.156246][T19883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.169624][T19883] usb 4-1: Product: syz [ 1761.174135][T19883] usb 4-1: Manufacturer: syz [ 1761.178962][T19883] usb 4-1: SerialNumber: syz [ 1761.332886][T16372] xr_serial 3-1:6.51: xr_serial converter detected [ 1761.343563][T19883] usb 4-1: config 0 descriptor?? [ 1761.446632][T16372] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1761.453610][T16372] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1761.560433][T16372] usb 3-1: USB disconnect, device number 51 [ 1761.570808][T16372] xr_serial 3-1:6.0: device disconnected [ 1761.768663][T19883] usb 4-1: USB disconnect, device number 21 [ 1762.741119][T19883] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1762.960959][T19883] usb 3-1: Using ep0 maxpacket: 8 [ 1762.992187][T19883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.025199][T16372] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1763.094141][T19883] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 1763.103703][T19883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.112229][T19883] usb 3-1: Product: syz [ 1763.116619][T19883] usb 3-1: Manufacturer: syz [ 1763.121510][T19883] usb 3-1: SerialNumber: syz [ 1763.219780][T19883] usb 3-1: config 0 descriptor?? [ 1763.237620][T16372] usb 5-1: Using ep0 maxpacket: 16 [ 1763.270716][T16372] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1763.282885][T16372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1763.285846][T19883] mct_u232 3-1:0.0: MCT U232 converter detected [ 1763.294283][T16372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1763.303196][T19883] mct_u232 ttyUSB0: expected endpoint missing [ 1763.312041][T16372] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1763.327743][T16372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.627100][T16372] usb 5-1: config 0 descriptor?? [ 1763.630373][T20063] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1763.643734][T16372] usb 5-1: Found UVC 0.00 device (10c4:ea90) [ 1763.643896][T16372] usb 5-1: No valid video chain found. [ 1763.679221][T19001] usb 3-1: USB disconnect, device number 52 [ 1763.685435][T19001] mct_u232 3-1:0.0: device disconnected [ 1763.895015][T16372] usb 5-1: USB disconnect, device number 61 [ 1764.961896][T19883] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1765.132547][T19883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1765.144054][T19883] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1765.153612][T19883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.192233][T19883] usb 8-1: config 0 descriptor?? [ 1765.482569][T16372] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1765.636106][T19883] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 1765.688008][T16372] usb 5-1: Using ep0 maxpacket: 8 [ 1765.738188][T16372] usb 5-1: config 6 has an invalid interface number: 51 but max is 1 [ 1765.738351][T19883] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0005/input/input69 [ 1765.746584][T16372] usb 5-1: config 6 has no interface number 1 [ 1765.746709][T16372] usb 5-1: config 6 interface 0 has no altsetting 0 [ 1765.746821][T16372] usb 5-1: config 6 interface 51 has no altsetting 0 [ 1765.870000][T16372] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1765.881148][T16372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.889401][T16372] usb 5-1: Product: syz [ 1765.893995][T16372] usb 5-1: Manufacturer: syz [ 1765.898813][T16372] usb 5-1: SerialNumber: syz [ 1766.055806][T19883] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 1766.119133][T20082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.132364][T20082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.311565][T20089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.322139][T20089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.374651][T20089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.405019][T20082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.415566][T20082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.533236][T20089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.660243][T20082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.670302][T20082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.705180][T16372] xr_serial 5-1:6.51: xr_serial converter detected [ 1766.761467][T16372] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1766.768487][T16372] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1766.984286][T16372] usb 5-1: USB disconnect, device number 62 [ 1766.994795][T16372] xr_serial 5-1:6.0: device disconnected [ 1767.154510][T19883] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1767.424212][T19883] usb 4-1: config 0 has no interfaces? [ 1767.501321][T19883] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1767.511083][T19883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.519500][T19883] usb 4-1: Product: syz [ 1767.524190][T19883] usb 4-1: Manufacturer: syz [ 1767.529186][T19883] usb 4-1: SerialNumber: syz [ 1767.669821][T19883] usb 4-1: config 0 descriptor?? [ 1768.002819][T16372] usb 4-1: USB disconnect, device number 22 [ 1768.444158][T19883] usb 8-1: USB disconnect, device number 8 [ 1770.394755][T20127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4341'. [ 1773.049918][T20139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4345'. [ 1773.260931][T19001] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1773.343890][T20139] netlink: 'syz.3.4345': attribute type 4 has an invalid length. [ 1773.521071][T19001] usb 5-1: Using ep0 maxpacket: 8 [ 1773.572021][T19001] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.648618][T19001] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 1773.658808][T19001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.667932][T19001] usb 5-1: Product: syz [ 1773.672753][T19001] usb 5-1: Manufacturer: syz [ 1773.677567][T19001] usb 5-1: SerialNumber: syz [ 1773.781236][T19001] usb 5-1: config 0 descriptor?? [ 1773.828692][T19001] mct_u232 5-1:0.0: MCT U232 converter detected [ 1773.837924][T19001] mct_u232 ttyUSB0: expected endpoint missing [ 1774.153320][T11417] usb 5-1: USB disconnect, device number 63 [ 1774.155607][T11417] mct_u232 5-1:0.0: device disconnected [ 1774.271683][T19883] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1774.431537][T19883] usb 7-1: Using ep0 maxpacket: 8 [ 1774.439719][T19883] usb 7-1: config 6 has an invalid interface number: 51 but max is 1 [ 1774.449056][T19883] usb 7-1: config 6 has no interface number 1 [ 1774.449180][T19883] usb 7-1: config 6 interface 0 has no altsetting 0 [ 1774.449292][T19883] usb 7-1: config 6 interface 51 has no altsetting 0 [ 1774.497757][T19883] usb 7-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1774.497916][T19883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.498037][T19883] usb 7-1: Product: syz [ 1774.498133][T19883] usb 7-1: Manufacturer: syz [ 1774.498232][T19883] usb 7-1: SerialNumber: syz [ 1774.756620][T20149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.758291][T20149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.799253][T20149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.802115][T20149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.870958][T11417] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1774.915736][T19883] xr_serial 7-1:6.51: xr_serial converter detected [ 1775.049750][T19883] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1775.050001][T19883] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1775.090363][T11417] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.091116][T11417] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1775.091257][T11417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.096104][T11417] usb 3-1: config 0 descriptor?? [ 1775.162807][T19883] usb 7-1: USB disconnect, device number 4 [ 1775.168110][T19883] xr_serial 7-1:6.0: device disconnected [ 1775.526184][T11417] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 1775.572467][T11417] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input70 [ 1775.591187][T19001] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1775.774273][T19001] usb 4-1: config 0 has no interfaces? [ 1775.792488][T11417] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1775.881129][T19001] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1775.881282][T19001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.881397][T19001] usb 4-1: Product: syz [ 1775.881501][T19001] usb 4-1: Manufacturer: syz [ 1775.881602][T19001] usb 4-1: SerialNumber: syz [ 1775.900788][T19001] usb 4-1: config 0 descriptor?? [ 1776.078702][T20156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.080392][T20156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.250939][T12439] usb 4-1: USB disconnect, device number 23 [ 1776.295880][T20156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.297024][T20156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.350272][T20156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.404306][T20156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.437516][T20169] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4353'. [ 1778.198145][T19883] usb 3-1: USB disconnect, device number 53 [ 1779.577001][T20194] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4361'. [ 1780.392112][T20204] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4364'. [ 1780.470285][T19883] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1780.593655][T11417] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1780.677015][T19883] usb 5-1: Using ep0 maxpacket: 8 [ 1780.717685][T19883] usb 5-1: config 6 has an invalid interface number: 51 but max is 1 [ 1780.726187][T19883] usb 5-1: config 6 has no interface number 1 [ 1780.732812][T19883] usb 5-1: config 6 interface 0 has no altsetting 0 [ 1780.739650][T19883] usb 5-1: config 6 interface 51 has no altsetting 0 [ 1780.813980][T11417] usb 4-1: config 0 has no interfaces? [ 1780.854613][T11417] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1780.864109][T11417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.875560][T11417] usb 4-1: Product: syz [ 1780.879951][T11417] usb 4-1: Manufacturer: syz [ 1780.885925][T11417] usb 4-1: SerialNumber: syz [ 1780.933581][T19883] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1780.943154][T19883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.951547][T19883] usb 5-1: Product: syz [ 1780.955929][T19883] usb 5-1: Manufacturer: syz [ 1780.960835][T19883] usb 5-1: SerialNumber: syz [ 1781.073148][T11417] usb 4-1: config 0 descriptor?? [ 1781.266066][T20200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.276865][T20200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.372629][T12439] usb 4-1: USB disconnect, device number 24 [ 1781.402234][T20200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.412300][T20200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.525267][T11417] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1781.604835][T19883] xr_serial 5-1:6.51: xr_serial converter detected [ 1781.638376][T19883] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1781.645253][T19883] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1781.712558][T19883] usb 5-1: USB disconnect, device number 64 [ 1781.722947][T19883] xr_serial 5-1:6.0: device disconnected [ 1781.771057][T11417] usb 7-1: Using ep0 maxpacket: 8 [ 1781.816217][T11417] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.875884][T11417] usb 7-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 1781.885388][T11417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.893780][T11417] usb 7-1: Product: syz [ 1781.901443][T11417] usb 7-1: Manufacturer: syz [ 1781.906277][T11417] usb 7-1: SerialNumber: syz [ 1781.974542][T11417] usb 7-1: config 0 descriptor?? [ 1781.989085][T11417] mct_u232 7-1:0.0: MCT U232 converter detected [ 1782.005046][T11417] mct_u232 ttyUSB0: expected endpoint missing [ 1782.371429][T19001] usb 7-1: USB disconnect, device number 5 [ 1782.373724][T19001] mct_u232 7-1:0.0: device disconnected [ 1783.341187][T11417] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1783.552617][T11417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.552932][T11417] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1783.553079][T11417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.569015][T11417] usb 5-1: config 0 descriptor?? [ 1784.036440][T11417] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 1784.099502][T11417] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input71 [ 1784.304019][T11417] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1784.516138][T20223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.526078][T20223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.821339][T20223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.831876][T20223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.966494][T20223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.984061][T20223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1785.037734][T20235] netlink: 'syz.2.4371': attribute type 8 has an invalid length. [ 1786.630217][T19001] usb 5-1: USB disconnect, device number 65 [ 1786.773727][T20245] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4374'. [ 1787.385120][T20251] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4376'. [ 1787.972239][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1788.011042][ T5418] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1788.133723][T20259] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input72 [ 1788.170835][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 1788.187425][ T25] usb 4-1: config 6 has an invalid interface number: 51 but max is 1 [ 1788.196185][ T25] usb 4-1: config 6 has no interface number 1 [ 1788.203063][ T25] usb 4-1: config 6 interface 0 has no altsetting 0 [ 1788.209903][ T25] usb 4-1: config 6 interface 51 has no altsetting 0 [ 1788.309793][ T5418] usb 7-1: config 0 has no interfaces? [ 1788.387866][ T5418] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1788.397433][ T5418] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.405909][ T5418] usb 7-1: Product: syz [ 1788.410301][ T5418] usb 7-1: Manufacturer: syz [ 1788.415214][ T5418] usb 7-1: SerialNumber: syz [ 1788.458176][ T25] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1788.467688][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.476171][ T25] usb 4-1: Product: syz [ 1788.480893][ T25] usb 4-1: Manufacturer: syz [ 1788.485724][ T25] usb 4-1: SerialNumber: syz [ 1788.533479][ T5418] usb 7-1: config 0 descriptor?? [ 1788.817516][T20254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.829557][T19001] usb 7-1: USB disconnect, device number 6 [ 1788.881887][T20254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.980817][T20254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.991530][T20254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.275891][ T25] xr_serial 4-1:6.51: xr_serial converter detected [ 1789.305794][ T25] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1789.312863][ T25] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1789.328122][ T25] usb 4-1: USB disconnect, device number 25 [ 1789.337934][ T25] xr_serial 4-1:6.0: device disconnected [ 1789.437439][T15757] udevd[15757]: setting mode of /dev/bus/usb/004/025 to 020664 failed: No such file or directory [ 1789.502601][T15757] udevd[15757]: setting owner of /dev/bus/usb/004/025 to uid=0, gid=0 failed: No such file or directory [ 1789.951820][ T25] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1790.209982][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1790.230186][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.344141][ T25] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 1790.353825][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.363081][ T25] usb 5-1: Product: syz [ 1790.367476][ T25] usb 5-1: Manufacturer: syz [ 1790.372379][ T25] usb 5-1: SerialNumber: syz [ 1790.544115][ T25] usb 5-1: config 0 descriptor?? [ 1790.576970][ T25] mct_u232 5-1:0.0: MCT U232 converter detected [ 1790.586168][ T25] mct_u232 ttyUSB0: expected endpoint missing [ 1790.997476][T20273] usb 5-1: USB disconnect, device number 66 [ 1791.000008][T20273] mct_u232 5-1:0.0: device disconnected [ 1791.437481][T20296] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4387'. [ 1792.214057][T20302] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4390'. [ 1792.621798][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1792.845926][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1792.860227][ T25] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1792.870816][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.952987][ T25] usb 4-1: config 0 descriptor?? [ 1793.085407][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4391'. [ 1793.414617][ T25] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 1793.510905][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0008/input/input73 [ 1793.771203][ T25] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1793.958681][T20303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.968747][T20303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.364599][T20303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.374691][T20303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.419247][T20303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.429634][T20303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.531661][ T25] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1794.751609][ T25] usb 7-1: config 0 has no interfaces? [ 1794.806582][ T25] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1794.816223][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.824776][ T25] usb 7-1: Product: syz [ 1794.829349][ T25] usb 7-1: Manufacturer: syz [ 1794.834595][ T25] usb 7-1: SerialNumber: syz [ 1794.880206][ T25] usb 7-1: config 0 descriptor?? [ 1795.263858][ T25] usb 7-1: USB disconnect, device number 7 [ 1795.641532][ T5418] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1795.861450][ T5418] usb 8-1: Using ep0 maxpacket: 8 [ 1795.906536][ T5418] usb 8-1: config 6 has an invalid interface number: 51 but max is 1 [ 1795.915211][ T5418] usb 8-1: config 6 has no interface number 1 [ 1795.922708][ T5418] usb 8-1: config 6 interface 0 has no altsetting 0 [ 1795.929561][ T5418] usb 8-1: config 6 interface 51 has no altsetting 0 [ 1796.078055][ T5418] usb 8-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1796.087772][ T5418] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.096776][ T5418] usb 8-1: Product: syz [ 1796.101373][ T5418] usb 8-1: Manufacturer: syz [ 1796.106385][ T5418] usb 8-1: SerialNumber: syz [ 1796.512155][T20325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1796.522754][T20325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1796.594077][T20273] usb 4-1: USB disconnect, device number 26 [ 1796.877662][ T5418] xr_serial 8-1:6.51: xr_serial converter detected [ 1796.893619][T20333] fuse: Bad value for 'group_id' [ 1796.899077][T20333] fuse: Bad value for 'group_id' [ 1796.910202][ T5418] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1796.910444][ T5418] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1796.988663][ T5418] usb 8-1: USB disconnect, device number 9 [ 1796.999102][ T5418] xr_serial 8-1:6.0: device disconnected [ 1797.048020][T20332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4397'. [ 1798.127144][T20346] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4401'. [ 1798.201702][T20344] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4400'. [ 1798.502886][ T5418] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1798.701007][ T5418] usb 5-1: Using ep0 maxpacket: 8 [ 1798.717818][ T5418] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.809780][ T5418] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 1798.819267][ T5418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.827940][ T5418] usb 5-1: Product: syz [ 1798.832462][ T5418] usb 5-1: Manufacturer: syz [ 1798.837285][ T5418] usb 5-1: SerialNumber: syz [ 1798.937653][ T5418] usb 5-1: config 0 descriptor?? [ 1799.001628][ T5418] mct_u232 5-1:0.0: MCT U232 converter detected [ 1799.013499][ T5418] mct_u232 ttyUSB0: expected endpoint missing [ 1799.219300][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4404'. [ 1799.300224][ T5418] usb 5-1: USB disconnect, device number 67 [ 1799.303381][ T5418] mct_u232 5-1:0.0: device disconnected [ 1800.445674][T20273] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1800.642300][T20273] usb 4-1: config 0 has no interfaces? [ 1800.692409][T20273] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1800.692556][T20273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.710357][T20273] usb 4-1: Product: syz [ 1800.710462][T20273] usb 4-1: Manufacturer: syz [ 1800.710561][T20273] usb 4-1: SerialNumber: syz [ 1800.724767][T20376] fuse: Bad value for 'group_id' [ 1800.724860][T20376] fuse: Bad value for 'group_id' [ 1800.785544][T20273] usb 4-1: config 0 descriptor?? [ 1801.115896][T20273] usb 4-1: USB disconnect, device number 27 [ 1801.433875][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1801.448327][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1801.466368][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1801.485178][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1801.498986][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1801.511296][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1801.562059][ T5418] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1801.732107][ T5418] usb 7-1: Using ep0 maxpacket: 8 [ 1801.747814][ T5418] usb 7-1: config 6 has an invalid interface number: 51 but max is 1 [ 1801.756577][ T5418] usb 7-1: config 6 has no interface number 1 [ 1801.766393][ T5418] usb 7-1: config 6 interface 0 has no altsetting 0 [ 1801.774674][ T5418] usb 7-1: config 6 interface 51 has no altsetting 0 [ 1801.822360][T20385] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4412'. [ 1801.941383][ T5418] usb 7-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1801.951116][ T5418] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.959417][ T5418] usb 7-1: Product: syz [ 1801.963938][ T5418] usb 7-1: Manufacturer: syz [ 1801.971754][ T5418] usb 7-1: SerialNumber: syz [ 1802.316441][T20380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1802.327055][T20380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1802.501847][ T5418] xr_serial 7-1:6.51: xr_serial converter detected [ 1802.621392][ T5418] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1802.628138][ T5418] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1802.645709][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4414'. [ 1802.708566][T20392] netlink: 'syz.4.4414': attribute type 1 has an invalid length. [ 1802.716647][T20392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4414'. [ 1802.772812][ T5418] usb 7-1: USB disconnect, device number 8 [ 1802.782437][ T5418] xr_serial 7-1:6.0: device disconnected [ 1803.641110][T15423] Bluetooth: hci4: command tx timeout [ 1804.028508][T20382] chnl_net:caif_netlink_parms(): no params data found [ 1804.122559][T20408] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4417'. [ 1805.045979][T20420] fuse: Bad value for 'group_id' [ 1805.052448][T20420] fuse: Bad value for 'group_id' [ 1805.333936][T20273] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1805.582092][T20273] usb 7-1: config 0 has no interfaces? [ 1805.617418][T20273] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1805.628096][T20273] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.637432][T20273] usb 7-1: Product: syz [ 1805.642204][T20273] usb 7-1: Manufacturer: syz [ 1805.647054][T20273] usb 7-1: SerialNumber: syz [ 1805.726036][T15423] Bluetooth: hci4: command tx timeout [ 1805.754553][T20429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4424'. [ 1805.775272][T20273] usb 7-1: config 0 descriptor?? [ 1805.813479][ T5418] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1805.843899][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4425'. [ 1806.028416][T20431] netlink: 'syz.7.4425': attribute type 1 has an invalid length. [ 1806.036637][T20431] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4425'. [ 1806.041062][ T5418] usb 4-1: Using ep0 maxpacket: 8 [ 1806.077863][ T25] usb 7-1: USB disconnect, device number 9 [ 1806.113742][ T3010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.145390][ T5418] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.209791][ T5418] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 1806.219513][ T5418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.228234][ T5418] usb 4-1: Product: syz [ 1806.232701][ T5418] usb 4-1: Manufacturer: syz [ 1806.237579][ T5418] usb 4-1: SerialNumber: syz [ 1806.299827][T20382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.307756][T20382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.315821][T20382] bridge_slave_0: entered allmulticast mode [ 1806.324965][T20382] bridge_slave_0: entered promiscuous mode [ 1806.368770][ T5418] usb 4-1: config 0 descriptor?? [ 1806.411136][ T3010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.444362][ T5418] mct_u232 4-1:0.0: MCT U232 converter detected [ 1806.453638][ T5418] mct_u232 ttyUSB0: expected endpoint missing [ 1806.529918][T20382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.538035][T20382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.546236][T20382] bridge_slave_1: entered allmulticast mode [ 1806.644710][T20382] bridge_slave_1: entered promiscuous mode [ 1806.686071][ T3010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.843389][T12896] usb 4-1: USB disconnect, device number 28 [ 1806.845643][T12896] mct_u232 4-1:0.0: device disconnected [ 1807.182148][T20273] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1807.211526][ T3010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.289635][T20382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1807.331099][T20273] usb 8-1: Using ep0 maxpacket: 8 [ 1807.376298][T20273] usb 8-1: config 6 has an invalid interface number: 51 but max is 1 [ 1807.376428][T20273] usb 8-1: config 6 has no interface number 1 [ 1807.376546][T20273] usb 8-1: config 6 interface 0 has no altsetting 0 [ 1807.376657][T20273] usb 8-1: config 6 interface 51 has no altsetting 0 [ 1807.386117][T20273] usb 8-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1807.386260][T20273] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.386383][T20273] usb 8-1: Product: syz [ 1807.386480][T20273] usb 8-1: Manufacturer: syz [ 1807.386577][T20273] usb 8-1: SerialNumber: syz [ 1807.437392][T20382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1807.665721][T20437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.666876][T20437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.793029][T15423] Bluetooth: hci4: command tx timeout [ 1807.891306][T20382] team0: Port device team_slave_0 added [ 1807.922929][T20382] team0: Port device team_slave_1 added [ 1807.954938][T20273] xr_serial 8-1:6.51: xr_serial converter detected [ 1808.038782][T20273] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1808.039211][T20273] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1808.380241][T20382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1808.380324][T20382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1808.380460][T20382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1808.442642][T20273] usb 8-1: USB disconnect, device number 10 [ 1808.446555][T20273] xr_serial 8-1:6.0: device disconnected [ 1808.562559][ T3010] bridge_slave_1: left allmulticast mode [ 1808.562664][ T3010] bridge_slave_1: left promiscuous mode [ 1808.563542][ T3010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.612368][ T3010] bridge_slave_0: left allmulticast mode [ 1808.664026][ T3010] bridge_slave_0: left promiscuous mode [ 1808.664862][ T3010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.272292][T20459] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4431'. [ 1809.579550][ T3010] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1809.820247][ T3010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1809.857625][ T3010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1809.878849][ T3010] bond0 (unregistering): Released all slaves [ 1809.885679][T15423] Bluetooth: hci4: command tx timeout [ 1809.905019][ T3010] bond1 (unregistering): Released all slaves [ 1809.989434][T20382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1809.996727][T20382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1810.022910][ C1] vkms_vblank_simulate: vblank timer overrun [ 1810.029275][T20382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1810.818493][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4435'. [ 1810.858945][T20382] hsr_slave_0: entered promiscuous mode [ 1810.869096][T20382] hsr_slave_1: entered promiscuous mode [ 1810.881920][T20382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1810.889721][T20382] Cannot create hsr debugfs directory [ 1810.944696][T20471] netlink: 'syz.3.4435': attribute type 1 has an invalid length. [ 1810.952883][T20471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4435'. [ 1811.073070][ T3010] hsr_slave_0: left promiscuous mode [ 1811.101781][ T3010] hsr_slave_1: left promiscuous mode [ 1811.109477][ T3010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1811.117421][ T3010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1811.189100][ T3010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1811.197061][ T3010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1811.317390][ T3010] veth1_macvtap: left promiscuous mode [ 1811.323709][ T3010] veth0_macvtap: left promiscuous mode [ 1811.330026][ T3010] veth1_vlan: left promiscuous mode [ 1811.335760][ T3010] veth0_vlan: left promiscuous mode [ 1811.933271][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4438'. [ 1812.083727][ T3010] team0 (unregistering): Port device team_slave_1 removed [ 1812.127507][ T3010] team0 (unregistering): Port device team_slave_0 removed [ 1812.199067][T12896] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1812.457074][T12896] usb 7-1: config 0 has no interfaces? [ 1812.535529][T12896] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1812.545177][T12896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.553609][T12896] usb 7-1: Product: syz [ 1812.557990][T12896] usb 7-1: Manufacturer: syz [ 1812.563085][T12896] usb 7-1: SerialNumber: syz [ 1812.683701][T12896] usb 7-1: config 0 descriptor?? [ 1813.029347][ T25] usb 7-1: USB disconnect, device number 10 [ 1813.241893][T12896] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1813.458133][T12896] usb 4-1: Using ep0 maxpacket: 8 [ 1813.470199][T12896] usb 4-1: config 6 has an invalid interface number: 51 but max is 1 [ 1813.479185][T12896] usb 4-1: config 6 has no interface number 1 [ 1813.485899][T12896] usb 4-1: config 6 interface 0 has no altsetting 0 [ 1813.492923][T12896] usb 4-1: config 6 interface 51 has no altsetting 0 [ 1813.593831][T12896] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1813.603401][T12896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.612087][T12896] usb 4-1: Product: syz [ 1813.616694][T12896] usb 4-1: Manufacturer: syz [ 1813.621909][T12896] usb 4-1: SerialNumber: syz [ 1813.966880][T20484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1813.981005][T20484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.982292][ T25] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1814.087976][T20484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.098138][T20484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.251236][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 1814.313614][T12896] xr_serial 4-1:6.51: xr_serial converter detected [ 1814.324627][ T25] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.381125][T20382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1814.392469][T12896] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1814.399284][T12896] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1814.426428][ T25] usb 8-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 1814.436313][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.445105][ T25] usb 8-1: Product: syz [ 1814.449542][ T25] usb 8-1: Manufacturer: syz [ 1814.454523][ T25] usb 8-1: SerialNumber: syz [ 1814.503150][T12896] usb 4-1: USB disconnect, device number 29 [ 1814.515001][T12896] xr_serial 4-1:6.0: device disconnected [ 1814.519556][ T25] usb 8-1: config 0 descriptor?? [ 1814.544104][T20382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1814.567464][ T25] mct_u232 8-1:0.0: MCT U232 converter detected [ 1814.581017][T11753] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1814.642938][T20382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1814.687371][ T25] mct_u232 ttyUSB0: expected endpoint missing [ 1814.702702][T20382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1814.799388][T11753] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1814.799599][T11753] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1814.799743][T11753] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.828530][T11753] usb 7-1: config 0 descriptor?? [ 1815.190000][ T25] usb 8-1: USB disconnect, device number 11 [ 1815.217045][ T25] mct_u232 8-1:0.0: device disconnected [ 1815.328295][T11753] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 1815.388862][T11753] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0009/input/input74 [ 1815.653476][T11753] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1815.765384][T20488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1815.768358][T20488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1815.817710][T20488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1815.819586][T20488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.063249][T20488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.065018][T20488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.105090][T20488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.107113][T20488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.531477][T20382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1816.716531][T20382] 8021q: adding VLAN 0 to HW filter on device team0 [ 1816.800035][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1816.800490][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1816.902231][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1816.902695][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.169621][ T25] usb 7-1: USB disconnect, device number 11 [ 1818.715093][T20515] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4444'. [ 1818.752780][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1819.635062][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4447'. [ 1819.644307][T20524] netlink: 'syz.7.4447': attribute type 1 has an invalid length. [ 1819.652991][T20524] netlink: 'syz.7.4447': attribute type 2 has an invalid length. [ 1819.673059][T20382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1820.040980][ T5418] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1820.097204][T20527] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1820.279269][ T5418] usb 7-1: config 0 has an invalid interface number: 39 but max is 0 [ 1820.287895][ T5418] usb 7-1: config 0 has no interface number 0 [ 1820.294539][ T5418] usb 7-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1820.377231][ T5418] usb 7-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1820.387543][ T5418] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.395950][ T5418] usb 7-1: Product: syz [ 1820.402801][ T5418] usb 7-1: Manufacturer: syz [ 1820.407636][ T5418] usb 7-1: SerialNumber: syz [ 1820.542582][ T5418] usb 7-1: config 0 descriptor?? [ 1821.408830][T12896] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1821.426706][ T5418] usb 7-1: USB disconnect, device number 12 [ 1821.656651][T12896] usb 4-1: config 0 has no interfaces? [ 1821.680983][T15757] udevd[15757]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1821.722856][T12896] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1821.737784][T12896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.748217][T12896] usb 4-1: Product: syz [ 1821.752903][T12896] usb 4-1: Manufacturer: syz [ 1821.758487][T12896] usb 4-1: SerialNumber: syz [ 1821.826643][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1821.836733][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1821.903557][T12896] usb 4-1: config 0 descriptor?? [ 1821.952553][ T25] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1822.154986][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 1822.218790][ T25] usb 8-1: config 6 has an invalid interface number: 51 but max is 1 [ 1822.227412][ T25] usb 8-1: config 6 has no interface number 1 [ 1822.234240][ T25] usb 8-1: config 6 interface 0 has no altsetting 0 [ 1822.241175][ T25] usb 8-1: config 6 interface 51 has no altsetting 0 [ 1822.246776][T12896] usb 4-1: USB disconnect, device number 30 [ 1822.365763][ T25] usb 8-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1822.375389][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.384186][ T25] usb 8-1: Product: syz [ 1822.388578][ T25] usb 8-1: Manufacturer: syz [ 1822.393613][ T25] usb 8-1: SerialNumber: syz [ 1822.489525][T20382] veth0_vlan: entered promiscuous mode [ 1822.665173][T20382] veth1_vlan: entered promiscuous mode [ 1822.739640][T20548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.750358][T20548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.896716][T20548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.907447][T20548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.199574][T20382] veth0_macvtap: entered promiscuous mode [ 1823.240012][ T25] xr_serial 8-1:6.51: xr_serial converter detected [ 1823.291181][T20382] veth1_macvtap: entered promiscuous mode [ 1823.332574][ T25] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1823.341914][ T25] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1823.443239][ T25] usb 8-1: USB disconnect, device number 12 [ 1823.453012][ T25] xr_serial 8-1:6.0: device disconnected [ 1823.558168][T20382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1823.569819][T20382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1823.583230][T20382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1823.594766][T20382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1823.604971][T20382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1823.615777][T20382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1823.625931][T20382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1823.636656][T20382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1823.651742][T20382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1824.004401][T20382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1824.015317][T20382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.026286][T20382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1824.037729][T20382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.047870][T20382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1824.058573][T20382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.069070][T20382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1824.079797][T20382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.098624][T20382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1824.210461][T20560] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4456'. [ 1824.448312][T20382] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.457647][T20382] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.467109][T20382] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.476454][T20382] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.591138][T20273] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1824.777500][T20273] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.789882][T20273] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1824.799827][T20273] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.912232][T20273] usb 7-1: config 0 descriptor?? [ 1825.068491][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1825.082955][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1825.092776][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1825.132969][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1825.149206][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1825.158986][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1825.454780][T20273] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 1825.533426][T20273] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.000A/input/input75 [ 1825.719934][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4459'. [ 1825.735948][T20575] netlink: 'syz.7.4459': attribute type 1 has an invalid length. [ 1825.744569][T20575] netlink: 'syz.7.4459': attribute type 2 has an invalid length. [ 1825.766695][T20562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.780030][T20562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.895338][T20562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.905937][T20562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.908529][T20273] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1826.278607][T20562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.289550][T20562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.426940][T20562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.515449][T20583] netlink: 'syz.3.4460': attribute type 29 has an invalid length. [ 1826.581978][T20562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.609938][T20583] netlink: 'syz.3.4460': attribute type 29 has an invalid length. [ 1827.251315][T15423] Bluetooth: hci5: command tx timeout [ 1827.908731][T20569] chnl_net:caif_netlink_parms(): no params data found [ 1828.281565][T19883] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1828.408157][T20602] evm: overlay not supported [ 1828.432834][T20598] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1828.523235][ T29] audit: type=1804 audit(1739888142.026:71): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4463" name="/newroot/43/bus/bus" dev="overlay" ino=250 res=1 errno=0 [ 1828.567807][T19883] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 1828.576393][T19883] usb 4-1: config 0 has no interface number 0 [ 1828.583028][T19883] usb 4-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1828.728336][T19883] usb 4-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1828.739014][T19883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.748246][T19883] usb 4-1: Product: syz [ 1828.752789][T19883] usb 4-1: Manufacturer: syz [ 1828.757611][T19883] usb 4-1: SerialNumber: syz [ 1828.952008][T19883] usb 4-1: config 0 descriptor?? [ 1829.249977][ T25] usb 7-1: USB disconnect, device number 13 [ 1829.312365][T15423] Bluetooth: hci5: command tx timeout [ 1829.933900][T19883] usb 4-1: USB disconnect, device number 31 [ 1830.141756][ T25] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1830.198454][T15757] udevd[15757]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1830.307830][T15912] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1830.384712][ T25] usb 8-1: config 0 has no interfaces? [ 1830.457774][ T25] usb 8-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1830.467254][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.475655][ T25] usb 8-1: Product: syz [ 1830.480038][ T25] usb 8-1: Manufacturer: syz [ 1830.484938][ T25] usb 8-1: SerialNumber: syz [ 1830.514976][T20569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.522824][T20569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.531029][T20569] bridge_slave_0: entered allmulticast mode [ 1830.543021][T15912] usb 7-1: Using ep0 maxpacket: 8 [ 1830.543980][T20569] bridge_slave_0: entered promiscuous mode [ 1830.580881][ T25] usb 8-1: config 0 descriptor?? [ 1830.590542][T15912] usb 7-1: config 6 has an invalid interface number: 51 but max is 1 [ 1830.599611][T15912] usb 7-1: config 6 has no interface number 1 [ 1830.606125][T15912] usb 7-1: config 6 interface 0 has no altsetting 0 [ 1830.613131][T15912] usb 7-1: config 6 interface 51 has no altsetting 0 [ 1830.708656][T15912] usb 7-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1830.709768][T20569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.718240][T15912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.725606][T20569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.733460][T15912] usb 7-1: Product: syz [ 1830.733561][T15912] usb 7-1: Manufacturer: syz [ 1830.745200][T20569] bridge_slave_1: entered allmulticast mode [ 1830.748826][T15912] usb 7-1: SerialNumber: syz [ 1830.760204][T20569] bridge_slave_1: entered promiscuous mode [ 1831.117386][T20273] usb 8-1: USB disconnect, device number 13 [ 1831.242957][T20569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1831.282278][T20618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.292715][T20618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.353188][T20569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1831.377358][T20618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.387164][T20618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.404597][T15423] Bluetooth: hci5: command tx timeout [ 1831.573082][T20626] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4466'. [ 1831.639691][T15912] xr_serial 7-1:6.51: xr_serial converter detected [ 1831.715004][T15912] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1831.721889][T15912] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1831.822174][T15912] usb 7-1: USB disconnect, device number 14 [ 1831.832066][T15912] xr_serial 7-1:6.0: device disconnected [ 1831.852903][T15757] udevd[15757]: setting mode of /dev/bus/usb/007/014 to 020664 failed: No such file or directory [ 1831.903517][T15757] udevd[15757]: setting owner of /dev/bus/usb/007/014 to uid=0, gid=0 failed: No such file or directory [ 1831.963020][T20569] team0: Port device team_slave_0 added [ 1832.165854][T20569] team0: Port device team_slave_1 added [ 1832.681153][T20569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1832.691184][T20569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1832.718330][T20569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1832.935289][T20569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1832.942555][T20569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1832.968722][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4469'. [ 1832.978832][T20569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1833.072139][T20640] netlink: 'syz.6.4469': attribute type 1 has an invalid length. [ 1833.086703][T20640] netlink: 'syz.6.4469': attribute type 2 has an invalid length. [ 1833.473161][ T51] Bluetooth: hci5: command tx timeout [ 1833.493613][T20643] netlink: 'syz.3.4470': attribute type 29 has an invalid length. [ 1833.570318][ T3883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1833.578736][ T3883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1833.729315][T20645] netlink: 'syz.3.4470': attribute type 29 has an invalid length. [ 1833.755102][T20569] hsr_slave_0: entered promiscuous mode [ 1833.766996][T20569] hsr_slave_1: entered promiscuous mode [ 1833.775839][T20569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1833.783813][T20569] Cannot create hsr debugfs directory [ 1834.110858][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1834.288857][ T3883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1834.297221][ T3883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1834.391300][ T29] audit: type=1804 audit(1739888147.896:72): pid=20650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4472" name="/newroot/38/bus/bus" dev="overlay" ino=233 res=1 errno=0 [ 1834.871195][T15912] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1835.102552][T15912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.114307][T15912] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1835.124118][T15912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.224824][T15912] usb 4-1: config 0 descriptor?? [ 1835.359964][ T3444] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.673431][T15912] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 1835.698789][ T3444] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.749178][T15912] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000B/input/input76 [ 1835.785240][T20247] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1835.866538][T20658] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1835.942457][ T3444] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.061764][T20247] usb 7-1: config 0 has an invalid interface number: 39 but max is 0 [ 1836.073112][T20247] usb 7-1: config 0 has no interface number 0 [ 1836.080377][T20247] usb 7-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1836.143025][T20654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.153777][T20654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.185503][T15912] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1836.198622][T20247] usb 7-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1836.209315][T20247] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.218550][T20247] usb 7-1: Product: syz [ 1836.224012][T20247] usb 7-1: Manufacturer: syz [ 1836.228830][T20247] usb 7-1: SerialNumber: syz [ 1836.267644][T20654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.284278][T20654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.310967][ T3444] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.407877][T20247] usb 7-1: config 0 descriptor?? [ 1836.570248][T20654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.582745][T20654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.850179][T20654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.861237][T20654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.392661][T20247] usb 7-1: USB disconnect, device number 15 [ 1837.502041][ T3444] bridge_slave_1: left allmulticast mode [ 1837.511004][ T3444] bridge_slave_1: left promiscuous mode [ 1837.517819][ T3444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.709019][ T3444] bridge_slave_0: left allmulticast mode [ 1837.715094][ T3444] bridge_slave_0: left promiscuous mode [ 1837.721826][ T3444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.813892][T20247] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1838.863037][T15757] udevd[15757]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1839.048935][T19883] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1839.071460][T20247] usb 6-1: config 0 has no interfaces? [ 1839.113965][T20247] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1839.123473][T20247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.132038][T20247] usb 6-1: Product: syz [ 1839.136441][T20247] usb 6-1: Manufacturer: syz [ 1839.143783][T20247] usb 6-1: SerialNumber: syz [ 1839.307316][T20247] usb 6-1: config 0 descriptor?? [ 1839.371951][T19883] usb 7-1: Using ep0 maxpacket: 8 [ 1839.395094][T19883] usb 7-1: config 6 has an invalid interface number: 51 but max is 1 [ 1839.403698][T19883] usb 7-1: config 6 has no interface number 1 [ 1839.410031][T19883] usb 7-1: config 6 interface 0 has no altsetting 0 [ 1839.417033][T19883] usb 7-1: config 6 interface 51 has no altsetting 0 [ 1839.439950][T15912] usb 4-1: USB disconnect, device number 32 [ 1839.605032][T19883] usb 7-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1839.614648][T19883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.623222][T19883] usb 7-1: Product: syz [ 1839.627619][T19883] usb 7-1: Manufacturer: syz [ 1839.633174][T19883] usb 7-1: SerialNumber: syz [ 1839.698017][T20247] usb 6-1: USB disconnect, device number 4 [ 1839.808863][ T3444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1839.942730][ T3444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1839.987983][ T3444] bond0 (unregistering): Released all slaves [ 1840.038869][T20680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.049845][T20680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.099122][T20680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.109653][T20680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.179422][T20569] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1840.305346][T20569] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1840.422612][T19883] xr_serial 7-1:6.51: xr_serial converter detected [ 1840.461799][T19883] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1840.472809][T19883] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1840.532984][T19883] usb 7-1: USB disconnect, device number 16 [ 1840.543309][T19883] xr_serial 7-1:6.0: device disconnected [ 1840.732373][T20569] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1840.885753][T20689] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4480'. [ 1840.927472][T20569] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1840.973586][T20689] netlink: 'syz.7.4480': attribute type 1 has an invalid length. [ 1840.983650][T20689] netlink: 'syz.7.4480': attribute type 2 has an invalid length. [ 1841.086124][T20691] netlink: 'syz.5.4481': attribute type 29 has an invalid length. [ 1841.183417][ T3444] hsr_slave_0: left promiscuous mode [ 1841.233502][ T3444] hsr_slave_1: left promiscuous mode [ 1841.241414][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1841.249309][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1841.311407][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1841.319361][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1841.366332][ T29] audit: type=1804 audit(1739888154.876:73): pid=20694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4482" name="/newroot/148/bus/bus" dev="overlay" ino=840 res=1 errno=0 [ 1841.462741][ T3444] veth1_macvtap: left promiscuous mode [ 1841.468594][ T3444] veth0_macvtap: left promiscuous mode [ 1841.475019][ T3444] veth1_vlan: left promiscuous mode [ 1841.480722][ T3444] veth0_vlan: left promiscuous mode [ 1842.451810][ T3444] team0 (unregistering): Port device team_slave_1 removed [ 1842.562623][ T3444] team0 (unregistering): Port device team_slave_0 removed [ 1842.813891][T20702] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1842.901499][T19883] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1842.937832][T20691] netlink: 'syz.5.4481': attribute type 29 has an invalid length. [ 1843.133833][ T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1843.171509][T19883] usb 7-1: config 0 has an invalid interface number: 39 but max is 0 [ 1843.180335][T19883] usb 7-1: config 0 has no interface number 0 [ 1843.186931][T19883] usb 7-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1843.333332][T19883] usb 7-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1843.344442][T19883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.353500][T19883] usb 7-1: Product: syz [ 1843.357895][T19883] usb 7-1: Manufacturer: syz [ 1843.362808][T19883] usb 7-1: SerialNumber: syz [ 1843.427597][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.440560][ T25] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1843.451118][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.546070][T19883] usb 7-1: config 0 descriptor?? [ 1843.577887][ T25] usb 4-1: config 0 descriptor?? [ 1843.916157][T20569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1844.024893][ T25] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 1844.129009][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000C/input/input77 [ 1844.166199][T20569] 8021q: adding VLAN 0 to HW filter on device team0 [ 1844.231448][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.239422][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1844.252310][T15912] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1844.320848][T19883] usb 7-1: USB disconnect, device number 17 [ 1844.348112][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.355869][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1844.482809][T20709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.599115][T15912] usb 6-1: config 0 has no interfaces? [ 1844.613378][T20709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.644509][ T25] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1844.693723][T15912] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1844.703282][T15912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.712236][T15912] usb 6-1: Product: syz [ 1844.716624][T15912] usb 6-1: Manufacturer: syz [ 1844.721544][T15912] usb 6-1: SerialNumber: syz [ 1844.801633][T20709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.812180][T20709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.024398][T15912] usb 6-1: config 0 descriptor?? [ 1845.033566][T15757] udevd[15757]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1845.137274][T20709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.160057][T20709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.329326][T15912] usb 6-1: USB disconnect, device number 5 [ 1845.368342][T20709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.378461][T20709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1846.076606][ T25] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1846.240356][T20731] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4493'. [ 1846.249825][T20731] netlink: 'syz.7.4493': attribute type 1 has an invalid length. [ 1846.258010][T20731] netlink: 'syz.7.4493': attribute type 2 has an invalid length. [ 1846.322566][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 1846.361635][ T25] usb 7-1: config 6 has an invalid interface number: 51 but max is 1 [ 1846.370319][ T25] usb 7-1: config 6 has no interface number 1 [ 1846.377281][ T25] usb 7-1: config 6 interface 0 has no altsetting 0 [ 1846.384363][ T25] usb 7-1: config 6 interface 51 has no altsetting 0 [ 1846.505853][ T25] usb 7-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1846.518039][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.527163][ T25] usb 7-1: Product: syz [ 1846.531827][ T25] usb 7-1: Manufacturer: syz [ 1846.536818][ T25] usb 7-1: SerialNumber: syz [ 1846.965198][T20726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1846.975276][T20726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.115558][T20726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.133056][T20726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.475029][ T25] xr_serial 7-1:6.51: xr_serial converter detected [ 1847.511475][ T25] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1847.518446][ T25] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1847.599451][ T25] usb 7-1: USB disconnect, device number 18 [ 1847.611584][ T25] xr_serial 7-1:6.0: device disconnected [ 1847.653560][T15912] usb 4-1: USB disconnect, device number 33 [ 1847.744855][ T29] audit: type=1804 audit(1739888161.266:74): pid=20740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4495" name="/newroot/54/bus/bus" dev="overlay" ino=317 res=1 errno=0 [ 1847.833881][T20569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1848.515825][T20569] veth0_vlan: entered promiscuous mode [ 1848.657516][T20569] veth1_vlan: entered promiscuous mode [ 1848.927675][T20752] netlink: 'syz.6.4499': attribute type 29 has an invalid length. [ 1848.995302][T20754] netlink: 'syz.6.4499': attribute type 29 has an invalid length. [ 1849.022012][ T25] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1849.075725][T20569] veth0_macvtap: entered promiscuous mode [ 1849.119192][T20569] veth1_macvtap: entered promiscuous mode [ 1849.277776][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1849.289383][ T25] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1849.372032][T20569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1849.385224][T20569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.396128][T20569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1849.406947][T20569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.417070][T20569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1849.427777][T20569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.437982][T20569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1849.448751][T20569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.463882][T20569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1849.592819][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1849.598088][T15912] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1849.603333][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.621234][ T25] usb 8-1: Product: syz [ 1849.625636][ T25] usb 8-1: Manufacturer: syz [ 1849.634027][ T25] usb 8-1: SerialNumber: syz [ 1849.695607][T20757] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1849.851883][T20569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1849.863140][T20569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.873544][T20569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1849.884413][T20569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.896690][T20569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1849.908053][T20569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.918336][T20569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1849.929207][T20569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.945874][T20569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1849.982643][T20749] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1850.009772][T20761] fuse: Unknown parameter 'grou00000000000000000000' [ 1850.017246][T15912] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 1850.017376][T15912] usb 4-1: config 0 has no interface number 0 [ 1850.017495][T15912] usb 4-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1850.116580][T15912] usb 4-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1850.126422][T15912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.134929][T15912] usb 4-1: Product: syz [ 1850.139364][T15912] usb 4-1: Manufacturer: syz [ 1850.144503][T15912] usb 4-1: SerialNumber: syz [ 1850.180340][T20569] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1850.189732][T20569] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1850.205419][T20569] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1850.216350][T20569] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1850.282518][T15912] usb 4-1: config 0 descriptor?? [ 1850.614262][T20749] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1850.681359][T19001] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1850.868744][ T25] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1850.875943][ T25] cdc_ncm 8-1:1.0: setting rx_max = 16384 [ 1850.972305][T19001] usb 7-1: config 0 has no interfaces? [ 1851.023724][T15912] usb 4-1: USB disconnect, device number 34 [ 1851.052530][T19001] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1851.062759][T19001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.072438][T19001] usb 7-1: Product: syz [ 1851.076836][T19001] usb 7-1: Manufacturer: syz [ 1851.082856][T19001] usb 7-1: SerialNumber: syz [ 1851.121931][ T25] cdc_ncm 8-1:1.0: setting tx_max = 184 [ 1851.158862][ T25] cdc_ncm 8-1:1.0 eth13: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1851.272117][T19001] usb 7-1: config 0 descriptor?? [ 1851.350171][T15757] udevd[15757]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1851.371916][ T25] usb 8-1: USB disconnect, device number 14 [ 1851.379570][ T25] cdc_ncm 8-1:1.0 eth13: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 1851.398675][T20768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4504'. [ 1851.502634][T20768] netlink: 'syz.5.4504': attribute type 1 has an invalid length. [ 1851.510845][T20768] netlink: 'syz.5.4504': attribute type 2 has an invalid length. [ 1851.649053][T19001] usb 7-1: USB disconnect, device number 19 [ 1852.742804][T19001] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1852.969738][T19001] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1852.981285][T19001] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1852.990948][T19001] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.116717][T19001] usb 8-1: config 0 descriptor?? [ 1853.241045][ T25] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1853.441294][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 1853.489066][ T25] usb 7-1: config 6 has an invalid interface number: 51 but max is 1 [ 1853.498834][ T25] usb 7-1: config 6 has no interface number 1 [ 1853.505553][ T25] usb 7-1: config 6 interface 0 has no altsetting 0 [ 1853.512497][ T25] usb 7-1: config 6 interface 51 has no altsetting 0 [ 1853.570895][T19001] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 1853.643260][ T25] usb 7-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1853.653841][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.662627][ T25] usb 7-1: Product: syz [ 1853.667000][ T25] usb 7-1: Manufacturer: syz [ 1853.671897][ T25] usb 7-1: SerialNumber: syz [ 1853.729440][T19001] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.000D/input/input78 [ 1854.002472][T20780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.012618][T20780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.026514][T20788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.026624][T19001] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 1854.036906][T20788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.196758][T20788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.209812][T20788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.235785][T20780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.246532][T20780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.476847][ T25] xr_serial 7-1:6.51: xr_serial converter detected [ 1854.596452][ T25] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1854.606970][ T25] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1854.625372][T20780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.635691][T20780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.685681][T20802] netlink: 'syz.5.4512': attribute type 29 has an invalid length. [ 1854.713065][ T25] usb 7-1: USB disconnect, device number 20 [ 1854.722943][ T25] xr_serial 7-1:6.0: device disconnected [ 1854.802098][T20802] netlink: 'syz.5.4512': attribute type 29 has an invalid length. [ 1854.904493][T20780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.915868][T20780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1856.390188][T20821] netlink: 'syz.3.4516': attribute type 1 has an invalid length. [ 1856.398844][T20821] netlink: 'syz.3.4516': attribute type 2 has an invalid length. [ 1856.414354][T19001] usb 8-1: USB disconnect, device number 15 [ 1856.446327][ T25] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1856.679752][ T25] usb 6-1: config 0 has an invalid interface number: 39 but max is 0 [ 1856.688402][ T25] usb 6-1: config 0 has no interface number 0 [ 1856.695049][ T25] usb 6-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1856.706262][T20816] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1856.836759][ T25] usb 6-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1856.846721][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.856589][ T25] usb 6-1: Product: syz [ 1856.861565][ T25] usb 6-1: Manufacturer: syz [ 1856.866376][ T25] usb 6-1: SerialNumber: syz [ 1856.963526][ T25] usb 6-1: config 0 descriptor?? [ 1857.401492][T19001] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1857.655014][T19001] usb 7-1: config 0 has no interfaces? [ 1857.696552][T19001] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1857.706168][T19001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.714701][T19001] usb 7-1: Product: syz [ 1857.719081][T19001] usb 7-1: Manufacturer: syz [ 1857.724097][T19001] usb 7-1: SerialNumber: syz [ 1857.833814][ T25] usb 6-1: USB disconnect, device number 6 [ 1857.859400][T19001] usb 7-1: config 0 descriptor?? [ 1858.094072][T15761] udevd[15761]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1858.160465][T15912] usb 7-1: USB disconnect, device number 21 [ 1858.301522][T19001] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1858.521012][T19001] usb 8-1: Using ep0 maxpacket: 8 [ 1858.562876][T19001] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1858.575815][T19001] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1858.586325][T19001] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1858.601260][T19001] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1858.616403][T19001] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1858.625935][T19001] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.087334][T19001] usb 8-1: usb_control_msg returned -32 [ 1859.093738][T19001] usbtmc 8-1:16.0: can't read capabilities [ 1859.301798][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.314494][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.455909][T20848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.466210][T20848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.569480][T20848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.582122][T20848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.621813][T18334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.629868][T18334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.882643][ T25] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1860.073384][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 1860.102159][ T25] usb 7-1: config 6 has an invalid interface number: 51 but max is 1 [ 1860.110751][ T25] usb 7-1: config 6 has no interface number 1 [ 1860.117076][ T25] usb 7-1: config 6 interface 0 has no altsetting 0 [ 1860.124059][ T25] usb 7-1: config 6 interface 51 has no altsetting 0 [ 1860.252461][T20856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1860.262259][T20856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1860.286543][ T25] usb 7-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1860.295947][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.304336][ T25] usb 7-1: Product: syz [ 1860.308731][ T25] usb 7-1: Manufacturer: syz [ 1860.313676][ T25] usb 7-1: SerialNumber: syz [ 1860.641117][T20847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1860.654911][T20847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1860.859566][T20862] netlink: 'syz.3.4527': attribute type 1 has an invalid length. [ 1860.868008][T20862] netlink: 'syz.3.4527': attribute type 2 has an invalid length. [ 1860.884558][ T25] xr_serial 7-1:6.51: xr_serial converter detected [ 1860.938070][ T25] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1860.945173][ T25] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1861.046187][ T25] usb 7-1: USB disconnect, device number 22 [ 1861.058111][ T25] xr_serial 7-1:6.0: device disconnected [ 1861.660533][T19001] usb 8-1: USB disconnect, device number 16 [ 1861.682712][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1861.904166][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1861.915706][ T25] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1861.925146][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.073395][ T25] usb 6-1: config 0 descriptor?? [ 1862.525881][ T25] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 1862.531518][T19001] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1862.571533][T20877] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1862.597488][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000E/input/input79 [ 1862.735983][T20869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.786041][T19001] usb 7-1: config 0 has an invalid interface number: 39 but max is 0 [ 1862.802254][T19001] usb 7-1: config 0 has no interface number 0 [ 1862.808577][T19001] usb 7-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1862.822096][T20869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.891457][T20247] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1862.932600][T20869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.943934][ T25] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1862.981165][T19001] usb 7-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1862.990911][T19001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.004492][T19001] usb 7-1: Product: syz [ 1863.008886][T19001] usb 7-1: Manufacturer: syz [ 1863.015808][T19001] usb 7-1: SerialNumber: syz [ 1863.064344][T20869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1863.096135][T19001] usb 7-1: config 0 descriptor?? [ 1863.171062][T20247] usb 4-1: config 0 has no interfaces? [ 1863.215777][T20247] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1863.225654][T20247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.234600][T20247] usb 4-1: Product: syz [ 1863.239167][T20247] usb 4-1: Manufacturer: syz [ 1863.245090][T20247] usb 4-1: SerialNumber: syz [ 1863.402383][T20869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1863.414961][T20869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1863.441259][T20247] usb 4-1: config 0 descriptor?? [ 1863.537607][T20869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1863.548227][T20869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1863.783816][T20247] usb 4-1: USB disconnect, device number 35 [ 1864.042581][T19001] usb 7-1: USB disconnect, device number 23 [ 1864.688116][T15757] udevd[15757]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1865.931494][T20247] usb 6-1: USB disconnect, device number 7 [ 1866.494755][T20910] netlink: 'syz.1.4539': attribute type 1 has an invalid length. [ 1866.502894][T20910] netlink: 'syz.1.4539': attribute type 2 has an invalid length. [ 1866.871145][T19001] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1866.980981][T20273] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1867.102476][T19001] usb 6-1: Using ep0 maxpacket: 8 [ 1867.141607][T19001] usb 6-1: config 6 has an invalid interface number: 51 but max is 1 [ 1867.150141][T19001] usb 6-1: config 6 has no interface number 1 [ 1867.157095][T19001] usb 6-1: config 6 interface 0 has no altsetting 0 [ 1867.164304][T19001] usb 6-1: config 6 interface 51 has no altsetting 0 [ 1867.222858][T20273] usb 8-1: Using ep0 maxpacket: 8 [ 1867.291114][T20273] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1867.306071][T20273] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1867.317503][T20273] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1867.327657][T20273] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1867.340909][T20273] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1867.350086][T20273] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.406892][T19001] usb 6-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1867.416192][T19001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.424448][T19001] usb 6-1: Product: syz [ 1867.428721][T19001] usb 6-1: Manufacturer: syz [ 1867.433676][T19001] usb 6-1: SerialNumber: syz [ 1867.738445][T20913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1867.748151][T20913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1867.851961][T20273] usb 8-1: usb_control_msg returned -32 [ 1867.858112][T20273] usbtmc 8-1:16.0: can't read capabilities [ 1867.989229][T19001] xr_serial 6-1:6.51: xr_serial converter detected [ 1868.075857][T19001] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1868.083122][T19001] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1868.204734][T19001] usb 6-1: USB disconnect, device number 8 [ 1868.213884][T19001] xr_serial 6-1:6.0: device disconnected [ 1868.258479][T20925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.269993][T20925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.385654][T20925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.396096][T20925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.081183][T20931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1869.091259][T20931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.259218][T20940] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1870.291302][T19001] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1870.559448][T19001] usb 7-1: config 0 has an invalid interface number: 39 but max is 0 [ 1870.568736][T19001] usb 7-1: config 0 has no interface number 0 [ 1870.581895][T19001] usb 7-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1870.655978][T20273] usb 8-1: USB disconnect, device number 17 [ 1870.723835][T19001] usb 7-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1870.734401][T19001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.743862][T19001] usb 7-1: Product: syz [ 1870.749631][T19001] usb 7-1: Manufacturer: syz [ 1870.755090][T19001] usb 7-1: SerialNumber: syz [ 1870.848529][T19001] usb 7-1: config 0 descriptor?? [ 1871.482059][ T29] audit: type=1804 audit(1739888185.006:75): pid=20951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4549" name="/newroot/63/bus/bus" dev="overlay" ino=372 res=1 errno=0 [ 1871.731168][T19001] usb 7-1: USB disconnect, device number 24 [ 1871.764125][T15749] udevd[15749]: setting mode of /dev/bus/usb/007/024 to 020664 failed: No such file or directory [ 1871.847703][T15749] udevd[15749]: setting owner of /dev/bus/usb/007/024 to uid=0, gid=0 failed: No such file or directory [ 1872.135761][T15761] udevd[15761]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1873.641199][T20965] netlink: 'syz.6.4553': attribute type 1 has an invalid length. [ 1873.656314][T20965] netlink: 'syz.6.4553': attribute type 2 has an invalid length. [ 1875.259279][T19001] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1875.471874][T19001] usb 6-1: Using ep0 maxpacket: 8 [ 1875.546746][T19001] usb 6-1: config 6 has an invalid interface number: 51 but max is 1 [ 1875.559181][T19001] usb 6-1: config 6 has no interface number 1 [ 1875.566066][T19001] usb 6-1: config 6 interface 0 has no altsetting 0 [ 1875.572925][T19001] usb 6-1: config 6 interface 51 has no altsetting 0 [ 1875.611848][T20273] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1875.668163][T19001] usb 6-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1875.678236][T19001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.686837][T19001] usb 6-1: Product: syz [ 1875.691216][T19001] usb 6-1: Manufacturer: syz [ 1875.699604][T19001] usb 6-1: SerialNumber: syz [ 1875.791444][T20273] usb 7-1: Using ep0 maxpacket: 8 [ 1875.818726][T20273] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1875.830449][T20273] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1875.840911][T20273] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1875.851194][T20273] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1875.864535][T20273] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1875.873927][T20273] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.004262][T20980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.014913][T20980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1876.148974][T20273] usb 7-1: usb_control_msg returned -32 [ 1876.154925][T20273] usbtmc 7-1:16.0: can't read capabilities [ 1876.186035][T19001] xr_serial 6-1:6.51: xr_serial converter detected [ 1876.281785][T19001] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1876.288440][T19001] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1876.426719][T19001] usb 6-1: USB disconnect, device number 9 [ 1876.435518][T19001] xr_serial 6-1:6.0: device disconnected [ 1876.504660][T20994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.518909][T20994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1876.663921][T20994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.673880][T20994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.484406][T20997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.494316][T20997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.626196][T20999] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1877.711307][T19001] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 1877.963980][T19001] usb 8-1: config 0 has an invalid interface number: 39 but max is 0 [ 1877.972829][T19001] usb 8-1: config 0 has no interface number 0 [ 1877.979252][T19001] usb 8-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1878.059530][T19001] usb 8-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1878.069528][T19001] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.078060][T19001] usb 8-1: Product: syz [ 1878.082457][T19001] usb 8-1: Manufacturer: syz [ 1878.087177][T19001] usb 8-1: SerialNumber: syz [ 1878.171989][T19001] usb 8-1: config 0 descriptor?? [ 1879.035483][T19001] usb 8-1: USB disconnect, device number 18 [ 1879.067863][T20247] usb 7-1: USB disconnect, device number 25 [ 1879.475708][ T29] audit: type=1804 audit(1739888192.996:76): pid=21013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4565" name="/newroot/7/file0" dev="tmpfs" ino=61 res=1 errno=0 [ 1879.669500][T15761] udevd[15761]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1879.770126][T21020] netlink: 'syz.5.4566': attribute type 1 has an invalid length. [ 1879.779632][T21020] netlink: 'syz.5.4566': attribute type 2 has an invalid length. [ 1880.362265][ T29] audit: type=1804 audit(1739888193.876:77): pid=21013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4565" name="/newroot/7/file0" dev="tmpfs" ino=61 res=1 errno=0 [ 1880.471906][T21013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4565'. [ 1881.945693][T20247] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1882.173184][T20247] usb 8-1: Using ep0 maxpacket: 8 [ 1882.199659][T20247] usb 8-1: config 6 has an invalid interface number: 51 but max is 1 [ 1882.208295][T20247] usb 8-1: config 6 has no interface number 1 [ 1882.214783][T20247] usb 8-1: config 6 interface 0 has no altsetting 0 [ 1882.221775][T20247] usb 8-1: config 6 interface 51 has no altsetting 0 [ 1882.240368][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1882.266318][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1882.278206][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1882.297149][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1882.310456][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1882.321338][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1882.446561][T20247] usb 8-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1882.458394][T20247] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.467582][T20247] usb 8-1: Product: syz [ 1882.472067][T20247] usb 8-1: Manufacturer: syz [ 1882.476900][T20247] usb 8-1: SerialNumber: syz [ 1882.805999][T21034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1882.816625][T21034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1882.905396][T21034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1882.927944][T21034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1883.208530][T20247] xr_serial 8-1:6.51: xr_serial converter detected [ 1883.260331][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1883.267088][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1883.330925][T20247] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1883.337829][T20247] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1883.601061][T20247] usb 8-1: USB disconnect, device number 19 [ 1883.609691][T20247] xr_serial 8-1:6.0: device disconnected [ 1884.134557][T21053] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4577'. [ 1884.144046][T21053] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4577'. [ 1884.431586][T15423] Bluetooth: hci3: command tx timeout [ 1884.843787][T21041] chnl_net:caif_netlink_parms(): no params data found [ 1885.090281][T21059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4578'. [ 1885.410785][T21066] netlink: 'syz.5.4580': attribute type 1 has an invalid length. [ 1885.419062][T21066] netlink: 'syz.5.4580': attribute type 2 has an invalid length. [ 1886.511255][T15423] Bluetooth: hci3: command tx timeout [ 1886.997085][T21041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.005661][T21041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.014848][T21041] bridge_slave_0: entered allmulticast mode [ 1887.024233][T21041] bridge_slave_0: entered promiscuous mode [ 1887.193771][T21041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1887.203107][T21041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.211197][T21041] bridge_slave_1: entered allmulticast mode [ 1887.220400][T21041] bridge_slave_1: entered promiscuous mode [ 1887.681440][T21041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1887.771914][T21041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1888.194304][T19001] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1888.283367][T21041] team0: Port device team_slave_0 added [ 1888.378266][T21041] team0: Port device team_slave_1 added [ 1888.400065][T19001] usb 8-1: Using ep0 maxpacket: 8 [ 1888.501145][T19001] usb 8-1: config 6 has an invalid interface number: 51 but max is 1 [ 1888.509657][T19001] usb 8-1: config 6 has no interface number 1 [ 1888.517117][T19001] usb 8-1: config 6 interface 0 has no altsetting 0 [ 1888.524408][T19001] usb 8-1: config 6 interface 51 has no altsetting 0 [ 1888.594983][T15423] Bluetooth: hci3: command tx timeout [ 1888.691951][T19001] usb 8-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1888.704899][T19001] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.714794][T19001] usb 8-1: Product: syz [ 1888.719086][T19001] usb 8-1: Manufacturer: syz [ 1888.724145][T19001] usb 8-1: SerialNumber: syz [ 1888.798908][T21041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1888.811087][T21041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1888.838980][T21041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1889.133160][T21041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1889.140374][T21041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1889.167060][T21041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1889.208015][T21093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.223639][T21093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.229410][T21102] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4591'. [ 1889.333474][T21093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.343539][T21093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.582619][T19001] xr_serial 8-1:6.51: xr_serial converter detected [ 1889.662649][T19001] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1889.669380][T19001] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1889.763196][T21110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4593'. [ 1889.821958][T19001] usb 8-1: USB disconnect, device number 20 [ 1889.835613][T19001] xr_serial 8-1:6.0: device disconnected [ 1889.888355][T21041] hsr_slave_0: entered promiscuous mode [ 1889.898519][T21041] hsr_slave_1: entered promiscuous mode [ 1890.673962][T15423] Bluetooth: hci3: command tx timeout [ 1890.770835][T20247] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1891.016278][T20247] usb 7-1: Using ep0 maxpacket: 32 [ 1891.153271][T20247] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1891.164976][T20247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.256828][T20247] usb 7-1: config 0 descriptor?? [ 1891.510530][T21114] netlink: 'syz.6.4594': attribute type 24 has an invalid length. [ 1891.624001][T20247] usbhid 7-1:0.0: can't add hid device: -71 [ 1891.631413][T20247] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1891.748413][T20247] usb 7-1: USB disconnect, device number 26 [ 1893.969386][T21041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1894.103925][T21041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1894.192671][T21041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1894.248929][T21141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4604'. [ 1894.356099][T21041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1894.561286][T19001] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1894.728493][T21145] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4603'. [ 1894.728504][ T3469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1894.781162][T19001] usb 8-1: Using ep0 maxpacket: 8 [ 1894.842734][T19001] usb 8-1: config 6 has an invalid interface number: 51 but max is 1 [ 1894.858427][T19001] usb 8-1: config 6 has no interface number 1 [ 1894.864918][T19001] usb 8-1: config 6 interface 0 has no altsetting 0 [ 1894.871885][T19001] usb 8-1: config 6 interface 51 has no altsetting 0 [ 1894.928071][ T3469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.016585][T19001] usb 8-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1895.026118][T19001] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.034605][T19001] usb 8-1: Product: syz [ 1895.038993][T19001] usb 8-1: Manufacturer: syz [ 1895.044010][T19001] usb 8-1: SerialNumber: syz [ 1895.143260][ T3469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.352860][T21142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1895.368361][T21142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1895.389115][ T3469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.566758][T21142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1895.576792][T21142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1895.843292][T19001] xr_serial 8-1:6.51: xr_serial converter detected [ 1895.930226][T19001] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1895.937358][T19001] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1896.042295][T19001] usb 8-1: USB disconnect, device number 21 [ 1896.053298][T19001] xr_serial 8-1:6.0: device disconnected [ 1896.149970][ T3469] bridge_slave_1: left allmulticast mode [ 1896.156618][ T3469] bridge_slave_1: left promiscuous mode [ 1896.164113][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.296466][ T3469] bridge_slave_0: left allmulticast mode [ 1896.302657][ T3469] bridge_slave_0: left promiscuous mode [ 1896.309318][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.087377][ T3469] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1897.232013][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1897.283518][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1897.323386][ T3469] bond0 (unregistering): Released all slaves [ 1897.343965][ T3469] bond1 (unregistering): Released all slaves [ 1897.445213][ T3469] bond2 (unregistering): Released all slaves [ 1897.798188][T21041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1898.265153][ T3469] hsr_slave_0: left promiscuous mode [ 1898.281999][ T3469] hsr_slave_1: left promiscuous mode [ 1898.289562][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1898.297779][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1898.333231][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1898.341337][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1898.401285][ T3469] veth1_macvtap: left promiscuous mode [ 1898.407158][ T3469] veth0_macvtap: left promiscuous mode [ 1898.415964][ T3469] veth1_vlan: left promiscuous mode [ 1898.421603][ T3469] veth0_vlan: left promiscuous mode [ 1899.062937][T21185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4616'. [ 1899.915459][ T3469] team0 (unregistering): Port device team_slave_1 removed [ 1899.939121][ T3469] team0 (unregistering): Port device team_slave_0 removed [ 1900.303978][T21041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1900.324971][T21193] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4619'. [ 1900.459751][T15779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1900.467700][T15779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1900.627561][T15779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1900.635328][T15779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1900.977084][T21041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1901.481231][T19001] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1901.701955][T19001] usb 6-1: Using ep0 maxpacket: 8 [ 1901.752315][T19001] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 1901.761349][T19001] usb 6-1: config 2 has no interface number 0 [ 1901.767679][T19001] usb 6-1: config 2 interface 31 has no altsetting 0 [ 1901.860344][T19001] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1901.869964][T19001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.878496][T19001] usb 6-1: Product: syz [ 1901.883003][T19001] usb 6-1: Manufacturer: syz [ 1901.887843][T19001] usb 6-1: SerialNumber: syz [ 1902.234101][T21198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.244543][T21198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.651019][T19001] ===================================================== [ 1902.658279][T19001] BUG: KMSAN: uninit-value in mii_nway_restart+0x119/0x1e0 [ 1902.665857][T19001] mii_nway_restart+0x119/0x1e0 [ 1902.671076][T19001] ch9200_bind+0x238/0xeb0 [ 1902.675664][T19001] usbnet_probe+0xdb0/0x3eb0 [ 1902.680469][T19001] usb_probe_interface+0xd33/0x12e0 [ 1902.686051][T19001] really_probe+0x4dc/0xd90 [ 1902.690908][T19001] __driver_probe_device+0x2ab/0x5d0 [ 1902.696429][T19001] driver_probe_device+0x72/0x890 [ 1902.701878][T19001] __device_attach_driver+0x568/0x9e0 [ 1902.707439][T19001] bus_for_each_drv+0x403/0x620 [ 1902.712615][T19001] __device_attach+0x3c1/0x650 [ 1902.717609][T19001] device_initial_probe+0x32/0x40 [ 1902.723049][T19001] bus_probe_device+0x3dc/0x5c0 [ 1902.735294][T19001] device_add+0x13aa/0x1ba0 [ 1902.740016][T19001] usb_set_configuration+0x31c9/0x38d0 [ 1902.747936][T19001] usb_generic_driver_probe+0x109/0x2a0 [ 1902.754028][T19001] usb_probe_device+0x3a7/0x690 [ 1902.759104][T19001] really_probe+0x4dc/0xd90 [ 1902.764029][T19001] __driver_probe_device+0x2ab/0x5d0 [ 1902.769544][T19001] driver_probe_device+0x72/0x890 [ 1902.774856][T19001] __device_attach_driver+0x568/0x9e0 [ 1902.780404][T19001] bus_for_each_drv+0x403/0x620 [ 1902.785657][T19001] __device_attach+0x3c1/0x650 [ 1902.791711][T19001] device_initial_probe+0x32/0x40 [ 1902.796968][T19001] bus_probe_device+0x3dc/0x5c0 [ 1902.802898][T19001] device_add+0x13aa/0x1ba0 [ 1902.807603][T19001] usb_new_device+0x15f0/0x2470 [ 1902.812766][T19001] hub_event+0x4ffb/0x72d0 [ 1902.817398][T19001] process_scheduled_works+0xc1a/0x1e80 [ 1902.823275][T19001] worker_thread+0xea7/0x14f0 [ 1902.828111][T19001] kthread+0x6b9/0xef0 [ 1902.840440][T19001] ret_from_fork+0x6d/0x90 [ 1902.847012][T19001] ret_from_fork_asm+0x1a/0x30 [ 1902.852089][T19001] [ 1902.854512][T19001] Local variable buff created at: [ 1902.859642][T19001] ch9200_mdio_read+0x3c/0x100 [ 1902.864725][T19001] mii_nway_restart+0x8a/0x1e0 [ 1902.869665][T19001] [ 1902.872212][T19001] CPU: 0 UID: 0 PID: 19001 Comm: kworker/0:0 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 1902.883384][T19001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1902.893844][T19001] Workqueue: usb_hub_wq hub_event [ 1902.899094][T19001] ===================================================== [ 1902.906242][T19001] Disabling lock debugging due to kernel taint [ 1902.912610][T19001] Kernel panic - not syncing: kmsan.panic set ... [ 1902.919159][T19001] CPU: 0 UID: 0 PID: 19001 Comm: kworker/0:0 Tainted: G B 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 1902.931686][T19001] Tainted: [B]=BAD_PAGE [ 1902.935942][T19001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1902.946147][T19001] Workqueue: usb_hub_wq hub_event [ 1902.951397][T19001] Call Trace: [ 1902.954782][T19001] [ 1902.957822][T19001] dump_stack_lvl+0x216/0x2d0 [ 1902.962660][T19001] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1902.968681][T19001] dump_stack+0x1e/0x24 [ 1902.972989][T19001] panic+0x4e2/0xcf0 [ 1902.977087][T19001] ? kmsan_get_metadata+0xb1/0x1c0 [ 1902.982409][T19001] kmsan_report+0x2c7/0x2d0 [ 1902.987093][T19001] ? __device_attach+0x3c1/0x650 [ 1902.992237][T19001] ? worker_thread+0xea7/0x14f0 [ 1902.997240][T19001] ? __switch_to_asm+0x50/0x60 [ 1903.002174][T19001] ? __msan_warning+0x95/0x120 [ 1903.007110][T19001] ? mii_nway_restart+0x119/0x1e0 [ 1903.012293][T19001] ? ch9200_bind+0x238/0xeb0 [ 1903.017036][T19001] ? usbnet_probe+0xdb0/0x3eb0 [ 1903.021994][T19001] ? usb_probe_interface+0xd33/0x12e0 [ 1903.027583][T19001] ? really_probe+0x4dc/0xd90 [ 1903.032408][T19001] ? __driver_probe_device+0x2ab/0x5d0 [ 1903.038077][T19001] ? driver_probe_device+0x72/0x890 [ 1903.043437][T19001] ? __device_attach_driver+0x568/0x9e0 [ 1903.049144][T19001] ? bus_for_each_drv+0x403/0x620 [ 1903.054351][T19001] ? __device_attach+0x3c1/0x650 [ 1903.059485][T19001] ? device_initial_probe+0x32/0x40 [ 1903.064883][T19001] ? bus_probe_device+0x3dc/0x5c0 [ 1903.070094][T19001] ? device_add+0x13aa/0x1ba0 [ 1903.074962][T19001] ? usb_set_configuration+0x31c9/0x38d0 [ 1903.080804][T19001] ? usb_generic_driver_probe+0x109/0x2a0 [ 1903.086718][T19001] ? usb_probe_device+0x3a7/0x690 [ 1903.091948][T19001] ? really_probe+0x4dc/0xd90 [ 1903.096775][T19001] ? __driver_probe_device+0x2ab/0x5d0 [ 1903.102448][T19001] ? driver_probe_device+0x72/0x890 [ 1903.107817][T19001] ? __device_attach_driver+0x568/0x9e0 [ 1903.113519][T19001] ? bus_for_each_drv+0x403/0x620 [ 1903.118715][T19001] ? __device_attach+0x3c1/0x650 [ 1903.123855][T19001] ? device_initial_probe+0x32/0x40 [ 1903.129253][T19001] ? bus_probe_device+0x3dc/0x5c0 [ 1903.134450][T19001] ? device_add+0x13aa/0x1ba0 [ 1903.139313][T19001] ? usb_new_device+0x15f0/0x2470 [ 1903.144518][T19001] ? hub_event+0x4ffb/0x72d0 [ 1903.149298][T19001] ? process_scheduled_works+0xc1a/0x1e80 [ 1903.155227][T19001] ? worker_thread+0xea7/0x14f0 [ 1903.160229][T19001] ? kthread+0x6b9/0xef0 [ 1903.164633][T19001] ? ret_from_fork+0x6d/0x90 [ 1903.169397][T19001] ? ret_from_fork_asm+0x1a/0x30 [ 1903.174500][T19001] ? control_read+0x25b/0x2d0 [ 1903.179352][T19001] ? kmsan_get_metadata+0x13e/0x1c0 [ 1903.184748][T19001] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1903.190766][T19001] __msan_warning+0x95/0x120 [ 1903.195538][T19001] mii_nway_restart+0x119/0x1e0 [ 1903.200559][T19001] ch9200_bind+0x238/0xeb0 [ 1903.205137][T19001] ? __pfx_ch9200_bind+0x10/0x10 [ 1903.210224][T19001] usbnet_probe+0xdb0/0x3eb0 [ 1903.215011][T19001] ? pm_runtime_enable+0x3bb/0x3f0 [ 1903.220334][T19001] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1903.226383][T19001] ? __pfx_usbnet_probe+0x10/0x10 [ 1903.231610][T19001] usb_probe_interface+0xd33/0x12e0 [ 1903.237040][T19001] ? __pfx_usb_probe_interface+0x10/0x10 [ 1903.242887][T19001] really_probe+0x4dc/0xd90 [ 1903.247544][T19001] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1903.253562][T19001] __driver_probe_device+0x2ab/0x5d0 [ 1903.259068][T19001] driver_probe_device+0x72/0x890 [ 1903.264252][T19001] ? kmsan_get_metadata+0x13e/0x1c0 [ 1903.269643][T19001] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1903.275663][T19001] __device_attach_driver+0x568/0x9e0 [ 1903.281212][T19001] bus_for_each_drv+0x403/0x620 [ 1903.286238][T19001] ? __pfx___device_attach_driver+0x10/0x10 [ 1903.292315][T19001] __device_attach+0x3c1/0x650 [ 1903.297305][T19001] device_initial_probe+0x32/0x40 [ 1903.302633][T19001] bus_probe_device+0x3dc/0x5c0 [ 1903.307684][T19001] device_add+0x13aa/0x1ba0 [ 1903.312423][T19001] usb_set_configuration+0x31c9/0x38d0 [ 1903.318095][T19001] ? usb_set_configuration+0x931/0x38d0 [ 1903.323885][T19001] usb_generic_driver_probe+0x109/0x2a0 [ 1903.329622][T19001] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1903.335635][T19001] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1903.341901][T19001] usb_probe_device+0x3a7/0x690 [ 1903.346965][T19001] ? __pfx_usb_probe_device+0x10/0x10 [ 1903.352543][T19001] really_probe+0x4dc/0xd90 [ 1903.357199][T19001] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1903.363212][T19001] __driver_probe_device+0x2ab/0x5d0 [ 1903.368722][T19001] driver_probe_device+0x72/0x890 [ 1903.373906][T19001] ? kmsan_get_metadata+0x13e/0x1c0 [ 1903.379300][T19001] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1903.385315][T19001] __device_attach_driver+0x568/0x9e0 [ 1903.390860][T19001] bus_for_each_drv+0x403/0x620 [ 1903.395884][T19001] ? __pfx___device_attach_driver+0x10/0x10 [ 1903.401953][T19001] __device_attach+0x3c1/0x650 [ 1903.406935][T19001] device_initial_probe+0x32/0x40 [ 1903.412162][T19001] bus_probe_device+0x3dc/0x5c0 [ 1903.417195][T19001] device_add+0x13aa/0x1ba0 [ 1903.421904][T19001] usb_new_device+0x15f0/0x2470 [ 1903.426957][T19001] hub_event+0x4ffb/0x72d0 [ 1903.431624][T19001] ? __pfx_hub_event+0x10/0x10 [ 1903.436581][T19001] process_scheduled_works+0xc1a/0x1e80 [ 1903.442385][T19001] worker_thread+0xea7/0x14f0 [ 1903.447242][T19001] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1903.453297][T19001] kthread+0x6b9/0xef0 [ 1903.457533][T19001] ? __pfx_worker_thread+0x10/0x10 [ 1903.462822][T19001] ? __pfx_kthread+0x10/0x10 [ 1903.467577][T19001] ret_from_fork+0x6d/0x90 [ 1903.472186][T19001] ? __pfx_kthread+0x10/0x10 [ 1903.476950][T19001] ret_from_fork_asm+0x1a/0x30 [ 1903.481903][T19001] [ 1903.485286][T19001] Kernel Offset: disabled [ 1903.489681][T19001] Rebooting in 86400 seconds..