last executing test programs: 17m26.563391471s ago: executing program 32 (id=12): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c9"], 0x16) accept4(r0, 0x0, 0x0, 0x0) 17m22.491631347s ago: executing program 33 (id=16): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x106f, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000"], 0x48}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 17m13.874034668s ago: executing program 34 (id=24): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') pread64(r1, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) r2 = syz_open_dev$sg(0x0, 0x0, 0xa8741) ioctl$SG_IO(r2, 0x2285, 0x0) 16m59.268781626s ago: executing program 35 (id=40): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000000c0)=""/75, 0x4b) syz_emit_ethernet(0x2e4, 0x0, 0x0) r0 = fsopen(0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x7, 0x8, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000000)=""/109, &(0x7f00000001c0)=0x6d) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='sourceJ\x81T\xfa\xf7\xf9\x9c6\xa6O\xb2\x1e\xb4\xd4h\xe5E\xd6\x84\x85#\x9a1\xd82\x026[\xcd\az\"h#\t\x00\x00\x00\xd9\xf9;\x11\xce\xee\x1b2\x00e\x93\x05\x18\xab\x05+\xd8\x1aCL\xc6\xf2\xec\x87\x9d\xc9\x92\x1b\xdel\x19w\x15C\a\x9e\x11\xe7(F\xbeL~{#\b(\x8cTi\x1e\xcf=\xbc{\xd9\xb3\xdf\x0f G\xa6i-]+\xb8\xcf\r\xd0\xa8\xc4H^\xef\x9d\x8a^\x87u\xc8\xacy\xdb\xdb\x145\xfe\xb4\xc4=\xc3; \xf1{\x14Z\xfd\x19\x90\xf0\bL\x8bmb~Y^\xafL>\xac\x19u\x82\xdb\xf1\x90P\x89\x16\xea\xc1\x1fZ\xbf_\xe5\x8b\x94\x95\x97N\x879\x1f\x1c\x00'/198, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) 15m15.355059339s ago: executing program 36 (id=42): getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000180), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000080)=0x40, 0x4) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 15m7.929316944s ago: executing program 37 (id=117): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlink(0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x801) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 14m59.245785219s ago: executing program 38 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x3, 0x5, 0x2, 0x4380, 0xffffffffffffffff, 0xff57, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={0x0}}, 0x8081) read(0xffffffffffffffff, 0x0, 0x0) r4 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r6 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 11m45.001505209s ago: executing program 39 (id=488): r0 = syz_open_dev$midi(0x0, 0x2, 0x40c01) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x196fb6, 0x40000000, 0x10}) 11m32.726812976s ago: executing program 40 (id=520): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000d4a1ce4e9de42536000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbc, 0x80000000, 0x102f, 0x5, 0x1, 0x83, 0x1, 0x1, 0x7, 0xda, 0x200, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0xff, 0x7, 0xffffffffffffffff, 0x980, 0x900000001, 0x403, 0x0, 0x800000004, 0x101, 0x3, 0xd, 0x1, 0x2000000, 0x6, 0x9, 0x24, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x2, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1800000, 0x6, 0x82b, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffa, 0x1, 0x100000000000004, 0x2, 0x2b, 0x1, 0x7, 0x40, 0x80, 0x42843379, 0x1, 0x100000007, 0x200, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x400006, 0x0, 0x7, 0x4, 0x200, 0x6, 0x8, 0x0, 0x5, 0x96, 0x8, 0x401, 0x2, 0x0, 0x680000000000, 0x2, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0xffff, 0x9, 0x8, 0x10000001000, 0x0, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x4, 0x6, 0x6, 0x20000000004, 0x1, 0x7f, 0x3]}) socket$nl_route(0x10, 0x3, 0x0) 10m37.948824256s ago: executing program 41 (id=645): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x810c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 10m6.87922571s ago: executing program 42 (id=693): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="74617267657420503a383a31662e3100323c157e71e0af3709555ad966bf0ce8bc75f49ff42cbb85b77cd47e42ce9cbf"], 0x14) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 9m44.470353179s ago: executing program 43 (id=722): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_setup(0x648, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000080)=0x580000, 0x0, 0x4) socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0xe, 0x0, 0x7, 0x57bf5044, 0xb7d, 0xffffffffffffffff, 0xe1, 0x4000000000000000}, &(0x7f0000000240)={0x7d3a, 0x3, 0xb017, 0x3, 0x6, 0x7f, 0x8a8, 0x8}, &(0x7f0000000440)={0x2, 0x1, 0x2, 0x7, 0x5, 0xffffffffaea54327, 0x1, 0x2}, &(0x7f00000004c0)={r2, r3+60000000}, &(0x7f0000000540)={0x0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4) 9m35.724205598s ago: executing program 7 (id=752): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001280)={'filter\x00', 0x7, 0x2, 0x3e8, 0x0, 0x300, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @multicast1, @broadcast, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x3}}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x40, 0x10, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00', {}, {}, 0x0, 0x280}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0x18000, 0x4) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000240)={0x6, 0x0, r5}) syz_open_procfs(0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0xfffffffd, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x5) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x2f126000) 9m20.036904477s ago: executing program 44 (id=752): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001280)={'filter\x00', 0x7, 0x2, 0x3e8, 0x0, 0x300, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @multicast1, @broadcast, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x3}}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x40, 0x10, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00', {}, {}, 0x0, 0x280}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0x18000, 0x4) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000240)={0x6, 0x0, r5}) syz_open_procfs(0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0xfffffffd, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x5) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x2f126000) 9m2.213365047s ago: executing program 45 (id=766): r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) io_setup(0x9, &(0x7f0000000100)) write(r0, &(0x7f0000000400)="dacaf98ea212a2ab6b4a12775ae0c389cf331655ef950c7ecdc5e1467a9f28312cb816ed2d1297d6e765317a1807402625fbef8d4b", 0x35) 7m26.520915896s ago: executing program 46 (id=855): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) link(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) name_to_handle_at(r3, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x600) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x9, 0x0, 0x0, 0x0}) r6 = socket(0x1d, 0x6, 0x10000000) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) shutdown(r6, 0x2) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r7, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000640)=""/201, 0xc9, 0x0, 0x2, 0x2}}, 0x48) 6m7.276030742s ago: executing program 0 (id=963): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000007e40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) 6m6.523096097s ago: executing program 0 (id=964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}]}}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r1, 0x409, 0x3f) gettid() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0xfffffffffffffc01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) 6m2.975425196s ago: executing program 0 (id=965): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffcb, 0x1c02, 0x2, 0x7f, "cc33101d3f0000002000"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r1 = syz_open_pts(r0, 0x42) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xd, {"08c39ee52f329f1698b1c4865f8b0a0a5eee9f496a0809c3d21c25867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76013256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) 6m2.176280077s ago: executing program 0 (id=968): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000040000000600000001"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 6m1.32485313s ago: executing program 0 (id=970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5m58.950540743s ago: executing program 0 (id=975): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 5m40.809139197s ago: executing program 47 (id=975): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4m30.721604988s ago: executing program 2 (id=1054): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea000000800000000000000df23ea32db0f8f21d5bc27bd49eb067a0689fff2a41cfbf0b1bd51", 0x2a}], 0x2) 4m30.07269194s ago: executing program 2 (id=1056): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x3, 0xff, 0x8, 0x2, 0x6, 0x0, 0x0, 0x1}}) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) 4m26.833300426s ago: executing program 2 (id=1058): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x22, 0x1, 0x0, 0x0, r1}) 4m25.973067806s ago: executing program 2 (id=1060): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000eeb000/0x4000)=nil, 0x3) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) 4m20.984609782s ago: executing program 2 (id=1066): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000003, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x1, 0xfffc, 0x200}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) 4m19.540783119s ago: executing program 2 (id=1071): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000100)={'gre0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 4m1.05092665s ago: executing program 48 (id=1071): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000100)={'gre0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 4m1.01078942s ago: executing program 5 (id=1086): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/78, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r3, r1, 0x0, 0x40008) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x130, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x130, 0x1c8, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @private, 0x0, 0x0, 'pimreg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_bridge\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) eventfd2(0x1, 0x80001) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) dup3(0xffffffffffffffff, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 3m57.470703504s ago: executing program 5 (id=1090): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m52.924776392s ago: executing program 5 (id=1097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="d23f9a2a00040066b8a40300000f23c80f21f866350400f0000f23f80f33360faea4ea560f01cf2ef20faef26764f00fb3acd934f50000650151b8af", 0x3c}], 0x1, 0x11, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m50.986884729s ago: executing program 5 (id=1100): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100"}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000002b) 3m49.460887786s ago: executing program 5 (id=1105): socket$inet6(0xa, 0x2, 0x3a) syz_emit_ethernet(0x7b, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a00035211884835a25d37645dee965bece1172014b92588dcf2632755f42abb9947002b3207c1a13938cfd6f4b247e71228d0b52a5a1a476963216566e8d527b492784417243ed3957400c1e1b1e218496b68e208c911a4359f9521e65e9628d24c7c3d0443f10ba29bc12db20ac90725ec32cac889223c7967"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5c, 0x0, &(0x7f0000000340)=[@increfs, @acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = fsopen(&(0x7f0000000000)='hostfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat(r4, 0x0, 0x0, 0x15e) lseek(r5, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0xfffffffffffffff9, 0x20000) ppoll(&(0x7f0000000140)=[{r0, 0xa067}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0x80084121, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x1000000, 0x0}) 3m48.078612009s ago: executing program 5 (id=1108): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="0198000000000000200012800800010067726500140002800800010089"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x40) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x48, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0x9}, {0x8}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 3m32.381449382s ago: executing program 49 (id=1108): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="0198000000000000200012800800010067726500140002800800010089"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x40) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x48, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0x9}, {0x8}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 2m42.247366554s ago: executing program 7 (id=1124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}]}}}}}}}}, 0x0) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x521080, 0x0) gettid() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) 2m41.804943344s ago: executing program 7 (id=1191): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {0x0}], 0x2) 2m41.045983978s ago: executing program 7 (id=1193): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) 2m40.192850026s ago: executing program 7 (id=1196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2m38.787862405s ago: executing program 7 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}]}}}}}}}}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3f) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) tee(r1, r4, 0x60000000000, 0x0) timer_create(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 2m33.78591745s ago: executing program 8 (id=1204): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00'], 0xfe33) 2m32.822064914s ago: executing program 8 (id=1206): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2m31.77520694s ago: executing program 8 (id=1208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2m30.232742316s ago: executing program 8 (id=1211): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m25.987211073s ago: executing program 8 (id=1221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x281ac0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="ee3fcc6d199cc3ae4da567623035edf30095340fbb8fad1763ddce29a3434535397fb9eabeadceccdc25a601a2cd1e7062b09bb6ea48827be39d2349145944e8856b2483d21e4521e01b2b9881182e3f"}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000280)=0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0xfffffffffffffffe, 0x180, 0x200000004, 0x10, 0xf1, 0x2000, 0x7fffffffffffe, 0x800000a2a, 0x0, 0x5, 0xf0, 0x80000001, 0x9, 0xbdb], 0xeeee8000, 0x3c4210}) r7 = socket$inet(0xa, 0x801, 0x84) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r9 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x1, 0x10710, 0x1, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x567, 0x20, 0x0, 0x0, 0x0) close(r8) poll(&(0x7f0000000000)=[{r7, 0x40}], 0x1, 0xa) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m22.224021295s ago: executing program 50 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}]}}}}}}}}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3f) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) tee(r1, r4, 0x60000000000, 0x0) timer_create(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 2m22.119723499s ago: executing program 8 (id=1226): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) read$char_usb(r3, 0x0, 0x0) 2m6.553937789s ago: executing program 51 (id=1226): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) read$char_usb(r3, 0x0, 0x0) 1m0.616088139s ago: executing program 1 (id=1370): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0xa, 0x6, '\x00', 0x80001f8630ad}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000340)={0x1e0003, 0x0, [0x800, 0xff, 0xfffffffffffffff7, 0x3e00000000000000, 0x10004, 0x46a9, 0x9, 0x8]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x20, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x20}}, 0xa800) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x1a, 0x0}, 0x4040095) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 28.56634202s ago: executing program 1 (id=1370): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0xa, 0x6, '\x00', 0x80001f8630ad}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000340)={0x1e0003, 0x0, [0x800, 0xff, 0xfffffffffffffff7, 0x3e00000000000000, 0x10004, 0x46a9, 0x9, 0x8]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x20, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x20}}, 0xa800) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x1a, 0x0}, 0x4040095) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 23.170684374s ago: executing program 1 (id=1475): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 22.289872408s ago: executing program 1 (id=1479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="d23f9a2a00040066b8a40300000f23c80f21f866350400f0000f23f80f33360faea4ea560f01cf2ef20faef26764f00fb3acd934f50000650151b8af", 0x3c}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21.077992299s ago: executing program 4 (id=1484): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 21.077710534s ago: executing program 1 (id=1485): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x4840, &(0x7f0000003640)=@l2={0x1f, 0x0, @any, 0x6}, 0x80) 20.649587157s ago: executing program 1 (id=1487): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) 17.479354465s ago: executing program 4 (id=1494): r0 = io_uring_setup(0x24dc, &(0x7f0000000340)={0x0, 0x91de, 0x2, 0xfffffffd, 0x16a}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 14.958496642s ago: executing program 4 (id=1498): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 12.71344279s ago: executing program 4 (id=1502): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 12.205936588s ago: executing program 4 (id=1504): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 8.677382473s ago: executing program 9 (id=1512): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfffffffffffffff1, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) setfsuid(r4) statx(r2, &(0x7f0000000280)='./file1\x00', 0x1000, 0x10, 0x0) mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="66a495ed3531ec45fa22f1d96292b30489ed000957bb7393b1d4e859f1e45c11b4a865660c75e520c70ba7b8d7e888cc29ca2251fb6d84", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,use', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',default_permissions,blksize=0x0000000000000000,allow_other,max_read=0x0003000000000000,max_read=0x00000000000000', @ANYRESDEC, @ANYBLOB=',\x00']) openat$dsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 7.612566421s ago: executing program 6 (id=1515): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_dev$vim2m(0x0, 0x9a4a, 0x2) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x4) 7.192451473s ago: executing program 9 (id=1517): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x4, 0xfffff000, 0x7, 0x2, 0x80000000, 0x200, 0xc88, 0xfffff800}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x3) 7.123016744s ago: executing program 4 (id=1518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x220001, 0x54) getdents64(r3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005e833, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001fc0)=@ethernet={0x306}, 0x80, 0x0, 0x0, &(0x7f00000026c0)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x30}}, {{&(0x7f0000000300)=@nl=@kern={0x10, 0x0, 0x0, 0x4000000}, 0x80, &(0x7f0000002c00)=[{0x0}, {&(0x7f00000029c0)}, {&(0x7f0000002a00)}, {0x0}], 0x4}}, {{&(0x7f0000002d00)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000002dc0)=[{0x0}], 0x1}}, {{&(0x7f0000002ec0)=@isdn={0x22, 0xfd, 0x5, 0x9, 0xbd}, 0x80, 0x0, 0x0, &(0x7f0000004080)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x818}}, @mark={{0x14, 0x1, 0x24, 0xbfb7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}], 0xa8}}], 0x5, 0x20004040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800"], 0xe0}}, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) socket$inet_icmp_raw(0x2, 0x3, 0x1) 6.193756183s ago: executing program 6 (id=1520): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 5.731873129s ago: executing program 9 (id=1521): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x100000001) preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000000080)=""/126, 0x7e}], 0x1, 0x4, 0xfff) 5.207993324s ago: executing program 52 (id=1487): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) 4.991636443s ago: executing program 3 (id=1524): mkdir(&(0x7f0000000000)='./file0\x00', 0x19) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141142, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x401000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x0, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 4.773069058s ago: executing program 6 (id=1525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000580)="ee3fcc6d199cc3ae4da567623035edf30095340fbb8fad1763ddce29a3434535397fb9eabeadceccdc25a601a2cd1e7062b09bb6ea48827be39d2349"}) 4.353637383s ago: executing program 9 (id=1526): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 3.843631669s ago: executing program 6 (id=1527): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfffffffffffffff1, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) setfsuid(r4) statx(r2, &(0x7f0000000280)='./file1\x00', 0x1000, 0x10, 0x0) mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="66a495ed3531ec45fa22f1d96292b30489ed000957bb7393b1d4e859f1e45c11b4a865660c75e520c70ba7b8d7e888cc29ca2251fb6d84", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,use', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',default_permissions,blksize=0x0000000000000000,allow_other,max_read=0x0003000000000000,max_read=0x00000000000000', @ANYRESDEC, @ANYBLOB=',\x00']) openat$dsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 3.641641023s ago: executing program 9 (id=1528): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.469067378s ago: executing program 3 (id=1529): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) 2.588435896s ago: executing program 3 (id=1530): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 2.237651798s ago: executing program 6 (id=1531): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x4, 0xfffff000, 0x7, 0x2, 0x80000000, 0x200, 0xc88, 0xfffff800}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x3) 1.61008556s ago: executing program 3 (id=1532): r0 = io_uring_setup(0x24dc, &(0x7f0000000340)={0x0, 0x91de, 0x2, 0xfffffffd, 0x16a}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0) 839.400991ms ago: executing program 3 (id=1533): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) 721.463598ms ago: executing program 6 (id=1534): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="9c7229b3b13ab2edd8ae742153edbde2f2b8580a32318f0e1c0ba0e4830ecd079784690876773e01b68af1b951109b96bc4828e91b62b25578a41a42d456d0ea18599c96460b0e49923f4cf4d70098f8cb469ca8f0e4ecaed1c9047ff044a5f836ad8e1ca353b7444b2cd6283680720472d70610a8d34f7be697a2998b3cfcfbc7200c7a2730c500fb967d434022701b2ef32e4842ffcad78da81fb58dc80e000d2912ce8767e673873193e8b3eee5adc0bc16bf5508a6d1944330a840695932d346300cc4aa91406c021a6c3e428642f2ef1fe24e4563bb788d602fb107d994db1586f4df75811468731cbca31878d1e08641be1317a36e0bacd07a885baee68a78bbe7b980967de4662af4fbc3dda307ec10d5c54a704db53c934883caa2e839ecf0dbc92ad09cb09324879200e68ab8a39f2c3742bf294a6c0f485b1e1f5da8d5459525da76782467bfa74a070f3cbad2961bcdbf1234fa2abfa94eae333f9ec62287832cd5fd71af91a96f4224f5bf7fae5048d5f9b112e756a833e75330487ed5c645cb0e334688abbea680e9d04ba96d73c004fba018c676c92a4dedf581848c2cd130de468b76f0b357d312246e0daa073ae9b477bab55da376a2b383c740b78041e564c954d9c61c4a8c85d3979cc12d8289276d75f902c5bbe4df0e0be90880b4d05f70f07c3027d9227b5d7cdb9780e0cf91a853ff9d8793b1b02323b4336e64f725cb5414edc4a3b849f875ff69de1d67f28cbd036c7804760a6039894b777561c0455a7eff99d9cc462ededae8e34ef61c48b24efcf15f607982ec7b7c30cf9875a10bf05f103e88a77cc3f328b10756966a324621bbe3df7aacaee486475680aceae36e4b12970b9025f7f7d155b8133bf108119414b83d49bb7a288725c886d6af3c03a1a8b8cf7e10797067f129f82186d760ca7f14776a0229e840b47fce4d8ddf65bb4dc9c245b83c1d2d7c10bddfb00f8ff5e1f8fdcc48d1fd2a4e5bf22dffa491de9423e8a6265bce515f5490614a61f672525847884df3a317e85d478a2204f33d43e72b000d0139324b7f7fa8ed181031beefe72289878fa91ee7c74318dae7e85176785f71df3a7388760bc8ba0f84bd2e2dfdea1c3ea60c2d88afa85e8ed86faabb8bb9fc50596b99bdd91d39d2baaeb0a0b360224465cfc759cf0a85bcce0ba009d8325a082e398f477206804ddb6ae76ced6f32f47fdbe2319dd37ad05d3b1d7fc1828198bfba4c92c7cd612776b6cfdd39f4ca12e8d29a8089afeb852d9927159ec7025f1a55be6787b0211c4b4cfcc7d82c26e5bf068dcca07045ee9708158724b325d5c0040d73910347b89f0e09fcfd02e37f5fa5b1a9e6bb5060a13964241cf38bc8804e722454a33fe7fb3a117b7719eea43194972b62c3a7d30cb419d24218d3f76117d7ec58e8a2e87bbc6890d42181918d66037c5ec5336309c48991020c91963296e4089c3ffece388a5ff32afb26b197bbb46edbd41c94d5a007bab3d082b9ffd38eb6af1d1d58909d2b8e9a99c4e658d91f6a1c490db503e287d31b11dcfddbe5b097ea775d855a569e51b9fc560e3b9c9e876d3e5a953b9f0e9fb5e5e5325d5df94a2429917d3cd53f938922bc0ae43630ae520d28df260f909b2368d2a5fbcc20919dd1613a811ef9878f21b47ddb4a2457dc28bb117b5c8a856e54f01a0d700de3620aa38c0f52ebf402d0620a5b075b8d1f7ce7b504b2a6158d23fadb50b55dc4e4d8c461f5b6f1a16dd86db44fa516f8fa04df4388a3f3e0fa87925f0b22be8f4ce89b089e8cc9903d4541bc371596a63ae6c808a4c8862bd58d5e9ebf0977c15b0fd4c258ebbc865e4bde8ec081f1d6359ce38facccae479a5057f403f70f45d02636120727f94f4300c425d0e830d640d2211195d485578ea79bfe18a4589e1209621ee6c2d26ff5a4986ba7facd77db0352456eabcc16b02bdb9081c413a94f284dde5269cc0b8ad2248b3e8ae5a8f282b769ede690ca4c867216757ef309cb8bdfe28ed7b044fc45ac3775c225ef9b228e30452228d1bae92ae2b76b91975d5d76967c62c878f5a1496ff5f0a2abb7dddb00c72dd2ad77836922c4a899225b81a45d6cd48fe0095735e2adea35e673d05df1fb1ccb9069703787090e0d9da91c212b8f856acb0d216c516598ee5fff92d63210b314ed44631a02c0458828aa819e6716adc5842db90cbe4370b25e7dab6f76fcbd0fd87aea135edc33a5467a7483dfcabd48256189f488899a23710878f942c720fa3c6717f8253ca8d489bee3bb9dcefd645978103928641c20b764466c6ce26f54d47b873bcb028c026ab7d9d28acfcd9ff612d7dc734b3633ee7e6bbc237f5a2480dc0c8c235ecd4195c610da480718752b64116ccbef95e91053d840e3c515aacb55d943881d255a1067f9a8e886e374e2cd10f7667f55f2ffd5b7f2b1368a027e5edad4a6cdee3ac6d4485a17d606c15ccf348e4e58f456ec2f8361ca6dfd70b248dcfd30aece7cd3b8d50adf10f4a45ab21dee13d12d66e9c6642d9c871a0bd920fd3b7ac2737c5169a21fe685fca816bea76d760a1bd3a8a49137a219bdc252a727955c73a1349736410d652ced5f7db1e79e6303f22ca04b5ab80c82bd9d42acf3e800aa47296f5aa48098cf90b13782a9d3303bd34e0f6f86eb5f6654283ae7d7aef932dcdd7bc63908c5579ff6b2205915fc4cf46337069b697e577d153a4669cbe06a5a7b0414b47ec34b79aa6781a1315c0b8ea38168e821701c8c6f04d3ff0f846f4834fb19b5f727a59785a070ee45ea82ea9d3514ba3e169453fa240da9a0792b92ff42272296451a03968c5182661331b3972d498cb248fe67d10de2414a04cc4cfe21780f66efa21d416cf8f51472f3d4be17f64606500138c55e44dcffa57f63c4c3473cfbaaff5093007b696d316a651e332e44a3e61458a91f9a27c9321fa43d2f2949efa477a89dcca9dc094247a988a86794320881f87ec8eee86fa7721090d5bc6c854792ec89ab6318454e9899a6290231d7914ce37df59a9cab9375c3fbf8910ded020d2bd856f4f395f26ae53a5a2736af04826778709c33b7f230f13bddac8a7a333c9fa276c33af1547a8dcc847c0ef745e345b6127e79c76e04e01862652485ef6e81e6e7140d2874a08fff98418621da96f96c0027acb948768454540fe7440de333490cfbea1cecb05e817daee34616a03e837399dda6c4e072495d3d24d5b9607492351f4f0d3999b55d51fab9f22c054ce996463b7d31984ee525109e2f8d34751b936e3b427efa72629a7a3aee313501cff1db4f103a1fa52cf37b895c79edd5b578532875222775906db38b135ca1e75be5a8a60db811c37c417e727343fd265330e5dcfc41d5d8fa563aea090d629dc5aaa89f9207c115ea10cc21185c8df4f93b9d0813b5af496ca089c9b006bfcf7d807d894f08939f7c719c359bdcf2e1e429583b97bbe55c9187376497fcf1dae24e69ab3b9c9ca4fd2729fca6c6d6947d38bb51a9024153ef87e85084eb4496bccdbfc3065a517e0bc5d14a4b79798dac8d5a3da9063cd9bc5bf078659b8bf86e9076c7ca87472c6296322ca7918f4aa60414cb3ab25384f4b1465e95f246cf7865342fd47c81cdb17607f1e098c38aed5a858b25ff1c3584f9df4fb4c3e02e9a283c0fb56d11fab489bc10800934cc8e2074416242eeb7d275802ed15ae0bfe398ba9d2c426f2596097c1a7ab67ae25353dbbc19018ccfda728785c2757cc284970de5817ba49a9b42933594095df59e411316d0fd6cdf4818556f082cb536139463663a325aec7896e9786d27af5c9b265d87cc96b11c47e405cf3e1dd471a9d311c7e309cc75324ef3bdac29e97a854567aff9d33643ce0058008df2aa538a17d567e51fc63d4b8095d65391161decb0c054b570408bd933fb814fcee0f1fd49c01130d9f778b668e66aaca13b2d6e31cb681b451414b0dfa429728ad6465c247edb393e926be659d6cb4d03732db78d735ca3740c8166f3fd29cb7792308a14073fd49c84718a93e0245c98f7293b961259fc65cc9277626d03262048b83f28fe1a0643b437150f9a55e731ce72f402e7c7d7c6f8cc7791c36f467f0364799a8f58edb14f71f5eb10b712f6eb9756f3d34f637cee0634167c8267c90a2de779902451f0a299d3c3a1b1e8f5016aaf66bcd98861a7ea5a2b21fdd50e0e0a4244cd6a3fde592e5dc65679123b4328a28faf0e09b8e2c6cc6c38fdca0fc7af252de5f9b6bbe820539a21715c1be7a48f271fe81d946832ddd54945dc1261939d6a3a105c490fbdfc7569975d42b0c51a558458cd153689ffeecd7d679e7b1d7cd8dd0605b8e9123bd9dc4bf0481f537e187628de7b9282f2cfaa5ab7919a2ffb765079b7f5f31847383d49a245043ebde452b145117541cc7a0c46c0e79165b9b25ddce143912f29a98f1494b66beebd54f338cc5ac8a9e95b6e2f472e0047d82931bb445994a9437e83a3070a09f0bffe25b4580ae7d36bd53ac57af22586bf930288bd7476a390f126fc8b9c95994e5bbbf3663fa7740e53f1720bc8b4e4026904e91bf7863ef4d6459bb350f1625d1d00e66cccad34a0e54b18ee8efec8bfaf743089ad537e0860a2cc06280565f03843b5f6239b3139a9092a9d1151fa38f38e591b7781e1c9c74eb76d8b6ffcbafaf107a60e6557a10145a8b432b35a982c1d6762998b69d7f3ab79a651190062e387d7da3bfbb71294d96a3e9a9caa6b53805b48a4b8de0388a5fdebcdae87e0bcca06eaf780cd4c43ba8d17833602887ef6828b3c892ca9b2e5b9e8fb150096851b7922f657420ecdd3019f6bfcc8133b302c775fc5ae03bf26bb33bb5cb8d44b86d53051dafa9c40a74e1b9a3a9405c73efa51dc7b71674cf9975e711c611cd2edffee8907ed06fdf44d1dd354d5c14c76c2371b76bc84a9a9d9a4da3ba9e7e931dbaf14c4fed0b7458c1bb6b46bfcec76ee98bc3da220b19c5d0fda2655bb93fed8ac78b4879485e20a961155ecdf815d95a698bc6ef4db5af21f9f7b0061f5cc16bbc262db0deac523c67c95b241886531e5003cc31ef77b57e3f75a55e9483a2620446058d50ff175896d003e2e48dd3e92c35c4f5234053685253f2bd28b3c9defb0d795b34dcd81104c614bf11acc2750fab57d43b5da18cfc84951580cd7c498c1c6891a77304d57641891d9748b20310b08931cea19c34abebf7ae089640ea809e2b87dad19dd4dcdeb572e25c53eca23692133da8a4a9420d9f8795778830bc61d48ec7392ba7ff0d6d5137aaece427fb830979511880388c21129b585431cffc45f17f2d9f108a42113d218a4763443bd077c535b4d9624a7746922a1cef87f90a9775b7716503560e5e8be1bbb4d231b4479ba826ea62caba4489a74c3d44d0dcbc2e64d66bad4837d6a65dee80e410156b153867873b7def3d0416fd1fd9235dda869106ae6e2bf1a045e78c4d473c269b878dcf79e8ed3f17772fed3622df495f85b5ea348d620771e60e457157092a05d01043b0d7f491b45e3227335b551567f885d8e4a8322e27e7574395d242a9d7cc6f1d69e70647b75604b655b2dc31a28f655585ee6692ace60e5acb360e8e54022aa05abfb55cb13f92caf364bf1b564ed67a2cdca2261776fda03c094f3c7fbd22c7bb595f06d5a2ef3d1c49ac1c7fe6a97b0f4ff50d54d5ae2fda2e2aec81f3eae0dad645cf65f59eed5c70e3e5a4824a176e8d0b9ac3ba81cf2ab74f1f7f571f3d6886c967cb7d5bd0945551121416d079f41fa016cf0be5dacdf4b0a92756bc0f240f57e6b679b418dfcd33fd10ef7dfa12f2822dbe04630078d3b35568f45c71f440c377bad0337253c88fb56ef9b827309f37ab272d407a46c1f9ce970524d7e42c4d7826ceb77a01a774b9f8a2225cab7a3318aa4ab1407747279704efadf4186a5d80c2ab89c947ebe7c00ad6d3c7a449eae93c3529fde28b77c164f2e2cda7e9d123bb50afed45d8af69b320ea4ba520c4746e6df207ca9ebc8346b3e05376a161c7a6e4e3373c5861d0e3e2b1f83dfce27c9e2e64f25dccc2eddb2182de16fb37a315fb1688a07849a2c75391cfbda98bb8b1c2497b9f931307134d26e3696c1c93203b42b27b9c9bcde6b882b73c65e42aaf766a30089fe85a8b652f60b27040c2b22760179aba4ab22844f5dc996620951840c1175d0b9dabc24694575c6d69d8cfe821529871ee4adb1065c1855a4f22039c9bf844957cc74117109299fb497c24de798dbf27aeb5ed0beb90853c64241e84ad386e11ccefdf3119b9882969701cc137c129aaa5021da5e64c62346bfdd6aa27c7007412735798a65da08178f2505c126010c1c4d7471add175b19e15319c9a621445ef2a539d374ab23a9c288d2a08535632fb4147bcc8cd50ba8cf89af0e2889197f0249ad43002bdf444499c2a2e4bab52a0e756d307708cc8d8dd4992445d1ceaef6adb4f203fc8f72f64cf8448d4cd04eae7945f9c743c00b92240a2deb8ebbcad91b7b09703e108b7cc9dd9ea37689a4ac584134e03ea0b77d959850473a45b5a6cca61335c0a2df35968aa72e1d9840e1422e0c6df2d468082d8341a75c19d7815da1fa5dde484eb21aaf5f7d205d95a780ee219104b24a0218881aa937726fc0c61ca90b0f9fed131a9dd29d8d05921eddcf4d2b2cac1a4727748fd1a0a4dcf00df67a27ea8d35bc26de1a2c8b9f9029816d1fcfd6fce83ca02fa0d669321a805bec7bf2b14398820821c143a7c8c918fb575c20101556c27cc383e10c7c8ab6c8f419b0a54f5939823538c76064f14f1d10811aa465ca2d70defc90c7362ceb6368400e2ee29da1493549019baa6e08a9ceaf3db91d53f764aaea4c47eb8cc1e52d365d4de521d34908fd6517d71dabbd0e3d01be2af2f80ae8328101435c828789c4130729d86a8390aee8e7b29f686e2037e2f37a3e97f758c422bda0ab48048f44ffc76ee0fb2868d60422f8a5a5680624b18a343c696181199f75b035f032f61d825374f30cb43ff83233f1cd11e91b02759475c0723b5b6ee9fa88a34de12453a4879a15e3170f95e26a128327db2e5c3bad34cc57bfc36a1261110c577a987db259c23664617e992e9580e0c06d57d80c87eda7bca09ccf09a1c985b8e82c6115b8398ed6ef4dfb550aa7118cd46eda5622e9bb57103c5d0fd7e47774a6b5c6eebb25eecc8ddcf16cb188fb04328e45675938d3f0cb12eb6a55ea9d03427d334a6152efdcca05302fbf679f913da1ba1b58e6a4bb724731768e96e95749000e58d0f26f8ccabdcced362b51c1ffc7f0ccdf84b7bcf3a7d670a786a93d2d5024346266607b803be610f2fc4f149dfe5688bfd3011505565454bfedc1c120718662c205a0f646f03490192a6c9e3167d64c330af2989504773287f99889c80c50c32873bb570ce2897c824b79e56bed925678ef92437668b6f1fc41a3e0c9c57c3a73ebf6e7071f309a6006b89d459c39826493c45efc7c27d0a10541b6ed0662d7ac6500c25a732a5c0f33e8637835478dc1c280b64b6f1fabf9e7a72f834e86c4e35895d2353a68e89f680e08e1c6759ddb93528eec2ea35a9edc0956e0ae80f6aaf1baec128c5683331f03886aaead536fc8255c905df63c9c4a2e589547625f5ab22036e0ab1e91eb7fe60677da1aa2ceab2fe06bb75e94236316c53a4fc62fbf7d35f0f23cb9622b059f430bcc9ddd41b65dd5267a882dfc8fbe2431c45b947de1b64a2e02bb7c3bdd897ecf5d73449db50dbbee797135d365bcf418057add761b65862943ed6ee5175206aa0fef443d570bb2bfd105372d2d938e74b0ed69c569eacabc4c6cd9ea91e71bf6fe87066ea055586810beb65aa606eb83531e8cf767a0889ee4be5bc26e273ac1ef8c075d6ce73c1db96d24e4a271c997dbe9cf27d7a597b5e14179ce8d0f824ddf7a23f9bfa055a5af4cc9f9abcf78916f78df601207b3fd854d48db7fac76beb8bb18e452be6b78e195f85cc8c7fba4cbb4558cfe9f049a9ba300e3bdc6f2c77fad8539161930734daaf67652f49cbc4eb8c5d8ad67adbd5d24001d2e7759537fa72f58836df113dd971f5cb818e1c04f16ff30318327ea569a37959c20fbd5fbdfa48b22ad28816f793a132534d27ecdb654370d41c879bb66b7613537acbc18d24a622dd8593e0fc494f58e548f56de3441aaadc28bee95e208337c32218ccb499d4cd68ef01100911cb7ac63178d7d61491c1fa6ac489ca0c7d0b7344853699f5197ea00458d161736556ae7ef3722b2a47b18c3e41e9735ef605e87eda73a3252beba2b2bf06cd33dbb726dc947ca19fe1fe096a764d639bcd0b2390504dae1dd732460f4302555ee4e1d26898d1190577de51508de933d953c353c4020fc5976181da4ea73aa47ace88add4a314e3480dddef85e6adc264a6e845bd65321dc84693b2c53cc60a7b2ec267557f7e4764211136f707d6a50da3e504073806d9276c7658e2385d0933671b3f4b643384b3a66ab699dd3aff154b9f92bbcac897074ff56fdbd8fc84f9a2a780a71ec823881b7982eca95e761ef9a84d1605bf4bb86080882e90676c3de87f1a073f5d86fb78ef310bcf2dc7cdcfa411b227500b1ff0e19db9525c9c2843d8dab5c4dce47056cfd7039897a750c5db76191ff1666f00b86cb73b523de530cf3ed0cae94a407cc9974d7686d36cddfa28e64c7dec078ae7538fec8139c8452d79dcc682367d94513bd0fe8ee81285c6557f8690928fdb4552132c23bb81247bdfed42c1acb715dcdb55acbb5241639e80d1b29bb623e308e249dfdb7a61fe62e0cfd35cc013ca670ff29d919a98332889d3410a2fd6aa4cf7ed8521362ad93064bf54f44c32f75566a28cf28e176e448b6bc25e0cd84507febdcdb8e9677b7be95d7fb655f49125704ab0aa3c86cb891c15df193b19105158932983d06ce97b376a1af62f3ebb79b306d4f90be696aa8ed767fd57ceada2c2ba21c7c168ff22f1399f02b54f90c5fe245508c7123c9753a67751008a9334556ae394e0f6a8ab236c860236811adce12ba09972c01cf4f2569c7e821e0de5b9995d80979fe6a32ba0bd22917dc984511818b78eb6d3b971fe1360784ffc345593a15f024d69334548f1b2bbda41688494fc9f82b1870dfaba60e6e6d7a3b78e9b5c7aef2df88a7b154e533a9822ec7359974276486d22f3311d817a9746117652f4f3f07e7a069022a45b10a6b4fb9d85d7b9fb89ee2df467ce1a8cadb4d1a30ddc316d5ca01c192e7fa6a719b5348ce56b901d8f50c1384e909d7e9c8744eaad11bb266b4933df9c94267e5d2a46496069cf907351ee837071f41e9bb5145ceb64dd2d7301d5f6f20aecb1fe39633c9ff421dd0d0891ddbc0236090445ffa0d720d9016ababc3e716f9bd91c041520fec85ab2da9ff6c1282bd1bb9602a20b71920cd75a3f36fc31b32379fb0d3ff088c6254d6644f85652f0c942815f663ea374b5dfd28fae6f36dbf7d0cf1fd338ed2b48b0c728e04d643a5821bb92ad1fbfe63a84b381c5ddc4a3aa2763a13a0404212fe6cd282070c7923a5bc47f757c5fdbd00abc75e6ffb9b453ff0ee882e174e1dc067545cf8617b236ebecec070ec9a8923a1f04cd1a37287ad1a18a8f2650c92e72d0fb21eeccc936c98b22987e6bc0e6f21bf230910caa50b049049637883eac535a93d30621a7c3fd28aa2134ce819ffa6aa3b6add864bd2615f01bb6e8def2f59bb78d41b95116c4f60637210a58de885988f1ee5c72582a9b2ab54a50825d60cdf3d7d21e8aaab4e96e5ca8498199c69c55d660db1f5a10760fb5a9df6b9df26d05ce0e642f0bf2279ed0f91250878e4c893531f555a618d2465e8a93ac3cc81c69e255e687dc826403753d1b820b3f58724c4cd46670d93c9874d9c05958faa1a7731b7a4226c935485ad36285b8cfcc7153c12de924b82449d08e95176a87de75e7e512192ca3fc433d1582d4e32a6fa98a1878c96e102c54709b0b692b44c12dfe877a1e0f527559182a83cab95c6b5a76373c2004ceeb7895f215ae372e5f3ee561ae8e25e7f75a7ae92c7b2e2bcd6023f5ab7cb76ab22347a70b877c29e897981e7cf2f06adbe69329921a4c4e96b8d1bbc05ff9307a2b921c8d9a756ed81ac03f7ef9f1f5b2e015625b0ca8c8a901d27466450807df30b7bd1218120c188ad946d2d03df5c58a6ba10dbd9810f443fbc11850e00a2b8bda70ee332d9596de66f2342c5eaa5dd1e735aa6daea683d8a854c48161f886792374067535e6de4f337478a52107dbdea3e56ccc30b33ad8a4a5cf9dbc21d77439e39a87d21f13c4c7a6b1f62ba6178a8874024af63c168de41dc10aeafbc3d07b2b40cb84aa524ff6ee52d0eb2aa3da73308245eedec6870ac32a254573f3af5d1d4bb2b186848bca3eca767cc94d61f4f5cde5b8f3a4463e9f16028e33cf793befcb0982a4709ce63ba8e268a457b932114f9ec29c2eb5b1d047f7c392f56a0de3f2c18c1c4ab7a69e85f729845213a9fedd738d916009abcdeaceaa3af949179ea1075f035b7d07f31b2a4231b20164863fb2137cafcf38b1ab8ff753e6e1405480ffb334c88184b4132f14d71063ace4c8cdbc871d88cdc3658c56fad5121b38b707ce7b9a5aabc6df6f364b66e3226df69f3cd13cb4b00f94d3b698169188835109bf9eb808e608d4db90e4bfa76e4b3322151fa849f6bdfb570efeed75141b203f1313a6f8e2cba59d8d4eff390e97ad4c0add1d9f9cca55c3aa28c217b43389da408f8539a3850550ef7bbc4d83c0a204827df8d84df827ee2ea0131eef890c376c97698b2c50b942a68a770d8fbec3ae33f14dfab45f0416f394f8c8553d7a7ae384c92d3c2cee574938eb0d9490aeab1ef777c0efe2bf8ac515fde805beac15a1ecd0466b5a5b0fb6a2947333431ad0332c637f72b370d394f454faa86f0dbcdcfb1348eeb4a39cfad23a7a0ad36ecc4e49ec9a3d45130c608f02a37f397f3e3b95a1dec84bbc568109daeb75774460cf787c6ccf110be877157b1ea1358608ac545c15fb82e0d1c97b2282329540ea1ab4e1b4caff58b5e5bb6f9a175d7f61b7acfe0f3b2ae95a026ccfd4abbf89cee696eb4f4ca74d079614c822ad140ce332e82d5014147076ca850666fd2000b98e7a672adf7223c272c6eff5311e4875249542bf7ffeef5394462b9b92f2d4037483244ea9ed5ba33e6a5af339d0894859864143e9072ff041966f6cf8d7826859a90bd4f0675234ca3ce8492be0435f32a38342feb9583b531376f1ded3a4650945330ee5815ce943861cd063fe4c9c74a3c94aba1b95d877ebae860bf70ed0580ab0c51835ab672eef3c485efc95fbe998019238c33c3d91b3a2aba15dad0cd09b9e4dabb21a67917a52f289167fa3632bf58460ea3b4e192916e0a4e0e799845c2395c7a612d725af5c63d7b295f31ee3366668dd2f6d8cf51e1c7fe02a3be8d434cbd2a1b74055d87feb0c63c6574a80f197162c168352fdf7ea90a3b449b46f9ddd60a8e7260fe1178fea4f2ac05747834e33b4", 0x2000, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 179.287823ms ago: executing program 3 (id=1535): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0x7c80, 0x0) sendmsg$nl_generic(r6, 0x0, 0x4000) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r4) 0s ago: executing program 9 (id=1536): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000580)="ee3fcc6d199cc3ae4da567623035edf30095340fbb8fad1763ddce29a3434535397fb9eabeadceccdc25a601a2cd1e7062b09bb6ea48827be39d2349145944e8856b2483d21e"}) kernel console output (not intermixed with test programs): interface number 0 [ 1023.463127][ T2197] usb 9-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1023.473995][T10722] veth1_macvtap: entered promiscuous mode [ 1023.646239][ T2197] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1023.656734][ T2197] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1023.665977][ T2197] usb 9-1: Product: syz [ 1023.670504][ T2197] usb 9-1: SerialNumber: syz [ 1023.707095][T10722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.747499][T10709] veth0_macvtap: entered promiscuous mode [ 1023.773846][ T2197] usb 9-1: config 0 descriptor?? [ 1023.841035][T10722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.849506][ T2197] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 1023.853945][T10709] veth1_macvtap: entered promiscuous mode [ 1023.940796][ T5868] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1023.954287][T10722] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.966238][T10722] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.975531][T10722] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.985483][T10722] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.012276][ T2197] usb 9-1: USB disconnect, device number 14 [ 1024.136120][T10709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.155900][ T5868] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.166735][ T5868] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1024.176946][ T5868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.248490][T10709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.259301][ T5868] usb 10-1: config 0 descriptor?? [ 1024.344494][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 1024.348563][T10709] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.359914][T10709] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.369281][T10709] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.378527][T10709] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.516673][ T3863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.524946][ T3863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.787615][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1024.806110][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 1024.825988][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1024.852610][ T5868] pwc: recv_control_msg error -32 req 04 val 1000 [ 1024.888968][ T5868] pwc: recv_control_msg error -32 req 04 val 1300 [ 1024.896952][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.905399][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.955127][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 1025.001361][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 1025.043355][ T5868] pwc: recv_control_msg error -32 req 02 val 2100 [ 1025.084980][ T5868] pwc: recv_control_msg error -32 req 04 val 1500 [ 1025.123800][ T5868] pwc: recv_control_msg error -32 req 02 val 2500 [ 1025.146252][ T5868] pwc: recv_control_msg error -32 req 02 val 2400 [ 1025.192260][ T5868] pwc: recv_control_msg error -32 req 02 val 2600 [ 1025.223734][ T5868] pwc: recv_control_msg error -32 req 02 val 2900 [ 1025.251741][ T5868] pwc: recv_control_msg error -32 req 02 val 2800 [ 1025.465746][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 1025.512376][ T5868] pwc: Registered as video103. [ 1025.521119][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input31 [ 1025.681215][ T5868] usb 10-1: USB disconnect, device number 34 [ 1026.030557][ T9523] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1026.252003][ T9523] usb 9-1: Using ep0 maxpacket: 32 [ 1026.299724][ T9523] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1026.308622][ T9523] usb 9-1: config 0 has no interface number 0 [ 1026.315318][ T9523] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1026.438117][ T9523] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1026.448273][ T9523] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.456782][ T9523] usb 9-1: Product: syz [ 1026.461340][ T9523] usb 9-1: Manufacturer: syz [ 1026.466181][ T9523] usb 9-1: SerialNumber: syz [ 1026.622554][ T9523] usb 9-1: config 0 descriptor?? [ 1026.682791][ T9523] smsc75xx v1.0.0 [ 1027.966089][ T9523] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1027.979191][ T9523] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1028.431737][ T9523] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1028.446723][ T9523] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1028.457470][ T9523] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1028.468013][ T9523] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32 [ 1028.769009][ T9523] usb 9-1: USB disconnect, device number 15 [ 1033.209843][T10946] netlink: 'syz.8.1051': attribute type 1 has an invalid length. [ 1037.332678][T10660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.341085][T10660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.471779][ T9523] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1037.571363][ T3992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.579557][ T3992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.656793][ T9523] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.671612][ T9523] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1037.681181][ T9523] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.347694][ T3610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.354637][ T9523] usb 9-1: config 0 descriptor?? [ 1038.356062][ T3610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.387283][ T9523] pwc: Askey VC010 type 2 USB webcam detected. [ 1039.063935][ T9523] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1039.128786][ T9523] pwc: recv_control_msg error -32 req 02 val 2700 [ 1039.191430][ T9523] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1039.212304][ T5868] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1039.318967][ T9523] pwc: recv_control_msg error -32 req 04 val 1000 [ 1039.384653][ T9523] pwc: recv_control_msg error -32 req 04 val 1300 [ 1039.434614][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.443101][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.491311][ T9523] pwc: recv_control_msg error -32 req 04 val 1400 [ 1039.583924][ T9523] pwc: recv_control_msg error -32 req 02 val 2000 [ 1039.618560][ T5868] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1039.629053][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.638609][ T5868] usb 6-1: Product: syz [ 1039.643895][ T5868] usb 6-1: Manufacturer: syz [ 1039.648715][ T5868] usb 6-1: SerialNumber: syz [ 1039.691000][ T9523] pwc: recv_control_msg error -32 req 02 val 2100 [ 1039.735457][ T9523] pwc: recv_control_msg error -32 req 04 val 1500 [ 1039.802822][ T9523] pwc: recv_control_msg error -32 req 02 val 2500 [ 1039.883510][ T9523] pwc: recv_control_msg error -32 req 02 val 2400 [ 1039.909021][ T5868] usb 6-1: config 0 descriptor?? [ 1039.934413][ T9523] pwc: recv_control_msg error -32 req 02 val 2600 [ 1039.991313][ T9523] pwc: recv_control_msg error -32 req 02 val 2900 [ 1040.091269][ T5895] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1040.106697][ T9523] pwc: recv_control_msg error -32 req 02 val 2800 [ 1040.251725][ T5868] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1040.343533][ T9523] pwc: recv_control_msg error -71 req 04 val 1200 [ 1040.411015][ T5895] usb 10-1: Using ep0 maxpacket: 32 [ 1040.463713][ T9523] pwc: Registered as video103. [ 1040.478890][ T9523] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input32 [ 1040.561238][ T5895] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1040.569801][ T5895] usb 10-1: config 0 has no interface number 0 [ 1040.576364][ T5895] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1040.722861][ T9523] usb 9-1: USB disconnect, device number 16 [ 1040.759963][ T5895] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1040.770008][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.779020][ T5895] usb 10-1: Product: syz [ 1040.783871][ T5895] usb 10-1: Manufacturer: syz [ 1040.788984][ T5895] usb 10-1: SerialNumber: syz [ 1040.943297][ T5895] usb 10-1: config 0 descriptor?? [ 1041.035151][ T5895] smsc75xx v1.0.0 [ 1042.092140][ T5895] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1042.104235][ T5895] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1042.455166][ T5868] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1042.553182][ T5868] usb 6-1: USB disconnect, device number 10 [ 1042.570870][ T5895] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1042.587590][ T5895] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1042.599043][ T5895] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1042.609675][ T5895] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32 [ 1042.652403][ T5895] usb 10-1: USB disconnect, device number 35 [ 1043.013746][T11011] x_tables: duplicate entry at hook 2 [ 1048.012386][ T5895] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1051.496684][ T5895] usb 5-1: unable to read config index 0 descriptor/all [ 1051.504655][ T5895] usb 5-1: can't read configurations, error -71 [ 1051.735791][T11051] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(14) [ 1051.742705][T11051] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1051.751684][T11051] vhci_hcd vhci_hcd.0: Device attached [ 1051.793277][ T5877] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1051.820591][ T5868] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1051.838637][T11056] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(17) [ 1051.845523][T11056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1051.854164][T11056] vhci_hcd vhci_hcd.0: Device attached [ 1052.061339][T11056] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1052.064835][ T9843] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1052.081321][ T5877] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1052.090757][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.092661][ T5868] usb 10-1: Using ep0 maxpacket: 32 [ 1052.101983][ T5877] usb 6-1: Product: syz [ 1052.102087][ T5877] usb 6-1: Manufacturer: syz [ 1052.102186][ T5877] usb 6-1: SerialNumber: syz [ 1052.154459][T11063] x_tables: duplicate entry at hook 2 [ 1052.168093][T11051] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(16) [ 1052.174982][T11051] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1052.184992][T11051] vhci_hcd vhci_hcd.0: Device attached [ 1052.193914][ T5877] usb 6-1: config 0 descriptor?? [ 1052.278188][T11065] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(24) [ 1052.285081][T11065] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1052.293506][T11065] vhci_hcd vhci_hcd.0: Device attached [ 1052.370536][ T5868] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1052.379628][ T5868] usb 10-1: config 0 has no interface number 0 [ 1052.386472][ T5868] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1052.471530][T11056] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(23) [ 1052.478436][T11056] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1052.486830][T11056] vhci_hcd vhci_hcd.0: Device attached [ 1052.516718][ T5877] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1052.598394][T11074] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(20) [ 1052.605293][T11074] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1052.617477][T11074] vhci_hcd vhci_hcd.0: Device attached [ 1052.621375][ T5868] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1052.632843][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.641275][ T5868] usb 10-1: Product: syz [ 1052.645787][ T5868] usb 10-1: Manufacturer: syz [ 1052.650906][ T5868] usb 10-1: SerialNumber: syz [ 1052.790612][T11064] vhci_hcd: connection closed [ 1052.791163][T11061] vhci_hcd: connection closed [ 1052.796788][T11071] vhci_hcd: connection closed [ 1052.796827][T11057] vhci_hcd: connection reset by peer [ 1052.818779][ T3992] vhci_hcd: stop threads [ 1052.823937][ T3992] vhci_hcd: release socket [ 1052.828881][ T3992] vhci_hcd: disconnect device [ 1052.830479][T11075] vhci_hcd: connection closed [ 1052.842021][T11066] vhci_hcd: connection closed [ 1052.879544][ T5868] usb 10-1: config 0 descriptor?? [ 1052.950768][ T3992] vhci_hcd: stop threads [ 1052.955246][ T3992] vhci_hcd: release socket [ 1052.959892][ T3992] vhci_hcd: disconnect device [ 1052.968568][ T5868] smsc75xx v1.0.0 [ 1053.088805][ T3992] vhci_hcd: stop threads [ 1053.093696][ T3992] vhci_hcd: release socket [ 1053.098549][ T3992] vhci_hcd: disconnect device [ 1053.206837][ T3992] vhci_hcd: stop threads [ 1053.212068][ T3992] vhci_hcd: release socket [ 1053.216745][ T3992] vhci_hcd: disconnect device [ 1053.262712][ T3992] vhci_hcd: stop threads [ 1053.267370][ T3992] vhci_hcd: release socket [ 1053.274524][ T3992] vhci_hcd: disconnect device [ 1053.349229][ T3992] vhci_hcd: stop threads [ 1053.354003][ T3992] vhci_hcd: release socket [ 1053.358876][ T3992] vhci_hcd: disconnect device [ 1054.030811][ T5868] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1054.046827][ T5868] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1054.465178][ T5868] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1054.476680][ T5868] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1054.486738][ T5868] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1054.497336][ T5868] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32 [ 1054.561433][ T5877] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1054.635878][ T5877] usb 6-1: USB disconnect, device number 11 [ 1054.829238][ T5868] usb 10-1: USB disconnect, device number 36 [ 1057.499442][ T9843] vhci_hcd: vhci_device speed not set [ 1063.652012][ T5903] usb usb50-port1: attempt power cycle [ 1064.269726][ T5903] usb usb50-port1: unable to enumerate USB device [ 1070.650854][ T5903] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 1070.690623][ T9843] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1070.751013][T11136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1070.760602][T11136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1070.771160][T11136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1070.793753][T11136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1070.804957][T11136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1070.892987][ T9843] usb 6-1: Using ep0 maxpacket: 32 [ 1070.912518][ T9843] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1070.921267][ T9843] usb 6-1: config 0 has no interface number 0 [ 1070.927618][ T9843] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1070.952861][ T9843] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1070.962375][ T9843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.971054][ T9843] usb 6-1: Product: syz [ 1070.975331][ T9843] usb 6-1: Manufacturer: syz [ 1070.980036][ T9843] usb 6-1: SerialNumber: syz [ 1071.091307][ T5903] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1071.100972][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.106534][ T9843] usb 6-1: config 0 descriptor?? [ 1071.109299][ T5903] usb 10-1: Product: syz [ 1071.119226][ T5903] usb 10-1: Manufacturer: syz [ 1071.124713][ T5903] usb 10-1: SerialNumber: syz [ 1071.196145][ T9843] smsc75xx v1.0.0 [ 1071.482249][ T5903] usb 10-1: config 0 descriptor?? [ 1072.347308][ T9843] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1072.358556][ T9843] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1072.369814][ T9843] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1072.385865][ T9843] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1073.335512][T11136] Bluetooth: hci0: command tx timeout [ 1073.342108][ T5903] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1074.518646][ T9843] usb 6-1: USB disconnect, device number 12 [ 1075.420741][ T5825] Bluetooth: hci0: command tx timeout [ 1075.787447][ T5903] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1075.936971][ T5903] usb 10-1: USB disconnect, device number 37 [ 1076.190934][T11135] chnl_net:caif_netlink_parms(): no params data found [ 1077.505260][ T5825] Bluetooth: hci0: command tx timeout [ 1078.543375][T11135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.551537][T11135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.559320][T11135] bridge_slave_0: entered allmulticast mode [ 1078.569002][T11135] bridge_slave_0: entered promiscuous mode [ 1078.743830][T11135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.752092][T11135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.759930][T11135] bridge_slave_1: entered allmulticast mode [ 1078.780758][ T5903] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1078.983236][T11135] bridge_slave_1: entered promiscuous mode [ 1079.022212][ T5903] usb 9-1: Using ep0 maxpacket: 32 [ 1079.089543][ T5903] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1079.098165][ T5903] usb 9-1: config 0 has no interface number 0 [ 1079.104759][ T5903] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1079.241767][ T5903] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1079.251069][ T9843] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 1079.259041][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.268259][ T5903] usb 9-1: Product: syz [ 1079.272770][ T5903] usb 9-1: Manufacturer: syz [ 1079.277580][ T5903] usb 9-1: SerialNumber: syz [ 1079.482345][ T9843] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1079.492028][ T9843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.507059][ T9843] usb 10-1: Product: syz [ 1079.515841][ T9843] usb 10-1: Manufacturer: syz [ 1079.520986][ T9843] usb 10-1: SerialNumber: syz [ 1079.546772][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1079.553630][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1079.573457][ T5903] usb 9-1: config 0 descriptor?? [ 1079.599129][T11135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.600467][ T5825] Bluetooth: hci0: command tx timeout [ 1079.624074][ T5903] smsc75xx v1.0.0 [ 1079.719866][T11135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.783612][ T9843] usb 10-1: config 0 descriptor?? [ 1080.033074][ T9843] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1080.147095][ T5903] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1080.163541][ T5903] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1080.174940][ T5903] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1080.186239][ T5903] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32 [ 1080.451458][T11135] team0: Port device team_slave_0 added [ 1080.511824][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1108'. [ 1080.548081][T11135] team0: Port device team_slave_1 added [ 1080.679665][ T5871] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1082.815457][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.829619][ T5871] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1082.840585][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.028174][ T5871] usb 5-1: config 0 descriptor?? [ 1083.085952][ T5871] pwc: Askey VC010 type 2 USB webcam detected. [ 1083.362390][T11135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.369751][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.371301][ T5903] usb 9-1: USB disconnect, device number 17 [ 1083.396549][T11135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.598697][T11135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.605944][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.632985][T11135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.660987][ T5871] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1083.770970][ T5871] pwc: recv_control_msg error -32 req 02 val 2700 [ 1083.797143][ T9843] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1083.864627][ T9843] usb 10-1: USB disconnect, device number 38 [ 1083.913661][ T5871] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1083.953834][ T5871] pwc: recv_control_msg error -32 req 04 val 1000 [ 1084.009935][ T5871] pwc: recv_control_msg error -32 req 04 val 1300 [ 1084.054129][ T5871] pwc: recv_control_msg error -32 req 04 val 1400 [ 1084.114429][ T5871] pwc: recv_control_msg error -32 req 02 val 2000 [ 1084.159224][ T5871] pwc: recv_control_msg error -32 req 02 val 2100 [ 1084.599798][ T5871] pwc: recv_control_msg error -32 req 04 val 1500 [ 1084.623227][ T5871] pwc: recv_control_msg error -32 req 02 val 2500 [ 1084.640837][ T5871] pwc: recv_control_msg error -32 req 02 val 2400 [ 1085.632962][ T5871] pwc: recv_control_msg error -32 req 02 val 2600 [ 1086.532564][ T8826] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.621480][ T5871] pwc: recv_control_msg error -71 req 02 val 2900 [ 1086.698645][ T5871] pwc: recv_control_msg error -71 req 02 val 2800 [ 1086.742305][ T5871] pwc: recv_control_msg error -71 req 04 val 1100 [ 1086.781231][ T5871] pwc: recv_control_msg error -71 req 04 val 1200 [ 1086.831913][ T5871] pwc: Registered as video103. [ 1086.840764][ T5871] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 1086.886474][ T8826] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.002755][ T5871] usb 5-1: USB disconnect, device number 6 [ 1087.142838][T11135] hsr_slave_0: entered promiscuous mode [ 1087.152952][T11135] hsr_slave_1: entered promiscuous mode [ 1087.161887][T11135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1087.169663][T11135] Cannot create hsr debugfs directory [ 1087.234689][ T8826] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.643297][ T8826] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.819025][ T8826] bridge_slave_1: left allmulticast mode [ 1088.825117][ T8826] bridge_slave_1: left promiscuous mode [ 1088.831917][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.985578][ T8826] bridge_slave_0: left allmulticast mode [ 1088.995390][ T8826] bridge_slave_0: left promiscuous mode [ 1089.002462][ T8826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.010542][ T9843] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1089.221200][ T9843] usb 5-1: Using ep0 maxpacket: 32 [ 1089.263563][ T9843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.278243][ T9843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.289538][ T9843] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1089.299082][ T9843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.515939][ T9843] usb 5-1: config 0 descriptor?? [ 1089.934277][ T5868] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1090.112926][ T8826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1090.151525][ T5868] usb 9-1: Using ep0 maxpacket: 32 [ 1090.168989][ T5868] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1090.177692][ T5868] usb 9-1: config 0 has no interface number 0 [ 1090.184623][ T5868] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1090.216978][ T9843] ft260 0003:0403:6030.000B: chip code: 6424 8183 [ 1090.225597][ T8826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1090.288606][ T8826] bond0 (unregistering): Released all slaves [ 1090.381481][ T5868] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1090.391134][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.402105][ T5868] usb 9-1: Product: syz [ 1090.406508][ T5868] usb 9-1: Manufacturer: syz [ 1090.412372][ T5868] usb 9-1: SerialNumber: syz [ 1090.431423][ T9843] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1090.538554][ T5868] usb 9-1: config 0 descriptor?? [ 1090.674637][ T5868] smsc75xx v1.0.0 [ 1090.697277][ T9843] ft260 0003:0403:6030.000B: failed to retrieve status: -71, no wakeup [ 1090.791478][ T9843] ft260 0003:0403:6030.000B: failed to retrieve status: -71 [ 1090.891289][ T9843] ft260 0003:0403:6030.000B: failed to reset I2C controller: -71 [ 1091.007575][ T5868] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1091.023255][ T5868] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1091.037667][ T5868] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1091.051073][ T5868] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32 [ 1091.401231][ T8826] hsr_slave_0: left promiscuous mode [ 1091.444428][ T8826] hsr_slave_1: left promiscuous mode [ 1091.452124][ T8826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1091.459851][ T8826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1091.546738][ T8826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1091.554597][ T8826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1091.611645][ T8826] veth1_macvtap: left promiscuous mode [ 1091.617423][ T8826] veth0_macvtap: left promiscuous mode [ 1091.632711][ T8826] veth1_vlan: left promiscuous mode [ 1091.638308][ T8826] veth0_vlan: left promiscuous mode [ 1092.152770][ T9843] usb 5-1: USB disconnect, device number 7 [ 1092.971460][ T5895] usb 9-1: USB disconnect, device number 18 [ 1093.083005][ T9843] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1093.140649][ T8826] team0 (unregistering): Port device team_slave_1 removed [ 1093.278414][ T8826] team0 (unregistering): Port device team_slave_0 removed [ 1093.937993][ T9843] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1093.947598][ T9843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.956102][ T9843] usb 5-1: Product: syz [ 1093.960655][ T9843] usb 5-1: Manufacturer: syz [ 1093.965470][ T9843] usb 5-1: SerialNumber: syz [ 1094.060638][ T5903] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1094.134709][ T9843] usb 5-1: config 0 descriptor?? [ 1094.288486][ T5903] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.299388][ T5903] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1094.309030][ T5903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.352558][ T5903] usb 9-1: config 0 descriptor?? [ 1094.370607][ T5903] pwc: Askey VC010 type 2 USB webcam detected. [ 1094.455435][ T9843] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1094.820831][ T5903] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1094.877840][ T5903] pwc: recv_control_msg error -32 req 02 val 2700 [ 1094.928628][ T5903] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1094.983281][ T5903] pwc: recv_control_msg error -32 req 04 val 1000 [ 1095.131463][ T5903] pwc: recv_control_msg error -32 req 04 val 1300 [ 1095.192090][ T5903] pwc: recv_control_msg error -32 req 04 val 1400 [ 1095.245799][ T5903] pwc: recv_control_msg error -32 req 02 val 2000 [ 1095.303433][ T5903] pwc: recv_control_msg error -32 req 02 val 2100 [ 1095.357205][T11135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1095.372783][ T5903] pwc: recv_control_msg error -32 req 04 val 1500 [ 1095.429297][ T5903] pwc: recv_control_msg error -32 req 02 val 2500 [ 1095.436003][T11135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1095.502862][T11135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1095.516118][ T5903] pwc: recv_control_msg error -32 req 02 val 2400 [ 1095.548141][ T5903] pwc: recv_control_msg error -32 req 02 val 2600 [ 1095.554036][T11135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1095.610793][ T5903] pwc: recv_control_msg error -32 req 02 val 2900 [ 1095.638719][ T5903] pwc: recv_control_msg error -32 req 02 val 2800 [ 1095.860934][ T5903] pwc: recv_control_msg error -71 req 04 val 1200 [ 1095.952152][ T5903] pwc: Registered as video103. [ 1095.962104][ T5903] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input36 [ 1096.126491][T11281] x_tables: duplicate entry at hook 2 [ 1096.150885][ T5903] usb 9-1: USB disconnect, device number 19 [ 1096.325134][ T9843] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1096.411772][ T9843] usb 5-1: USB disconnect, device number 8 [ 1096.769319][T11136] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1096.780946][T11136] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1096.793552][T11136] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1096.813742][T11136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1096.840802][T11136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1097.290692][T11135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.401963][T11135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.501436][ T3863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.508955][ T3863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.646220][ T3863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.653829][ T3863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.047638][T11287] chnl_net:caif_netlink_parms(): no params data found [ 1098.460796][ T5868] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1098.680531][ T5868] usb 9-1: Using ep0 maxpacket: 32 [ 1098.741183][ T5868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.753393][ T5868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.764345][ T5868] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1098.773817][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.941641][T11136] Bluetooth: hci1: command tx timeout [ 1099.002064][ T5868] usb 9-1: config 0 descriptor?? [ 1099.622154][ T5871] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1099.694182][ T5868] ft260 0003:0403:6030.000C: chip code: 6424 8183 [ 1099.897053][ T5868] ft260 0003:0403:6030.000C: failed to retrieve system status [ 1099.906958][ T5868] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -71 [ 1099.911257][ T5871] usb 10-1: Using ep0 maxpacket: 32 [ 1100.075867][ T5868] usb 9-1: USB disconnect, device number 20 [ 1100.239171][ T5871] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1100.248839][ T5871] usb 10-1: config 0 has no interface number 0 [ 1100.256288][ T5871] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1100.538053][ T5871] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1100.549909][ T5871] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.558873][ T5871] usb 10-1: Product: syz [ 1100.563948][ T5871] usb 10-1: Manufacturer: syz [ 1100.568999][ T5871] usb 10-1: SerialNumber: syz [ 1100.964869][ T5871] usb 10-1: config 0 descriptor?? [ 1101.031294][T11136] Bluetooth: hci1: command tx timeout [ 1101.058094][ T5871] smsc75xx v1.0.0 [ 1101.627024][ T5871] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1101.639270][ T5871] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1101.649783][ T5871] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1101.669524][ T5871] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32 [ 1102.077755][ T6596] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.178797][T11287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.186590][T11287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.194703][T11287] bridge_slave_0: entered allmulticast mode [ 1102.204186][T11287] bridge_slave_0: entered promiscuous mode [ 1102.244004][ T6596] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.418176][T11287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.428100][T11287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.437022][T11287] bridge_slave_1: entered allmulticast mode [ 1102.446535][T11287] bridge_slave_1: entered promiscuous mode [ 1102.627286][ T6596] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.112553][T11136] Bluetooth: hci1: command tx timeout [ 1103.302772][T11135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.382351][ T5871] usb 10-1: USB disconnect, device number 39 [ 1103.425405][ T6596] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.882542][T11287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.085301][T11287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.400821][ T5871] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1104.557969][T11337] x_tables: duplicate entry at hook 2 [ 1104.641312][ T5871] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.644538][T11287] team0: Port device team_slave_0 added [ 1104.651962][ T5871] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1104.652098][ T5871] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.679679][ T5868] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1104.681967][ T5871] usb 10-1: config 0 descriptor?? [ 1104.736233][ T6596] bridge_slave_1: left allmulticast mode [ 1104.743070][ T6596] bridge_slave_1: left promiscuous mode [ 1104.749727][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.793678][ T5871] pwc: Askey VC010 type 2 USB webcam detected. [ 1104.813044][ T6596] bridge_slave_0: left allmulticast mode [ 1104.819210][ T6596] bridge_slave_0: left promiscuous mode [ 1104.826096][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.053545][ T5868] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1105.063436][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.072336][ T5868] usb 5-1: Product: syz [ 1105.076738][ T5868] usb 5-1: Manufacturer: syz [ 1105.081791][ T5868] usb 5-1: SerialNumber: syz [ 1105.093604][ T5868] usb 5-1: config 0 descriptor?? [ 1105.191162][T11136] Bluetooth: hci1: command tx timeout [ 1105.373672][ T5871] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1105.409959][ T5868] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1105.416909][ T5871] pwc: recv_control_msg error -32 req 02 val 2700 [ 1105.468776][ T5871] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1105.491677][ T5871] pwc: recv_control_msg error -32 req 04 val 1000 [ 1105.534241][ T5871] pwc: recv_control_msg error -32 req 04 val 1300 [ 1105.555923][ T6596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.567387][ T5871] pwc: recv_control_msg error -32 req 04 val 1400 [ 1105.612157][ T5871] pwc: recv_control_msg error -32 req 02 val 2000 [ 1105.632092][ T6596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.639985][ T5871] pwc: recv_control_msg error -32 req 02 val 2100 [ 1105.659465][ T5871] pwc: recv_control_msg error -32 req 04 val 1500 [ 1105.692221][ T5871] pwc: recv_control_msg error -32 req 02 val 2500 [ 1105.695230][ T6596] bond0 (unregistering): Released all slaves [ 1105.720660][ T5871] pwc: recv_control_msg error -32 req 02 val 2400 [ 1105.739063][ T5871] pwc: recv_control_msg error -32 req 02 val 2600 [ 1105.770783][ T5871] pwc: recv_control_msg error -32 req 02 val 2900 [ 1105.827142][T11287] team0: Port device team_slave_1 added [ 1105.851605][ T5871] pwc: recv_control_msg error -32 req 02 val 2800 [ 1106.141030][ T5871] pwc: recv_control_msg error -71 req 04 val 1200 [ 1106.162963][ T5871] pwc: Registered as video103. [ 1106.189125][ T5871] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input37 [ 1106.232582][ T5871] usb 10-1: USB disconnect, device number 40 [ 1106.465668][T11287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.476942][T11287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.505463][T11287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.825435][T11287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.832929][T11287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.859801][T11287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.027075][ T6596] hsr_slave_0: left promiscuous mode [ 1107.062022][ T6596] hsr_slave_1: left promiscuous mode [ 1107.124064][ T6596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1107.132309][ T6596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1107.205039][ T6596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1107.214204][ T6596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.337175][ T6596] veth1_macvtap: left promiscuous mode [ 1107.343145][ T6596] veth0_macvtap: left promiscuous mode [ 1107.349044][ T6596] veth1_vlan: left promiscuous mode [ 1107.354869][ T6596] veth0_vlan: left promiscuous mode [ 1107.365383][ T5868] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1107.381405][ T5868] usb 5-1: USB disconnect, device number 9 [ 1108.582822][ T6596] team0 (unregistering): Port device team_slave_1 removed [ 1108.650970][ T6596] team0 (unregistering): Port device team_slave_0 removed [ 1108.830438][ T5871] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1109.058511][ T5871] usb 9-1: Using ep0 maxpacket: 32 [ 1109.117673][T11135] veth0_vlan: entered promiscuous mode [ 1109.155667][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.167817][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.178732][ T5871] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1109.188419][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.279298][T11135] veth1_vlan: entered promiscuous mode [ 1109.382913][ T5871] usb 9-1: config 0 descriptor?? [ 1111.463291][ T5871] ft260 0003:0403:6030.000D: failed to retrieve chip version [ 1111.468429][T11287] hsr_slave_0: entered promiscuous mode [ 1111.473336][ T5871] ft260 0003:0403:6030.000D: probe with driver ft260 failed with error -71 [ 1111.480784][T11287] hsr_slave_1: entered promiscuous mode [ 1111.863680][T11135] veth0_macvtap: entered promiscuous mode [ 1111.933911][T11135] veth1_macvtap: entered promiscuous mode [ 1112.431690][T11135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.555900][ T5871] usb 9-1: USB disconnect, device number 21 [ 1112.672877][T11135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.909209][T11375] x_tables: duplicate entry at hook 2 [ 1112.946953][T11135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.956215][T11135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.965757][T11135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.975012][T11135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.004400][T11373] 9pnet_fd: Insufficient options for proto=fd [ 1113.281038][ T5871] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1113.491325][ T5871] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.502844][ T5871] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1113.512543][ T5871] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.613143][ T5871] usb 10-1: config 0 descriptor?? [ 1113.674414][ T5871] pwc: Askey VC010 type 2 USB webcam detected. [ 1114.078208][ T5871] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1114.086885][ T5868] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1114.106732][ T5871] pwc: recv_control_msg error -32 req 02 val 2700 [ 1114.133991][ T5871] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1114.181127][ T5871] pwc: recv_control_msg error -32 req 04 val 1000 [ 1114.225328][ T5871] pwc: recv_control_msg error -32 req 04 val 1300 [ 1114.261770][ T5871] pwc: recv_control_msg error -32 req 04 val 1400 [ 1114.303612][ T5871] pwc: recv_control_msg error -32 req 02 val 2000 [ 1114.321271][ T5868] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1114.333903][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.342700][ T5868] usb 5-1: Product: syz [ 1114.347100][ T5868] usb 5-1: Manufacturer: syz [ 1114.352069][ T5868] usb 5-1: SerialNumber: syz [ 1114.375046][ T5871] pwc: recv_control_msg error -32 req 02 val 2100 [ 1114.407071][ T5871] pwc: recv_control_msg error -32 req 04 val 1500 [ 1114.417144][T11391] fuse: Invalid rootmode [ 1114.435964][ T5871] pwc: recv_control_msg error -32 req 02 val 2500 [ 1114.460930][ T5871] pwc: recv_control_msg error -32 req 02 val 2400 [ 1114.478686][ T5868] usb 5-1: config 0 descriptor?? [ 1114.548468][ T5871] pwc: recv_control_msg error -32 req 02 val 2600 [ 1114.562423][ T5871] pwc: recv_control_msg error -32 req 02 val 2900 [ 1114.582415][ T5871] pwc: recv_control_msg error -32 req 02 val 2800 [ 1114.757967][T11287] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1114.777785][ T5868] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1114.811148][ T5871] pwc: recv_control_msg error -71 req 04 val 1200 [ 1114.828842][ T5871] pwc: Registered as video103. [ 1114.837284][ T5871] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input38 [ 1114.931780][T11287] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1114.994845][ T5871] usb 10-1: USB disconnect, device number 41 [ 1115.054350][T11287] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1115.202830][T11287] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1116.437953][T11287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.699425][T11287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.769196][ T3863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.776831][ T3863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.794209][ T5868] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1116.887501][ T5868] usb 5-1: USB disconnect, device number 10 [ 1116.952642][ T3863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.960380][ T3863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.082834][ T5903] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1117.291476][ T5903] usb 10-1: Using ep0 maxpacket: 32 [ 1117.333294][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.344924][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.355374][ T5903] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1117.365773][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.429453][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 1117.475384][ T5903] usb 10-1: config 0 descriptor?? [ 1117.505916][T11423] 9pnet_fd: Insufficient options for proto=fd [ 1117.951797][ T5903] usbhid 10-1:0.0: can't add hid device: -71 [ 1117.958603][ T5903] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1118.056616][ T5903] usb 10-1: USB disconnect, device number 42 [ 1122.386629][T11443] fuse: Invalid rootmode [ 1122.467850][T11287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.571264][ T5903] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1122.767809][ T5903] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.778507][ T5903] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1122.788081][ T5903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.923443][ T5903] usb 9-1: config 0 descriptor?? [ 1123.000780][ T5903] pwc: Askey VC010 type 2 USB webcam detected. [ 1123.391809][ T5903] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1123.423852][ T5903] pwc: recv_control_msg error -32 req 02 val 2700 [ 1123.455455][ T5903] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1123.490807][ T5903] pwc: recv_control_msg error -32 req 04 val 1000 [ 1123.511622][ T5903] pwc: recv_control_msg error -32 req 04 val 1300 [ 1123.557547][ T5903] pwc: recv_control_msg error -32 req 04 val 1400 [ 1123.603165][ T5903] pwc: recv_control_msg error -32 req 02 val 2000 [ 1123.640986][ T5903] pwc: recv_control_msg error -32 req 02 val 2100 [ 1123.691459][ T5903] pwc: recv_control_msg error -32 req 04 val 1500 [ 1123.730993][ T5903] pwc: recv_control_msg error -32 req 02 val 2500 [ 1123.771166][ T5903] pwc: recv_control_msg error -32 req 02 val 2400 [ 1123.808132][ T5903] pwc: recv_control_msg error -32 req 02 val 2600 [ 1123.871197][ T5903] pwc: recv_control_msg error -32 req 02 val 2900 [ 1123.914338][ T5903] pwc: recv_control_msg error -32 req 02 val 2800 [ 1124.157582][ T5903] pwc: recv_control_msg error -71 req 04 val 1200 [ 1124.258889][ T5903] pwc: Registered as video103. [ 1124.270784][ T5903] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input39 [ 1124.565323][ T5903] usb 9-1: USB disconnect, device number 22 [ 1126.527288][ T8826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.535791][ T8826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.651362][ T5903] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1126.805433][ T6596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.814176][ T6596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.950110][T11287] veth0_vlan: entered promiscuous mode [ 1126.982863][ T5903] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1126.992943][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.001890][ T5903] usb 5-1: Product: syz [ 1127.006412][ T5903] usb 5-1: Manufacturer: syz [ 1127.011465][ T5903] usb 5-1: SerialNumber: syz [ 1127.027852][T11481] 9pnet_fd: Insufficient options for proto=fd [ 1127.140265][T11287] veth1_vlan: entered promiscuous mode [ 1127.257688][ T5903] usb 5-1: config 0 descriptor?? [ 1127.626087][ T5903] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1127.640042][T11287] veth0_macvtap: entered promiscuous mode [ 1127.744968][T11287] veth1_macvtap: entered promiscuous mode [ 1128.056661][T11287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.258658][T11287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.436050][T11287] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.448379][T11287] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.457598][T11287] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.466781][T11287] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.568331][ T5903] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1129.842872][ T5903] usb 5-1: USB disconnect, device number 11 [ 1130.424721][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1130.445643][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1130.459907][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1130.504845][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1130.528628][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1130.560645][ T5903] usb 10-1: new low-speed USB device number 43 using dummy_hcd [ 1130.791812][ T5903] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1130.801967][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.895900][ T5903] usb 10-1: config 0 descriptor?? [ 1131.043806][T11512] netlink: 'syz.4.1170': attribute type 1 has an invalid length. [ 1131.054524][T11512] netlink: 'syz.4.1170': attribute type 4 has an invalid length. [ 1131.063499][T11512] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1170'. [ 1131.201866][T11512] netlink: 'syz.4.1170': attribute type 1 has an invalid length. [ 1131.209948][T11512] netlink: 'syz.4.1170': attribute type 4 has an invalid length. [ 1131.218305][T11512] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1170'. [ 1131.992814][ T5903] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1132.004201][ T5903] asix 10-1:0.0: probe with driver asix failed with error -71 [ 1132.022149][ T5903] usb 10-1: USB disconnect, device number 43 [ 1132.630859][ T5825] Bluetooth: hci3: command tx timeout [ 1132.735375][T11501] chnl_net:caif_netlink_parms(): no params data found [ 1132.938090][ T2197] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1134.020613][ T2197] usb 5-1: Using ep0 maxpacket: 32 [ 1134.079591][ T2197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.093826][ T2197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.104424][ T2197] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1134.113875][ T2197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.488715][ T2197] usb 5-1: config 0 descriptor?? [ 1134.579641][ T2197] hub 5-1:0.0: USB hub found [ 1134.750868][ T2197] hub 5-1:0.0: 1 port detected [ 1134.798898][T11136] Bluetooth: hci3: command tx timeout [ 1134.919133][ T2197] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1134.927402][ T2197] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1135.126055][ T2197] usbhid 5-1:0.0: can't add hid device: -71 [ 1135.133137][ T2197] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1135.255926][ T2197] usb 5-1: USB disconnect, device number 12 [ 1135.751342][ T5903] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1135.979586][ T5903] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.991058][ T5903] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1136.000688][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.002436][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.142275][ T5903] usb 10-1: config 0 descriptor?? [ 1136.177286][ T5903] pwc: Askey VC010 type 2 USB webcam detected. [ 1136.297959][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.529441][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.596747][T11501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.602949][ T5903] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1136.607205][T11501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.618416][T11501] bridge_slave_0: entered allmulticast mode [ 1136.641238][ T5903] pwc: recv_control_msg error -32 req 02 val 2700 [ 1136.651347][T11501] bridge_slave_0: entered promiscuous mode [ 1136.660697][ T5903] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1136.702110][ T5903] pwc: recv_control_msg error -32 req 04 val 1000 [ 1136.727255][ T5903] pwc: recv_control_msg error -32 req 04 val 1300 [ 1136.757086][ T5903] pwc: recv_control_msg error -32 req 04 val 1400 [ 1136.765051][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.801229][ T5903] pwc: recv_control_msg error -32 req 02 val 2000 [ 1136.830809][ T5877] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1136.842967][T11501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.850620][T11501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.858345][T11501] bridge_slave_1: entered allmulticast mode [ 1136.868440][T11501] bridge_slave_1: entered promiscuous mode [ 1136.871007][ T5903] pwc: recv_control_msg error -32 req 02 val 2100 [ 1136.903889][T11136] Bluetooth: hci3: command tx timeout [ 1136.951928][ T5903] pwc: recv_control_msg error -32 req 04 val 1500 [ 1136.970879][ T5903] pwc: recv_control_msg error -32 req 02 val 2500 [ 1136.980063][ T5903] pwc: recv_control_msg error -32 req 02 val 2400 [ 1136.994538][ T5903] pwc: recv_control_msg error -32 req 02 val 2600 [ 1137.004128][ T5903] pwc: recv_control_msg error -32 req 02 val 2900 [ 1137.046713][ T5903] pwc: recv_control_msg error -32 req 02 val 2800 [ 1137.096756][T11501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.177864][ T5877] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1137.187523][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.198245][ T5877] usb 9-1: Product: syz [ 1137.203684][ T5877] usb 9-1: Manufacturer: syz [ 1137.208713][ T5877] usb 9-1: SerialNumber: syz [ 1137.248338][T11501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.264304][ T5903] pwc: recv_control_msg error -71 req 04 val 1200 [ 1137.298084][ T5903] pwc: Registered as video103. [ 1137.333867][ T5877] usb 9-1: config 0 descriptor?? [ 1137.350490][ T5903] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input40 [ 1137.572365][ T5903] usb 10-1: USB disconnect, device number 44 [ 1137.581042][ T5877] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1138.029698][T11501] team0: Port device team_slave_0 added [ 1138.101975][T11501] team0: Port device team_slave_1 added [ 1138.229972][ T57] bridge_slave_1: left allmulticast mode [ 1138.239218][ T57] bridge_slave_1: left promiscuous mode [ 1138.245937][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.372430][ T57] bridge_slave_0: left allmulticast mode [ 1138.378457][ T57] bridge_slave_0: left promiscuous mode [ 1138.385208][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.672895][T11568] netlink: 'syz.9.1180': attribute type 1 has an invalid length. [ 1138.681300][T11568] netlink: 'syz.9.1180': attribute type 4 has an invalid length. [ 1138.689431][T11568] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.1180'. [ 1138.857650][T11568] netlink: 'syz.9.1180': attribute type 1 has an invalid length. [ 1138.868477][T11568] netlink: 'syz.9.1180': attribute type 4 has an invalid length. [ 1138.876670][T11568] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.1180'. [ 1138.943216][T11136] Bluetooth: hci3: command tx timeout [ 1139.219008][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.290043][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.345373][ T57] bond0 (unregistering): Released all slaves [ 1139.539934][ T5877] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1139.629359][ T5877] usb 9-1: USB disconnect, device number 23 [ 1139.803726][T11501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1139.813701][T11501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1139.840638][T11501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.667104][T11501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.679835][T11501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.709995][T11501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.002975][ T57] hsr_slave_0: left promiscuous mode [ 1141.051140][ T57] hsr_slave_1: left promiscuous mode [ 1141.059233][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.071470][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.103979][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1141.110842][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1141.276975][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.284927][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.471948][ T57] veth1_macvtap: left promiscuous mode [ 1141.477722][ T57] veth0_macvtap: left promiscuous mode [ 1141.484214][ T57] veth1_vlan: left promiscuous mode [ 1141.489857][ T57] veth0_vlan: left promiscuous mode [ 1142.612378][ T5877] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1142.734820][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1142.842052][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1143.127269][ T5877] usb 9-1: config 0 has an invalid interface number: 199 but max is 1 [ 1143.137787][ T5877] usb 9-1: config 0 has no interface number 1 [ 1143.145323][ T5877] usb 9-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1143.157094][ T5877] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1143.294560][ T5877] usb 9-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1143.304230][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1143.312782][ T5877] usb 9-1: SerialNumber: syz [ 1143.386440][ T5877] usb 9-1: config 0 descriptor?? [ 1143.501488][ T5877] usb 9-1: Found UVC 0.00 device (0002:0000) [ 1143.508696][ T5877] usb 9-1: No valid video chain found. [ 1143.641881][ T5877] usb 9-1: USB disconnect, device number 24 [ 1143.697232][T11501] hsr_slave_0: entered promiscuous mode [ 1143.707230][T11501] hsr_slave_1: entered promiscuous mode [ 1143.716176][T11501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1143.724174][T11501] Cannot create hsr debugfs directory [ 1143.733677][ T5903] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1143.910491][ T5903] usb 10-1: Using ep0 maxpacket: 32 [ 1143.923764][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.935576][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.946183][ T5903] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1143.956696][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.102084][ T5903] usb 10-1: config 0 descriptor?? [ 1144.319528][ T2197] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1144.445109][ T6596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.453803][ T6596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.574953][ T2197] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.588268][ T2197] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1144.597808][ T2197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.606972][ T5903] usbhid 10-1:0.0: can't add hid device: -71 [ 1144.614613][ T5903] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1144.639534][ T2197] usb 5-1: config 0 descriptor?? [ 1144.680021][ T2197] pwc: Askey VC010 type 2 USB webcam detected. [ 1144.736230][ T5903] usb 10-1: USB disconnect, device number 45 [ 1144.907555][ T8826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.916036][ T8826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.081028][ T2197] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1145.103240][ T2197] pwc: recv_control_msg error -32 req 02 val 2700 [ 1145.128088][ T2197] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1145.153537][ T2197] pwc: recv_control_msg error -32 req 04 val 1000 [ 1145.167686][ T2197] pwc: recv_control_msg error -32 req 04 val 1300 [ 1145.219263][ T2197] pwc: recv_control_msg error -32 req 04 val 1400 [ 1145.247707][ T2197] pwc: recv_control_msg error -32 req 02 val 2000 [ 1145.318773][ T2197] pwc: recv_control_msg error -32 req 02 val 2100 [ 1145.343728][ T2197] pwc: recv_control_msg error -32 req 04 val 1500 [ 1145.374085][ T2197] pwc: recv_control_msg error -32 req 02 val 2500 [ 1145.396379][ T2197] pwc: recv_control_msg error -32 req 02 val 2400 [ 1145.424156][ T2197] pwc: recv_control_msg error -32 req 02 val 2600 [ 1145.495315][ T2197] pwc: recv_control_msg error -32 req 02 val 2900 [ 1145.531065][ T2197] pwc: recv_control_msg error -32 req 02 val 2800 [ 1145.761008][ T2197] pwc: recv_control_msg error -71 req 04 val 1200 [ 1145.792107][ T2197] pwc: Registered as video103. [ 1145.804633][ T2197] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41 [ 1145.943855][T11616] netlink: 'syz.9.1190': attribute type 1 has an invalid length. [ 1145.955110][T11616] netlink: 'syz.9.1190': attribute type 4 has an invalid length. [ 1145.963292][T11616] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.1190'. [ 1145.983683][ T2197] usb 5-1: USB disconnect, device number 13 [ 1146.147078][T11621] netlink: 'syz.9.1190': attribute type 1 has an invalid length. [ 1146.155501][T11621] netlink: 'syz.9.1190': attribute type 4 has an invalid length. [ 1146.166216][T11621] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.1190'. [ 1146.325380][T11501] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1146.413122][T11501] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1146.503509][T11501] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1146.524049][ T5903] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1146.644259][T11501] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1146.782833][ T5903] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1146.792711][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.801235][ T5903] usb 9-1: Product: syz [ 1146.805620][ T5903] usb 9-1: Manufacturer: syz [ 1146.810602][ T5903] usb 9-1: SerialNumber: syz [ 1146.937152][ T5903] usb 9-1: config 0 descriptor?? [ 1147.175101][ T5903] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1147.927363][T11638] binder: 11637:11638 ioctl c0306201 200000000380 returned -11 [ 1148.041645][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 1148.163066][T11642] syz.9.1198: attempt to access beyond end of device [ 1148.163066][T11642] nbd9: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1148.609543][T11501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.089255][T11501] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.290822][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.298664][ T3635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.407887][ T5903] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1149.536596][ T5903] usb 9-1: USB disconnect, device number 25 [ 1149.562259][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.570482][ T3635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.619114][ T5868] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1153.874168][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.890587][ T5868] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1153.899942][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.971199][ T5868] usb 5-1: config 0 descriptor?? [ 1154.026872][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 1154.048557][T11667] netlink: 'syz.8.1204': attribute type 1 has an invalid length. [ 1154.056948][T11667] netlink: 'syz.8.1204': attribute type 4 has an invalid length. [ 1154.065359][T11667] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1204'. [ 1154.147970][T11667] netlink: 'syz.8.1204': attribute type 1 has an invalid length. [ 1154.156599][T11667] netlink: 'syz.8.1204': attribute type 4 has an invalid length. [ 1154.167436][T11667] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1204'. [ 1154.272031][T11501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1154.420098][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1154.456161][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 1154.490075][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1154.553275][ T5868] pwc: recv_control_msg error -32 req 04 val 1000 [ 1154.564936][T11670] fuse: Bad value for 'rootmode' [ 1154.571994][ T5868] pwc: recv_control_msg error -32 req 04 val 1300 [ 1154.621112][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 1154.658196][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 1154.715912][ T5868] pwc: recv_control_msg error -32 req 02 val 2100 [ 1154.728444][ T5868] pwc: recv_control_msg error -32 req 04 val 1500 [ 1154.766636][ T5868] pwc: recv_control_msg error -32 req 02 val 2500 [ 1154.790081][ T5868] pwc: recv_control_msg error -32 req 02 val 2400 [ 1154.861093][ T5868] pwc: recv_control_msg error -32 req 02 val 2600 [ 1154.870899][T11501] veth0_vlan: entered promiscuous mode [ 1154.889655][ T5868] pwc: recv_control_msg error -32 req 02 val 2900 [ 1154.916466][ T5868] pwc: recv_control_msg error -32 req 02 val 2800 [ 1155.015169][T11501] veth1_vlan: entered promiscuous mode [ 1155.132081][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 1155.203688][ T5868] pwc: Registered as video103. [ 1155.219867][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input42 [ 1155.348577][ T5868] usb 5-1: USB disconnect, device number 14 [ 1155.354409][T11501] veth0_macvtap: entered promiscuous mode [ 1155.481832][T11501] veth1_macvtap: entered promiscuous mode [ 1155.512280][T11679] 9pnet_fd: Insufficient options for proto=fd [ 1155.788407][T11501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.905826][T11501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.022276][T11501] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.031973][T11501] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.043271][T11501] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.053030][T11501] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.409537][T11689] binder: 11686:11689 ioctl c0306201 200000000380 returned -11 [ 1156.555599][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 1157.891803][ T5877] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 1158.246721][ T5877] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1158.257487][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.267194][ T5877] usb 9-1: Product: syz [ 1158.271775][ T5877] usb 9-1: Manufacturer: syz [ 1158.276848][ T5877] usb 9-1: SerialNumber: syz [ 1158.369619][ T5877] usb 9-1: config 0 descriptor?? [ 1158.650081][ T5877] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1159.169537][T11721] netlink: 'syz.9.1215': attribute type 1 has an invalid length. [ 1159.177997][T11721] netlink: 'syz.9.1215': attribute type 4 has an invalid length. [ 1159.188693][T11721] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.1215'. [ 1159.248692][T11721] netlink: 'syz.9.1215': attribute type 1 has an invalid length. [ 1159.257502][T11721] netlink: 'syz.9.1215': attribute type 4 has an invalid length. [ 1159.266178][T11721] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.1215'. [ 1160.716769][ T5877] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1160.801854][ T5877] usb 9-1: USB disconnect, device number 26 [ 1161.206276][T11740] 9pnet_fd: Insufficient options for proto=fd [ 1161.987462][T11747] binder: 11745:11747 ioctl c0306201 200000000380 returned -11 [ 1162.142649][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1221'. [ 1166.942662][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1166.962835][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1166.985356][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1167.029601][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1167.042845][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1167.860993][ T5877] usb 10-1: new full-speed USB device number 46 using dummy_hcd [ 1168.169786][ T5877] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1168.179788][ T5877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.188244][ T5877] usb 10-1: Product: syz [ 1168.192898][ T5877] usb 10-1: Manufacturer: syz [ 1168.197711][ T5877] usb 10-1: SerialNumber: syz [ 1168.239513][ T4851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.248475][ T4851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.336812][ T5877] usb 10-1: config 0 descriptor?? [ 1168.562065][ T5877] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1168.702714][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.711854][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.183103][T11136] Bluetooth: hci0: command tx timeout [ 1169.196799][T11802] 9pnet_fd: Insufficient options for proto=fd [ 1169.744529][T11804] GUP no longer grows the stack in syz.1.1084 (11804): 200000003000-20000000a000 (200000002000) [ 1169.745295][T11786] chnl_net:caif_netlink_parms(): no params data found [ 1169.761174][T11804] CPU: 1 UID: 0 PID: 11804 Comm: syz.1.1084 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(none) [ 1169.761324][T11804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1169.761403][T11804] Call Trace: [ 1169.761450][T11804] [ 1169.761497][T11804] __dump_stack+0x26/0x30 [ 1169.761663][T11804] dump_stack_lvl+0x1df/0x270 [ 1169.761826][T11804] dump_stack+0x1e/0x25 [ 1169.761978][T11804] __get_user_pages+0x586f/0x6b20 [ 1169.762257][T11804] __gup_longterm_locked+0x184e/0x2c10 [ 1169.762434][T11804] ? filter_irq_stacks+0x49/0x190 [ 1169.762576][T11804] ? stack_depot_save_flags+0x35/0x7b0 [ 1169.762735][T11804] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1169.762925][T11804] ? kmsan_get_metadata+0xfb/0x160 [ 1169.763109][T11804] pin_user_pages_remote+0xfa/0x160 [ 1169.763295][T11804] process_vm_rw+0xb52/0x1d30 [ 1169.763505][T11804] ? futex_wait+0x29f/0x360 [ 1169.763622][T11804] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1169.763791][T11804] ? kmsan_get_metadata+0xfb/0x160 [ 1169.763981][T11804] ? do_futex+0x3a1/0x480 [ 1169.764136][T11804] ? kmsan_get_metadata+0xfb/0x160 [ 1169.764308][T11804] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1169.764490][T11804] ? kmsan_get_metadata+0xfb/0x160 [ 1169.764656][T11804] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1169.764816][T11804] ? kmsan_get_metadata+0xfb/0x160 [ 1169.764990][T11804] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1169.765175][T11804] __x64_sys_process_vm_writev+0x11f/0x1e0 [ 1169.765342][T11804] x64_sys_call+0x113f/0x3db0 [ 1169.765502][T11804] do_syscall_64+0xd9/0x210 [ 1169.765675][T11804] ? irqentry_exit+0x16/0x60 [ 1169.765831][T11804] ? clear_bhb_loop+0x40/0x90 [ 1169.765980][T11804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.766119][T11804] RIP: 0033:0x7f1416b8e929 [ 1169.766218][T11804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.766332][T11804] RSP: 002b:00007f1417a9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 1169.766460][T11804] RAX: ffffffffffffffda RBX: 00007f1416db5fa0 RCX: 00007f1416b8e929 [ 1169.766560][T11804] RDX: 0000000000000002 RSI: 0000200000001a00 RDI: 0000000000000003 [ 1169.766639][T11804] RBP: 00007f1416c10b39 R08: 0000000000000002 R09: 0000000000000000 [ 1169.766722][T11804] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000000 [ 1169.766805][T11804] R13: 0000000000000000 R14: 00007f1416db5fa0 R15: 00007ffd4bd65268 [ 1169.766934][T11804] [ 1170.535566][T11807] comedi comedi0: pcl726: I/O port conflict (0x1,16) [ 1172.050451][T11136] Bluetooth: hci0: command tx timeout [ 1172.087012][ T5877] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1172.686952][ T5868] usb 10-1: USB disconnect, device number 46 [ 1172.858559][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 1174.060651][T11136] Bluetooth: hci0: command tx timeout [ 1176.142171][T11136] Bluetooth: hci0: command tx timeout [ 1177.187418][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.195092][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.203228][T11786] bridge_slave_0: entered allmulticast mode [ 1177.212073][T11786] bridge_slave_0: entered promiscuous mode [ 1177.395814][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.403523][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.411590][T11786] bridge_slave_1: entered allmulticast mode [ 1177.419793][T11786] bridge_slave_1: entered promiscuous mode [ 1180.789507][T11786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.064634][T11786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.211789][ T3992] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.611459][ T5877] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 1181.656621][ T3992] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.749793][T11786] team0: Port device team_slave_0 added [ 1181.780673][T11786] team0: Port device team_slave_1 added [ 1181.810570][ T3992] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.882161][ T5877] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1181.893339][ T5877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.902126][ T5877] usb 10-1: Product: syz [ 1181.908301][ T5877] usb 10-1: Manufacturer: syz [ 1181.914354][ T5877] usb 10-1: SerialNumber: syz [ 1182.138855][ T5877] usb 10-1: config 0 descriptor?? [ 1182.233002][ T3992] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.442110][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1182.456765][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1182.467292][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1182.793840][ T5877] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1182.910095][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1182.927108][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1183.109236][T11786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.117696][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.144640][T11786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.463031][T11786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.470393][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.502921][T11786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.024854][ T3992] bridge_slave_1: left allmulticast mode [ 1184.031096][ T3992] bridge_slave_1: left promiscuous mode [ 1184.038160][ T3992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.023483][ T5825] Bluetooth: hci1: command tx timeout [ 1186.902133][ T3992] bridge_slave_0: left allmulticast mode [ 1186.908052][ T3992] bridge_slave_0: left promiscuous mode [ 1186.914768][ T3992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.101728][ T5825] Bluetooth: hci1: command tx timeout [ 1187.515909][ T5877] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1187.589887][ T5877] usb 10-1: USB disconnect, device number 47 [ 1187.756025][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 1187.858459][T11881] fuse: Unknown parameter 'user_i00000000000000000000' [ 1188.103574][ T3992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.173105][ T3992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.197192][ T3992] bond0 (unregistering): Released all slaves [ 1188.852397][T11786] hsr_slave_0: entered promiscuous mode [ 1188.861500][T11786] hsr_slave_1: entered promiscuous mode [ 1188.870109][T11786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1188.878825][T11786] Cannot create hsr debugfs directory [ 1189.180484][ T5825] Bluetooth: hci1: command tx timeout [ 1189.535793][ T3992] hsr_slave_0: left promiscuous mode [ 1189.590768][ T3992] hsr_slave_1: left promiscuous mode [ 1189.598956][ T3992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1189.609724][ T3992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.698653][ T3992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1189.709588][ T3992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.911203][ T3992] veth1_macvtap: left promiscuous mode [ 1189.916993][ T3992] veth0_macvtap: left promiscuous mode [ 1189.926374][ T3992] veth1_vlan: left promiscuous mode [ 1189.934979][ T3992] veth0_vlan: left promiscuous mode [ 1191.093682][ T3992] team0 (unregistering): Port device team_slave_1 removed [ 1191.238864][ T3992] team0 (unregistering): Port device team_slave_0 removed [ 1191.314415][ T5825] Bluetooth: hci1: command tx timeout [ 1192.111091][ T5868] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1192.399177][T11861] chnl_net:caif_netlink_parms(): no params data found [ 1192.453490][ T5868] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1192.463405][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.471847][ T5868] usb 5-1: Product: syz [ 1192.476236][ T5868] usb 5-1: Manufacturer: syz [ 1192.483368][ T5868] usb 5-1: SerialNumber: syz [ 1192.669234][ T5868] usb 5-1: config 0 descriptor?? [ 1192.901480][ T5868] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1194.175343][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1260'. [ 1194.319753][ T3577] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.566881][ T3577] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.819010][ T5868] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1194.853582][ T5868] usb 5-1: USB disconnect, device number 15 [ 1194.916461][ T3577] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.012173][T11861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.019923][T11861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.032631][T11861] bridge_slave_0: entered allmulticast mode [ 1195.042751][T11861] bridge_slave_0: entered promiscuous mode [ 1195.157531][ T3577] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.233121][T11861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.240943][T11861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.248707][T11861] bridge_slave_1: entered allmulticast mode [ 1195.264482][T11861] bridge_slave_1: entered promiscuous mode [ 1195.871056][T11861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.899437][T11786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1195.910957][ T5877] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1196.048643][T11786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1196.149874][ T5877] usb 2-1: config 16 has an invalid interface number: 34 but max is 0 [ 1196.158097][T11861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.158486][ T5877] usb 2-1: config 16 has no interface number 0 [ 1196.176701][ T5877] usb 2-1: config 16 interface 34 has no altsetting 0 [ 1196.231869][T11786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1196.348957][ T5877] usb 2-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=e4.43 [ 1196.358991][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.367752][ T5877] usb 2-1: Product: syz [ 1196.372249][ T5877] usb 2-1: Manufacturer: syz [ 1196.377089][ T5877] usb 2-1: SerialNumber: syz [ 1196.440686][ T2197] usb 10-1: new low-speed USB device number 48 using dummy_hcd [ 1196.537188][T11786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1196.599236][T11861] team0: Port device team_slave_0 added [ 1196.651765][ T3577] bridge_slave_1: left allmulticast mode [ 1196.657679][ T3577] bridge_slave_1: left promiscuous mode [ 1196.664963][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.716211][ T2197] usb 10-1: config index 0 descriptor too short (expected 1307, got 27) [ 1196.725119][ T2197] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 1196.736649][ T2197] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1196.746045][ T2197] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1196.757636][ T2197] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1196.771837][ T2197] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 1196.783486][ T2197] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1196.832789][ T5877] cxacru 2-1:16.34: cxacru_bind: interface has incorrect endpoints [ 1196.842222][ T5877] cxacru 2-1:16.34: usbatm_usb_probe: bind failed: -19! [ 1196.874423][ T3577] bridge_slave_0: left allmulticast mode [ 1196.880503][ T3577] bridge_slave_0: left promiscuous mode [ 1196.887171][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.969756][ T5877] usb 2-1: USB disconnect, device number 36 [ 1197.276806][ T2197] usb 10-1: string descriptor 0 read error: -22 [ 1197.284109][ T2197] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1197.296328][ T2197] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.387122][ T2197] usb 10-1: config 0 descriptor?? [ 1197.395388][T11950] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1197.572809][ T2197] hub 10-1:0.0: bad descriptor, ignoring hub [ 1197.578975][ T2197] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1197.593349][ T2197] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input43 [ 1198.109433][ T3577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1198.227804][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1198.305832][ T3577] bond0 (unregistering): Released all slaves [ 1198.535069][ C1] usb_acecad 10-1:0.0: can't resubmit intr, dummy_hcd.9-1/input0, status -19 [ 1198.544363][ T2197] usb 10-1: USB disconnect, device number 48 [ 1198.611083][T11861] team0: Port device team_slave_1 added [ 1199.063005][T11861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1199.070935][T11861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1199.097603][T11861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.132132][T11861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1199.139310][T11861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1199.168138][T11861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.620490][ T3577] hsr_slave_0: left promiscuous mode [ 1199.644032][ T3577] hsr_slave_1: left promiscuous mode [ 1199.659693][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.667648][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1199.774866][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1199.782778][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.899753][ T3577] veth1_macvtap: left promiscuous mode [ 1199.905791][ T3577] veth0_macvtap: left promiscuous mode [ 1199.912011][ T3577] veth1_vlan: left promiscuous mode [ 1199.917569][ T3577] veth0_vlan: left promiscuous mode [ 1200.385104][T11979] binder: 11978:11979 ioctl c0306201 2000000003c0 returned -14 [ 1200.436724][T11979] binder: 11978:11979 ioctl c0306201 200000000380 returned -11 [ 1200.556420][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 1200.816834][ T5877] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 1200.858682][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 1200.943182][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 1201.012768][ T5877] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1201.022424][ T5877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.030855][ T5877] usb 10-1: Product: syz [ 1201.035342][ T5877] usb 10-1: Manufacturer: syz [ 1201.040452][ T5877] usb 10-1: SerialNumber: syz [ 1201.170222][ T5877] usb 10-1: config 0 descriptor?? [ 1201.454667][ T5877] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1201.605534][T11861] hsr_slave_0: entered promiscuous mode [ 1201.615681][T11861] hsr_slave_1: entered promiscuous mode [ 1201.981425][T11786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.313356][T11786] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.414424][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1202.422223][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1202.446018][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.453665][ T8826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.537702][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.545354][ T8826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.369446][ T5877] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1203.434646][ T5877] usb 10-1: USB disconnect, device number 49 [ 1204.160058][T12008] binder: 12006:12008 ioctl c0306201 2000000003c0 returned -14 [ 1204.174662][T11861] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1204.225553][T11861] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1204.302756][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 1204.319032][T11861] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1204.463086][T11861] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1205.234052][T11786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1205.834221][T11786] veth0_vlan: entered promiscuous mode [ 1205.914120][T11861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.969556][T11786] veth1_vlan: entered promiscuous mode [ 1205.988374][T12033] binder: 12032:12033 ioctl c0306201 2000000003c0 returned -14 [ 1206.079511][T12033] binder: 12032:12033 ioctl c0306201 200000000380 returned -11 [ 1206.143371][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1283'. [ 1206.196105][T11861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.282928][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1281'. [ 1206.331075][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.338675][ T8826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.424418][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1283'. [ 1206.574310][T12036] hsr_slave_1 (unregistering): left promiscuous mode [ 1206.642014][T11786] veth0_macvtap: entered promiscuous mode [ 1206.672507][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.680037][ T8826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.753132][T11786] veth1_macvtap: entered promiscuous mode [ 1207.042780][T11786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1207.186667][T11786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1207.315071][T11786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.324401][T11786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.334357][T11786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.344720][T11786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.691105][ T5903] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 1207.900079][ T5903] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1207.909944][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.918771][ T5903] usb 10-1: Product: syz [ 1207.923362][ T5903] usb 10-1: Manufacturer: syz [ 1207.928271][ T5903] usb 10-1: SerialNumber: syz [ 1208.193569][ T5903] usb 10-1: config 0 descriptor?? [ 1209.960838][ T5903] dvb_usb_rtl28xxu 10-1:0.0: chip type detection failed -110 [ 1209.968976][ T5903] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1211.288271][ T2197] usb 10-1: USB disconnect, device number 50 [ 1211.466050][T11861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.756589][T12077] syz_tun: entered allmulticast mode [ 1211.812747][T12074] syz_tun: left allmulticast mode [ 1212.638741][T12093] binder: 12092:12093 ioctl c0306201 2000000003c0 returned -14 [ 1212.712430][ T2197] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1212.723412][T12093] binder: 12092:12093 ioctl c0306201 200000000380 returned -11 [ 1212.852564][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1294'. [ 1212.901478][ T2197] usb 10-1: Using ep0 maxpacket: 16 [ 1212.932587][ T2197] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.943546][ T2197] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1212.955071][ T2197] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1212.965311][ T2197] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1212.976340][ T2197] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.118267][ T2197] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1213.128184][ T2197] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1213.136780][ T2197] usb 10-1: Manufacturer: syz [ 1213.233314][ T2197] usb 10-1: config 0 descriptor?? [ 1213.980593][ T2197] rc_core: IR keymap rc-hauppauge not found [ 1213.986741][ T2197] Registered IR keymap rc-empty [ 1213.993961][ T2197] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1214.112611][ T2197] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1214.173484][ T2197] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1214.189381][ T2197] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input44 [ 1214.406169][T11861] veth0_vlan: entered promiscuous mode [ 1214.432126][ T2197] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1214.911547][ T5871] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1215.003780][ T2197] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1215.027682][T11861] veth1_vlan: entered promiscuous mode [ 1215.039822][ T2197] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1215.074932][ T2197] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1215.103766][ T2197] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1215.122448][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 1215.132687][ T2197] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1215.161272][ T2197] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1215.176197][ T5871] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1215.185753][ T5871] usb 5-1: config 179 has no interface number 0 [ 1215.192435][ T5871] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1215.203959][ T5871] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1215.204129][ T2197] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1215.215637][ T5871] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1215.238041][ T5871] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1215.250411][ T5871] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1215.264114][ T5871] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1215.273984][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.306801][T11861] veth0_macvtap: entered promiscuous mode [ 1215.350812][ T2197] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1215.367686][T11861] veth1_macvtap: entered promiscuous mode [ 1215.420898][ T2197] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1215.474947][ T2197] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1215.485397][ T2197] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1215.559658][T11861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.623534][ T2197] usb 10-1: USB disconnect, device number 51 [ 1215.723216][T11861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.865643][T12119] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1215.881700][T11861] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.891028][T11861] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.900008][T11861] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.909211][T11861] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.480985][ T5871] usb 5-1: USB disconnect, device number 16 [ 1216.489794][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1216.498531][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1217.734218][ T3863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.744628][ T3863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.095873][ T3665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.104169][ T3665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.483884][T12158] binder: 12156:12158 ioctl c0306201 2000000003c0 returned -14 [ 1218.523358][T12158] binder: 12156:12158 ioctl c0306201 200000000380 returned -11 [ 1218.616419][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1305'. [ 1219.303109][ T5871] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1219.558581][ T5871] usb 2-1: config 0 has an invalid interface number: 112 but max is 0 [ 1219.567403][ T5871] usb 2-1: config 0 has no interface number 0 [ 1219.698955][ T5871] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 1219.708805][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.717358][ T5871] usb 2-1: Product: syz [ 1219.721923][ T5871] usb 2-1: Manufacturer: syz [ 1219.729695][ T5871] usb 2-1: SerialNumber: syz [ 1219.939161][ T5871] usb 2-1: config 0 descriptor?? [ 1219.993538][ T5871] mvusb_mdio 2-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 1220.232103][ T5871] usb 2-1: USB disconnect, device number 37 [ 1222.431228][ T2197] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1222.488771][T12187] mkiss: ax0: crc mode is auto. [ 1222.620840][ T2197] usb 4-1: Using ep0 maxpacket: 8 [ 1222.678873][ T2197] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1222.687690][ T2197] usb 4-1: config 179 has no interface number 0 [ 1222.694534][ T2197] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1222.707063][ T2197] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1222.718946][ T2197] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1222.731090][ T2197] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1222.742848][ T2197] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1222.756397][ T2197] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1222.765973][ T2197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.845391][T12184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1223.487780][ T5871] usb 4-1: USB disconnect, device number 4 [ 1223.488090][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1223.505990][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 1227.094233][T12209] binder: 12208:12209 ioctl c0306201 2000000003c0 returned -14 [ 1227.210837][T12209] binder: 12208:12209 ioctl c0306201 200000000380 returned -11 [ 1227.390995][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 1227.930917][ T3665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.938979][ T3665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.004479][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.013624][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.874334][ T5871] kernel write not supported for file /cpu/0/msr (pid: 5871 comm: kworker/0:3) [ 1230.397948][ T5903] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1230.749344][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 1230.838077][ T5903] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1230.847288][ T5903] usb 4-1: config 179 has no interface number 0 [ 1230.854364][ T5903] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1230.867518][ T5903] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1230.879286][ T5903] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1230.895255][ T5903] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1230.908920][ T5903] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1230.923778][ T5903] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1230.933893][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.173804][T12239] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1232.803919][ T5903] usb 4-1: USB disconnect, device number 5 [ 1232.810080][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1232.810295][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1233.774132][T12254] binder: 12252:12254 ioctl c0306201 2000000003c0 returned -14 [ 1233.789693][T12254] binder: 12252:12254 ioctl c0306201 200000000380 returned -11 [ 1233.910963][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1331'. [ 1234.010623][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 1236.320477][ T2197] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1236.383666][T12300] netlink: 320 bytes leftover after parsing attributes in process `syz.4.1346'. [ 1236.490737][ T2197] usb 7-1: Using ep0 maxpacket: 8 [ 1236.566055][T12303] netlink: 'syz.3.1347': attribute type 1 has an invalid length. [ 1236.784942][ T2197] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1236.793750][ T2197] usb 7-1: config 179 has no interface number 0 [ 1236.800559][ T2197] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1236.812214][ T2197] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1236.825258][ T2197] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1236.839899][ T2197] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1236.852878][ T2197] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1236.866824][ T2197] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1236.876487][ T2197] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.310792][T12305] binder: 12304:12305 ioctl c0306201 2000000003c0 returned -14 [ 1238.502807][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1349'. [ 1238.641471][T12294] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1240.394188][ T5903] usb 7-1: USB disconnect, device number 3 [ 1240.394798][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1240.410624][ C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 1242.045678][T12339] binder: 12337:12339 ioctl c0306201 2000000003c0 returned -14 [ 1242.237381][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1362'. [ 1242.911006][T12343] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1246.872718][ T5903] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1246.942957][ T3577] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.154821][ T5903] usb 7-1: Using ep0 maxpacket: 16 [ 1247.289717][ T5903] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1247.298799][ T5903] usb 7-1: config 0 has no interface number 0 [ 1247.342891][ T3577] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.520828][ T5903] usb 7-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=b5.85 [ 1247.530854][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.539414][ T5903] usb 7-1: Product: syz [ 1247.544343][ T5903] usb 7-1: Manufacturer: syz [ 1247.549398][ T5903] usb 7-1: SerialNumber: syz [ 1247.741917][ T3577] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.796837][ T5903] usb 7-1: config 0 descriptor?? [ 1247.926109][ T5903] ftdi_sio 7-1:0.41: FTDI USB Serial Device converter detected [ 1247.940803][ T5903] ftdi_sio ttyUSB0: unknown device type: 0xb585 [ 1248.129656][ T3577] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.388930][ T3577] bridge_slave_1: left allmulticast mode [ 1249.395542][ T3577] bridge_slave_1: left promiscuous mode [ 1249.402260][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.495613][ T3577] bridge_slave_0: left allmulticast mode [ 1249.502222][ T3577] bridge_slave_0: left promiscuous mode [ 1249.508740][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.207722][ T3577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.228146][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.256863][ T3577] bond0 (unregistering): Released all slaves [ 1250.738974][ T3577] hsr_slave_0: left promiscuous mode [ 1250.749792][ T3577] hsr_slave_1: left promiscuous mode [ 1250.765192][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1250.773067][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.788989][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1250.797259][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.834083][ T3577] veth1_macvtap: left promiscuous mode [ 1250.839873][ T3577] veth0_macvtap: left promiscuous mode [ 1250.846223][ T3577] veth1_vlan: left promiscuous mode [ 1250.853367][ T3577] veth0_vlan: left promiscuous mode [ 1251.537954][T12373] binder: 12372:12373 ioctl c0306201 2000000003c0 returned -14 [ 1251.641298][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1375'. [ 1251.671947][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 1251.723600][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 1252.161582][ T2197] usb 7-1: USB disconnect, device number 4 [ 1252.170412][ T2197] ftdi_sio 7-1:0.41: device disconnected [ 1252.549832][T11136] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1252.560714][T11136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1252.607687][T12382] overlayfs: failed to resolve './file1': -2 [ 1252.616204][T11136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1252.633995][T11136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1252.659272][T11136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1253.472925][T12394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1379'. [ 1253.843492][ T30] audit: type=1800 audit(1752286582.164:13): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1378" name="bus" dev="overlay" ino=1918 res=0 errno=0 [ 1254.408257][T12384] chnl_net:caif_netlink_parms(): no params data found [ 1254.781615][T11136] Bluetooth: hci2: command tx timeout [ 1254.897574][T12411] binder: 12409:12411 ioctl 4018620d 0 returned -22 [ 1255.414297][T12422] binder: 12418:12422 ioctl c0306201 2000000003c0 returned -14 [ 1255.572523][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 1255.591156][T12426] overlayfs: failed to resolve './file0': -2 [ 1255.902489][T12384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.910585][T12384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.918320][T12384] bridge_slave_0: entered allmulticast mode [ 1255.927692][T12384] bridge_slave_0: entered promiscuous mode [ 1256.038646][T12384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.048713][T12384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.056893][T12384] bridge_slave_1: entered allmulticast mode [ 1256.066253][T12384] bridge_slave_1: entered promiscuous mode [ 1256.426815][T12384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.514010][ T2197] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1256.521896][T12384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.780901][ T2197] usb 4-1: Using ep0 maxpacket: 16 [ 1256.804602][ T2197] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1256.813546][ T2197] usb 4-1: config 0 has no interface number 0 [ 1256.838543][T12384] team0: Port device team_slave_0 added [ 1256.865062][T11136] Bluetooth: hci2: command tx timeout [ 1256.887045][T12384] team0: Port device team_slave_1 added [ 1256.895667][ T2197] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1256.908573][ T2197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.918074][ T2197] usb 4-1: Product: syz [ 1256.923198][ T2197] usb 4-1: Manufacturer: syz [ 1256.928037][ T2197] usb 4-1: SerialNumber: syz [ 1257.055442][T12384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.062721][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.063730][ T2197] usb 4-1: config 0 descriptor?? [ 1257.089271][T12384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.099194][T12384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.118800][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.145422][T12384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.288282][ T2197] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1257.447489][T12384] hsr_slave_0: entered promiscuous mode [ 1257.457265][T12384] hsr_slave_1: entered promiscuous mode [ 1257.465854][T12384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1257.473798][T12384] Cannot create hsr debugfs directory [ 1258.648033][ T2197] gspca_spca1528: reg_w err -71 [ 1258.653707][ T2197] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1258.694245][ T2197] usb 4-1: USB disconnect, device number 6 [ 1258.951408][T11136] Bluetooth: hci2: command tx timeout [ 1259.575811][T12384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1259.683559][T12384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1259.684765][T12467] binder: 12466:12467 ioctl c0306201 2000000003c0 returned -14 [ 1259.742348][T12384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1259.845327][T12384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1259.920344][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1405'. [ 1261.020615][T11136] Bluetooth: hci2: command tx timeout [ 1261.588769][ T30] audit: type=1326 audit(1752286589.994:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12486 comm="syz.4.1410" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec7158e929 code=0x0 [ 1262.986432][T12384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.149312][T12384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.228462][ T3863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.236128][ T3863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.339589][ T3863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.347219][ T3863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.845900][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1263.853079][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1264.491488][ T5895] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1264.684079][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 1264.704140][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.714743][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1264.726161][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1264.736254][ T5895] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1264.746436][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1264.949201][ T5895] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1264.958921][ T5895] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1264.967417][ T5895] usb 5-1: Manufacturer: syz [ 1265.030572][ T5895] usb 5-1: config 0 descriptor?? [ 1265.761221][T12528] kvm: pic: non byte write [ 1265.801941][T12384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.522761][T12384] veth0_vlan: entered promiscuous mode [ 1267.825197][T12384] veth1_vlan: entered promiscuous mode [ 1269.080774][ T5895] rc_core: IR keymap rc-hauppauge not found [ 1269.091544][ T5895] Registered IR keymap rc-empty [ 1269.097048][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1269.230029][T12384] veth0_macvtap: entered promiscuous mode [ 1269.286494][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1269.349351][T12384] veth1_macvtap: entered promiscuous mode [ 1269.411256][ T5895] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1269.426701][ T5895] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input45 [ 1269.638252][T12384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.732981][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1269.803996][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1269.822858][T12384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.866142][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1269.907925][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1269.937625][T12384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.947049][T12384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.956394][T12384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.965646][T12384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.984423][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1270.010992][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1270.084159][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1270.117461][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1270.145213][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1270.170792][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1270.274939][ T5895] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1270.283436][ T5895] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1270.402304][ T5895] usb 5-1: USB disconnect, device number 17 [ 1278.058113][T12643] fuse: Unknown parameter 'user_i00000000000000000000' [ 1278.167630][ T3815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.175892][ T3815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.490744][ T3992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.499184][ T3992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.981710][ T5895] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1279.269823][ T5895] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1279.279857][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.288375][ T5895] usb 7-1: Product: syz [ 1279.293191][ T5895] usb 7-1: Manufacturer: syz [ 1279.298017][ T5895] usb 7-1: SerialNumber: syz [ 1279.418633][ T5895] usb 7-1: config 0 descriptor?? [ 1279.657218][ T5895] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1281.577673][ T30] audit: type=1326 audit(1752286609.994:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.3.1469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb26d8e929 code=0x0 [ 1282.483751][ T5895] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1283.602960][T12682] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1470'. [ 1283.936200][ T5895] usb 7-1: USB disconnect, device number 5 [ 1284.700778][T12690] fuse: Unknown parameter 'user_i00000000000000000000' [ 1286.671009][ T5895] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1286.717407][ T30] audit: type=1326 audit(1752286615.154:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12718 comm="syz.3.1483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb26d8e929 code=0x0 [ 1286.880855][ T2197] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1286.905562][ T5895] usb 7-1: Using ep0 maxpacket: 16 [ 1286.922977][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.934534][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.975900][ T5895] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1286.985687][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1286.994208][ T5895] usb 7-1: Product: syz [ 1287.053187][ T5895] usb 7-1: config 0 descriptor?? [ 1287.131491][ T2197] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1287.141369][ T2197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.149831][ T2197] usb 5-1: Product: syz [ 1287.154538][ T2197] usb 5-1: Manufacturer: syz [ 1287.159543][ T2197] usb 5-1: SerialNumber: syz [ 1287.215598][ T2197] usb 5-1: config 0 descriptor?? [ 1287.473456][ T2197] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1287.496389][ T5895] appleir 0003:05AC:8241.000E: item fetching failed at offset 2/5 [ 1287.555360][ T5895] appleir 0003:05AC:8241.000E: parse failed [ 1287.562465][ T5895] appleir 0003:05AC:8241.000E: probe with driver appleir failed with error -22 [ 1287.707820][ T5895] usb 7-1: USB disconnect, device number 6 [ 1289.168351][T12739] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input46 [ 1289.247871][T12741] fuse: Unknown parameter 'user_i00000000000000000000' [ 1289.312489][ T2197] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1289.332381][ T2197] usb 5-1: USB disconnect, device number 18 [ 1291.500559][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 1292.096524][ T5903] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1292.601887][ T5903] usb 7-1: Using ep0 maxpacket: 16 [ 1294.324385][ T30] audit: type=1326 audit(1752286622.744:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.9.1499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faac4f8e929 code=0x0 [ 1294.510796][ T5903] usb 7-1: unable to read config index 0 descriptor/all [ 1294.518075][ T5903] usb 7-1: can't read configurations, error -71 [ 1295.867304][ T2197] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1296.148599][ T2197] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1296.158193][ T2197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.166479][ T2197] usb 5-1: Product: syz [ 1296.170854][ T2197] usb 5-1: Manufacturer: syz [ 1296.175590][ T2197] usb 5-1: SerialNumber: syz [ 1296.306264][ T2197] usb 5-1: config 0 descriptor?? [ 1296.645466][T12789] fuse: Unknown parameter 'user_id00000000000000000000' [ 1297.156693][ T2197] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1298.361813][T12799] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1511'. [ 1299.477044][T12805] binder: 12804:12805 ioctl c0306201 200000000380 returned -11 [ 1299.610726][ T2197] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1299.656758][ T2197] usb 5-1: USB disconnect, device number 19 [ 1300.150955][ T30] audit: type=1326 audit(1752286628.574:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12812 comm="syz.6.1515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc73ad8e929 code=0x0 [ 1301.681354][T12830] fuse: Unknown parameter 'user_id00000000000000000000' [ 1301.759039][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1518'. [ 1303.039255][ T30] audit: type=1800 audit(1752286631.464:19): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1524" name="bus" dev="overlay" ino=290 res=0 errno=0 [ 1303.610643][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1303.621020][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1303.630912][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1303.656339][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1303.674134][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1304.330487][ T2197] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 1304.438485][T12856] overlayfs: missing 'lowerdir' [ 1304.508009][ T2197] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1304.521287][ T2197] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.529645][ T2197] usb 10-1: Product: syz [ 1304.535504][ T2197] usb 10-1: Manufacturer: syz [ 1304.540525][ T2197] usb 10-1: SerialNumber: syz [ 1304.662426][ T2197] usb 10-1: config 0 descriptor?? [ 1304.894283][ T2197] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1305.124458][T12846] chnl_net:caif_netlink_parms(): no params data found [ 1305.830793][T11136] Bluetooth: hci3: command tx timeout [ 1306.636580][ T3863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.755590][ T3863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.830842][ T2197] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1306.873418][T11136] Bluetooth: hci1: command 0x0406 tx timeout [ 1306.911231][ T2197] usb 10-1: USB disconnect, device number 52 [ 1307.027192][ T3863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.321653][T12877] fuse: Unknown parameter 'user_id00000000000000000000' [ 1307.465887][ T3863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.538067][T12846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.546177][T12846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.553900][T12846] bridge_slave_0: entered allmulticast mode [ 1307.563154][T12846] bridge_slave_0: entered promiscuous mode [ 1307.800690][T12846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.808341][T12846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.816354][T12846] bridge_slave_1: entered allmulticast mode [ 1307.902587][ T5825] Bluetooth: hci3: command tx timeout [ 1307.925441][T12846] bridge_slave_1: entered promiscuous mode [ 1307.939647][ T3863] bridge_slave_1: left allmulticast mode [ 1307.945810][ T3863] bridge_slave_1: left promiscuous mode [ 1307.952364][ T3863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.975180][ T3863] bridge_slave_0: left allmulticast mode [ 1307.982189][ T3863] bridge_slave_0: left promiscuous mode [ 1307.988961][ T3863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.085936][T12883] No buffer was provided with the request [ 1308.217030][T12884] ===================================================== [ 1308.225532][T12884] BUG: KMSAN: uninit-value in sctp_inq_pop+0x14dc/0x19e0 [ 1308.233100][T12884] sctp_inq_pop+0x14dc/0x19e0 [ 1308.238063][T12884] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 1308.243519][T12884] sctp_inq_push+0x2a6/0x350 [ 1308.248370][T12884] sctp_backlog_rcv+0x3c7/0xda0 [ 1308.253805][T12884] sk_backlog_rcv+0x142/0x420 [ 1308.258761][T12884] __release_sock+0x1d3/0x330 [ 1308.264030][T12884] release_sock+0x6b/0x270 [ 1308.268730][T12884] sctp_wait_for_connect+0x458/0x820 [ 1308.275544][T12884] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1308.281706][T12884] sctp_sendmsg+0x3910/0x49f0 [ 1308.286690][T12884] inet_sendmsg+0x269/0x2a0 [ 1308.291790][T12884] __sock_sendmsg+0x278/0x3d0 [ 1308.296782][T12884] __sys_sendto+0x593/0x720 [ 1308.305229][T12884] __x64_sys_sendto+0x130/0x200 [ 1308.311551][T12884] x64_sys_call+0x3c0b/0x3db0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1308.316518][T12884] do_syscall_64+0xd9/0x210 [ 1308.321502][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.327584][T12884] [ 1308.330004][T12884] Uninit was stored to memory at: [ 1308.335469][T12884] sctp_inq_pop+0x144a/0x19e0 [ 1308.340702][T12884] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 1308.345930][T12884] sctp_inq_push+0x2a6/0x350 [ 1308.350804][T12884] sctp_backlog_rcv+0x3c7/0xda0 [ 1308.355851][T12884] sk_backlog_rcv+0x142/0x420 [ 1308.360829][T12884] __release_sock+0x1d3/0x330 [ 1308.365739][T12884] release_sock+0x6b/0x270 [ 1308.371809][T12884] sctp_wait_for_connect+0x458/0x820 [ 1308.377361][T12884] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1308.383534][T12884] sctp_sendmsg+0x3910/0x49f0 [ 1308.388592][T12884] inet_sendmsg+0x269/0x2a0 [ 1308.393701][T12884] __sock_sendmsg+0x278/0x3d0 [ 1308.398661][T12884] __sys_sendto+0x593/0x720 [ 1308.403703][T12884] __x64_sys_sendto+0x130/0x200 [ 1308.412422][T12884] x64_sys_call+0x3c0b/0x3db0 [ 1308.420261][T12884] do_syscall_64+0xd9/0x210 [ 1308.425052][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.431651][T12884] [ 1308.434226][T12884] Uninit was created at: [ 1308.439195][T12884] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1308.446325][T12884] kmalloc_reserve+0x22f/0x4b0 [ 1308.451807][T12884] __alloc_skb+0x347/0x7d0 [ 1308.456492][T12884] sctp_packet_transmit+0x18a1/0x46d0 [ 1308.462474][T12884] sctp_outq_flush+0x1c7d/0x67c0 [ 1308.467708][T12884] sctp_outq_uncork+0x9e/0xc0 [ 1308.473028][T12884] sctp_do_sm+0x8c8e/0x9720 [ 1308.477797][T12884] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 1308.483505][T12884] sctp_inq_push+0x2a6/0x350 [ 1308.488363][T12884] sctp_backlog_rcv+0x3c7/0xda0 [ 1308.493713][T12884] sk_backlog_rcv+0x142/0x420 [ 1308.498650][T12884] __release_sock+0x1d3/0x330 [ 1308.503939][T12884] release_sock+0x6b/0x270 [ 1308.516047][T12884] sctp_wait_for_connect+0x458/0x820 [ 1308.522048][T12884] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1308.527704][T12884] sctp_sendmsg+0x3910/0x49f0 [ 1308.533004][T12884] inet_sendmsg+0x269/0x2a0 [ 1308.537859][T12884] __sock_sendmsg+0x278/0x3d0 [ 1308.543109][T12884] __sys_sendto+0x593/0x720 [ 1308.547898][T12884] __x64_sys_sendto+0x130/0x200 [ 1308.553398][T12884] x64_sys_call+0x3c0b/0x3db0 [ 1308.558378][T12884] do_syscall_64+0xd9/0x210 [ 1308.563594][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.569775][T12884] [ 1308.573314][T12884] CPU: 0 UID: 0 PID: 12884 Comm: syz.3.1535 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(none) [ 1308.585877][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1308.596724][T12884] ===================================================== [ 1308.604190][T12884] Disabling lock debugging due to kernel taint [ 1308.613438][T12884] Kernel panic - not syncing: kmsan.panic set ... [ 1308.620055][T12884] CPU: 0 UID: 0 PID: 12884 Comm: syz.3.1535 Tainted: G B 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(none) [ 1308.633940][T12884] Tainted: [B]=BAD_PAGE [ 1308.638224][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1308.648451][T12884] Call Trace: [ 1308.651866][T12884] [ 1308.654922][T12884] __dump_stack+0x26/0x30 [ 1308.659481][T12884] dump_stack_lvl+0x53/0x270 [ 1308.664401][T12884] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1308.670472][T12884] dump_stack+0x1e/0x25 [ 1308.674837][T12884] panic+0x4bd/0xd50 [ 1308.678999][T12884] kmsan_report+0x31c/0x320 [ 1308.683740][T12884] ? __msan_warning+0x1b/0x30 [ 1308.688650][T12884] ? sctp_inq_pop+0x14dc/0x19e0 [ 1308.693698][T12884] ? sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 1308.699009][T12884] ? sctp_inq_push+0x2a6/0x350 [ 1308.703954][T12884] ? sctp_backlog_rcv+0x3c7/0xda0 [ 1308.709162][T12884] ? sk_backlog_rcv+0x142/0x420 [ 1308.714208][T12884] ? __release_sock+0x1d3/0x330 [ 1308.719246][T12884] ? release_sock+0x6b/0x270 [ 1308.724072][T12884] ? sctp_wait_for_connect+0x458/0x820 [ 1308.729722][T12884] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1308.735523][T12884] ? sctp_sendmsg+0x3910/0x49f0 [ 1308.740588][T12884] ? inet_sendmsg+0x269/0x2a0 [ 1308.745488][T12884] ? __sock_sendmsg+0x278/0x3d0 [ 1308.750518][T12884] ? __sys_sendto+0x593/0x720 [ 1308.755386][T12884] ? __x64_sys_sendto+0x130/0x200 [ 1308.760621][T12884] ? x64_sys_call+0x3c0b/0x3db0 [ 1308.765689][T12884] ? do_syscall_64+0xd9/0x210 [ 1308.770581][T12884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.776828][T12884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.783100][T12884] ? kmsan_get_metadata+0xfb/0x160 [ 1308.788421][T12884] ? kmsan_get_metadata+0xfb/0x160 [ 1308.793746][T12884] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1308.800283][T12884] ? kmsan_get_metadata+0xfb/0x160 [ 1308.805615][T12884] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1308.811648][T12884] ? kmsan_get_metadata+0xfb/0x160 [ 1308.816987][T12884] __msan_warning+0x1b/0x30 [ 1308.821708][T12884] sctp_inq_pop+0x14dc/0x19e0 [ 1308.826597][T12884] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 1308.831737][T12884] ? __schedule+0xffb/0x76c0 [ 1308.836527][T12884] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1308.842560][T12884] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 1308.848219][T12884] sctp_inq_push+0x2a6/0x350 [ 1308.853009][T12884] sctp_backlog_rcv+0x3c7/0xda0 [ 1308.858060][T12884] ? kmsan_get_metadata+0xfb/0x160 [ 1308.863434][T12884] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 1308.868988][T12884] sk_backlog_rcv+0x142/0x420 [ 1308.873863][T12884] __release_sock+0x1d3/0x330 [ 1308.878719][T12884] release_sock+0x6b/0x270 [ 1308.883332][T12884] sctp_wait_for_connect+0x458/0x820 [ 1308.888797][T12884] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1308.895115][T12884] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1308.900713][T12884] ? kmsan_get_metadata+0xfb/0x160 [ 1308.906035][T12884] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1308.912106][T12884] sctp_sendmsg+0x3910/0x49f0 [ 1308.917000][T12884] ? kmsan_save_stack_with_flags+0x60/0x60 [ 1308.923095][T12884] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1308.928340][T12884] inet_sendmsg+0x269/0x2a0 [ 1308.933074][T12884] __sock_sendmsg+0x278/0x3d0 [ 1308.937945][T12884] __sys_sendto+0x593/0x720 [ 1308.942648][T12884] ? do_futex+0x3a1/0x480 [ 1308.947225][T12884] __x64_sys_sendto+0x130/0x200 [ 1308.952311][T12884] x64_sys_call+0x3c0b/0x3db0 [ 1308.957209][T12884] do_syscall_64+0xd9/0x210 [ 1308.961928][T12884] ? irqentry_exit+0x16/0x60 [ 1308.966712][T12884] ? clear_bhb_loop+0x40/0x90 [ 1308.971577][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.977674][T12884] RIP: 0033:0x7feb26d8e929 [ 1308.982262][T12884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1309.002080][T12884] RSP: 002b:00007feb27c20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1309.010780][T12884] RAX: ffffffffffffffda RBX: 00007feb26fb6160 RCX: 00007feb26d8e929 [ 1309.018915][T12884] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000009 [ 1309.027045][T12884] RBP: 00007feb26e10b39 R08: 000020000005ffe4 R09: 000000000000001c [ 1309.035173][T12884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1309.043372][T12884] R13: 0000000000000000 R14: 00007feb26fb6160 R15: 00007ffe3b73d298 [ 1309.051531][T12884] [ 1309.055066][T12884] Kernel Offset: disabled [ 1309.059461][T12884] Rebooting in 86400 seconds..