last executing test programs: 18.4066121s ago: executing program 0 (id=1608): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x8004) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000000), &(0x7f0000000200)=""/190, &(0x7f00000000c0)="1a6f97f2cf604ec5b15863ebfb14b086ab74f81e49cc36dfa7b97c0a10012a8060f04cb052c7fc5fdb349809491307a1269d76fb31603b673aeaa5d73ca8dedb2299a7d01bc8bb062fe6f7e15210d867b705bc69866033e9956ef0f7506b5cac0689f4f7140d2848137f82bc9d03f4", &(0x7f00000002c0)="78f63327021a582e63ee1340b130c7c3b1ae31f31ce88539e92f45051a728e6b9a7f6ada3d4ec71d0d5e83017a7cc9d1d0381c23944fdbe82c653d07bf17df508e57e392ec5e44b2555d845969b511770692f6f40556e2101ee58a9ca7ec1a8a868e361491cda543c6430f489c2c67f11acec79394da0257dde740042c485f003de16c7350ff3f50a96aa35c175ce2b51e821ed175", 0xcdad, 0x1, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r5 = syz_open_pts(r4, 0x8182) r6 = dup3(r5, r4, 0x0) read$FUSE(r6, &(0x7f0000004340)={0x2020}, 0x2020) 18.080252419s ago: executing program 4 (id=1609): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x9}}, 0xfffffffc}, 0x80, 0x0, 0x0, 0x0, 0x54}, 0x640ce0c0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="66b9800100400f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x3b, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x3, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f00000006c0)={{0x0, 0x0, 0x80}}) write(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x8000000, 0xe0000, 0x9, 0x3, 0x0, [{0x2, 0x3, 0x5, '\x00', 0x7}, {0xd, 0x7, 0x96, '\x00', 0x3}, {0xfe, 0xf2, 0x3, '\x00', 0xaf}, {0x17, 0xf8, 0x4, '\x00', 0xf4}, {0x6, 0xd, 0x4, '\x00', 0x9}, {0x5b, 0xc, 0xb, '\x00', 0x8}, {0xb0, 0x1, 0x3, '\x00', 0xc9}, {0x7, 0x1, 0x93, '\x00', 0xfd}, {0xfd, 0x1, 0x5}, {0x75, 0x81, 0xd, '\x00', 0x7}, {0x0, 0x6, 0xb, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x9}, {0x2, 0x26, 0x7b, '\x00', 0xb}, {0xb, 0x6, 0x3}, {0x5, 0x10, 0x22, '\x00', 0xc}, {0xe, 0x1, 0x8, '\x00', 0x82}, {0x5, 0x2, 0xa6, '\x00', 0x9}, {0xf, 0xd, 0x9, '\x00', 0x68}, {0x8, 0x45, 0xf2, '\x00', 0x1}, {0x5, 0x8, 0x1, '\x00', 0x3}, {0xc, 0x7, 0x0, '\x00', 0xf}, {0x2, 0xa1, 0x4}, {0xf9, 0x70, 0xe, '\x00', 0x1c}, {0x76, 0x1, 0xff, '\x00', 0x10}]}}) syz_clone(0x6102400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_dev$loop(0x0, 0x800, 0x4042) ioctl$BLKBSZGET(r8, 0x80041270, &(0x7f0000000100)) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "ed7775e65eafd28c998ed46d479658881ccacd0c245ad4d444213a00202509c5accfa410081d82ce2a4905411dee1154155efeb6111658c4224f35d6d4f57692", 0x33}, 0x48, 0xfffffffffffffffd) 17.015634556s ago: executing program 2 (id=1610): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b, 0xc001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x7}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffb}]}}}]}, 0x40}}, 0x20000844) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x40000c0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) fsopen(0x0, 0x1) 15.604422312s ago: executing program 4 (id=1612): syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x400000) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x40) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000080)={0x980900, 0x9}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_cancel(0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000040)=[{0x0}], 0x1) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/72, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x15) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_expedited', 0x42, 0x0) 15.515500021s ago: executing program 3 (id=1613): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) close(r7) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) lsm_get_self_attr(0x65, &(0x7f0000000200)={0x0, 0x0, 0x3b, 0x1b, ""/27}, &(0x7f0000000240)=0x3b, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x20000000) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000107}]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000306050000000000000000000200007805000100070000000900020073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) 15.407565559s ago: executing program 0 (id=1614): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESHEX, @ANYRES64=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x0) 14.499826351s ago: executing program 1 (id=1615): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r7, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x38}}, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x541b, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 14.258771538s ago: executing program 2 (id=1616): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x5d7440, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1991a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000040)=0xfffffffc, 0x4) sendmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x80}}, 0x4048884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000280)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000400fc80", @ANYRES32=r10, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x2, r11, 0x2, 0x0) 13.170119122s ago: executing program 4 (id=1617): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r7, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x38}}, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x541b, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 12.467343879s ago: executing program 3 (id=1618): openat$tun(0xffffffffffffff9c, 0x0, 0x24981, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x30, &(0x7f0000000600)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e20, 0xfffffc00, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}, @in6={0xa, 0x4e23, 0x6adcc8a4, @empty, 0xfffffffc}, @in6={0xa, 0x4e21, 0x10, @mcast2, 0x503ccbec}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000500)={r6, 0x8}, &(0x7f0000000540)=0x8) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r9, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r9], &(0x7f0000000200), &(0x7f00000000c0)=[r10], &(0x7f0000000040), 0x0, 0x300}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 12.165545977s ago: executing program 0 (id=1619): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r4}, 0x38) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r7, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x38}}, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x541b, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 11.590528646s ago: executing program 2 (id=1620): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000040)={0x3fffffff, 0x101, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfff, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffff9c, &(0x7f0000000040), 0x102281, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000000c0)=[@decrefs], 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000006010040"]) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="cb16000004000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d3287a7b01ab84d336f3c0f45a0642d6f2c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d253e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd3153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be15579518540000bc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e99948a9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676080000007229e0237c1e34641848531712ff09e89fb062a3e66f4f3c9d7a7fc9aab1ced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a690bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b270a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b380380020000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) 9.875302482s ago: executing program 1 (id=1621): socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0xec62, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\b'}]}], {0x14, 0x11, 0x1, 0x4}}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r3, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r5, 0x0) 9.756649928s ago: executing program 3 (id=1622): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@dev, 0x0}, &(0x7f0000000300)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x8, 0x78, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x40, 0x20, 0x8, 0x6}}) statx(r3, &(0x7f00000006c0)='./file0\x00', 0x1000, 0x8, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000b40)=@acquire={0x37c, 0x17, 0x0, 0x70bd27, 0x25dfdbfe, {{@in6=@mcast1, 0x4d6, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {@in6=@private0, @in6=@mcast2, 0x4e22, 0x0, 0x4e23, 0xbf14, 0xa, 0x0, 0x20, 0x1d, r6, r7}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e23, 0x9, 0x4e24, 0x100, 0xa, 0x20, 0x0, 0x21, r8, r9}, {0x3, 0x1000, 0xb112, 0x3, 0x4, 0x9, 0x5, 0x7}, {0x6, 0x400, 0x2, 0x4}, 0x1f, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x2, 0x8, 0x7, 0x70bd28}, [@user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0xa}}, @migrate={0x1cc, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, @in=@loopback, 0x6c, 0x0, 0x0, 0x3500, 0x2, 0xa}, {@in6=@private1, @in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x1f}, @in=@rand_addr=0x64010101, 0x33, 0x1, 0x0, 0x3503, 0x2, 0xa}, {@in6=@local, @in=@loopback, @in=@loopback, @in6=@private1, 0x32, 0x4, 0x0, 0x3501, 0xa, 0xa}, {@in=@broadcast, @in=@rand_addr=0x64010100, @in6=@mcast2, @in=@multicast2, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@rand_addr=0x64010100, @in=@local, @in=@broadcast, @in6=@private2, 0x32, 0x2, 0x0, 0x0, 0xa, 0x2}, {@in6=@loopback, @in=@multicast1, @in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x32, 0x4, 0x0, 0x3501, 0xa, 0x2}]}, @extra_flags={0x8, 0x18, 0xffffff4b}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @tfcpad={0x8, 0x16, 0x7601}, @srcaddr={0x14, 0xd, @in=@broadcast}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}}]}, 0x37c}, 0x1, 0x0, 0x0, 0x4}, 0x48080) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2493}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000000) write$apparmor_current(r2, &(0x7f0000000100)=@profile={'changeprofile ', '{)}/!+/\\+\'\x00'}, 0x19) r11 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000500)={r11, 0x3, 0x2, r11}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r11, 0x7, 0x2, r11}) write$binfmt_misc(r3, &(0x7f0000000640), 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e5d, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x78}, 0x9c) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.9382758s ago: executing program 3 (id=1623): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) listen(r4, 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = fcntl$dupfd(r4, 0x406, r3) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x60000}], 0x1, 0x0, 0x0) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x1c22, 0x2, 0x0, 0x17f}, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_setup(0x4082, &(0x7f0000000380)) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10}, 0x0, &(0x7f00000014c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) 8.234632371s ago: executing program 0 (id=1624): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x8004) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000000), &(0x7f0000000200)=""/190, &(0x7f00000000c0)="1a6f97f2cf604ec5b15863ebfb14b086ab74f81e49cc36dfa7b97c0a10012a8060f04cb052c7fc5fdb349809491307a1269d76fb31603b673aeaa5d73ca8dedb2299a7d01bc8bb062fe6f7e15210d867b705bc69866033e9956ef0f7506b5cac0689f4f7140d2848137f82bc9d03f4", &(0x7f00000002c0)="78f63327021a582e63ee1340b130c7c3b1ae31f31ce88539e92f45051a728e6b9a7f6ada3d4ec71d0d5e83017a7cc9d1d0381c23944fdbe82c653d07bf17df508e57e392ec5e44b2555d845969b511770692f6f40556e2101ee58a9ca7ec1a8a868e361491cda543c6430f489c2c67f11acec79394da0257dde740042c485f003de16c7350ff3f50a96aa35c175ce2b51e821ed175", 0xcdad, 0x1, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r5 = syz_open_pts(r4, 0x8182) r6 = dup3(r5, r4, 0x0) read$FUSE(r6, &(0x7f0000004340)={0x2020}, 0x2020) 8.179923502s ago: executing program 2 (id=1625): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') fremovexattr(r4, &(0x7f00000000c0)=@random={'user.', '\x00'}) r5 = socket$unix(0x1, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r7 = eventfd2(0x0, 0x800) fcntl$dupfd(r0, 0x0, r4) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7ff, r1, &(0x7f0000000680)="1cabe66a055516a56bd83fbe96d83bca72fe0d921a5b686ddfa2185235db9552fb8fb71627069f2849f9f12047b55638d838c57a3c2f1ea06f35e9b9dcef8f291a74a44208c87a189060629fda0bb92631c777ea68e981fb25b06aa06a5d17e2b7f7a04c5bd590614e58009f1d50d9992202b08c1942ebb72395a218d78e2bc2210d1f7fa3460ff52ddd5b0cbc17c4ad09a48c44eb8f9a044c4e84db25e48002157e010000000000008022537f69013733703de101729126ea3d4b8084f6aff0658eecb2471c24f9845947658326020a4583f7869536cf003ce4d0f21d23de886f9897", 0xe3, 0x7fffffffffffffff, 0x0, 0x3, r7}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) io_getevents(r6, 0x0, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000080)={0x0, 0x989680}) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev\x00') preadv(r8, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f00000004c0)=""/55, 0x37}], 0x7, 0x0, 0x800) 8.05223431s ago: executing program 4 (id=1626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b, 0xc001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x7}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffb}]}}}]}, 0x40}}, 0x20000844) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x40000c0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) fsopen(0x0, 0x1) 7.918020947s ago: executing program 1 (id=1627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1370, &(0x7f0000000380)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0), 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) sendmmsg$alg(r7, 0x0, 0x0, 0x4c800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) 7.398495733s ago: executing program 3 (id=1628): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) listen(r4, 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = fcntl$dupfd(r4, 0x406, r3) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x60000}], 0x1, 0x0, 0x0) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x1c22, 0x2, 0x0, 0x17f}, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_setup(0x4082, &(0x7f0000000380)) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10}, 0x0, &(0x7f00000014c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) 6.457315547s ago: executing program 0 (id=1629): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x8, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x6}, {0xd000, 0xf000, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x6}, {0x1, 0xffff1000, 0xc, 0x1, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0xb6, 0x90}, {0x2, 0x100000, 0x0, 0x6, 0xf}, {0x8000000, 0xeeee8000, 0xa, 0x0, 0x2, 0x0, 0x9, 0x7, 0x3a, 0x2, 0xff}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfa, 0x0, 0x0, 0x5}, {0x0, 0x400}, {0xdddd0000}, 0xddf8fffb, 0x0, 0xeeee0000, 0x100, 0x8, 0x8000, 0xffff1000, [0x0, 0x10000000000, 0x2]}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f00002b9000/0xf000)=nil, 0xf000, 0x0, 0x4008031, 0xffffffffffffffff, 0x4000) sendmsg$nl_route_sched(r2, 0x0, 0x20000800) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000200)={0x81, 0xc000000, {}, {0xffffffffffffffff}, 0x58, 0x8000}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 5.36402736s ago: executing program 1 (id=1630): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r5, @ANYRESHEX, @ANYRES64=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c000feffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed00ffbf002000000000001d440000000000007a0a00fe00ffffffc3030000a0000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x0) 5.318264373s ago: executing program 4 (id=1631): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x1, 0x0, 0x4, {0xa, 0x4e23, 0x9, @loopback, 0x5}}}, 0x80, 0x0, 0xfffffffffffffeb3}, 0x2000f765) ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="4ede00"}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20009005}, 0x40) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) syz_io_uring_setup(0x241d, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x0, 0x267}, &(0x7f0000000100), &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x9}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.625881129s ago: executing program 2 (id=1632): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r7, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x38}}, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x541b, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3.581754872s ago: executing program 3 (id=1633): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x2, 0x0}, @empty, 0x1, 0x5, [@multicast1, @multicast1, @private=0xa010100, @private=0xa010102, @rand_addr=0x64010100]}, 0x24) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x10008095, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.240215632s ago: executing program 1 (id=1634): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES64=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x0) 1.465452491s ago: executing program 4 (id=1635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r4}, 0x38) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r7, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x38}}, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x541b, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.411743308s ago: executing program 1 (id=1636): socket(0x18, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r3 = gettid() ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000002c0)={0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@updpolicy={0xf70, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xc}}, [@algo_aead={0xd63, 0x12, {{'morus640-sse2\x00'}, 0x68b8, 0x200, "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"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @migrate={0x9c, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, @in=@broadcast, @in6=@remote, 0x3c, 0x1, 0x0, 0x3507, 0xa}, {@in6=@mcast1, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x2, 0x0, 0x3505, 0x2, 0x2}]}, @lastused={0xc, 0xf, 0x4}, @etimer_thresh={0x8, 0xc, 0xffff}, @lastused={0xc, 0xf, 0x2}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2b, 0x70bd26, 0x70bd2d, 0x70bd26, 0xa, [0x5, 0xae8, 0x3, 0x1000]}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@rand_addr=0x64010102, 0x0, 0xa}}]}, 0xf70}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffffcc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000002c68c0a", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf255d00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900f8ffffff7f0000004000a6800a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000800a500010000001000a6800a00060008021100000100000800a50001000000"], 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x48090) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r9, @ANYRESHEX], 0x0) 924.245841ms ago: executing program 0 (id=1637): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r4}, 0x38) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r7, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x38}}, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x541b, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 0s ago: executing program 2 (id=1638): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r4}, 0x38) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r7, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x38}}, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x541b, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) kernel console output (not intermixed with test programs): an invalid descriptor of length 0, skipping remainder of the config [ 997.031345][ T1212] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 997.121071][ T1212] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 997.196005][ T1212] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 997.356249][T13884] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1391'. [ 997.467179][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.613829][ T1212] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 997.761049][ T12] net_ratelimit: 19 callbacks suppressed [ 997.761084][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 997.781497][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 997.796253][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 997.810968][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 997.921536][ T1212] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 998.403918][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 998.418291][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 998.432627][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 998.446907][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 998.659071][T10687] usb 4-1: USB disconnect, device number 41 [ 998.853192][T13893] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1393'. [ 998.867241][T13892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'. [ 998.906191][T13879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.921560][T13879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.287115][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 999.301849][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1001.072888][ T983] usb 1-1: USB disconnect, device number 41 [ 1002.925332][ T6797] net_ratelimit: 19 callbacks suppressed [ 1002.925353][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1002.946631][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1002.961079][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1002.975425][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1003.624197][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1003.638666][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1003.653033][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1003.667330][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1003.711147][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'. [ 1004.202494][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1004.216950][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1004.797511][T13944] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1403'. [ 1004.837566][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1004.837583][ T30] audit: type=1326 audit(1757994898.435:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1005.241516][T10687] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1005.398196][ T30] audit: type=1326 audit(1757994898.435:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1005.420852][ T30] audit: type=1326 audit(1757994898.435:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1005.428341][T10687] usb 3-1: config 0 has no interfaces? [ 1005.448987][ T30] audit: type=1326 audit(1757994898.435:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13935 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1005.634232][T10687] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1005.643658][T10687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.661399][T10687] usb 3-1: Product: syz [ 1005.682048][T10687] usb 3-1: Manufacturer: syz [ 1005.859763][T10687] usb 3-1: SerialNumber: syz [ 1006.185029][T10687] usb 3-1: config 0 descriptor?? [ 1006.678341][T13944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.687855][T13944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.152194][T13944] veth0_vlan: left promiscuous mode [ 1007.163953][T13944] veth0_vlan: entered promiscuous mode [ 1007.676079][ T5974] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1007.722697][T13954] loop8: detected capacity change from 0 to 7 [ 1007.760649][T13954] Dev loop8: unable to read RDB block 7 [ 1007.766457][T13954] loop8: AHDI p1 p2 p3 [ 1007.771144][T13954] loop8: partition table partially beyond EOD, truncated [ 1007.787096][T13954] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1007.794747][T13954] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1007.871054][ T6256] Dev loop8: unable to read RDB block 7 [ 1007.888952][ T6256] loop8: AHDI p1 p2 p3 [ 1007.973999][ T6256] loop8: partition table partially beyond EOD, truncated [ 1008.170584][ T6256] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1008.177901][ T5974] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1008.209446][ T6256] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1008.221393][ T5942] usb 3-1: USB disconnect, device number 51 [ 1008.247061][ T5974] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1008.348433][ T6797] net_ratelimit: 26 callbacks suppressed [ 1008.348447][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1008.349135][ T5974] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1008.354531][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1008.392752][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1008.407701][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1008.422422][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.449144][T13960] Dev loop8: unable to read RDB block 7 [ 1008.614737][T13959] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1008.623388][T13960] loop8: AHDI p1 p2 p3 [ 1008.627688][T13960] loop8: partition table partially beyond EOD, truncated [ 1008.651245][T13960] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1008.675805][ T5974] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1009.001393][T13960] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1009.118640][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1009.133194][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1009.147567][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1009.161895][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1010.186807][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1010.201375][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1011.714265][ T5974] usb 5-1: USB disconnect, device number 56 [ 1013.341179][T13997] create_pit_timer: 29 callbacks suppressed [ 1013.341193][T13997] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1013.392942][ T6805] net_ratelimit: 19 callbacks suppressed [ 1013.392957][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1013.413328][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1013.427751][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1013.442198][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1014.085982][T14014] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1415'. [ 1014.105258][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1014.119693][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1014.134067][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1014.149860][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1014.953411][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1014.967920][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1016.210099][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 1016.468992][ T5927] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1016.727090][T14036] gretap1: entered promiscuous mode [ 1016.790459][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'. [ 1016.889602][ T5927] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1017.305616][T14020] syz.3.1417 (14020): drop_caches: 2 [ 1017.352719][ T5927] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1017.375086][ T5927] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1017.387911][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.412684][T14031] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1017.426195][ T5927] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1018.262199][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1420'. [ 1018.356364][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1421'. [ 1018.541947][ T6805] net_ratelimit: 14 callbacks suppressed [ 1018.541964][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1018.562115][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1018.576463][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1018.590738][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1018.850334][ T5970] usb 1-1: USB disconnect, device number 42 [ 1019.399048][T14055] block nbd0: Attempted send on invalid socket [ 1019.405337][T14055] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1019.485832][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1019.500358][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1019.514825][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1019.529172][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1020.140340][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1020.154819][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1020.690589][T14068] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.1423'. [ 1020.967394][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1423'. [ 1022.729057][ T5974] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1022.896578][ T5974] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1022.931735][ T5974] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1022.955008][ T5974] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1022.965749][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.125707][T14076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1023.138362][ T5974] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1024.084859][ T77] net_ratelimit: 22 callbacks suppressed [ 1024.084877][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1024.104896][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1024.119190][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1024.133514][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1024.159193][T14098] fuse: Bad value for 'fd' [ 1024.170935][T14098] fuse: Bad value for 'fd' [ 1024.438940][ T1212] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1024.770655][ T1212] usb 5-1: Using ep0 maxpacket: 16 [ 1024.848969][ T5974] usb 4-1: USB disconnect, device number 42 [ 1024.856199][ T1212] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.882553][ T1212] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1025.111649][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 1025.121187][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 1025.130247][T14106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1025.205131][T14106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1431'. [ 1025.217967][T14106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.482533][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1025.496991][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1025.511377][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1025.519671][ T1212] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1025.525672][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1025.537400][ T1212] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1026.016482][ T983] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1026.028264][ T1212] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1026.442403][ T983] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1026.472591][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1026.550958][ T983] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1026.630662][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.646941][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1026.731104][ T983] usb 2-1: config 0 descriptor?? [ 1027.030229][T14116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.058126][T14116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.107701][T14114] : entered promiscuous mode [ 1027.336338][T14114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.385676][T14114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.783415][ T5970] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1027.797069][ T983] ath6kl: Failed to submit usb control message: -71 [ 1028.174370][ T983] ath6kl: unable to send the bmi data to the device: -71 [ 1028.286850][ T5942] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1028.489196][ T983] ath6kl: Unable to send get target info: -71 [ 1028.521863][ T5970] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1028.560410][ T983] ath6kl: Failed to init ath6kl core: -71 [ 1028.566244][ T5970] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1028.593801][ T983] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1028.604414][ T5970] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1028.659655][ T983] usb 2-1: USB disconnect, device number 47 [ 1028.678948][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.700992][ T5942] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1028.722716][ T5942] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1028.752804][ T5942] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1028.762449][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.788424][T14122] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1028.800199][ T5970] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1028.834326][T14129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1029.159168][ T1212] usb 5-1: string descriptor 0 read error: -71 [ 1029.165430][ T1212] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1029.254439][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1029.271393][ T1212] usb 5-1: can't set config #1, error -71 [ 1029.293942][ T1212] usb 5-1: USB disconnect, device number 57 [ 1029.377428][ T6801] net_ratelimit: 19 callbacks suppressed [ 1029.377445][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1029.397763][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1029.412207][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1029.426710][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1029.782509][ T5942] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1029.882951][T14139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1438'. [ 1030.150672][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1030.165147][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1030.179657][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1030.194015][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1030.945865][ T5970] usb 3-1: USB disconnect, device number 52 [ 1031.381871][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1031.396459][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1031.433784][ T983] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1031.759511][ T1212] usb 1-1: USB disconnect, device number 43 [ 1031.922651][ T983] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1032.012796][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.122702][ T983] usb 5-1: Product: syz [ 1032.199756][ T983] usb 5-1: Manufacturer: syz [ 1032.238885][ T983] usb 5-1: SerialNumber: syz [ 1032.279989][ T983] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1032.340257][ T5970] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1032.348099][ T5942] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1032.511491][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'. [ 1032.549316][ T5970] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1032.572075][ T5970] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1032.714073][ T5970] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1032.723571][T14133] input: syz1 as /devices/virtual/input/input35 [ 1032.789926][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.817306][T14156] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1033.413062][ T5970] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1033.507162][ T5942] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1033.589113][ T5942] ath9k_htc: Failed to initialize the device [ 1033.759153][ T1212] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1033.779562][T14130] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1033.964569][ T1212] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.979244][ T1212] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1034.005925][ T1212] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1034.048956][T14130] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1034.060379][T14130] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1034.103004][ T5942] usb 5-1: ath9k_htc: USB layer deinitialized [ 1034.152706][ T1212] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1034.200477][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.505764][T14130] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1034.516063][ T1212] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1034.538389][T14163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.549179][T14163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.615624][T14130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.674634][ T1212] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1034.708353][T10687] usb 5-1: USB disconnect, device number 58 [ 1034.764571][T14165] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1034.784726][ T6805] net_ratelimit: 22 callbacks suppressed [ 1034.784747][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1034.805045][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1034.819349][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1034.833618][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1034.891066][T14130] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1035.129425][T14130] usb 3-1: USB disconnect, device number 53 [ 1035.281961][ T5958] udevd[5958]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1035.843862][T14185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1035.850014][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1035.873928][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1035.888273][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1035.902707][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1035.919975][T14184] netlink: 'syz.4.1445': attribute type 1 has an invalid length. [ 1036.578604][T14130] usb 4-1: USB disconnect, device number 43 [ 1036.723667][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1036.740544][ T5942] usb 1-1: USB disconnect, device number 44 [ 1037.391681][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 1037.392425][T14196] gretap1: entered promiscuous mode [ 1037.469046][ T5942] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1038.153068][ T5942] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1038.194827][ T5942] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1038.234911][ T5942] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1038.272384][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.362075][T14194] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1038.374143][ T5942] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1040.079010][ T983] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1040.321542][T13483] net_ratelimit: 23 callbacks suppressed [ 1040.321559][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1040.341578][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1040.355999][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1040.370267][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1040.559073][ T1212] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1040.634667][T10687] usb 1-1: USB disconnect, device number 45 [ 1040.716261][ T983] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1040.749041][ T983] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1040.813752][ T1212] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1040.826034][ T1212] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1040.838058][ T1212] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1040.857614][ T983] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1040.873543][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.898119][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.985972][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1453'. [ 1041.024222][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1041.039009][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1041.054328][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1041.068782][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1041.176677][T14216] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1041.194869][T14221] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1041.206194][ T983] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1041.608942][T10687] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1041.840161][T10687] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.852248][ T1212] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1041.864837][T10687] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1041.884120][T10687] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1041.924183][T10687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.193012][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1042.207595][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1042.543475][T10687] usb 1-1: config 0 descriptor?? [ 1042.619952][T10687] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1042.641815][T10687] dvb-usb: bulk message failed: -22 (3/0) [ 1042.691032][T10687] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1042.766947][T10687] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1042.798970][T10687] usb 1-1: media controller created [ 1042.821596][T10687] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1042.846014][T14233] dibusb: i2c wr: len=61 is too big! [ 1042.846014][T14233] [ 1042.867960][T14233] netlink: 'syz.0.1454': attribute type 6 has an invalid length. [ 1043.380164][T10687] dvb-usb: bulk message failed: -22 (6/0) [ 1043.509039][T10687] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1043.616316][ T983] usb 3-1: USB disconnect, device number 54 [ 1043.816092][T10687] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 1043.884251][T10687] dvb-usb: schedule remote query interval to 150 msecs. [ 1043.895287][T10687] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1044.105682][T10687] dvb-usb: bulk message failed: -22 (1/0) [ 1044.117478][T10687] dvb-usb: error while querying for an remote control event. [ 1044.131434][ T5927] usb 4-1: USB disconnect, device number 44 [ 1044.247730][ T983] usb 1-1: USB disconnect, device number 46 [ 1044.426746][T14247] netlink: 'syz.2.1457': attribute type 10 has an invalid length. [ 1044.498301][ T983] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1044.563766][T14251] netlink: 'syz.2.1457': attribute type 10 has an invalid length. [ 1044.572216][T14247] team0: Port device dummy0 added [ 1044.753130][T14251] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1044.798951][ T5942] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1045.319650][T14251] team0: Failed to send options change via netlink (err -105) [ 1045.328327][T14251] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1045.337830][T14251] team0: Port device dummy0 removed [ 1045.348937][ T5927] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1045.445190][ T5942] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1045.455284][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.494402][ T5942] usb 5-1: Product: syz [ 1045.509356][ T5942] usb 5-1: Manufacturer: syz [ 1045.514005][ T5942] usb 5-1: SerialNumber: syz [ 1045.552172][ T5942] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1045.636776][ T5970] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1045.853094][ T5927] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1045.869014][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.889613][ T6811] net_ratelimit: 22 callbacks suppressed [ 1045.889627][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1045.909945][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1045.924365][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1045.938962][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1045.959448][ T5928] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1045.960424][ T30] audit: type=1326 audit(1757994939.485:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1045.968147][ T5927] usb 3-1: config 0 descriptor?? [ 1046.103549][ T30] audit: type=1326 audit(1757994939.485:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1046.213327][ T5927] pwc: Creative Labs Webcam Pro Ex detected. [ 1046.239090][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 1046.280417][ T5928] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1046.298900][ T5928] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1046.355609][ T5928] usb 1-1: config 0 has no interface number 0 [ 1046.617536][ T30] audit: type=1326 audit(1757994940.215:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1046.759850][ T5970] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1046.763279][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1046.781446][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1046.796001][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1046.810472][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1046.832750][ T5928] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1046.834197][ T30] audit: type=1326 audit(1757994940.215:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1046.999204][ T5970] ath9k_htc: Failed to initialize the device [ 1047.024590][ T30] audit: type=1326 audit(1757994940.215:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1047.047128][ T30] audit: type=1326 audit(1757994940.215:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1047.081388][ T30] audit: type=1326 audit(1757994940.215:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1047.105385][ T30] audit: type=1326 audit(1757994940.215:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1047.175721][ T5970] usb 5-1: ath9k_htc: USB layer deinitialized [ 1047.241744][ T5928] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1047.404652][ T5928] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1047.416882][ T30] audit: type=1326 audit(1757994940.215:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1047.469862][ T5928] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1047.479308][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1047.491914][ T5928] usb 1-1: Product: syz [ 1047.554077][ T1212] usb 5-1: USB disconnect, device number 59 [ 1047.580682][ T5928] usb 1-1: config 0 descriptor?? [ 1047.604475][T14257] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1047.635964][ T5928] usb 1-1: can't set config #0, error -71 [ 1047.686670][ T5928] usb 1-1: USB disconnect, device number 47 [ 1047.752556][ T30] audit: type=1326 audit(1757994940.215:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1048.061475][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1048.075946][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1048.251729][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 1048.389143][ T5942] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1048.681322][ T5942] usb 1-1: config 0 has no interfaces? [ 1048.718271][ T5942] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1048.727512][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.757187][ T5942] usb 1-1: Product: syz [ 1048.787304][ T5942] usb 1-1: Manufacturer: syz [ 1048.830368][ T5942] usb 1-1: SerialNumber: syz [ 1048.857539][ T5927] pwc: Failed to set LED on/off time (-71) [ 1048.861965][ T5942] usb 1-1: config 0 descriptor?? [ 1048.869161][ T5927] pwc: send_video_command error -71 [ 1048.874425][ T5927] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1049.011813][ T5927] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1049.110477][ T5927] usb 3-1: USB disconnect, device number 55 [ 1049.951247][T14293] pimreg: entered allmulticast mode [ 1051.241833][ T5942] usb 1-1: USB disconnect, device number 48 [ 1051.289984][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1467'. [ 1051.427499][ T77] net_ratelimit: 19 callbacks suppressed [ 1051.427516][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1051.447678][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1051.461983][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1051.476498][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1051.591013][T14307] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.1468'. [ 1051.626740][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1468'. [ 1052.036631][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1052.051087][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1052.066026][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1052.080444][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1052.996142][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1053.012230][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1053.441222][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 1054.163317][T14330] loop8: detected capacity change from 0 to 7 [ 1054.182508][T14330] Dev loop8: unable to read RDB block 7 [ 1054.188214][T14330] loop8: AHDI p1 p2 p3 [ 1054.340400][T14330] loop8: partition table partially beyond EOD, truncated [ 1054.368304][T14330] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1054.379246][T14330] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1054.681048][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.687373][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.186173][T14323] Dev loop8: unable to read RDB block 7 [ 1055.192543][T14323] loop8: AHDI p1 p2 p3 [ 1055.196921][T14323] loop8: partition table partially beyond EOD, truncated [ 1055.219250][T14323] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1055.226161][T14323] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1056.534521][T14349] gretap1: entered promiscuous mode [ 1056.559996][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'. [ 1056.629533][ T5970] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1056.671734][ T6805] net_ratelimit: 19 callbacks suppressed [ 1056.671748][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1056.691959][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1056.706346][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1056.720620][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1056.874660][ T5970] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1056.884210][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.894835][ T5970] usb 3-1: Product: syz [ 1056.910617][ T5970] usb 3-1: Manufacturer: syz [ 1056.926195][ T5970] usb 3-1: SerialNumber: syz [ 1056.944150][ T5928] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1056.987287][ T5970] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1057.029604][ T5942] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1057.325523][ T5928] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.403438][ T5928] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1057.444618][ T5928] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1057.499295][ T5928] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1057.509213][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.555916][ T5928] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1057.637577][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1057.652154][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1057.666789][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1057.681179][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1057.955483][T14352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.997806][ T5928] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1058.010655][T14352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.083598][ T5942] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1058.115464][ T5942] ath9k_htc: Failed to initialize the device [ 1058.264835][ T5942] usb 3-1: ath9k_htc: USB layer deinitialized [ 1058.319125][ T5970] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1058.482654][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1058.497192][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1058.522783][ T5970] usb 2-1: config 0 has no interfaces? [ 1058.528676][ T5970] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1058.551847][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.590024][ T5970] usb 2-1: config 0 descriptor?? [ 1059.569688][T14366] gretap1: entered promiscuous mode [ 1059.604968][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'. [ 1059.878908][ T5928] usb 5-1: USB disconnect, device number 60 [ 1060.258323][ T5927] usb 3-1: USB disconnect, device number 56 [ 1060.577784][ T5927] usb 2-1: USB disconnect, device number 48 [ 1060.951771][T14383] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1479'. [ 1061.056011][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1479'. [ 1061.848718][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1480'. [ 1061.998606][ T6797] net_ratelimit: 22 callbacks suppressed [ 1061.998621][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1062.018761][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1062.033392][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1062.047966][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1062.549167][ T1212] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1062.819525][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1062.833991][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1062.848417][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1062.862962][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1063.088926][ T1212] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1063.104801][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.113427][ T1212] usb 1-1: Product: syz [ 1063.117607][ T1212] usb 1-1: Manufacturer: syz [ 1063.178075][ T1212] usb 1-1: SerialNumber: syz [ 1063.612337][ T1212] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1063.965855][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1063.980292][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1064.041399][ T5928] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1064.053882][ T5928] usb 1-1: ath9k_htc: USB layer deinitialized [ 1064.083462][ T1212] usb 1-1: USB disconnect, device number 49 [ 1067.428600][ T77] net_ratelimit: 23 callbacks suppressed [ 1067.428616][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1067.449189][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1067.463592][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1067.477945][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1067.492868][ T5928] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1067.827204][ T5928] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1067.841845][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.892203][ T983] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1067.917121][ T5928] usb 2-1: Product: syz [ 1067.932810][ T5928] usb 2-1: Manufacturer: syz [ 1067.987011][ T5928] usb 2-1: SerialNumber: syz [ 1068.049270][ T5928] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1068.077005][ T983] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1068.086534][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.096039][ T983] usb 3-1: Product: syz [ 1068.102042][ T983] usb 3-1: Manufacturer: syz [ 1068.106690][ T983] usb 3-1: SerialNumber: syz [ 1068.151656][ T983] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1068.176467][T14130] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1068.220165][ T5970] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1068.335329][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1068.350083][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1068.364576][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1068.379027][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1068.408608][ T5970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.440782][ T5970] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1068.470518][ T5970] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1068.527182][ T1212] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1068.534730][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.622526][ T5970] usb 4-1: config 0 descriptor?? [ 1068.746019][ T5970] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1068.758698][ T5970] dvb-usb: bulk message failed: -22 (3/0) [ 1068.787106][ T5970] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1068.815364][ T5970] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1068.822970][ T5970] usb 4-1: media controller created [ 1068.856163][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1068.895267][T14447] dibusb: i2c wr: len=61 is too big! [ 1068.895267][T14447] [ 1068.911146][T14447] netlink: 'syz.3.1493': attribute type 6 has an invalid length. [ 1068.971702][ T5970] dvb-usb: bulk message failed: -22 (6/0) [ 1068.978186][ T5970] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1069.100694][ T5970] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 1069.186097][ T5970] dvb-usb: schedule remote query interval to 150 msecs. [ 1069.196658][ T5970] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1069.236116][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1069.250811][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1069.342575][T14130] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1069.392863][ T5970] dvb-usb: bulk message failed: -22 (1/0) [ 1069.402736][T14130] ath9k_htc: Failed to initialize the device [ 1069.459113][ T5970] dvb-usb: error while querying for an remote control event. [ 1069.570401][T14130] usb 3-1: ath9k_htc: USB layer deinitialized [ 1069.689065][ T5970] dvb-usb: bulk message failed: -22 (1/0) [ 1069.695446][ T5970] dvb-usb: error while querying for an remote control event. [ 1069.738928][ T1212] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1069.746321][ T1212] ath9k_htc: Failed to initialize the device [ 1069.880171][ T5970] dvb-usb: bulk message failed: -22 (1/0) [ 1069.908941][ T5970] dvb-usb: error while querying for an remote control event. [ 1069.974405][ T1212] usb 2-1: ath9k_htc: USB layer deinitialized [ 1070.091074][ T5970] dvb-usb: bulk message failed: -22 (1/0) [ 1070.097014][ T5970] dvb-usb: error while querying for an remote control event. [ 1070.499115][ T5970] dvb-usb: bulk message failed: -22 (1/0) [ 1070.505356][ T5974] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1070.513115][ T5970] dvb-usb: error while querying for an remote control event. [ 1070.754932][ T5970] dvb-usb: bulk message failed: -22 (1/0) [ 1070.761539][ T5970] dvb-usb: error while querying for an remote control event. [ 1070.858948][ T5974] usb 5-1: Using ep0 maxpacket: 32 [ 1070.867079][ T5974] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1070.891667][ T5942] usb 2-1: USB disconnect, device number 49 [ 1070.948969][ T5974] usb 5-1: config 0 has no interface number 0 [ 1071.024319][ T5974] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1071.039352][ T5970] dvb-usb: bulk message failed: -22 (1/0) [ 1071.126279][ T5970] dvb-usb: error while querying for an remote control event. [ 1071.267893][ T5974] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1071.299503][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.332209][ T5974] usb 5-1: Product: syz [ 1071.352257][ T5974] usb 5-1: Manufacturer: syz [ 1071.356996][ T5974] usb 5-1: SerialNumber: syz [ 1071.454067][ T5974] usb 5-1: config 0 descriptor?? [ 1071.459352][ T5942] dvb-usb: bulk message failed: -22 (1/0) [ 1071.465208][ T5942] dvb-usb: error while querying for an remote control event. [ 1071.503588][ T5974] smsc75xx v1.0.0 [ 1071.507813][ T5974] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1071.581378][ T5974] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1071.684240][ T5974] dvb-usb: bulk message failed: -22 (1/0) [ 1071.709433][ T5974] dvb-usb: error while querying for an remote control event. [ 1071.859830][T10687] usb 3-1: USB disconnect, device number 57 [ 1071.879721][ T5974] usb 4-1: USB disconnect, device number 45 [ 1072.134916][T14455] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1072.164945][T14455] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1072.497632][ T5974] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1072.507780][T14455] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1072.523127][ T6811] net_ratelimit: 23 callbacks suppressed [ 1072.523148][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1072.543456][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1072.557772][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1072.572058][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1072.715297][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1497'. [ 1072.724565][T14455] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1072.906616][T14455] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1072.985929][T14468] loop6: detected capacity change from 0 to 524287999 [ 1073.189043][T14455] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1073.270598][ T5974] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1073.299002][T14455] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1073.305231][T14455] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1073.319150][T14455] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1073.332087][T14455] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1073.560588][ T5974] usb 3-1: Using ep0 maxpacket: 32 [ 1073.631004][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1073.645525][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1073.660078][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1073.674443][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1073.692870][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 1073.941949][ T5974] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1073.950428][ T5974] usb 3-1: config 0 has no interface number 0 [ 1073.956517][ T5974] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1073.970422][ T5974] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1073.980133][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.988140][ T5974] usb 3-1: Product: syz [ 1074.022373][ T5974] usb 3-1: Manufacturer: syz [ 1074.035030][ T5974] usb 3-1: SerialNumber: syz [ 1074.059921][ T5974] usb 3-1: config 0 descriptor?? [ 1074.075718][T14130] usb 5-1: USB disconnect, device number 61 [ 1074.304812][T14476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.319139][T14476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.431558][T14476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.464021][T14476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.736267][T14476] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1074.783806][T14476] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1074.908997][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1074.923518][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1077.641686][T14499] sctp: [Deprecated]: syz.1.1502 (pid 14499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1077.641686][T14499] Use struct sctp_sack_info instead [ 1077.754927][ T5974] smsc75xx v1.0.0 [ 1077.758604][ T5974] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1077.816294][ T5974] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1077.887964][ T5974] usb 3-1: USB disconnect, device number 58 [ 1078.011172][ T1212] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1078.031590][ T6797] net_ratelimit: 18 callbacks suppressed [ 1078.031611][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1078.051815][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1078.066218][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1078.080659][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1078.186877][T14510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1078.206286][ T1212] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1078.470726][T14516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1078.518631][T14515] fido_id[14515]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1078.874347][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1078.888880][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1078.903614][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1078.918142][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1079.819017][ T5974] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1079.829735][T14532] fuse: Bad value for 'fd' [ 1079.839528][T14532] fuse: Bad value for 'fd' [ 1079.952318][ T5970] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1080.096466][ T5974] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1080.106636][T14130] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1080.117843][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.139722][ T5974] usb 3-1: Product: syz [ 1080.143958][ T5974] usb 3-1: Manufacturer: syz [ 1080.148569][ T5974] usb 3-1: SerialNumber: syz [ 1080.204587][ T5974] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1080.277472][ T983] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1080.297414][ T5970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.359053][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1080.368048][ T5970] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1080.434624][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.659995][T14130] usb 1-1: Using ep0 maxpacket: 16 [ 1080.735670][ T5970] usb 5-1: config 0 descriptor?? [ 1080.775571][ T5970] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1080.784723][ T5970] dvb-usb: bulk message failed: -22 (3/0) [ 1080.793673][T14130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.846163][ T5970] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1080.946706][T14130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1080.985589][ T5970] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1081.009031][T14130] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1081.048490][T14528] dibusb: i2c wr: len=61 is too big! [ 1081.048490][T14528] [ 1081.066735][ T5970] usb 5-1: media controller created [ 1081.081109][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1081.095313][T14130] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1081.146978][T14130] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1081.184888][ T5970] dvb-usb: bulk message failed: -22 (6/0) [ 1081.222698][ T5970] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1081.250361][T14130] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1081.261910][T14130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1081.269184][T14533] netlink: 'syz.4.1508': attribute type 6 has an invalid length. [ 1081.299939][ T5970] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 1081.339871][ T983] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1081.347433][ T5970] dvb-usb: schedule remote query interval to 150 msecs. [ 1081.361125][T14130] usb 1-1: SerialNumber: syz [ 1081.373443][ T983] ath9k_htc: Failed to initialize the device [ 1081.392055][ T5970] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1081.403283][T14532] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1081.413999][T14130] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1081.446620][T14130] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 1081.472362][ T983] usb 3-1: ath9k_htc: USB layer deinitialized [ 1081.592657][ T5970] dvb-usb: bulk message failed: -22 (1/0) [ 1081.627686][ T5970] dvb-usb: error while querying for an remote control event. [ 1081.841534][T14130] dvb-usb: bulk message failed: -22 (1/0) [ 1081.858636][T14130] dvb-usb: error while querying for an remote control event. [ 1082.090653][T14532] netlink: 'syz.0.1509': attribute type 12 has an invalid length. [ 1082.098965][T14532] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1509'. [ 1082.130059][T14130] dvb-usb: bulk message failed: -22 (1/0) [ 1082.135852][T14130] dvb-usb: error while querying for an remote control event. [ 1082.429324][T14130] dvb-usb: bulk message failed: -22 (1/0) [ 1082.594599][T14130] dvb-usb: error while querying for an remote control event. [ 1082.604413][ T983] usb 3-1: USB disconnect, device number 59 [ 1082.789412][ T983] dvb-usb: bulk message failed: -22 (1/0) [ 1082.795551][ T983] dvb-usb: error while querying for an remote control event. [ 1082.832447][ T5927] usb 5-1: USB disconnect, device number 62 [ 1082.955383][T14545] gretap1: entered promiscuous mode [ 1083.030948][ T5927] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1083.120345][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 1083.304410][T14548] net_ratelimit: 28 callbacks suppressed [ 1083.304424][T14548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1083.330777][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1083.345214][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1083.359704][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1083.373999][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1083.752806][T14553] gretap1: entered promiscuous mode [ 1083.970949][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1514'. [ 1084.450407][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1084.464804][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1084.479175][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1084.493901][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1084.536976][ T5927] usb 1-1: USB disconnect, device number 50 [ 1085.065209][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1086.078983][T10687] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1086.613739][T10687] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1086.623097][T10687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.691989][T10687] usb 3-1: Product: syz [ 1086.697339][T10687] usb 3-1: Manufacturer: syz [ 1086.702773][T10687] usb 3-1: SerialNumber: syz [ 1086.767427][T10687] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1086.812724][ T5927] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1087.899312][ T5927] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1087.909521][ T5927] ath9k_htc: Failed to initialize the device [ 1087.948209][ T5927] usb 3-1: ath9k_htc: USB layer deinitialized [ 1088.560258][ T77] net_ratelimit: 23 callbacks suppressed [ 1088.560280][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1088.580485][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1088.594901][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1088.609302][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1089.373365][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1520'. [ 1089.391126][T14593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1089.444245][T10687] usb 3-1: USB disconnect, device number 60 [ 1089.891450][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'. [ 1090.678142][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1090.693024][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1090.707475][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1090.721968][ T77] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1090.836747][T14607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1091.495721][T14619] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1524'. [ 1092.510152][ T5970] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1093.079549][ T5970] usb 2-1: config 0 has no interfaces? [ 1093.229417][ T5970] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1093.238583][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.345656][T14634] gretap1: entered promiscuous mode [ 1093.359899][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 1093.721190][ T6805] net_ratelimit: 16 callbacks suppressed [ 1093.721207][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1093.741320][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1093.755713][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1093.770115][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1094.009025][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1094.009048][ T30] audit: type=1326 audit(1757994987.615:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14638 comm="syz.3.1529" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x0 [ 1094.037406][ T5970] usb 2-1: Product: syz [ 1094.079343][T14637] block nbd0: Attempted send on invalid socket [ 1094.085786][T14637] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1094.366302][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1094.380850][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1094.395282][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1094.409659][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1094.440006][ T5970] usb 2-1: Manufacturer: syz [ 1094.469357][ T5970] usb 2-1: SerialNumber: syz [ 1094.491241][ T5970] usb 2-1: config 0 descriptor?? [ 1094.589013][ T5970] usb 2-1: can't set config #0, error -71 [ 1094.704905][ T5970] usb 2-1: USB disconnect, device number 50 [ 1095.438009][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1095.452413][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1095.970496][T14657] vivid-000: ================= START STATUS ================= [ 1095.978200][T14657] vivid-000: Test Pattern: 100% Colorbar [ 1095.993090][T14657] vivid-000: Fill Percentage of Frame: 100 [ 1095.999000][T14657] vivid-000: Horizontal Movement: No Movement [ 1096.005140][T14657] vivid-000: Vertical Movement: No Movement [ 1096.011261][T14657] vivid-000: OSD Text Mode: All [ 1096.016178][T14657] vivid-000: Show Border: false [ 1096.021311][T14657] vivid-000: Show Square: false [ 1096.026593][T14657] vivid-000: Sensor Flipped Horizontally: false [ 1096.034263][T14657] vivid-000: Sensor Flipped Vertically: false [ 1096.040597][T14657] vivid-000: Insert SAV Code in Image: false [ 1096.048471][T14657] vivid-000: Insert EAV Code in Image: false [ 1096.054617][T14657] vivid-000: Insert Video Guard Band: false [ 1096.060807][T14657] vivid-000: Reduced Framerate: false [ 1096.066321][T14657] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 015-0 [ 1096.076130][T14660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1531'. [ 1096.085402][T14657] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1096.093502][T14657] vivid-000: Enable Capture Cropping: true [ 1096.099416][T14657] vivid-000: Enable Capture Composing: false [ 1096.105493][T14657] vivid-000: Enable Capture Scaler: true [ 1096.111253][T14657] vivid-000: Timestamp Source: End of Frame [ 1096.117317][T14657] vivid-000: Colorspace: sRGB [ 1096.122113][T14657] vivid-000: Transfer Function: Default [ 1096.127905][T14657] vivid-000: Y'CbCr Encoding: Default [ 1096.133432][T14657] vivid-000: HSV Encoding: Hue 0-179 [ 1096.139023][T14657] vivid-000: Quantization: Default [ 1096.144217][T14657] vivid-000: Apply Alpha To Red Only: false [ 1096.152040][T14657] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 1096.168688][T14657] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1096.176623][ T5970] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1096.189043][T14657] vivid-000: DV Timings: 640x480p59 inactive [ 1096.195196][T14657] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1096.202642][T14657] vivid-000: Maximum EDID Blocks: 2 [ 1096.207901][T14657] vivid-000: Limited RGB Range (16-235): false [ 1096.229681][T14657] vivid-000: Rx RGB Quantization Range: Automatic [ 1096.239269][T14657] vivid-000: Power Present: 0x00000001 [ 1096.278343][T14657] tpg source WxH: 3840x2160 (Y'CbCr) [ 1096.329431][T14657] tpg field: 1 [ 1096.344342][T14657] tpg crop: (0,0)/3840x2160 [ 1096.377626][T14657] tpg compose: (0,0)/3840x2160 [ 1096.386333][T14657] tpg colorspace: 8 [ 1096.393306][T14657] tpg transfer function: 0/0 [ 1096.398072][T14657] tpg Y'CbCr encoding: 0/0 [ 1096.404739][T14657] tpg quantization: 0/0 [ 1096.418967][T14657] tpg RGB range: 0/2 [ 1096.433060][T14657] vivid-000: ================== END STATUS ================== [ 1096.517429][ T5970] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.613730][ T5970] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1096.657982][ T5970] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1096.725047][ T5970] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1096.773620][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.817798][ T5970] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1096.975478][T14671] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1533'. [ 1096.996228][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1533'. [ 1097.096640][ T5970] usb 3-1: invalid MIDI out EP 0 [ 1097.172992][T14659] delete_channel: no stack [ 1097.178980][T10687] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1097.404396][T10687] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.415614][T10687] usb 4-1: config 0 has no interfaces? [ 1097.421925][T10687] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1097.608374][T10687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.902226][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 1097.922838][T14673] caif0: Master is either lo or non-ether device [ 1097.933431][T10687] usb 4-1: config 0 descriptor?? [ 1098.074562][ T5970] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1098.150289][ T5970] usb 3-1: USB disconnect, device number 61 [ 1099.014513][T13483] net_ratelimit: 22 callbacks suppressed [ 1099.014535][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1099.035046][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1099.049771][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1099.064325][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1099.755520][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1099.770212][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1099.784554][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1099.798918][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1099.824916][ T5970] usb 4-1: USB disconnect, device number 46 [ 1099.891980][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 1100.069817][T14689] syz_tun: entered promiscuous mode [ 1100.111148][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'. [ 1100.242634][T14695] gretap1: entered promiscuous mode [ 1100.281923][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'. [ 1100.729892][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1100.744313][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1101.799699][T14709] gretap1: entered promiscuous mode [ 1101.962707][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 1103.280359][ T30] audit: type=1326 audit(1757994996.895:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.1.1545" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f32539 code=0x0 [ 1103.948968][ T983] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1104.159121][ T6797] net_ratelimit: 22 callbacks suppressed [ 1104.159160][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1104.179288][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1104.193681][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1104.207994][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1104.515278][ T983] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1104.526883][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.537351][ T983] usb 1-1: Product: syz [ 1104.574277][ T983] usb 1-1: Manufacturer: syz [ 1104.642605][ T983] usb 1-1: SerialNumber: syz [ 1104.775710][ T983] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1104.813097][ T5970] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1104.973348][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1104.987878][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1105.002267][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1105.016537][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1105.611047][T14754] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1106.009020][ T5970] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1106.033417][ T5970] ath9k_htc: Failed to initialize the device [ 1106.050125][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1106.064747][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1106.231354][ T5970] usb 1-1: ath9k_htc: USB layer deinitialized [ 1106.696190][ T5970] usb 1-1: USB disconnect, device number 51 [ 1107.284974][T14764] usb usb8: usbfs: process 14764 (syz.0.1550) did not claim interface 0 before use [ 1107.365010][T14765] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1107.390569][T14764] syz.0.1550 (14764): drop_caches: 2 [ 1107.420677][T14764] syz.0.1550 (14764): drop_caches: 2 [ 1108.090108][ T5974] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1108.269792][ T5974] usb 5-1: Using ep0 maxpacket: 32 [ 1108.320896][ T5974] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1108.340258][ T5974] usb 5-1: config 0 has no interface number 0 [ 1108.346681][ T5974] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1108.368487][ T5974] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1108.416171][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.582072][ T5974] usb 5-1: Product: syz [ 1108.605973][ T5974] usb 5-1: Manufacturer: syz [ 1108.637011][T14777] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1552'. [ 1108.670674][ T5974] usb 5-1: SerialNumber: syz [ 1108.718145][ T5974] usb 5-1: config 0 descriptor?? [ 1108.757380][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 1109.453695][T14786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 1109.539890][ T5974] usb 5-1: can't set config #0, error -71 [ 1109.551017][ T5974] usb 5-1: USB disconnect, device number 63 [ 1109.732761][ T6805] net_ratelimit: 22 callbacks suppressed [ 1109.732783][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1109.752997][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1109.767327][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1109.781758][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1109.905061][T14785] gretap1: entered promiscuous mode [ 1110.482441][T14795] netlink: 'syz.4.1555': attribute type 4 has an invalid length. [ 1110.490371][T14795] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1555'. [ 1110.559420][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1110.573723][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1110.588292][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1110.602797][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1110.649027][T14795] delete_channel: no stack [ 1111.209464][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1111.224350][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1111.609075][ T5974] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1111.818976][ T5974] usb 2-1: Using ep0 maxpacket: 8 [ 1112.056244][T10687] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1112.195103][ T5974] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 1112.205194][ T5974] usb 2-1: config 0 has no interface number 0 [ 1112.292289][ T5974] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 1112.309410][T10687] usb 4-1: Using ep0 maxpacket: 16 [ 1112.354715][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.464268][ T5974] usb 2-1: Product: syz [ 1112.534534][ T5974] usb 2-1: Manufacturer: syz [ 1112.539508][ T1212] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1112.541485][ T5974] usb 2-1: SerialNumber: syz [ 1112.742033][ T5974] usb 2-1: config 0 descriptor?? [ 1112.770925][ T1212] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1112.801184][ T1212] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1112.943465][ T1212] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1112.972813][ T5928] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1113.026163][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.078522][T14809] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1113.176026][ T5974] peak_usb 2-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1113.282973][ T1212] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1113.303641][ T5928] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1113.319569][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.378981][ T5928] usb 3-1: Product: syz [ 1113.387717][ T5974] peak_usb 2-1:0.56 can0: sending command failure: -22 [ 1113.408668][ T5928] usb 3-1: Manufacturer: syz [ 1113.436745][ T5928] usb 3-1: SerialNumber: syz [ 1113.456369][ T5974] peak_usb 2-1:0.56 can0: sending command failure: -22 [ 1113.492248][ T5974] peak_usb 2-1:0.56 can0: sending command failure: -22 [ 1113.542694][ T5928] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1113.637610][ T1212] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1113.673801][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.783665][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.792922][ T5974] peak_usb 2-1:0.56: probe with driver peak_usb failed with error -22 [ 1114.794702][ T6805] net_ratelimit: 22 callbacks suppressed [ 1114.794768][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1114.815173][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1114.829551][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1114.843845][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1114.876948][ T1212] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1114.893463][ T1212] ath9k_htc: Failed to initialize the device [ 1114.942718][ T5927] usb 1-1: USB disconnect, device number 52 [ 1115.027390][ T1212] usb 3-1: ath9k_htc: USB layer deinitialized [ 1115.036646][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 1115.167142][T14823] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1561'. [ 1115.192618][ T5974] usb 2-1: USB disconnect, device number 51 [ 1115.253614][T14823] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1561'. [ 1115.314375][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 1115.420632][T14823] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1561'. [ 1115.484175][ T5928] usb 3-1: USB disconnect, device number 62 [ 1115.488739][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1115.504993][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1115.520140][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1115.534495][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1116.063364][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.069814][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.077712][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 1116.126767][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 1116.137439][T10687] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1116.159314][T10687] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1116.166903][T10687] usb 4-1: can't read configurations, error -71 [ 1116.186786][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 1116.206646][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 1116.258996][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 1116.445147][ T5928] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1116.523130][T14834] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1116.600562][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1116.609810][ T5928] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1116.624286][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.673808][ T5928] usb 1-1: Product: syz [ 1116.686396][ T5928] usb 1-1: Manufacturer: syz [ 1116.693102][ T5928] usb 1-1: SerialNumber: syz [ 1116.982592][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1116.997014][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1117.062759][ T5928] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1117.074109][ T5928] r8152-cfgselector 1-1: config 0 descriptor?? [ 1119.956354][T13483] net_ratelimit: 14 callbacks suppressed [ 1119.956377][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1119.976531][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1119.990856][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1120.005171][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1120.192885][ T5935] r8152-cfgselector 1-1: USB disconnect, device number 53 [ 1120.795467][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1120.809911][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1120.824208][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1120.838492][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1121.008972][T10687] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1121.237149][T10687] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1121.249138][T10687] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1121.264229][T10687] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1121.275467][T10687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.310016][T14883] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1121.320692][T10687] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1121.445524][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1121.460053][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1123.770327][ T5935] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1123.947854][T14914] syz.2.1577 (14914): drop_caches: 2 [ 1124.055169][ T5935] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1124.067710][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.115580][ T5935] usb 4-1: Product: syz [ 1124.137557][ T5935] usb 4-1: Manufacturer: syz [ 1124.558942][ T5935] usb 4-1: SerialNumber: syz [ 1124.582327][ T5935] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1124.629582][ T5928] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1124.822700][ T5935] usb 5-1: USB disconnect, device number 64 [ 1125.069283][ T6797] net_ratelimit: 22 callbacks suppressed [ 1125.069304][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1125.089618][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1125.104037][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1125.118394][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1125.766291][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1125.781127][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1125.795622][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1125.810040][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1126.119958][ T5928] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1126.125518][ T983] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1126.212488][ T5928] ath9k_htc: Failed to initialize the device [ 1126.338518][ T5928] usb 4-1: ath9k_htc: USB layer deinitialized [ 1126.519054][ T983] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1126.528294][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.598837][ T983] usb 3-1: Product: syz [ 1126.609084][ T983] usb 3-1: Manufacturer: syz [ 1126.613745][ T983] usb 3-1: SerialNumber: syz [ 1126.657982][ T983] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1126.707603][ T5974] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1126.952868][T14942] __nla_validate_parse: 38 callbacks suppressed [ 1126.952891][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'. [ 1127.303425][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1127.317909][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1127.550048][T11406] usb 4-1: USB disconnect, device number 49 [ 1127.739145][ T5974] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1127.748706][ T5974] ath9k_htc: Failed to initialize the device [ 1127.790560][ T5974] usb 3-1: ath9k_htc: USB layer deinitialized [ 1127.829714][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1583'. [ 1129.189339][ T5928] usb 3-1: USB disconnect, device number 63 [ 1130.129839][T14960] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1586'. [ 1130.431680][ T6797] net_ratelimit: 18 callbacks suppressed [ 1130.431702][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1130.452362][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1130.466648][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1130.480959][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1130.629019][ T5928] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1130.795652][ T5928] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1130.911027][ T5928] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1130.961409][ T5928] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1131.019335][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1131.033847][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1131.048928][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1131.063455][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1131.088859][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.167999][T14963] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1131.191140][ T5928] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1132.142453][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1132.156917][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1132.879063][ T5928] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1133.082183][ T5928] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1133.093082][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.194380][ T5928] usb 5-1: Product: syz [ 1133.207215][ T5928] usb 5-1: Manufacturer: syz [ 1133.223965][ T5928] usb 5-1: SerialNumber: syz [ 1133.318915][ T5927] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1133.344986][ T5928] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1133.382578][T10687] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1133.524982][ T5927] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1133.538599][ T5927] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1133.548744][ T5927] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1133.573964][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.740457][T14988] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1133.761256][ T5927] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1134.384027][T11406] usb 1-1: USB disconnect, device number 54 [ 1134.469337][T10687] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1134.479596][T10687] ath9k_htc: Failed to initialize the device [ 1134.910380][T10687] usb 5-1: ath9k_htc: USB layer deinitialized [ 1134.987835][ T5974] usb 5-1: USB disconnect, device number 65 [ 1135.217296][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'. [ 1135.746806][ T6803] net_ratelimit: 22 callbacks suppressed [ 1135.746831][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1135.767036][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1135.781692][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1135.795961][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1136.680112][T10687] usb 2-1: USB disconnect, device number 52 [ 1136.970707][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1136.985132][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1136.999572][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1137.013868][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1137.429011][T15029] gretap1: entered promiscuous mode [ 1137.704975][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1137.719563][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1137.729247][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 1137.828257][T10687] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1137.835908][ T5928] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1138.024367][T10687] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1138.038253][T10687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.056548][T10687] usb 2-1: Product: syz [ 1138.061643][ T5928] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1138.129626][T10687] usb 2-1: Manufacturer: syz [ 1138.134355][ T5928] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1138.147293][T10687] usb 2-1: SerialNumber: syz [ 1138.153616][ T5928] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1138.215472][T10687] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1138.247003][ T5927] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1138.616318][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.905415][T15028] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1139.091423][ T5928] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1139.339081][ T5927] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1139.397259][ T5927] ath9k_htc: Failed to initialize the device [ 1139.450882][ T5927] usb 2-1: ath9k_htc: USB layer deinitialized [ 1140.302733][T15038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1140.369207][ T5974] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1140.700587][ T5974] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1140.711752][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.737780][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.757460][ T5974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1140.772744][T11406] usb 2-1: USB disconnect, device number 53 [ 1140.874213][ T5927] usb 4-1: USB disconnect, device number 50 [ 1140.887573][ T6803] net_ratelimit: 14 callbacks suppressed [ 1140.887590][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1140.907741][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1140.922015][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1140.936373][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1140.986848][ T5974] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1141.064517][ T5974] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1141.101464][ T5974] usb 3-1: Manufacturer: syz [ 1141.405031][ T5974] usb 3-1: config 0 descriptor?? [ 1141.415611][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1603'. [ 1141.434022][T15059] gretap1: entered promiscuous mode [ 1141.689409][T11406] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1141.910809][T11406] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1141.933381][T11406] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1141.983448][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1141.997847][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1142.012364][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1142.026709][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1142.051239][T11406] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1142.247378][T11406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.352515][T15054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1142.761347][T11406] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1143.205605][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1143.220149][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1144.018648][T10687] usb 2-1: USB disconnect, device number 54 [ 1144.539386][T15081] block nbd0: Attempted send on invalid socket [ 1144.545813][T15081] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1145.455220][ T5974] usbhid 3-1:0.0: can't add hid device: -71 [ 1145.471264][ T5974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1145.567621][ T5974] usb 3-1: USB disconnect, device number 64 [ 1145.959835][ T6803] net_ratelimit: 15 callbacks suppressed [ 1145.959853][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1145.979903][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1145.994175][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1146.008452][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1146.649312][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1146.663824][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1146.678167][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1146.692487][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1146.863306][T15104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.899350][ T30] audit: type=1326 audit(1757995040.515:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15102 comm="syz.1.1611" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x0 [ 1147.361834][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1148.240387][T15120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 1148.298187][T15119] gretap1: entered promiscuous mode [ 1149.058981][ T5974] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1149.314715][T15131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1616'. [ 1149.334586][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'. [ 1149.894800][ T5974] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1149.968994][ T5974] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1149.989545][ T5974] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1150.014670][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.108289][T15128] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1150.160270][ T5974] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1150.210551][ T5927] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1150.834499][ T5927] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1150.884312][ T5927] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1150.895196][ T5927] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1150.929734][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.116029][ T6811] net_ratelimit: 23 callbacks suppressed [ 1151.116046][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1151.136213][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1151.150497][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1151.164753][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1151.333851][T15147] binder: 15144:15147 ioctl 4018620d 0 returned -22 [ 1151.343349][ T5928] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1151.364971][T15147] binder: 15144:15147 ioctl c0306201 80000540 returned -22 [ 1151.567657][T15135] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1151.775191][ T5927] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1151.839383][ T5928] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1151.919015][ T5928] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1151.998634][ T5928] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1152.014887][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.184212][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1152.198660][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1152.213240][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1152.227543][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1152.243842][T15143] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1152.568887][ T5927] usb 2-1: USB disconnect, device number 55 [ 1152.663051][ T5928] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1153.479736][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1153.494241][T13483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1154.240820][ T983] usb 1-1: USB disconnect, device number 55 [ 1154.416336][ T5927] usb 5-1: USB disconnect, device number 66 [ 1154.579736][T11406] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1155.308990][T11406] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1155.318084][T11406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.647664][T11406] usb 3-1: Product: syz [ 1155.837233][T11406] usb 3-1: Manufacturer: syz [ 1155.873537][T11406] usb 3-1: SerialNumber: syz [ 1155.953508][T11406] usb 3-1: config 0 descriptor?? [ 1156.337352][ T6801] net_ratelimit: 14 callbacks suppressed [ 1156.337373][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1156.357804][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1156.372302][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1156.386851][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1157.108893][ T983] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1157.398924][ T983] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1157.420020][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1157.434540][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1157.448957][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1157.463379][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1157.484594][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.568859][ T983] usb 1-1: Product: syz [ 1157.575795][ T983] usb 1-1: Manufacturer: syz [ 1157.590498][ T983] usb 1-1: SerialNumber: syz [ 1157.883672][ T983] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1158.105071][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1158.185528][T11406] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1158.260619][T15204] gretap1: entered promiscuous mode [ 1158.294210][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'. [ 1158.374416][ T6803] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1158.707330][T15192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1158.721982][ T5974] usb 3-1: USB disconnect, device number 65 [ 1159.262594][T11406] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1159.271362][T11406] ath9k_htc: Failed to initialize the device [ 1159.306047][T11406] usb 1-1: ath9k_htc: USB layer deinitialized [ 1159.419177][ T5974] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1159.502615][T15222] gretap1: entered promiscuous mode [ 1159.613759][ T5974] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1159.625686][ T5974] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1159.637458][ T5974] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1159.667967][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.698018][T15218] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1159.713969][ T5974] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1159.840131][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 1160.824187][ T1212] usb 1-1: USB disconnect, device number 56 [ 1161.434682][ T6811] net_ratelimit: 20 callbacks suppressed [ 1161.434698][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1161.454828][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1161.469140][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1161.483401][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1161.559321][ T5927] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1161.641912][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 1162.186209][ T5927] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1162.206613][ T5927] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1162.222802][ T5927] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1162.231936][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.251394][T15241] netlink: 99 bytes leftover after parsing attributes in process `syz.1.1636'. [ 1162.377588][T15233] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1162.436061][ T5927] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1162.449387][T11406] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1162.476008][ T1212] usb 3-1: USB disconnect, device number 66 [ 1162.529402][T15236] [ 1162.531780][T15236] ============================================ [ 1162.537930][T15236] WARNING: possible recursive locking detected [ 1162.544074][T15236] syzkaller #0 Not tainted [ 1162.548496][T15236] -------------------------------------------- [ 1162.554646][T15236] syz.1.1636/15236 is trying to acquire lock: [ 1162.560710][T15236] ffff88807dbe0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 1162.571690][T15236] [ 1162.571690][T15236] but task is already holding lock: [ 1162.579051][T15236] ffff88807dbe0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 1162.588902][T15236] and the lock comparison function returns 0: [ 1162.594957][T15236] [ 1162.594957][T15236] other info that might help us debug this: [ 1162.603010][T15236] Possible unsafe locking scenario: [ 1162.603010][T15236] [ 1162.610463][T15236] CPU0 [ 1162.613780][T15236] ---- [ 1162.617058][T15236] lock(&dev_instance_lock_key#20); [ 1162.622365][T15236] lock(&dev_instance_lock_key#20); [ 1162.627668][T15236] [ 1162.627668][T15236] *** DEADLOCK *** [ 1162.627668][T15236] [ 1162.635809][T15236] May be due to missing lock nesting notation [ 1162.635809][T15236] [ 1162.644128][T15236] 2 locks held by syz.1.1636/15236: [ 1162.649347][T15236] #0: ffffffff8f539f48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 1162.658325][T15236] #1: ffff88807dbe0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 1162.668602][T15236] [ 1162.668602][T15236] stack backtrace: [ 1162.674513][T15236] CPU: 1 UID: 0 PID: 15236 Comm: syz.1.1636 Not tainted syzkaller #0 PREEMPT(full) [ 1162.674532][T15236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1162.674542][T15236] Call Trace: [ 1162.674551][T15236] [ 1162.674558][T15236] dump_stack_lvl+0x189/0x250 [ 1162.674581][T15236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1162.674598][T15236] ? __pfx__printk+0x10/0x10 [ 1162.674620][T15236] ? print_lock_name+0xde/0x100 [ 1162.674640][T15236] print_deadlock_bug+0x28b/0x2a0 [ 1162.674657][T15236] validate_chain+0x1a3f/0x2140 [ 1162.674675][T15236] ? stack_trace_save+0x9c/0xe0 [ 1162.674703][T15236] ? __pfx_stack_trace_save+0x10/0x10 [ 1162.674723][T15236] __lock_acquire+0xab9/0xd20 [ 1162.674746][T15236] ? __netdev_update_features+0xcb1/0x1be0 [ 1162.674764][T15236] lock_acquire+0x120/0x360 [ 1162.674783][T15236] ? __netdev_update_features+0xcb1/0x1be0 [ 1162.674806][T15236] __mutex_lock+0x187/0x1350 [ 1162.674822][T15236] ? __netdev_update_features+0xcb1/0x1be0 [ 1162.674842][T15236] ? __lock_acquire+0xab9/0xd20 [ 1162.674864][T15236] ? __netdev_update_features+0xcb1/0x1be0 [ 1162.674884][T15236] ? __pfx___mutex_lock+0x10/0x10 [ 1162.674905][T15236] __netdev_update_features+0xcb1/0x1be0 [ 1162.674930][T15236] ? __pfx___netdev_update_features+0x10/0x10 [ 1162.674951][T15236] ? __lock_acquire+0xab9/0xd20 [ 1162.674975][T15236] ? __lock_acquire+0xab9/0xd20 [ 1162.675002][T15236] netdev_change_features+0x72/0xd0 [ 1162.675021][T15236] ? __pfx_netdev_change_features+0x10/0x10 [ 1162.675040][T15236] ? __team_compute_features+0x23/0x4c0 [ 1162.675061][T15236] ? __team_compute_features+0x456/0x4c0 [ 1162.675080][T15236] ? __team_compute_features+0x23/0x4c0 [ 1162.675107][T15236] team_device_event+0x400/0x600 [ 1162.675127][T15236] notifier_call_chain+0x1b3/0x3e0 [ 1162.675145][T15236] netdev_features_change+0x85/0xc0 [ 1162.675159][T15236] ? __pfx_netdev_features_change+0x10/0x10 [ 1162.675173][T15236] ? security_capable+0x7e/0x2e0 [ 1162.675196][T15236] dev_ethtool+0x1536/0x19b0 [ 1162.675217][T15236] ? __pfx_dev_ethtool+0x10/0x10 [ 1162.675238][T15236] ? dev_load+0x21/0x1f0 [ 1162.675252][T15236] dev_ioctl+0x392/0x1150 [ 1162.675268][T15236] compat_sock_ioctl+0xc3b/0xc80 [ 1162.675291][T15236] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1162.675313][T15236] ? __fget_files+0x3a0/0x420 [ 1162.675325][T15236] ? __fget_files+0x2a/0x420 [ 1162.675338][T15236] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1162.675358][T15236] __ia32_compat_sys_ioctl+0x540/0x840 [ 1162.675376][T15236] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1162.675396][T15236] ? __se_sys_futex_time32+0x360/0x3e0 [ 1162.675415][T15236] ? fd_install+0x97/0x540 [ 1162.675437][T15236] ? lockdep_hardirqs_on+0x9c/0x150 [ 1162.675453][T15236] __do_fast_syscall_32+0xb6/0x2b0 [ 1162.675471][T15236] do_fast_syscall_32+0x34/0x80 [ 1162.675487][T15236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1162.675505][T15236] RIP: 0023:0xf7f32539 [ 1162.675519][T15236] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1162.675532][T15236] RSP: 002b:00000000f4fd155c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1162.675548][T15236] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000008946 [ 1162.675558][T15236] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1162.675568][T15236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1162.675576][T15236] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1162.675585][T15236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1162.675599][T15236] [ 1162.675795][ T5970] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1163.045986][ T6799] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1163.060330][ T6799] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1163.074720][ T6799] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1163.088991][ T6799] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1163.249872][ T5970] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.268699][ T5970] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1163.285090][T11406] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1163.305435][T11406] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1163.395964][T11406] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1163.440339][T11406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.457332][T15243] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1163.494626][ T5970] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1163.506333][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.514956][ T5970] usb 2-1: Product: syz [ 1163.531161][ T5970] usb 2-1: Manufacturer: syz [ 1163.774868][ T5970] usb 2-1: SerialNumber: syz [ 1163.982033][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1163.996458][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1166.748946][ T6811] net_ratelimit: 18 callbacks suppressed [ 1166.748962][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1166.768973][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1166.783350][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1166.797862][ T6811] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1167.328990][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1167.343531][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1167.357977][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1167.372292][ T6797] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1167.889013][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1167.903494][ T6801] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1171.999542][ T6805] net_ratelimit: 30 callbacks suppressed [ 1171.999559][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1172.019614][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1172.033925][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1172.048223][ T6805] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-272); Ignoring new local tt entry: 01:00:5e:00:00:01