last executing test programs: 5m4.25198164s ago: executing program 3 (id=241): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00', @ANYBLOB="01002abd7000fddbdf250a00000008000300", @ANYRES32=0x0, @ANYBLOB="0800052479f74e"], 0x24}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m4.108022639s ago: executing program 3 (id=244): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x4383, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffff088) listen(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 5m0.507966668s ago: executing program 3 (id=261): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) iopl(0x2) socket$xdp(0x2c, 0x3, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="3bf178ae7a78", 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r7, &(0x7f0000000400)=ANY=[], 0xa2) 4m59.454874837s ago: executing program 3 (id=267): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m59.307972342s ago: executing program 3 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x44, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x400c8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_open_dev$loop(0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x3, 0x0, 0x4, 0x0, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m59.070633659s ago: executing program 3 (id=269): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m58.56849878s ago: executing program 32 (id=269): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m55.027500488s ago: executing program 0 (id=703): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x2, 0x2, 0x1, {0xa, 0x4e22, 0x0, @local, 0x5}}}, 0x3a) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00') lseek(r5, 0xc1e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) gettid() 2m53.304022411s ago: executing program 0 (id=708): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$inet6(0xa, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004800f9ffff"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 2m51.723332124s ago: executing program 0 (id=716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) pipe2$watch_queue(0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000300)={0x0, 0x0, 0x0}) close(r0) 2m49.393713417s ago: executing program 0 (id=723): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdir(&(0x7f0000000240)='./file0\x00', 0x80) r1 = socket(0x22, 0x2, 0x2) getsockopt$sock_cred(r1, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xd201}) r4 = socket$kcm(0x2, 0xa, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_usb_connect$cdc_ecm(0x0, 0x150, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109023e010101000000090400000002060000052406000005240000000d240f01000000000000000000032413", @ANYRES8], 0x0) madvise(&(0x7f0000240000/0x2000)=nil, 0x2000, 0x9) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000002c0)=ANY=[], 0xfdef) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) r6 = memfd_secret(0x0) copy_file_range(r6, 0x0, r6, 0x0, 0x0, 0x2) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f00000001c0)=0xf900) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000080)={0x0, 0x32344d59, 0x0, @stepwise}) ioctl$CEC_ADAP_G_CONNECTOR_INFO(0xffffffffffffffff, 0x8044610a, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 2m47.580402999s ago: executing program 0 (id=727): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$vim2m(0x0, 0x7, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f00000000c0)={@remote, @loopback, @multicast2}, 0xc) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000040)=0x10000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) fcntl$setlease(r4, 0x400, 0x0) truncate(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 2m47.274723566s ago: executing program 0 (id=730): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r3, 0x0, 0x0) close(0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) read$dsp(r4, &(0x7f0000000240)=""/71, 0x47) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000140)=0x6, 0x4) 2m46.989759858s ago: executing program 33 (id=730): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r3, 0x0, 0x0) close(0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) read$dsp(r4, &(0x7f0000000240)=""/71, 0x47) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000140)=0x6, 0x4) 2m32.467050412s ago: executing program 2 (id=780): socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2a, 0x2, 0xffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) 2m32.255210024s ago: executing program 2 (id=781): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) epoll_create(0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x4446, &(0x7f0000000200), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m31.95880622s ago: executing program 2 (id=783): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r2, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "73fe131d4ddcdedb89b0665086c15173"}, @md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000200), 0x0, 0x4040000) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000140)=0x0) accept4$packet(r1, &(0x7f0000000200), 0x0, 0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0x53, 0x5, 0x2, 0x24, @rand_addr=' \x01\x00', @mcast1, 0x10, 0x7f19, 0x1f7, 0x2}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2, 0x800, 0x2, 0x1ab}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 2m29.116409169s ago: executing program 2 (id=793): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdir(&(0x7f0000000240)='./file0\x00', 0x80) r1 = socket(0x22, 0x2, 0x2) getsockopt$sock_cred(r1, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xd201}) r4 = socket$kcm(0x2, 0xa, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_usb_connect$cdc_ecm(0x0, 0x150, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109023e010101000000090400000002060000052406000005240000000d240f01000000000000000000032413", @ANYRES8], 0x0) madvise(&(0x7f0000240000/0x2000)=nil, 0x2000, 0x9) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000002c0)=ANY=[], 0xfdef) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f000000c280)="92eeee4c04d266254cd56dd72983fb15421d055feeef8476a32a7ff5081906007713cf0b96e0ef74cd284086cf34154f3467aa00fea40bdeadd9e2745a0b63c1656373db9314d545642c927f131368b070c15a9793836d9bb3010776fef47e35b04b72495150815b1a2730365980e10ec24e626cd24eda9fba7d2de4af8342ccc1a0db4dd94697aae3428df222c73ce40912cb590c8382fb5f4537b4c936be1154012a83ae5ed221a3b4ba0b25fbe6093445a4881eba22df05a83e11c7f76b4a2af533123b300cc4cd70c232415a81793d544dfff73392b2a42e79a152278e112140af20f2c74735e490976ee2e6dd8e95738150b433476b8f4ef3ba4e4ad247ee5f3f52724edcc2928a1b769e2a1421d489672346d85be4713bea67125ce9d57e70266b690907fb1313cfd3cadd3a168f7b5dfd55b0b41a63dde956c578b7f65920c6d93a4ed05e73d1104490802eecd16d525b639151e003ad9412d94229a3d4e4e72b01b66bf4a5340b68f9411495c3273d2119bce2c24a138ac825a10ae86bbe35097f16606d77b00dc2d7c540e9c120359c70f88e23de4c0d37296f8dfe119b3319799c7c94b8b8bcaf7eca1bcfafad9126856dd55be061998defb033bbba5a17e915caa9cf9abced8458bb4fdeb99c162caf684771ca2dcdc58a073c70a6d4099c12ff1689c30bcaf8d1b76a7c81931ec7ebb8b7bbac32a88cfef5317c6cf316046ac99151ea807886c2b59ac48294fdcd7fe876f8d1c08f2b811e4497cf8cc6735e57a174ae0954c240ed2921b2e24586533c32fcce8d4a279de82a1e73d1a13d7184a6a4122a01e8ac156bd350309572167b0f361d813c20c60aebc1dabfb9572ecab69eb57185bd95d5586bc1d944d61a852c0f1f242a148100418ca89332d4020830afea8b9a5afd3bf03f5016be33ad8af50e47592467cd3b86a64d35fcc9b0453df25071cc204a9120fec06c33c69de7382f96c02fbaa4fd00cb1b22f6e37606c8ef821097f20dd1bff60a1dc7e938f069634cc8a09c089b88107e94eaf07246132bb3581ff08dc6ec4682712d151f95fa76cefac0942f8fc9be7eab17cd26bed95b6f673ecd88e4fe66c1117b35bf8ca997fa2892407e2e00c5b9b5a739fe8cac446994f3d185029881eb1c8cbea6f00946a328aaa6e9cfff4b616102374e9b72178d66fb2c0e7a76c092f4225571b8ef35f205e450337e5d5a33908208c0f33da1c138f8da4bdb2cc04b42e3002f89ae27da9fd8971a7faad6dbe745addf22803f23eef8f4f1bc17d00705908784b723948dd4e15fd2b4314a6017f0f9827ee968df579db5e8fc2858139f91605a022541a0e483a6637435f5e2a897347d08dcdd64a22829fcb893c3f2584310a059c813030dd9bd9318b92ab43f264600985de014598b786248844a31b4315ae8016af278c18f495f1ac5fde2b58ba7b29b2ab32f8baa3f5f4a5f786c0fd19c3afb19b9bc08f42e7dbc9fb9c0d8fa90ff695b4453e7adebfbcd0cb962cfe256a245fe777237597dd9c2733f56f4b89fbdbd79cd516e207b5d544b80df7f28eef005561e4a35f3fa213ff7e3b3a9f98c1f020adab66a8ca606cd42dfee315d02f037ec0f62516379f98f73fb4c11b54257d1fe5d312e62198444a05cb8216d98ea121f4fcc6e1695dc1cda8ba2a843020c2a5b35be8fbc8e753e88817af689067591b506ea1c7864c0d3bd0217cdf6bf2a11a1dab225a2197bbbe0f6cf277eb2b9a918fb018eb6aa2a3e453b56252d4619d108b39e9d67d6f8845709417373d4d1f5a7a43a39c158b4e8eed1802e7ee2a026f3ba6345e1dadb8019856a157c288eeacbc0745f454e3d5f167a9a62f348a203eb9cca54fb02ff3cb2aad788c2328068cca70cf484b58684de8b4e4cc0549cb671b1cf9227e644c508f5b0830ad835b83348c712024f0b2613ca2cf64d4fadc960c58688027bde20a5b8f42fdeb819c899040349ab0ad40793fb95956a5b8f9d7b55a35522e97c92115f18d9cf5b336117a185dbd54ce8848f02bdba59bb335d29acb5c89a241053dc6d7fc4feb4bbfc604e3ba3e0f00cd398bb12fdfe4af9b332763fe3f7c340ec930944fbcd2649d9397b7a8bbcbd992691bcde14d55ed43ae93beaf983a766420e0fd135d57f8b022e958780fd3a8b29cfb721316cf553ba5d87fcd8eea955dc400271118fd9e4c568939fe7eb444e1176fc2d0249fa316ac730629c884207d02209d3de7293a16b16efaaa4128f1ab86766e9fdcfc2cbde49e101986ce6fd0ace10407fa7a85606a8e9725fdb870109c3ebab3c2abc745f6c62d37251629a6a9f7fdafe92884ac7831dce7ab780377ed96691efc0dd21750decebb034a6d8e1c0f5cb77eb0ca18d14ed8cfdd2fcacefd16753d1788c19ac2e680fa65732a034046e81e6a949c1897c73e1a9c2bc6407368f1679511db6c5d717b8c849e6be4fb386ed7000ef81e5c294c7a35cf153b4e8e01afa3d24f747366aa9dca541013a824add4badbf70f489b6a9008f5fc341cdb1f584e9b9dc58712425440e727813ab4aadaa37e28608c147a3743caf7c13df58cf68d1baea85a01ab9420067002f074523acb403a34965c9bf1947b3804c0b792e00248b64aa1eb48c127a0a1372c2a8d95dd2a0b77382831ac2f121cfecdc4e3fbe6147cf49c10b2e5439b7081b8e2e002764b9a63f20e0c119c08ec1b0e53ae2cd46358b36634d72c97db6bdea28b1ef54214146ee1d1ae06f66ba2bb76d0f428bcc88c2123fe37fb4e317c1b5e582eb5ea9ad454cf5f67b12f66259b3ff3065cf355612214f02fce425a1dd0ac02bbff4316ae64fc9da6063d21eee514b481b57cc908cfc3b65eaea8cd983651300b9ea5670860ee9bb457e288ec5913c40053607e01c9aa03f7e44259fb29fae4d76f339a4b53da6adc705341b4511cfbe47acf43195b97e002a9b387d9b101c24539c8e1a9323011ba675ff9a8d92ebe55af80a893e8d8450c242c0adf58f994d60dbb222c8c940a634894c0634e32ae3d94652255b15fa7f5b096b46fd0fef4d60ce97460d37dd60f2199988c87e17bc304a2196236e70827d4a5bc85fe4b9b8195460e8a0a1250ef18458986f245012aebe16ed1f8fd01eb24d5663c5f9c8ad8fe934228f6bfcb2425b3be52085a090bf161a1d0db1afc968cc7490ccf933d92ef757801d953f1d7db3645c1fb771521a7fd253e0f33cb58b950aab00ae4717bf07646d1da0eac862bde639c955cd67d132766f1db477f8629cb1c9c2ca00be27ae7fc86a980d82e9400189a7e92fc4c6c710ef6a8c555f7511ecf36af897bc2e489c7617584e46a3878c8b3184f1371e90c18662c98daaf74bb701d410dcc83107b87b7ec8432e5152a284eec2408ed249948f7b3aee65eb43fcc519e02dd88e1129d92d1c5c9ef398b8e85add68beb5318882ccae5297a2f38199b7d0c33a68e54ec5df89372f9cc4fddc146a5de7b93de0c492bf56b2206c8f6c0b31cd2a6f805fce60a212ebe0a36e2550a248076cf130046c50772a067c124300afb3a1b824cfc15d2d9171e2295b3641b23315a6752de2b781e3b1e7fa692247486860a63cc01942fd0e1c25f15035626dbe89a28b8f27805d846a7c46d4a8eeaed8b8c57be0bbbb12abf20b58ff0b7dc1fa658d5d0592eab99b09660ee2de946815eeb9f832f73f3367b5c3482fda44b641b313fad8287353be3831306110f04484aa21740047944b85d32920d97c931151e1fe38e7d4151e08c27276f155249d0fb6f7c66dbcaa6329306a205e41d6e89f74858343bf92ac1c87392c1554f97601bc5a444c1ca5cdc9f90ca28e0e2ba2b61d33726f8c5264d9fa725c71f36baeb8bdc36b60a88ed2668b3c6c72c44f3515a771c2a6bae35b216ef44cea6c353fefa8d604373d3c49b16a44a004dbc1186be3ebdabaf230cdb00ebc3ef1ba1afa6a4d69065dce83dc8fd5363f92d847975a171fbd2adfa8121bc16a7b55152f2a1b4d72d7ae1e927c10c7c5b82cf42d8e3e97cedf99ed6d6bdb13bf80e9cc05b09b295de4dd222729d618bdcb6b019505ba306d8c4b12eb7be9f34acef330898bcd00bb7868f6c95d1b21f6186a2a65beab56dd98e41efb0c44e770dbe99c4693cf78907d01526d22a1f1037400993e5462d57e92fb58d721815cc75713c93a6ea4cdbd21f95a17e1f3c00fc5b747d8eaad204d1ccaaee53378c145c3a3621e086ae825ebeded5496932a4c14e160b5ab3c8a0757fadbe27c3851ce38328ca57c0ea4b99b9bd4d640f91506ad3544499dfea5da5e8604ec8ee0545dc539bcac8553d3c9399f9a7b67fd4cd2ba1a062577e2238a4acaf08dda8fb041c5ac9e0a14c2ca977e8c8b81bbfdfc64d8a1a6b87732873ea3dc1a6f09a71743d8fc2da4e02ff6bb9ea1f61afeddbe3d1ab62a7e39c5419f8ac795a40bdabe1226edb24afe65616c2ea58d10f9980fe49a04569d4715708c4b9fe9534dc89867cac058d93e7670d1bd54a030a7fe4f406fe6665e41f95dd5950feb0b082c07ffe552940154431bcdb1893a8c3ed745a5f731577f7b22b8c895496cadd61a24f170d5a88c5d95cf944e635ffa6b06a1e11e4036746fea69210dc0020b5d5806a13e6905fdc462be95f5a2c7fdca32a2712d79087544f19327fc5a2e80f2c832411b022ebb4b5a59e9267a2cd1b587edf6ebd3655e63a3864638c6f2fe55626fa943ad85b4dd34a58febf359c2f465cb1db48afcd320bc348c3e386fe6a329f2494f44d6e5a720088b76e118642073ebb748b4be450fc41bd07690d1c4ca0c99fc2ed5d025e8862f47fc594b7234e011fea5ff354aa515841f970d4ea02bba028b3ab03481b89587473a69316563148d5094bfeee618d545506aabc10b0cbabdcf293beb16f96b5642b3b83714e221e9d36be7e899bc84b1a819c474b6763122149827bae34c7cdd30318b13cac9f7103c5b9b3b6637b37267786c5f6b3f52777ccbbb87ca44e87ae6225f2e25ac4e5b7aa1d7a85a5f9ae150914e79e97f27f9fa85f6b4771a12afb42157720f74b3d7f7f963da18696ba775b4d5605f4976ccb19a4ef26dc94bc87233251a88917fae838aa46231f1683bfd89c6d5d6fa4633034f402f79e2c475cf27120fb0dfb82f9f7e948e74e44dfa67127acda64574d1b1f004614398e38d5470100c38c117de531635fb47070c117912ece62501e422d7aa43094a0d6fad03ab228f0a9d281fdb2ce068abb340d42b2455d93b0d7a58664cc163cf160e91e3f161c6bfe8caf8d88553b924dc3a0ae109485c42efa0340fc11d31e6ff1ef1df4da7d46e4f8516bd19eec402f8bc0828d01adf6092615edbfdb37479dda88430bb189c06698e92e663321ac8c3a1bd10f60d6b3751b44e40cd36d9fc9d7b6892d9cbdab8c0c4ccf02bdd762f99d2db44fe8d05482a98a448cda2ef38ad38fff5d813d0cb66eb58ebf2d1c36257326cd632363177e19720eded90a12793affd319fbf71a0099db8617d58b6736b75ec72295693017812fa4ba1ad4fd9ce3d3721e13e4c822e336bbd855663c4e71e29c51a630e619b31c022009bead97cad9bfc6c6cafdb8acd01d661a7172a0641fbeb3b1a0832338f716f2003c610cbbbcc4a0c3cb9f9aef831a01b0a06739331df0874c22590cc82c626ae5678a2ab0b82063a54bb9023009ed90ff667d6fb843d88ed9c4700285111506d4d6f7d98800443920180427520b2f39aeb9a8c4f23f9efdc7c24a9c1275ebb214e4913331ae371c82e214e583a88b927b5d096814e2481574e8250eae2d96418e6c0c2ab77030cd01158ce3f3ad5ffe4080826eb209f7862387e0f1edd6724a7dec63c11c2c596ea01c174ff8f7f193a42c703983d5731cfd0851a290dc99b6507b5500af3ae7cc6b84476b2ebf6429e96f9fbe4050b77c32d0fb0915deb35eca0e149b54ac663cddb41b8aa25c24242aa21179020f9ee7c1122fd4acbe8eb632ff003ae77aa5ec622dec5d9e3fe6e80aa22a57c4e9f562186501880fbe7a7abd5dd5ca99d80aebc8495f3217abd7445d7491d18407445a887e9aa7ca6e528482d3d30d6f823bd6cab28986b3d8dbdcd86ffb4febab09be106ea50a23c0d73b900e40fdb73254e3efbedba257110ee8c4a49d6589ccfb4722e72282bbcd1d600a0f253dce9b97fb3a0d327af71ea309e15d3b35981e6cf70515a91ff3fe89eb1c3ca56c1425ea808e3109ca098ad92147ddef89e92887d2907d95a5ad1fb0793f3c31ace6169a3615f279bcfe490a05999d7959db474f0446c8bffc70e058152e7d6d6ced91b607c86c3941cadcd380137a2da688a608a3fe94a7685e24b48d91f4ea9cd048c6fdbee3a78904c43fae5afd19e528846e795e7041d125c1132d93d2f78084036bd80e7a0b327e2961967cdd6794682192e4ab8f101a3fc048a761c38f0354247b64094c304b3afda759ab74d40f7e7c4de89b7b8655265ec86ef6ea20abb714ee27be97aad7633088f3ae0ae3a877d1e30d145364275b694118d66593f3e2f9853f2fa1b0e702be523e7510d3fc35a813a84f732d5a8f2e70be291b0be4de6d009c8602dd7b5a80010fd6ce5199fd576798c79ac3ebdeef0e81bcea494c93514d6a1aa5e28ddaabcdde1f80caadb910ce1a76d2f39f49d23ca76597ddf9ec4a09590bdcec37dd62ce2e9768e5071d624ee7a0bbb24f0fa740a4ac4fc39c56a4bd58ace6963b1c8a94ee0167780799e8aa698e9b8d6de98029304d85e4d640bcdbc9981de46bca8560d16de49a63c3650e64fded3d6a0c8c3e0ceb294394622c4d1d86f7a34434d1ec35bc733c9112f31c3c763910ecf9b9b3da48abafcb8a1458b01687c924851d36c3111131e595ac87068cc01fba95ddbb364173d58d8082bdab5663857bc322bd9e8d7847280b37440dadca497b455542d502482e438e618eee6ad8f9e1336afb592e246ae79fe82b110b3b0cf13c31bba10e17cc08dc523b4747a34d1afcedd7c3364a5fd3098ea860413d38ae4af81bd7dd34ce8949410c0817b95dfabdfcec1e0490dd661849411e6eb4ecd026674dda6b4cc5092d07f2cd18aa75cbc9d8d898729bd9acc4de874dd6329c335accf3d42a43145e1e241eb06c08587ba6f385b2cdc6efc02d8fb11292580a555c129a8f4edb517805896cc6d1272ef846d00c517718dfdc3a7ac03bb23e600168f95f7e3aa7001cd9d9e0db202dc225a129680ed75280d84fe88db7206858eee5a83ada9608a1c5e8f184958088029de407642813a9083dbf2367693a767dc54c1bda1f520c8bab5c86ab5d59de057478ecaeee59e6579ccfdc5a1a59e12e204ffbc9e2334ec0120c8e0fd9a8b6126021c52559bbf1c043eacf5f5f9aabcaa8844df6be38da4e42dc8ecdd801f2244b5cad2680e8b130f4315ce95b7b4503dd292eab05390085bbc318d5d7113c204760376714a8bcd6c2508490ba67ec9654bac85a8572cbd86cfe024891f3b8c066ef18ab0354e4e0cd7eec4e85936f97925de39aeb5aabb0cc1a26d8ccef8e9fe7c81a3131e833d27eea44610d7283762eaf8784a8914aa52670e7c37d2258797c8c0dd760e5a2be99f574437f66bd9bbba5da69b594bc38d1851bb225c514d41374467998cf206c752ae7567272bdf20f1a12145f51574d6a69fc30fe50ddbab297285186829ead9e9e78b311966acaff3e2cc6f799f9a1d1b1288c70a22305b33d86bedb03752455be93948ca9c860a84ddcfb66dd817f40c6a86ab5b310279ddb31dc84367ff2597a209c6b925b7d6990af8238d91704cf65b04b5424753647381477c93993f82593ee39d1021e3d6c792be8753c64c5b3149bcbe86db5078332929b80dfc2aee1eba66289df3c570b6efaf08848137e2a0e7ae4663ee16a458f3a01af8c2801c9055b354771dc6eb64f15e49c7ebd3d0f86dd1189b7e85f3007881ff7346ae769f4f83599afbe9bd4398fd201a3fa00ccce1434bf87bf3942af3b8d377c747c5661463e447ddf6a20260ec5c87410a871fe97be3799a1a638ef16639b68212377e52a27f32cb0df13abf6968c3d92bb77788f43e33f68907c28963b9e4a2ac1f1ba3edfbcd8fb11fb6b685144e3b54b1d5733291514ac5644bfa2050f1fd5cf2e642e01952c20e563b9a5413e90b21b5ed0157de64997cff6564f8ddc2f30a3c49bbfda9535529576330206bb07f9a604b3a3c7e297248e6f219e7594670ca8a07273eb5694285d8bc13950c46b2e057b70a97e648c0377b3b8958bd9498917af86f7d66fbb42be83742a4f3ab001d3d4e1eb224683a213cefda62a9d59457f8d84278789664e3d1a08521d82c31cd7e56c3d9a395260257afcd48336f694b78fb90c99c81f2f5187264a26e7d33d30867d3a032dc31db7223a6740bdfc569f82c66fa520bb1fc055b063cf04d61d47a46fa8a75a4ba62d6b2183678c3eec3ca0fbbbfeaaa0db143646925bd05a72fc571d7c64a4c1ad1e8631d5012075502a65f4bdb5abc316bb7066c40166666d40292aa52c5272d6e37c9c0b3bd3dd3e50b9c79337145104970e232d3717d5c10254fd28207cb84b05c2fce1ed1a202c5f6498483061baf7cccc4c2d055325e64d6f48ed399e76bbc638bdadbd87445d778f9c1d1500c0096d18533ade54f04e487d6fc24bfae4e189e697fbf378deb83777c32bcc3464b10e9cead62b66f22f089419500ff53e6dd17faca3e2ed5561fec38bdec77975b97b8475ed5cdb5a64bec5faad72d8a97964d0c127f9a31fe4f645e1b28174fa21c406382f03bf6b3956165fe7e95d191a4fc7ddc06af37fbd774caca5424708e77a56eaf3950b764fb8fab5307b7669da1dc361c3c9c844c6c95d9d4bb0e2843bcd449507ad75311dc2290da2e55f4d794f9a86da5f698799d5255352a8590351fa8f733287697688b5c9390b86767ce180cfa45ebb8132a7c2cc93cce4f977da36612b5e36c0df6b39a6a7c16d551e114c7c7e413c2528e514b19d4a8265cf5c2f7fde0eec5e395fbc47a51a036ea8800fc367e106fd95a412e42d3a67815d8a67bce8aea6fb7274bceb1b8b1e5358e320303b607a82639adf7b07f4b6a41d9bf9a2b8fd784e0b6add7f7d0a43537cfd7d341a01c69654621445bdd11d2e1b57fce90b0062a9b4f3b9e831140905171de0c1ac62bc6d04eab6ea3de7615f9b56245829fb533e1047a2e38a36dea4b73e52672b7e3a8b902dcf62075ef88a95bb6132ed88bbad05855d4697906983f03b6e07bbd5b5a9cbd0a09888a2d3a06f1ddf000e45df2586df3e44ddfaacf3ff30bd1c12dabec645a329b18527b627418127c761f03f16043efed0390871a696965078462c7eac1109d13e545d6d306bc981b3407fb79282790e3f66c9acf53ca2d8bb7b19e2b98c8a0973dadc2e54734f9e22e0af08ecce9809001c5da72fcc635d64aec5c8d727c1e945235bfcc95b25bf6c5d30b39078b10a285841932d5fe3c4a7407684bcab82ea798c820b036cea15d06ee866b6e4acdf741809dbf20fa54e94d4fe893151ec6b7d13fd486dc625aadba7c7d9ae8c0d7ed04a4ddcafcd7cd5d0fc1ce8b8900f0b3ec251b0546e32b2d844884984f05ee3ca0f7a27a2040a8c226c073bcb820bdb4f09191563a5c431a626bf8520d321e6f070720fecbabee5bcd079494ee30e2bdaea2041b5db6997981fa7e625060e9deee1f0ae10015f54999b3bc883ecdd8c8c2bf9faf5e263daf57ff3a1bfc9d322eee139acbab9bb54188d9fe93f3c67ae61820f12b04737325bfe027359323253428f51429b45f41f3281ac304b8481649cdcf1471efa02d488b2d58698426178810680a10adaa7a22dbd8965dc859d72a762daa762898f53a2b63cc4ce1c57ca9f838ff0b3936cad7dc175e5fc5af7810cbe7f9b297c676227438bf9fbb61ec787082250a150e655e63c225a4d496b7886d4f0e1fa3bb71f8ede646af4137d8e783905b52d41db76dcda0b1eadf714a4a19b1c9842f9f0e39732ceb0e0bf4be40c53021e2c819695ee08d32c8a0b8a1c24e7d1d1ab42ef071fa823a7598695e1b611c8d508e43dd0b3164a337642c560a54dea7b43cb6293622246d8ce093a14142c957deb31406b96cb359d7d806a7bbb91c4da0bc888bb626e5cc5600e6aac8c5c3ef311e104535536acc8c90c6be3d86a3588842c7dbb7122b0b2347a73619da54ea7eda55a7b2aa53181a792239fdcee73c11cc46c5ae2ad652be85583ccd9710fdfe405624adebc98e6515825dba56bb1e473f3219f9e2cca52a48454079d5a55af678cc9cc00ed0c5311cd9f53fad2f4ebbbc70042b316efb2d2fe5383c0c8682e41ddf06e5005532116770de70b0a4409121757bbd5c540b1f34ac688bcbb671ea7f84895c895bbf012cd2ac8f8099b6fd4423c723db5e281b8877a6a5662c4719f1818b0032c80dc476891c4b407c21d334ba706154b5fdf23d5368f701f758c8f4e5784ff795e126ac9e4792d3d31f923bf62e68256506670af776aec3d91b194babe359beba7aba86e3a4596acade4de7b78ac62fd1cc1dec79a5ad5d9184589e3810746aceb349f02070f8d9790448a51804ffb1e56f14b8ac50281069b2e7ac82874e8828694585ff3f55ed883c0171b47ce38e12ff22883ab685af6be4d3a780254114a5d15e735f8f0e49ea174996a51428ed673a4a57346206a7b740fc653793e004c8ccc3860610af6ab6fcaa7d13193149cca113d7e319d6a9b0af79c8eb4d57d5bab3d1cfacbd3473c46809b1f5a6fd9448fb7a62184a1d11a6a4cb0caa812ae50102fdb140ff13f4754bebd5627a79e679784ffb4e70a0db9ccff6f1eb283e02059fdc63879d82a9cb7b8867031eeb7ce2a3ed1b6bdf0cc2f4b5e7aba4550ff6572da620abb9c52ce0f3cf473c1cdedbf8301323e5fe0676f81a6c90c5c3bb2bd20931494384f98b0545c10ec86e3399d85b94dd9262b2c23057b75dabd170b30bbc471b5f6709445e096f6f3839ad33547f6a2c30c80519ddb95a12b7e9cf4d5a9f8fe847783c2907f3279a8338376d1fc81805a97969623369f19e3d58bf7b0581b46c913130ede4c80c432be5bdb65687521cc3d4a7c067b43d01a1c005fad731b695349d7091c8f7eeace1e52f237ae5fc160f2693d9cdbae1d54eb6b5ce5a7a18545757f84c6061613c11d5b399e12e32e3e97c0c99765969cadb487ace198bdfbfd9bf21441c2df06b6ca884920e25d389cc1268381ab6fb0cf160a7473be3d0bfc8fa60a678f2fa0b73c8316e1f72b61ec6511ff173fae450d33c4fa7e9bca79c40303f8298cb4e270027177028c54684b23a86f0e4cd3aa6871765c87aff073225243586e2c292ae8c14f6d5b972c73f910d2ae35f78551a5391f768ae0e054ed18933cff72aa1119c7d19a11a788c098ef5d5cead60925fabf8a3062069b93976a252e2667c0f0aa33c09a5ea1a3960bcba429aa0cb758eca796de6209c0c525b19c230fc6926f27d844f17fafabaf14cba4ddb769b9f6fd123f9d4f4d9585ba51d6f7ef0175087ea76a41c09a5d14cb65effb08c5dc798cf00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) r6 = memfd_secret(0x0) copy_file_range(r6, 0x0, r6, 0x0, 0x0, 0x2) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f00000001c0)=0xf900) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000080)={0x0, 0x32344d59, 0x0, @stepwise}) ioctl$CEC_ADAP_G_CONNECTOR_INFO(0xffffffffffffffff, 0x8044610a, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 2m27.15843847s ago: executing program 2 (id=803): unshare(0x62040200) r0 = syz_io_uring_setup(0x6cda, &(0x7f00000006c0)={0x0, 0xfffffffe, 0x13100, 0x0, 0x12f}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000040)={0x6c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @mcast1, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @local, 0xff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x2c, 0x1d, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x40, 0x4004, @fd_index, 0x1, 0x0, 0x0, 0x1a, 0x2, {0x3, r6}}) r7 = socket(0x2b, 0x1, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, 0x0, &(0x7f0000000240)) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x3c}}, 0x0) r9 = syz_io_uring_setup(0x5f13, &(0x7f0000000140)={0x0, 0x903a, 0x0, 0x2, 0x262, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0xd) r11 = openat$adsp1(0xffffff9c, &(0x7f0000000000), 0x280802, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000040)=0x1000) 2m26.471978795s ago: executing program 2 (id=806): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000202c0)}, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff01000000000000000000000000000100000000000000000200080008"], 0x80}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4, @dev}) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x90, [0x0, 0x0, 0x6], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x50) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x90, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) openat$mice(0xffffff9c, &(0x7f0000000240), 0x80) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0x801, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000100)) 2m26.025897486s ago: executing program 34 (id=806): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000202c0)}, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff01000000000000000000000000000100000000000000000200080008"], 0x80}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4, @dev}) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x90, [0x0, 0x0, 0x6], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x50) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x90, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) openat$mice(0xffffff9c, &(0x7f0000000240), 0x80) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0x801, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000100)) 1m20.86906932s ago: executing program 6 (id=1024): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0bc5310, &(0x7f0000000140)={{0x80}}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) sigaltstack(&(0x7f0000001440)={&(0x7f0000001480)=""/4077, 0x80000000, 0xfffffffffffffd71}, 0x0) sigaltstack(&(0x7f0000000480)={0x0, 0x3}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}, {&(0x7f0000000100)=""/81, 0x51}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000016c0)=""/262, 0x106}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000003800)=""/152, 0x98}, {&(0x7f0000000280)=""/115, 0x73}], 0x8}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001e1773ba204e6ca20799960000012abd7000fcdbdf250000000083011fbecd58915e946defd5d32602a317b9f93a45311720c7ad56fb5c18254068bbeaf5d7de7475b4d9728aa5057246c7150607809082710a8d8114aad47fa0db5f25783ea06b7bc07b098daa7b2802827f910efd5b"], 0x14}}, 0x0) 1m19.636504498s ago: executing program 6 (id=1028): socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2a, 0x2, 0xffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) 1m19.299967647s ago: executing program 6 (id=1029): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0bc5310, &(0x7f0000000140)={{0x80}}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)}, 0x0) sigaltstack(&(0x7f0000001440)={&(0x7f0000001480)=""/4077, 0x80000000, 0xfffffffffffffd71}, 0x0) sigaltstack(&(0x7f0000000480)={0x0, 0x3}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}, {&(0x7f0000000100)=""/81, 0x51}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000016c0)=""/262, 0x106}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000003800)=""/152, 0x98}, {&(0x7f0000000280)=""/115, 0x73}], 0x8}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001e1773ba204e6ca20799960000012abd7000fcdbdf250000000083011fbecd58915e946defd5d32602a317b9f93a45311720c7ad56fb5c18254068bbeaf5d7de7475b4d9728aa5057246c7150607809082710a8d8114aad47fa0db5f25783ea06b7bc07b098daa7b2802827f910efd5b"], 0x14}}, 0x0) 1m17.639840462s ago: executing program 6 (id=1034): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) pipe(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$FUSE_INIT(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) poll(&(0x7f0000000240)=[{r6}], 0x1, 0x10000) dup3(r3, r4, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000040)={0x90000004}) write$binfmt_elf64(r0, 0x0, 0xfffffdea) 1m16.610190227s ago: executing program 6 (id=1038): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') preadv(r5, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/4081, 0xff1}, {0x0}], 0x2, 0x15e, 0xb) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f00000000c0)=0x101, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') pread64(r7, &(0x7f0000002140)=""/17, 0x11, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmsg(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000063c0)=""/4097, 0x1001}], 0x1}, 0x102) 1m16.1999796s ago: executing program 6 (id=1042): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f00000000c0)={@remote, @loopback, @multicast2}, 0xc) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000040)=0x10000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) fcntl$setlease(r4, 0x400, 0x0) truncate(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 1m15.681188897s ago: executing program 35 (id=1042): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f00000000c0)={@remote, @loopback, @multicast2}, 0xc) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000040)=0x10000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) fcntl$setlease(r4, 0x400, 0x0) truncate(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 9.45335081s ago: executing program 1 (id=1275): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') preadv(r4, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/4081, 0xff1}, {0x0}], 0x2, 0x15e, 0xb) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f00000000c0)=0x101, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980", 0x6) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') pread64(r6, &(0x7f0000002140)=""/17, 0x11, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmsg(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000063c0)=""/4097, 0x1001}], 0x1}, 0x102) 8.120213257s ago: executing program 1 (id=1280): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x4383, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffff088) listen(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 8.090305019s ago: executing program 4 (id=1282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r3, 0x0, 0x0) close(0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) read$dsp(r4, &(0x7f0000000240)=""/71, 0x47) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000140)=0x6, 0x4) 7.672303004s ago: executing program 5 (id=1283): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000202c0)}, 0x1) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4, @dev}) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x90, [0x0, 0x0, 0x6], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x50) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x90, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r5 = openat$mice(0xffffff9c, &(0x7f0000000240), 0x80) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000000280)={0x0, "396700000079951b25352a46dbdbaf7500000000a5000000000000004000"}) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0x801, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000100)) 7.277382456s ago: executing program 5 (id=1285): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$vim2m(0x0, 0x7, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f00000000c0)={@remote, @loopback, @multicast2}, 0xc) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000040)=0x10000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) fcntl$setlease(r4, 0x400, 0x0) truncate(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 6.957004082s ago: executing program 4 (id=1286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) pipe2$watch_queue(0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000300)={0x0, 0x0, 0x0}) close(r0) 6.68792668s ago: executing program 8 (id=1288): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$vim2m(0x0, 0x7, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f00000000c0)={@remote, @loopback, @multicast2}, 0xc) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000040)=0x10000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) fcntl$setlease(r4, 0x400, 0x0) truncate(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 5.761770763s ago: executing program 5 (id=1289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) pipe2$watch_queue(0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000300)={0x0, 0x0, 0x0}) close(r0) 5.636836139s ago: executing program 8 (id=1290): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r2, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) read$dsp(r3, &(0x7f0000000240)=""/71, 0x47) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000140)=0x6, 0x4) 5.400425653s ago: executing program 7 (id=1291): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000340)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/4081, 0xff1}, {0x0}], 0x2, 0x15e, 0xb) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0)=0x101, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980", 0x6) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') pread64(r5, &(0x7f0000002140)=""/17, 0x11, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmsg(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000063c0)=""/4097, 0x1001}], 0x1}, 0x102) 4.824037038s ago: executing program 1 (id=1292): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/4081, 0xff1}, {0x0}], 0x2, 0x15e, 0xb) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f00000000c0)=0x101, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980", 0x6) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') pread64(r6, &(0x7f0000002140)=""/17, 0x11, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmsg(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000063c0)=""/4097, 0x1001}], 0x1}, 0x102) 4.81322954s ago: executing program 4 (id=1293): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f00000000c0)=0x101, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 4.589959202s ago: executing program 8 (id=1294): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) 4.433448634s ago: executing program 7 (id=1295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x18, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) openat$procfs(0xffffff9c, &(0x7f00000007c0)='/proc/keys\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd(0x0) eventfd(0x0) eventfd(0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.872039065s ago: executing program 7 (id=1296): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000202c0)}, 0x1) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4, @dev}) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x90, [0x0, 0x0, 0x6], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x50) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x90, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r5 = openat$mice(0xffffff9c, &(0x7f0000000240), 0x80) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000000280)={0x0, "396700000079951b25352a46dbdbaf7500000000a5000000000000004000"}) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0x801, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000100)) 3.84610994s ago: executing program 5 (id=1297): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r3, 0x0, 0x0) close(0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) read$dsp(r4, &(0x7f0000000240)=""/71, 0x47) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000140)=0x6, 0x4) 3.591445924s ago: executing program 8 (id=1298): openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x4, 0x0, 0x1, {0x7a, 0x0, 0x0, 0x0, 0x14030}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x5860, 0x4811}}}}}}]}, 0x48}}, 0x0) syz_clone3(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x2c0c, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="286d81866e6b77fbbd308e1683", 0xd}], 0x1, &(0x7f00000002c0), 0x0, 0x24008000}, 0xc040) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r3, 0x3516, 0xf7bc, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) 3.49158309s ago: executing program 1 (id=1299): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$vim2m(0x0, 0x7, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f00000000c0)={@remote, @loopback, @multicast2}, 0xc) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000040)=0x10000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) fcntl$setlease(r4, 0x400, 0x0) truncate(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 3.387643405s ago: executing program 4 (id=1300): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$vim2m(0x0, 0x7, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f00000000c0)={@remote, @loopback, @multicast2}, 0xc) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000040)=0x10000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) fcntl$setlease(r4, 0x400, 0x0) truncate(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 3.386839786s ago: executing program 7 (id=1301): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x810, r0, 0xf5d3d000) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x1, 0x7}}, 0xe8) mkdir(0x0, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001dc, 0x24040840) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./cgroup/file0\x00', &(0x7f0000000300)=[0x8, 0x7], &(0x7f0000000440)=[0x1, 0x1], 0x7, 0x2, 0x1}}, 0x40) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r6, 0x6, 0x1, 0x0, &(0x7f000001f380)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.217764319s ago: executing program 7 (id=1302): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x4383, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffff088) listen(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 2.635122691s ago: executing program 5 (id=1303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) pipe2$watch_queue(0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000300)={0x0, 0x0, 0x0}) close(r0) 2.350060033s ago: executing program 8 (id=1304): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xc, 0x4, 0x4, 0x3abe, 0x800, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000040)='ro\x00', 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000940)="a5", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000600)) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000640)={0x0, 0x2}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f00000001c0)=ANY=[@ANYBLOB="040000000000000000000000000000050000000000000000000000000400000000000000000000000000000000000005000000000000000000080000000000000000000008000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"/168]) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x4d, 0x42, 0xd8, 0x20, 0x1ba6, 0x1, 0x4988, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xe4, 0xf9}}]}}]}}, 0x0) 2.29397111s ago: executing program 1 (id=1305): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r3, 0x0, 0x0) close(0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) read$dsp(r4, &(0x7f0000000240)=""/71, 0x47) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000140)=0x6, 0x4) 2.232994673s ago: executing program 4 (id=1306): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0xa, 0x0, 0x0, {0xd51, 0xe1, 0x2}}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5, 0x7e, 0x45, 0x40, 0xeb1a, 0xe305, 0x4433, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x1, 0x7f, 0xfd, 0xc, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) r2 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x400, 0xa0, 0x17}, 0x18) statx(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x20}}, 0x41000) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000ac0)=@ethtool_cmd={0xa}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000002c0)={0x2ff, 0x2f800000, {}, {r3}, 0x4, 0x80}) 717.851251ms ago: executing program 1 (id=1307): unshare(0x62040200) r0 = syz_io_uring_setup(0x6cda, &(0x7f00000006c0)={0x0, 0xfffffffe, 0x13100, 0x0, 0x12f}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000040)={0x6c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @mcast1, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @local, 0xff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x2c, 0x1d, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x40, 0x4004, @fd_index, 0x1, 0x0, 0x0, 0x1a, 0x2, {0x3, r6}}) r7 = socket(0x2b, 0x1, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, 0x0, &(0x7f0000000240)) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x3c}}, 0x0) r9 = syz_io_uring_setup(0x5f13, &(0x7f0000000140)={0x0, 0x903a, 0x0, 0x2, 0x262, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0xd) r11 = openat$adsp1(0xffffff9c, &(0x7f0000000000), 0x280802, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000040)=0x1000) 509.398923ms ago: executing program 8 (id=1308): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) 338.530071ms ago: executing program 4 (id=1309): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$inet6(0xa, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r2) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004800f9ffff"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe6, 0x0) 323.678509ms ago: executing program 5 (id=1310): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/4081, 0xff1}, {0x0}], 0x2, 0x15e, 0xb) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f00000000c0)=0x101, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980", 0x6) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') pread64(r6, &(0x7f0000002140)=""/17, 0x11, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmsg(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000063c0)=""/4097, 0x1001}], 0x1}, 0x102) 0s ago: executing program 7 (id=1311): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f00000000c0)=0x101, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 04b8, idProduct=0202, bcdDevice=30.46 [ 247.165175][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.207851][ T5891] usb 2-1: config 0 descriptor?? [ 247.229815][ T5884] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 247.256975][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.292791][ T5884] usb 6-1: config 0 descriptor?? [ 247.311456][ T5884] cp210x 6-1:0.0: cp210x converter detected [ 247.521745][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.5.680'. [ 247.554644][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.5.680'. [ 247.707594][ T5891] usb 2-1: string descriptor 0 read error: -71 [ 247.786913][ T5891] usb 2-1: USB disconnect, device number 41 [ 247.817519][ T5884] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 247.857143][ T5884] usb 6-1: cp210x converter now attached to ttyUSB0 [ 248.696955][ T5884] usb 6-1: USB disconnect, device number 27 [ 248.708056][ T5884] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 248.841296][ T5884] cp210x 6-1:0.0: device disconnected [ 249.631219][ T8596] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 250.698568][ T8610] syz.1.692 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 251.140882][ T5890] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 251.188106][ T8628] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 251.292196][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 251.360670][ T5890] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 251.371078][ T58] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 251.381448][ T5890] usb 3-1: config 0 has no interface number 0 [ 251.387727][ T5890] usb 3-1: config 0 interface 219 has no altsetting 0 [ 251.395229][ T5890] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 251.404765][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.415446][ T5890] usb 3-1: config 0 descriptor?? [ 251.659625][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.670074][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.680597][ T58] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 251.689818][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 251.698100][ T58] usb 5-1: SerialNumber: syz [ 251.924852][ T58] usb 5-1: 0:2 : does not exist [ 251.929924][ T58] usb 5-1: unit 255 not found! [ 251.943052][ T58] usb 5-1: USB disconnect, device number 43 [ 252.158532][ T5890] usb 3-1: string descriptor 0 read error: -71 [ 252.172081][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.182558][ T5890] usb 3-1: USB disconnect, device number 32 [ 252.316099][ T8649] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 252.801647][ T8657] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 253.067255][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 253.210865][ T58] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 253.397100][ T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.446413][ T58] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 253.457755][ T58] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 253.468410][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.511448][ T58] usb 3-1: config 0 descriptor?? [ 253.847740][ T25] usb 3-1: USB disconnect, device number 33 [ 254.321758][ T5883] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 254.492229][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.565503][ T5883] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 254.680881][ T5883] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 254.721267][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.802962][ T5883] usb 3-1: config 0 descriptor?? [ 255.453339][ T8688] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 256.120890][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.139296][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.282356][ T5883] usb 3-1: USB disconnect, device number 34 [ 258.200898][ T5883] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 258.320946][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 258.410935][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 258.427689][ T5883] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 258.438619][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.462946][ T5883] usb 2-1: Product: syz [ 258.480666][ T5883] usb 2-1: Manufacturer: syz [ 258.485425][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.499027][ T5883] usb 2-1: SerialNumber: syz [ 258.501748][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.528762][ T5883] usb 2-1: config 0 descriptor?? [ 258.532759][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.538758][ T5883] as10x_usb: device has been detected [ 258.548178][ T5883] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 258.564021][ T25] usb 1-1: Product: syz [ 258.589009][ T25] usb 1-1: Manufacturer: syz [ 258.609135][ T25] usb 1-1: SerialNumber: syz [ 258.619462][ T5883] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 258.666648][ T25] cdc_ether 1-1:1.0: skipping garbage [ 258.676050][ T25] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 258.677913][ T5883] as10x_usb: error during firmware upload part1 [ 258.748782][ T5883] Registered device Abilis Systems DVB-Titan [ 259.028535][ T5883] usb 1-1: USB disconnect, device number 25 [ 259.871385][ T8749] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 260.817681][ T25] usb 2-1: USB disconnect, device number 42 [ 260.867202][ T25] Unregistered device Abilis Systems DVB-Titan [ 260.890669][ T25] as10x_usb: device has been disconnected [ 260.916554][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.926355][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.939734][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.969738][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.980427][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.988250][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.587183][ T8766] chnl_net:caif_netlink_parms(): no params data found [ 261.777219][ T8770] mmap: syz.1.733 (8770) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 261.878808][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.919944][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.961250][ T8766] bridge_slave_0: entered allmulticast mode [ 261.989593][ T8766] bridge_slave_0: entered promiscuous mode [ 262.040496][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.080941][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.088771][ T8766] bridge_slave_1: entered allmulticast mode [ 262.096007][ T8766] bridge_slave_1: entered promiscuous mode [ 262.162074][ T8766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.189402][ T8766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.329029][ T8766] team0: Port device team_slave_0 added [ 262.340476][ T8766] team0: Port device team_slave_1 added [ 262.461351][ T5884] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 262.480123][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.499510][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.525647][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.538187][ T8766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.555652][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.596863][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.643183][ T5884] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 262.668415][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.687815][ T8766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.738242][ T5884] usb 6-1: config 0 descriptor?? [ 262.760117][ T5884] cp210x 6-1:0.0: cp210x converter detected [ 262.849195][ T8766] hsr_slave_0: entered promiscuous mode [ 262.886750][ T8766] hsr_slave_1: entered promiscuous mode [ 262.920535][ T8766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.938695][ T8766] Cannot create hsr debugfs directory [ 262.951011][ T5883] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 263.062134][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.5.736'. [ 263.090028][ T8805] netlink: 20 bytes leftover after parsing attributes in process `syz.5.736'. [ 263.145424][ T5884] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 263.153060][ T5884] cp210x 6-1:0.0: querying part number failed [ 263.161162][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 263.231729][ T5884] usb 6-1: cp210x converter now attached to ttyUSB0 [ 263.302919][ T54] Bluetooth: hci0: command tx timeout [ 263.325797][ T5883] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 263.360878][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.377361][ T5883] usb 5-1: Product: syz [ 263.390958][ T5883] usb 5-1: Manufacturer: syz [ 263.395574][ T5883] usb 5-1: SerialNumber: syz [ 263.409452][ T5883] usb 5-1: config 0 descriptor?? [ 263.492658][ T8766] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 263.516080][ T8766] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 263.529150][ T8766] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 263.597074][ T8807] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 263.607149][ T8766] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 263.680395][ T5883] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 263.813936][ T8766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.836278][ T8766] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.865956][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.874139][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.952822][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.959981][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.975087][ T8812] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 264.255032][ T8766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.454390][ T8766] veth0_vlan: entered promiscuous mode [ 264.505657][ T8766] veth1_vlan: entered promiscuous mode [ 264.688593][ T8766] veth0_macvtap: entered promiscuous mode [ 264.701441][ T8766] veth1_macvtap: entered promiscuous mode [ 264.755760][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.861974][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.884881][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.896513][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.920993][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.944919][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.958076][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.976654][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.001589][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.022552][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.038565][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.052168][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.077111][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.093092][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.110414][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.129928][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.175648][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.209723][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.250956][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.261158][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.273304][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.297464][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.318406][ T8766] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.335424][ T8766] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.354270][ T8766] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.367281][ T8766] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.381135][ T54] Bluetooth: hci0: command tx timeout [ 265.395492][ T5883] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 265.416949][ T5883] usb 5-1: USB disconnect, device number 44 [ 265.590516][ T975] usb 6-1: USB disconnect, device number 28 [ 265.633477][ T975] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 265.639011][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.677125][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.685450][ T975] cp210x 6-1:0.0: device disconnected [ 265.781464][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.790109][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.864000][ T8852] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 267.227232][ T8857] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 267.472539][ T54] Bluetooth: hci0: command tx timeout [ 267.638474][ T5884] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 268.122525][ T5884] usb 3-1: config 0 has no interfaces? [ 268.132636][ T5884] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 268.168367][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.202800][ T5884] usb 3-1: Product: syz [ 268.244448][ T5884] usb 3-1: Manufacturer: syz [ 268.260909][ T5884] usb 3-1: SerialNumber: syz [ 268.286421][ T5884] usb 3-1: config 0 descriptor?? [ 268.573773][ T5884] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 268.721169][ T5890] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 268.762653][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.787506][ T5884] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.817617][ T5884] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 268.830508][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.859551][ T5884] usb 6-1: config 0 descriptor?? [ 269.119242][ T5884] usb 6-1: USB disconnect, device number 29 [ 269.148315][ T5890] usb 7-1: Using ep0 maxpacket: 8 [ 269.391975][ T5890] usb 7-1: unable to get BOS descriptor or descriptor too short [ 269.450382][ T5890] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 269.461667][ T5890] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.476044][ T5890] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 269.485303][ T5890] usb 7-1: config 1 has no interface number 1 [ 269.491530][ T5890] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 269.504425][ T5890] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.518899][ T8884] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 269.551285][ T54] Bluetooth: hci0: command tx timeout [ 269.561042][ T5884] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 269.692156][ T5890] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.711247][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.719292][ T5890] usb 7-1: Product: syz [ 269.720563][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.723516][ T5890] usb 7-1: Manufacturer: syz [ 269.723536][ T5890] usb 7-1: SerialNumber: syz [ 269.778643][ T5884] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.818426][ T5884] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 269.823990][ T8890] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 269.838692][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.856743][ T5884] usb 6-1: config 0 descriptor?? [ 269.971912][ T5890] usb 7-1: USB disconnect, device number 2 [ 270.236283][ T6464] udevd[6464]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.778832][ T25] usb 3-1: USB disconnect, device number 35 [ 271.191245][ T8907] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 271.372272][ T58] usb 6-1: USB disconnect, device number 30 [ 271.456187][ T8912] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 271.600812][ T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 271.750926][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 271.821702][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.767'. [ 271.860923][ T5891] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 271.870986][ T25] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 271.927174][ T25] usb 3-1: config 0 has no interface number 0 [ 271.955021][ T25] usb 3-1: config 0 interface 56 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 271.965068][ T25] usb 3-1: config 0 interface 56 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.975255][ T25] usb 3-1: config 0 interface 56 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 271.987155][ T25] usb 3-1: New USB device found, idVendor=12d1, idProduct=dfc1, bcdDevice=8c.1b [ 271.997921][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.007838][ T25] usb 3-1: Product: syz [ 272.012132][ T25] usb 3-1: Manufacturer: syz [ 272.020968][ T25] usb 3-1: SerialNumber: syz [ 272.029049][ T25] usb 3-1: config 0 descriptor?? [ 272.043769][ T5891] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 272.045818][ T25] option 3-1:0.56: GSM modem (1-port) converter detected [ 272.073362][ T5891] usb 7-1: config 0 has no interface number 0 [ 272.079510][ T5891] usb 7-1: config 0 interface 84 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 272.135131][ T5891] usb 7-1: config 0 interface 84 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 272.191893][ T5891] usb 7-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=44.33 [ 272.201257][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.209471][ T5891] usb 7-1: Product: syz [ 272.213805][ T5891] usb 7-1: Manufacturer: syz [ 272.218420][ T5891] usb 7-1: SerialNumber: syz [ 272.243275][ T5891] usb 7-1: config 0 descriptor?? [ 272.258396][ T5891] em28xx 7-1:0.84: New device syz syz @ 480 Mbps (eb1a:e305, interface 84, class 84) [ 272.269394][ T5891] em28xx 7-1:0.84: Video interface 84 found: bulk [ 272.408541][ T8923] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 272.521117][ T5891] em28xx 7-1:0.84: unknown em28xx chip ID (0) [ 272.629457][ T5891] em28xx 7-1:0.84: reading from i2c device at 0xa0 failed (error=-5) [ 272.653845][ T5891] em28xx 7-1:0.84: board has no eeprom [ 272.706940][ T8937] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 272.740996][ T5891] em28xx 7-1:0.84: Identified as KWorld DVB-T 305U (card=47) [ 272.748584][ T5891] em28xx 7-1:0.84: analog set to bulk mode. [ 272.755459][ T5890] em28xx 7-1:0.84: Registering V4L2 extension [ 272.799495][ T5891] usb 7-1: USB disconnect, device number 3 [ 272.824272][ T5891] em28xx 7-1:0.84: Disconnecting em28xx [ 273.154768][ T5890] em28xx 7-1:0.84: Config register raw data: 0xffffffed [ 273.163238][ T5890] em28xx 7-1:0.84: AC97 chip type couldn't be determined [ 273.205761][ T5890] em28xx 7-1:0.84: No AC97 audio processor [ 273.231130][ T5890] usb 7-1: Decoder not found [ 273.235890][ T5890] em28xx 7-1:0.84: failed to create media graph [ 273.243610][ T5890] em28xx 7-1:0.84: V4L2 device video103 deregistered [ 273.251513][ T5890] em28xx 7-1:0.84: Remote control support is not available for this card. [ 273.261156][ T5891] em28xx 7-1:0.84: Closing input extension [ 273.290468][ T5891] em28xx 7-1:0.84: Freeing device [ 274.895460][ T8958] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 274.902109][ T5884] usb 3-1: USB disconnect, device number 36 [ 274.916581][ T5884] option 3-1:0.56: device disconnected [ 275.439155][ T8974] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 278.485317][ T9026] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 278.680996][ T5891] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 278.700869][ T25] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 278.862294][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.881314][ T5891] usb 7-1: Using ep0 maxpacket: 8 [ 278.888058][ T5891] usb 7-1: config 0 has an invalid interface number: 56 but max is 0 [ 278.910921][ T5891] usb 7-1: config 0 has no interface number 0 [ 278.920617][ T5891] usb 7-1: config 0 interface 56 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 278.933723][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.953941][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.964161][ T5891] usb 7-1: config 0 interface 56 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.973996][ T25] usb 3-1: Product: syz [ 278.974020][ T25] usb 3-1: Manufacturer: syz [ 278.974037][ T25] usb 3-1: SerialNumber: syz [ 278.978102][ T25] cdc_ether 3-1:1.0: skipping garbage [ 278.999396][ T5891] usb 7-1: config 0 interface 56 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 279.006693][ T25] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 279.046839][ T5891] usb 7-1: New USB device found, idVendor=12d1, idProduct=dfc1, bcdDevice=8c.1b [ 279.061157][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.093283][ T5891] usb 7-1: Product: syz [ 279.093384][ T9034] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 279.097661][ T5891] usb 7-1: Manufacturer: syz [ 279.131030][ T5891] usb 7-1: SerialNumber: syz [ 279.140601][ T5891] usb 7-1: config 0 descriptor?? [ 279.162316][ T5891] option 7-1:0.56: GSM modem (1-port) converter detected [ 279.374898][ T25] usb 3-1: USB disconnect, device number 37 [ 279.560839][ T5884] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 279.744911][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 279.779392][ T5884] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 279.971077][ T5884] usb 5-1: config 0 has no interface number 0 [ 279.987596][ T5884] usb 5-1: config 0 interface 56 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 280.022161][ T5884] usb 5-1: config 0 interface 56 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.032424][ T5884] usb 5-1: config 0 interface 56 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 280.088292][ T5884] usb 5-1: New USB device found, idVendor=12d1, idProduct=dfc1, bcdDevice=8c.1b [ 280.097517][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.157697][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.802'. [ 280.201217][ T5884] usb 5-1: Product: syz [ 280.205439][ T5884] usb 5-1: Manufacturer: syz [ 280.210111][ T5884] usb 5-1: SerialNumber: syz [ 280.259119][ T9051] vlan2: entered promiscuous mode [ 280.304054][ T9051] vlan2: entered allmulticast mode [ 280.585530][ T5884] usb 5-1: config 0 descriptor?? [ 280.592928][ T5884] option 5-1:0.56: GSM modem (1-port) converter detected [ 281.501402][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 281.501415][ T29] audit: type=1326 audit(1733115672.307:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 281.554461][ T29] audit: type=1326 audit(1733115672.337:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 281.576324][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.598449][ T29] audit: type=1326 audit(1733115672.337:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 281.659121][ T29] audit: type=1326 audit(1733115672.337:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 281.712112][ T29] audit: type=1326 audit(1733115672.337:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 281.739497][ T29] audit: type=1326 audit(1733115672.337:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 281.789360][ T29] audit: type=1326 audit(1733115672.337:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 281.811235][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.832575][ T29] audit: type=1326 audit(1733115672.337:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 281.890219][ T29] audit: type=1326 audit(1733115672.337:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 281.912544][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.933418][ T29] audit: type=1326 audit(1733115672.337:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 281.974432][ T5891] usb 7-1: USB disconnect, device number 4 [ 281.991732][ T5891] option 7-1:0.56: device disconnected [ 282.221494][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.231291][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.239638][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.249988][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.333147][ T9081] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 282.380953][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.393161][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.927944][ T9082] chnl_net:caif_netlink_parms(): no params data found [ 283.187942][ T9082] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.234357][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.279215][ T9082] bridge_slave_0: entered allmulticast mode [ 283.338955][ T9082] bridge_slave_0: entered promiscuous mode [ 283.339095][ T9094] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 283.387704][ T9082] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.432470][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.458517][ T9082] bridge_slave_1: entered allmulticast mode [ 283.485858][ T9082] bridge_slave_1: entered promiscuous mode [ 283.570965][ T5891] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 283.689417][ T9082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.714057][ T9082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.767587][ T9082] team0: Port device team_slave_0 added [ 283.791258][ T5891] usb 7-1: Using ep0 maxpacket: 8 [ 283.802535][ T9082] team0: Port device team_slave_1 added [ 283.828090][ T5891] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 283.837444][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.845757][ T5891] usb 7-1: Product: syz [ 283.850224][ T5891] usb 7-1: Manufacturer: syz [ 283.855148][ T5891] usb 7-1: SerialNumber: syz [ 283.874981][ T5891] usb 7-1: config 0 descriptor?? [ 284.113537][ T5891] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 284.216968][ T9082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.240797][ T9082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.290867][ T9082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.317930][ T9082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.337626][ T9082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.363536][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.400983][ T9082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.438215][ T5881] usb 5-1: USB disconnect, device number 45 [ 284.446218][ T5881] option 5-1:0.56: device disconnected [ 284.514230][ T5145] Bluetooth: hci1: command tx timeout [ 284.788098][ T9082] hsr_slave_0: entered promiscuous mode [ 284.829499][ T9082] hsr_slave_1: entered promiscuous mode [ 284.859687][ T9082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.878228][ T9082] Cannot create hsr debugfs directory [ 285.443920][ T9082] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 285.521401][ T9082] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 285.634112][ T9082] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 285.649989][ T9082] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 285.983369][ T9128] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 286.008203][ T9128] kvm: pic: non byte read [ 286.016496][ T9128] kvm: pic: non byte read [ 286.183613][ T5891] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 286.228473][ T5891] usb 7-1: USB disconnect, device number 5 [ 286.244101][ T9082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.334798][ T9082] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.399864][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.407079][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.484416][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.491756][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.502699][ T9139] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 286.547330][ T9082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.569419][ T9082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.581646][ T5145] Bluetooth: hci1: command tx timeout [ 286.962260][ T9082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.994753][ T9082] veth0_vlan: entered promiscuous mode [ 287.009762][ T9082] veth1_vlan: entered promiscuous mode [ 287.090047][ T9082] veth0_macvtap: entered promiscuous mode [ 287.104683][ T9082] veth1_macvtap: entered promiscuous mode [ 287.122218][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.132863][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.143190][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.154028][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.163989][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.174517][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.184530][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.195615][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.206129][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.216640][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.226623][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.237117][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.248403][ T9082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.261625][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.272154][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.282137][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.292672][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.304093][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.314648][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.321496][ T9145] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 287.324628][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.347570][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.361328][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.388677][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.452429][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.463895][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.475227][ T9082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.487080][ T9082] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.496239][ T9082] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.506233][ T9082] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.525947][ T9082] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.878089][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.996827][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.234436][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.301316][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.661532][ T5145] Bluetooth: hci1: command tx timeout [ 288.770928][ T5890] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 288.771423][ T58] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 288.963337][ T5890] usb 2-1: config 0 has no interfaces? [ 288.974613][ T5890] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 288.984102][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.992856][ T5890] usb 2-1: Product: syz [ 288.997266][ T5890] usb 2-1: Manufacturer: syz [ 289.003052][ T5890] usb 2-1: SerialNumber: syz [ 289.009086][ T5890] usb 2-1: config 0 descriptor?? [ 289.032244][ T58] usb 7-1: config 0 has no interfaces? [ 289.041965][ T58] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 289.107083][ T9173] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 289.130981][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.139684][ T58] usb 7-1: Product: syz [ 289.144948][ T58] usb 7-1: Manufacturer: syz [ 289.150091][ T58] usb 7-1: SerialNumber: syz [ 289.161214][ T58] usb 7-1: config 0 descriptor?? [ 289.330161][ T9173] kvm: pic: non byte read [ 289.337507][ T9173] kvm: pic: non byte read [ 290.108030][ T9193] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 290.745625][ T5145] Bluetooth: hci1: command tx timeout [ 291.477673][ T5884] usb 7-1: USB disconnect, device number 6 [ 291.684531][ T5881] usb 2-1: USB disconnect, device number 43 [ 292.358928][ T9239] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 292.875623][ T9246] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 294.851009][ T5883] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 295.019002][ T5883] usb 8-1: config 0 has no interfaces? [ 295.042852][ T5883] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 295.052199][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.060228][ T5883] usb 8-1: Product: syz [ 295.064951][ T5883] usb 8-1: Manufacturer: syz [ 295.074371][ T5883] usb 8-1: SerialNumber: syz [ 295.092081][ T5883] usb 8-1: config 0 descriptor?? [ 295.247271][ T9284] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 295.323251][ T5881] usb 8-1: USB disconnect, device number 2 [ 295.620392][ T9296] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 295.667869][ T9296] kvm: pic: non byte read [ 295.788460][ T9296] kvm: pic: non byte read [ 296.004056][ T9301] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 296.417513][ T9303] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 296.487540][ T9303] kvm: pic: non byte read [ 296.501407][ T9303] kvm: pic: non byte read [ 298.363262][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 298.363281][ T29] audit: type=1326 audit(1733115689.167:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.5.865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7fc00000 [ 298.391344][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.481518][ T9355] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 298.653953][ T5890] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 298.789586][ T9361] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 298.816938][ T9362] libceph: resolve '. [ 298.816938][ T9362] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 298.816938][ T9362] ' (ret=-3): failed [ 298.843872][ T9361] kvm: pic: non byte read [ 298.853016][ T9361] kvm: pic: non byte read [ 298.870901][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 298.881280][ T5890] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 298.890970][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.899214][ T5890] usb 7-1: Product: syz [ 298.908654][ T5890] usb 7-1: Manufacturer: syz [ 298.914221][ T5890] usb 7-1: SerialNumber: syz [ 298.929375][ T5890] usb 7-1: config 0 descriptor?? [ 298.947690][ T5890] as10x_usb: device has been detected [ 298.957774][ T5890] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 299.047719][ T5890] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 299.111331][ T5890] as10x_usb: error during firmware upload part1 [ 299.118391][ T5890] Registered device Abilis Systems DVB-Titan [ 299.158692][ T5881] usb 7-1: USB disconnect, device number 7 [ 299.177070][ T5881] Unregistered device Abilis Systems DVB-Titan [ 299.194872][ T5881] as10x_usb: device has been disconnected [ 299.833925][ T58] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 300.027803][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 300.040004][ T58] usb 6-1: unable to get BOS descriptor or descriptor too short [ 300.067497][ T58] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 300.076352][ T58] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.086919][ T58] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 300.097480][ T58] usb 6-1: config 1 has no interface number 1 [ 300.104260][ T58] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 300.119232][ T58] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.138123][ T58] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.190902][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.199623][ T58] usb 6-1: Product: syz [ 300.204638][ T58] usb 6-1: Manufacturer: syz [ 300.210010][ T58] usb 6-1: SerialNumber: syz [ 300.787623][ T58] usb 6-1: USB disconnect, device number 31 [ 301.244398][ T9403] netlink: 60 bytes leftover after parsing attributes in process `syz.4.881'. [ 301.520860][ T5881] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 301.579048][ T9419] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 301.604473][ T9412] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 301.710181][ T9413] kvm: pic: non byte read [ 301.728324][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 301.737286][ T9413] kvm: pic: non byte read [ 301.749331][ T5881] usb 5-1: too many configurations: 129, using maximum allowed: 8 [ 301.782205][ T5881] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 301.792730][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=37 [ 301.801298][ T5881] usb 5-1: Product: syz [ 301.805680][ T5881] usb 5-1: Manufacturer: syz [ 301.810338][ T5881] usb 5-1: SerialNumber: syz [ 301.817974][ T5881] usb 5-1: config 0 descriptor?? [ 302.289435][ T9403] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 302.418939][ T9403] kvm: pic: level sensitive irq not supported [ 302.419037][ T9403] kvm: pic: non byte read [ 302.457087][ T9403] kvm: pic: level sensitive irq not supported [ 302.457144][ T9403] kvm: pic: non byte read [ 302.525291][ T9426] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 302.546135][ T9403] kvm: pic: level sensitive irq not supported [ 302.546220][ T9403] kvm: pic: non byte read [ 302.621186][ T9403] kvm: pic: level sensitive irq not supported [ 302.621302][ T9403] kvm: pic: non byte read [ 302.635880][ T9426] kvm: pic: non byte read [ 302.658609][ T9426] kvm: pic: non byte read [ 302.691620][ T9403] kvm: pic: level sensitive irq not supported [ 302.691708][ T9403] kvm: pic: non byte read [ 302.736586][ T9403] kvm: pic: level sensitive irq not supported [ 302.737322][ T9403] kvm: pic: non byte read [ 302.796973][ T9403] kvm: pic: level sensitive irq not supported [ 302.798674][ T9403] kvm: pic: level sensitive irq not supported [ 302.828369][ T9403] kvm: pic: level sensitive irq not supported [ 302.854675][ T9403] kvm: pic: level sensitive irq not supported [ 303.023780][ T5883] usb 5-1: USB disconnect, device number 46 [ 303.343910][ T9438] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 303.936352][ T29] audit: type=1326 audit(1733115694.737:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 303.973235][ T29] audit: type=1326 audit(1733115694.777:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 304.011084][ T29] audit: type=1326 audit(1733115694.797:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 304.151602][ T29] audit: type=1326 audit(1733115694.797:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 304.221548][ T29] audit: type=1326 audit(1733115694.797:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 304.389795][ T29] audit: type=1326 audit(1733115694.797:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 304.517188][ T29] audit: type=1326 audit(1733115694.797:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 304.591037][ T29] audit: type=1326 audit(1733115694.797:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 304.741095][ T29] audit: type=1326 audit(1733115694.797:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 304.830785][ T29] audit: type=1326 audit(1733115694.797:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 306.090894][ T5884] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 306.250984][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 306.294006][ T5884] usb 2-1: unable to get BOS descriptor or descriptor too short [ 306.320813][ T975] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 306.461007][ T975] usb 5-1: device descriptor read/64, error -71 [ 306.528912][ T5884] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 306.538026][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.548934][ T5884] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 306.558521][ T5884] usb 2-1: config 1 has no interface number 1 [ 306.565128][ T5884] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 306.582506][ T5884] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.702770][ T5884] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.711912][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.719918][ T5884] usb 2-1: Product: syz [ 306.724362][ T5884] usb 2-1: Manufacturer: syz [ 306.729145][ T5884] usb 2-1: SerialNumber: syz [ 307.142692][ T975] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 307.293069][ T9483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 307.304657][ T975] usb 5-1: device descriptor read/64, error -71 [ 307.355652][ T9483] picdev_read: 33 callbacks suppressed [ 307.355674][ T9483] kvm: pic: non byte read [ 307.408125][ T9483] kvm: pic: non byte read [ 307.426726][ T975] usb usb5-port1: attempt power cycle [ 307.791079][ T975] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 307.858332][ T975] usb 5-1: device descriptor read/8, error -71 [ 308.134797][ T975] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 308.187852][ T975] usb 5-1: device descriptor read/8, error -71 [ 308.311105][ T975] usb usb5-port1: unable to enumerate USB device [ 308.320872][ T58] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 308.430934][ T5881] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 308.473035][ T58] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 308.481509][ T58] usb 7-1: config 0 has no interface number 0 [ 308.506448][ T58] usb 7-1: config 0 interface 84 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 308.537018][ T58] usb 7-1: config 0 interface 84 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 308.562977][ T58] usb 7-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=44.33 [ 308.576581][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.595728][ T5881] usb 8-1: config 0 has no interfaces? [ 308.609185][ T58] usb 7-1: Product: syz [ 308.629620][ T5881] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 308.642002][ T58] usb 7-1: Manufacturer: syz [ 308.659296][ T58] usb 7-1: SerialNumber: syz [ 308.669647][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.698693][ T58] usb 7-1: config 0 descriptor?? [ 308.713843][ T5881] usb 8-1: Product: syz [ 308.735988][ T5881] usb 8-1: Manufacturer: syz [ 308.753579][ T58] em28xx 7-1:0.84: New device syz syz @ 480 Mbps (eb1a:e305, interface 84, class 84) [ 308.773135][ T5881] usb 8-1: SerialNumber: syz [ 308.799233][ T5881] usb 8-1: config 0 descriptor?? [ 308.810462][ T58] em28xx 7-1:0.84: Video interface 84 found: bulk [ 308.878110][ T5884] usb 2-1: USB disconnect, device number 44 [ 309.037201][ T5883] usb 8-1: USB disconnect, device number 3 [ 309.052911][ T6464] udevd[6464]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.091218][ T58] em28xx 7-1:0.84: unknown em28xx chip ID (0) [ 309.210332][ T58] em28xx 7-1:0.84: reading from i2c device at 0xa0 failed (error=-5) [ 309.224909][ T9503] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 309.237527][ T58] em28xx 7-1:0.84: board has no eeprom [ 309.300877][ T58] em28xx 7-1:0.84: Identified as KWorld DVB-T 305U (card=47) [ 309.330674][ T58] em28xx 7-1:0.84: analog set to bulk mode. [ 309.347355][ T5884] em28xx 7-1:0.84: Registering V4L2 extension [ 309.392330][ T58] usb 7-1: USB disconnect, device number 8 [ 309.488081][ T58] em28xx 7-1:0.84: Disconnecting em28xx [ 309.580103][ T5884] em28xx 7-1:0.84: Config register raw data: 0xffffffed [ 309.615559][ T5884] em28xx 7-1:0.84: AC97 chip type couldn't be determined [ 309.716540][ T5884] em28xx 7-1:0.84: No AC97 audio processor [ 309.813740][ T5884] usb 7-1: Decoder not found [ 309.871340][ T5884] em28xx 7-1:0.84: failed to create media graph [ 309.945147][ T5884] em28xx 7-1:0.84: V4L2 device video103 deregistered [ 310.001383][ T5884] em28xx 7-1:0.84: Remote control support is not available for this card. [ 310.059527][ T58] em28xx 7-1:0.84: Closing input extension [ 310.099029][ T58] em28xx 7-1:0.84: Freeing device [ 310.240984][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 310.397533][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 310.500299][ T25] usb 8-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 310.519060][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.563756][ T25] usb 8-1: Product: syz [ 310.600268][ T25] usb 8-1: Manufacturer: syz [ 310.639459][ T25] usb 8-1: SerialNumber: syz [ 310.736136][ T25] usb 8-1: config 0 descriptor?? [ 311.270362][ T25] mxuport 8-1:0.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 311.290927][ T25] mxuport 8-1:0.0: probe with driver mxuport failed with error -5 [ 311.628498][ T9514] netlink: 48 bytes leftover after parsing attributes in process `syz.7.909'. [ 312.106218][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.914'. [ 313.244492][ T25] usb 8-1: USB disconnect, device number 4 [ 313.662759][ T5884] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 313.710839][ T25] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 313.830804][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 313.841211][ T5884] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 313.850545][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.860619][ T25] usb 8-1: device descriptor read/64, error -71 [ 313.870973][ T5884] usb 6-1: Product: syz [ 313.875270][ T5884] usb 6-1: Manufacturer: syz [ 313.880010][ T5884] usb 6-1: SerialNumber: syz [ 313.891039][ T5884] usb 6-1: config 0 descriptor?? [ 313.898534][ T9561] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 314.150998][ T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 314.161026][ T5884] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 314.356118][ T25] usb 8-1: device descriptor read/64, error -71 [ 314.434658][ T5883] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 314.471031][ T25] usb usb8-port1: attempt power cycle [ 314.667325][ T5883] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 314.681965][ T5883] usb 2-1: config 0 has no interface number 0 [ 314.722374][ T5883] usb 2-1: config 0 interface 84 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 314.760957][ T5883] usb 2-1: config 0 interface 84 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 314.811002][ T25] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 314.834795][ T25] usb 8-1: device descriptor read/8, error -71 [ 314.843477][ T5883] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=44.33 [ 314.853068][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.861345][ T5883] usb 2-1: Product: syz [ 314.865537][ T5883] usb 2-1: Manufacturer: syz [ 314.870793][ T5883] usb 2-1: SerialNumber: syz [ 314.880368][ T5883] usb 2-1: config 0 descriptor?? [ 314.888479][ T5883] em28xx 2-1:0.84: New device syz syz @ 480 Mbps (eb1a:e305, interface 84, class 84) [ 314.909449][ T5883] em28xx 2-1:0.84: Video interface 84 found: bulk [ 315.080845][ T25] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 315.101646][ T25] usb 8-1: device descriptor read/8, error -71 [ 315.171297][ T5883] em28xx 2-1:0.84: unknown em28xx chip ID (0) [ 315.171355][ T5881] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 315.211540][ T25] usb usb8-port1: unable to enumerate USB device [ 315.258635][ T5883] em28xx 2-1:0.84: reading from i2c device at 0xa0 failed (error=-5) [ 315.269534][ T5883] em28xx 2-1:0.84: board has no eeprom [ 315.340848][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 315.340913][ T5883] em28xx 2-1:0.84: Identified as KWorld DVB-T 305U (card=47) [ 315.362178][ T5881] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 315.372457][ T5883] em28xx 2-1:0.84: analog set to bulk mode. [ 315.378661][ T975] em28xx 2-1:0.84: Registering V4L2 extension [ 315.385596][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.404620][ T5883] usb 2-1: USB disconnect, device number 45 [ 315.423658][ T5883] em28xx 2-1:0.84: Disconnecting em28xx [ 315.486989][ T975] em28xx 2-1:0.84: Config register raw data: 0xffffffed [ 315.494432][ T5881] usb 5-1: Product: syz [ 315.494459][ T5881] usb 5-1: Manufacturer: syz [ 315.494474][ T5881] usb 5-1: SerialNumber: syz [ 315.509671][ T5881] usb 5-1: config 0 descriptor?? [ 315.524915][ T975] em28xx 2-1:0.84: AC97 chip type couldn't be determined [ 315.537120][ T975] em28xx 2-1:0.84: No AC97 audio processor [ 315.537326][ T5881] as10x_usb: device has been detected [ 315.550208][ T5881] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 315.568716][ T975] usb 2-1: Decoder not found [ 315.573549][ T975] em28xx 2-1:0.84: failed to create media graph [ 315.581273][ T975] em28xx 2-1:0.84: V4L2 device video103 deregistered [ 315.589643][ T975] em28xx 2-1:0.84: Remote control support is not available for this card. [ 315.604499][ T5881] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 315.607051][ T5883] em28xx 2-1:0.84: Closing input extension [ 315.643178][ T5881] as10x_usb: error during firmware upload part1 [ 315.650374][ T5881] Registered device Abilis Systems DVB-Titan [ 315.687343][ T5883] em28xx 2-1:0.84: Freeing device [ 315.899525][ T5881] usb 5-1: USB disconnect, device number 51 [ 315.933178][ T5881] Unregistered device Abilis Systems DVB-Titan [ 315.936887][ T5881] as10x_usb: device has been disconnected [ 316.116178][ T5884] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 316.127370][ T5884] usb 6-1: USB disconnect, device number 32 [ 316.610992][ T5883] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 316.782612][ T5883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.839615][ T5883] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 316.860048][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.921928][ T5883] usb 7-1: config 0 descriptor?? [ 316.931855][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 317.058068][ T9593] Cannot find add_set index 0 as target [ 317.120928][ T58] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 317.136783][ T5883] pwc: send_video_command error -71 [ 317.142750][ T5883] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 317.156287][ T5883] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 317.239557][ T5883] usb 7-1: USB disconnect, device number 9 [ 317.320784][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 317.336958][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.349818][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.371011][ T58] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 317.380291][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.402888][ T58] usb 5-1: config 0 descriptor?? [ 317.409534][ T58] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 317.430891][ T5891] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 317.560098][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.566858][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.654871][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 317.702161][ T5883] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 317.770376][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.792068][ T9586] netlink: 32 bytes leftover after parsing attributes in process `syz.4.927'. [ 317.863716][ T5891] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 317.923227][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.934469][ T5883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.965891][ T5883] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 317.975685][ T5891] usb 6-1: config 0 descriptor?? [ 317.994909][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.006813][ T5891] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 318.031112][ T5883] usb 7-1: config 0 descriptor?? [ 318.047748][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 318.387505][ T5891] usb 5-1: USB disconnect, device number 52 [ 318.472641][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 318.500439][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 318.591227][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 318.638677][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 318.674639][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 318.703957][ T5883] pwc: recv_control_msg error -32 req 04 val 1400 [ 318.737000][ T5883] pwc: recv_control_msg error -32 req 02 val 2000 [ 318.746659][ T5883] pwc: recv_control_msg error -32 req 02 val 2100 [ 318.761344][ T5883] pwc: recv_control_msg error -32 req 04 val 1500 [ 318.771989][ T5883] pwc: recv_control_msg error -32 req 02 val 2500 [ 318.834042][ T5883] pwc: recv_control_msg error -32 req 02 val 2400 [ 318.847405][ T5883] pwc: recv_control_msg error -32 req 02 val 2600 [ 318.873062][ T5883] pwc: recv_control_msg error -32 req 02 val 2900 [ 318.897224][ T5883] pwc: recv_control_msg error -71 req 02 val 2800 [ 318.939238][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 318.985122][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 319.034174][ T5883] pwc: Registered as video103. [ 319.093336][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input12 [ 319.330910][ T5883] usb 7-1: USB disconnect, device number 10 [ 319.762333][ T9613] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 319.814772][ T9613] kvm: pic: non byte read [ 319.826474][ T9613] kvm: pic: non byte read [ 320.751300][ T5891] usb 6-1: USB disconnect, device number 33 [ 320.971620][ T9624] kvm: kvm [9622]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 323.279623][ T9656] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 323.829549][ T9664] netlink: 116 bytes leftover after parsing attributes in process `syz.1.944'. [ 324.050539][ T9664] netlink: 116 bytes leftover after parsing attributes in process `syz.1.944'. [ 324.431611][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.945'. [ 324.592015][ T9670] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 324.749490][ T9671] warning: `syz.7.945' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 325.004273][ T9677] kvm: kvm [9675]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 326.020799][ T5890] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 326.363693][ T5890] usb 7-1: config 0 has no interfaces? [ 326.448753][ T5890] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 326.467318][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.490936][ T5890] usb 7-1: Product: syz [ 326.508586][ T5890] usb 7-1: Manufacturer: syz [ 326.542279][ T5890] usb 7-1: SerialNumber: syz [ 326.571419][ T5890] usb 7-1: config 0 descriptor?? [ 327.141105][ T5891] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 327.300997][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 327.319404][ T5891] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 327.341994][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.359314][ T5891] usb 6-1: Product: syz [ 327.366912][ T5891] usb 6-1: Manufacturer: syz [ 327.378538][ T5891] usb 6-1: SerialNumber: syz [ 327.437463][ T5891] usb 6-1: config 0 descriptor?? [ 327.474479][ T5891] as10x_usb: device has been detected [ 327.491840][ T5891] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 327.554017][ T5891] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 327.593111][ T5891] as10x_usb: error during firmware upload part1 [ 327.613289][ T5891] Registered device Abilis Systems DVB-Titan [ 327.682499][ T5891] usb 6-1: USB disconnect, device number 34 [ 327.804291][ T5891] Unregistered device Abilis Systems DVB-Titan [ 327.805568][ T5891] as10x_usb: device has been disconnected [ 328.979736][ T9733] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 329.192476][ T5881] usb 7-1: USB disconnect, device number 11 [ 330.029480][ T9739] tipc: Started in network mode [ 330.039512][ T9739] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 330.070892][ T9739] tipc: Enabling of bearer rejected, failed to enable media [ 330.230910][ T5881] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 330.410224][ T5881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.435778][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.450254][ T9756] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 330.458534][ T5881] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 330.503157][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 330.539768][ T5881] usb 2-1: SerialNumber: syz [ 330.792616][ T5881] usb 2-1: 0:2 : does not exist [ 330.816213][ T5881] usb 2-1: unit 255 not found! [ 331.292060][ T5881] usb 2-1: USB disconnect, device number 46 [ 331.372018][ T2959] tipc: Left network mode [ 331.517635][ T6464] udevd[6464]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.363522][ T5884] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 332.553354][ T9784] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 332.600778][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 332.640258][ T5884] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 332.649609][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.658138][ T5884] usb 2-1: Product: syz [ 332.663033][ T5884] usb 2-1: Manufacturer: syz [ 332.667722][ T5884] usb 2-1: SerialNumber: syz [ 332.675362][ T5884] usb 2-1: config 0 descriptor?? [ 332.684540][ T5884] as10x_usb: device has been detected [ 332.691883][ T5884] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 332.709974][ T5884] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 332.746903][ T5884] as10x_usb: error during firmware upload part1 [ 332.753834][ T5884] Registered device Abilis Systems DVB-Titan [ 332.886892][ T5884] usb 2-1: USB disconnect, device number 47 [ 332.918714][ T5884] Unregistered device Abilis Systems DVB-Titan [ 332.935007][ T5884] as10x_usb: device has been disconnected [ 333.699314][ T9798] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 334.310808][ T5883] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 334.487989][ T5883] usb 6-1: config 0 has no interfaces? [ 334.539541][ T5883] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 334.587622][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.599471][ T5883] usb 6-1: Product: syz [ 334.607052][ T5883] usb 6-1: Manufacturer: syz [ 334.617896][ T5883] usb 6-1: SerialNumber: syz [ 334.671870][ T5883] usb 6-1: config 0 descriptor?? [ 336.800791][ T5890] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 336.822350][ T5884] usb 6-1: USB disconnect, device number 35 [ 336.990919][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 337.001666][ T5890] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 337.020882][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.029130][ T5890] usb 2-1: Product: syz [ 337.034299][ T5890] usb 2-1: Manufacturer: syz [ 337.039261][ T5890] usb 2-1: SerialNumber: syz [ 337.088996][ T5890] usb 2-1: config 0 descriptor?? [ 337.192453][ T5890] as10x_usb: device has been detected [ 337.230841][ T5890] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 337.398790][ T5890] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 337.415237][ T5890] as10x_usb: error during firmware upload part1 [ 337.422415][ T5890] Registered device Abilis Systems DVB-Titan [ 339.463726][ T25] usb 2-1: USB disconnect, device number 48 [ 339.534104][ T25] Unregistered device Abilis Systems DVB-Titan [ 339.535123][ T25] as10x_usb: device has been disconnected [ 339.872430][ T9885] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 339.909357][ T9885] kvm: pic: non byte read [ 339.928618][ T9885] kvm: pic: non byte read [ 340.220848][ T25] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 340.392924][ T25] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 340.418533][ T25] usb 7-1: config 0 has no interface number 0 [ 340.443422][ T25] usb 7-1: config 0 interface 84 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 340.475730][ T25] usb 7-1: config 0 interface 84 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 340.512268][ T25] usb 7-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=44.33 [ 340.535873][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.569283][ T25] usb 7-1: Product: syz [ 340.582626][ T25] usb 7-1: Manufacturer: syz [ 340.595907][ T25] usb 7-1: SerialNumber: syz [ 340.642841][ T25] usb 7-1: config 0 descriptor?? [ 340.652734][ T25] em28xx 7-1:0.84: New device syz syz @ 480 Mbps (eb1a:e305, interface 84, class 84) [ 340.663262][ T25] em28xx 7-1:0.84: Video interface 84 found: bulk [ 340.855477][ T5883] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 340.935937][ T25] em28xx 7-1:0.84: unknown em28xx chip ID (0) [ 341.037357][ T25] em28xx 7-1:0.84: reading from i2c device at 0xa0 failed (error=-5) [ 341.049934][ T25] em28xx 7-1:0.84: board has no eeprom [ 341.063607][ T5883] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.093595][ T5883] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.136843][ T5883] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 341.140902][ T25] em28xx 7-1:0.84: Identified as KWorld DVB-T 305U (card=47) [ 341.176731][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 341.197670][ T25] em28xx 7-1:0.84: analog set to bulk mode. [ 341.217359][ T5883] usb 8-1: SerialNumber: syz [ 341.222345][ T5881] em28xx 7-1:0.84: Registering V4L2 extension [ 341.254065][ T25] usb 7-1: USB disconnect, device number 12 [ 341.306478][ T25] em28xx 7-1:0.84: Disconnecting em28xx [ 341.449564][ T5881] em28xx 7-1:0.84: Config register raw data: 0xffffffed [ 341.476744][ T5883] usb 8-1: 0:2 : does not exist [ 341.492230][ T5881] em28xx 7-1:0.84: AC97 chip type couldn't be determined [ 341.496621][ T5883] usb 8-1: unit 255 not found! [ 341.532091][ T5881] em28xx 7-1:0.84: No AC97 audio processor [ 341.556911][ T5881] usb 7-1: Decoder not found [ 341.596844][ T5881] em28xx 7-1:0.84: failed to create media graph [ 341.602026][ T5883] usb 8-1: USB disconnect, device number 9 [ 341.618148][ T5881] em28xx 7-1:0.84: V4L2 device video103 deregistered [ 341.657339][ T5881] em28xx 7-1:0.84: Remote control support is not available for this card. [ 341.687580][ T9910] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 341.702019][ T25] em28xx 7-1:0.84: Closing input extension [ 341.731922][ T25] em28xx 7-1:0.84: Freeing device [ 341.813110][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.444064][ T9923] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 342.463860][ T9923] kvm: pic: non byte read [ 342.548094][ T9923] kvm: pic: non byte read [ 343.466742][ T5881] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 343.720972][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 343.760284][ T5881] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 343.769410][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.777553][ T5881] usb 5-1: Product: syz [ 343.782076][ T5881] usb 5-1: Manufacturer: syz [ 343.786708][ T5881] usb 5-1: SerialNumber: syz [ 343.841463][ T5881] usb 5-1: config 0 descriptor?? [ 343.878855][ T5881] as10x_usb: device has been detected [ 343.903816][ T5881] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 344.082726][ T5881] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 344.193842][ T5881] as10x_usb: error during firmware upload part1 [ 344.254118][ T5881] Registered device Abilis Systems DVB-Titan [ 344.276993][ T5881] usb 5-1: USB disconnect, device number 53 [ 344.450048][ T5881] Unregistered device Abilis Systems DVB-Titan [ 344.551728][ T5881] as10x_usb: device has been disconnected [ 345.111727][ T9965] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 346.405061][ T9978] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 346.456545][ T9985] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 346.483014][ T9978] kvm: pic: non byte read [ 346.521822][ T9978] kvm: pic: non byte read [ 347.841221][T10004] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 348.849410][T10018] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 349.000816][ T975] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 349.161198][ T975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.283093][ T975] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 349.354297][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.393434][ T975] usb 2-1: config 0 descriptor?? [ 349.414759][ T975] pwc: Askey VC010 type 2 USB webcam detected. [ 349.625602][ T975] pwc: send_video_command error -71 [ 349.631488][ T975] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 349.639155][ T975] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 349.650922][ T975] usb 2-1: USB disconnect, device number 49 [ 349.892608][T10035] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 350.081186][ T5883] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 350.142338][T10039] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 350.793804][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.804632][ T5883] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 350.813952][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.825026][ T5883] usb 2-1: config 0 descriptor?? [ 350.854825][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 351.255103][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 351.262377][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 351.270300][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 351.279586][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 351.291761][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 351.302119][ T5883] pwc: recv_control_msg error -32 req 04 val 1400 [ 351.320634][ T5883] pwc: recv_control_msg error -32 req 02 val 2000 [ 351.344716][ T5883] pwc: recv_control_msg error -32 req 02 val 2100 [ 351.354443][ T5883] pwc: recv_control_msg error -32 req 04 val 1500 [ 351.366311][ T5883] pwc: recv_control_msg error -32 req 02 val 2500 [ 351.375509][ T5883] pwc: recv_control_msg error -32 req 02 val 2400 [ 351.385540][ T5883] pwc: recv_control_msg error -32 req 02 val 2600 [ 351.440949][ T5891] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 351.604872][ T5891] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.616482][ T5883] pwc: recv_control_msg error -71 req 02 val 2800 [ 351.640048][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 351.647977][ T5891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.678941][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 351.744079][ T5891] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 351.782311][ T5883] pwc: Registered as video103. [ 351.790581][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 351.813413][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 351.835921][ T5891] usb 5-1: SerialNumber: syz [ 351.864115][ T5883] usb 2-1: USB disconnect, device number 50 [ 352.067682][ T5891] usb 5-1: 0:2 : does not exist [ 352.082235][ T5891] usb 5-1: unit 255 not found! [ 352.087250][ T5891] usb 5-1: unit 17 not found! [ 352.117894][ T5891] usb 5-1: USB disconnect, device number 54 [ 352.283477][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.341482][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.364974][T10057] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1044'. [ 352.380936][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.450800][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.459580][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 352.467414][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.489268][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.510957][T10057] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1044'. [ 353.108429][ T3012] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.208876][T10059] chnl_net:caif_netlink_parms(): no params data found [ 353.261702][ T5881] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 353.339161][ T3012] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.460277][ T5881] usb 5-1: config 0 has no interfaces? [ 353.486456][ T5881] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 353.508546][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.533735][ T5881] usb 5-1: Product: syz [ 353.558482][ T5881] usb 5-1: Manufacturer: syz [ 353.568336][ T5881] usb 5-1: SerialNumber: syz [ 353.604200][ T5881] usb 5-1: config 0 descriptor?? [ 353.644016][ T3012] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.060596][ T3012] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.266919][T10059] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.297593][T10059] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.305811][T10059] bridge_slave_0: entered allmulticast mode [ 354.314210][T10059] bridge_slave_0: entered promiscuous mode [ 354.326395][T10059] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.335163][T10059] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.342888][T10059] bridge_slave_1: entered allmulticast mode [ 354.357131][T10059] bridge_slave_1: entered promiscuous mode [ 354.511359][ T5145] Bluetooth: hci0: command tx timeout [ 354.531503][T10059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.616792][T10059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.721614][ T975] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 354.754923][T10059] team0: Port device team_slave_0 added [ 354.789268][T10059] team0: Port device team_slave_1 added [ 354.808201][ T3012] bridge_slave_1: left allmulticast mode [ 354.829576][ T3012] bridge_slave_1: left promiscuous mode [ 354.847889][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.868665][ T3012] bridge_slave_0: left allmulticast mode [ 354.880660][ T3012] bridge_slave_0: left promiscuous mode [ 354.898816][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.911213][ T975] usb 6-1: Using ep0 maxpacket: 32 [ 354.938974][ T975] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 354.966630][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.993438][ T975] usb 6-1: Product: syz [ 355.008381][ T975] usb 6-1: Manufacturer: syz [ 355.018524][ T975] usb 6-1: SerialNumber: syz [ 355.043795][ T975] usb 6-1: config 0 descriptor?? [ 355.057248][ T975] as10x_usb: device has been detected [ 355.064282][ T975] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 355.088847][ T975] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 355.102138][ T975] as10x_usb: error during firmware upload part1 [ 355.109177][ T975] Registered device Abilis Systems DVB-Titan [ 355.268058][ T975] usb 6-1: USB disconnect, device number 36 [ 355.318332][ T975] Unregistered device Abilis Systems DVB-Titan [ 355.327203][ T975] as10x_usb: device has been disconnected [ 355.817525][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.848835][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.860257][T10097] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 355.873013][ T3012] bond0 (unregistering): Released all slaves [ 355.917912][T10097] kvm: pic: non byte read [ 355.929991][T10097] kvm: pic: non byte read [ 355.966836][T10059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.014814][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.052461][ T975] usb 5-1: USB disconnect, device number 55 [ 356.084152][T10059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.109419][T10059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.169065][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.194976][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.224736][T10059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.280660][T10103] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 356.333874][T10103] kvm: pic: non byte read [ 356.344644][T10103] kvm: pic: non byte read [ 356.525387][T10059] hsr_slave_0: entered promiscuous mode [ 356.544565][T10059] hsr_slave_1: entered promiscuous mode [ 356.556466][T10059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.565801][T10059] Cannot create hsr debugfs directory [ 356.584693][ T5145] Bluetooth: hci0: command tx timeout [ 356.717435][ T975] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 356.813389][ T3012] hsr_slave_0: left promiscuous mode [ 356.857298][ T3012] hsr_slave_1: left promiscuous mode [ 356.874724][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.888049][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.907479][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.917811][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.935722][ T975] usb 8-1: config 0 has an invalid interface number: 84 but max is 0 [ 356.959020][ T975] usb 8-1: config 0 has no interface number 0 [ 356.963926][ T3012] veth1_macvtap: left promiscuous mode [ 356.985238][ T3012] veth0_macvtap: left promiscuous mode [ 357.006763][ T975] usb 8-1: config 0 interface 84 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 357.029417][ T3012] veth1_vlan: left promiscuous mode [ 357.039720][ T975] usb 8-1: config 0 interface 84 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 357.058536][ T3012] veth0_vlan: left promiscuous mode [ 357.084804][ T975] usb 8-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=44.33 [ 357.104661][ T975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.127836][ T975] usb 8-1: Product: syz [ 357.163061][ T975] usb 8-1: Manufacturer: syz [ 357.205382][ T975] usb 8-1: SerialNumber: syz [ 357.263830][ T975] usb 8-1: config 0 descriptor?? [ 357.325989][ T975] em28xx 8-1:0.84: New device syz syz @ 480 Mbps (eb1a:e305, interface 84, class 84) [ 357.366727][ T975] em28xx 8-1:0.84: Video interface 84 found: bulk [ 358.491317][ T975] em28xx 8-1:0.84: unknown em28xx chip ID (0) [ 358.598434][ T975] em28xx 8-1:0.84: reading from i2c device at 0xa0 failed (error=-5) [ 358.630162][ T975] em28xx 8-1:0.84: board has no eeprom [ 358.692215][ T5145] Bluetooth: hci0: command tx timeout [ 358.740926][ T975] em28xx 8-1:0.84: Identified as KWorld DVB-T 305U (card=47) [ 358.750827][ T975] em28xx 8-1:0.84: analog set to bulk mode. [ 358.756899][ T5883] em28xx 8-1:0.84: Registering V4L2 extension [ 358.914627][ T5883] em28xx 8-1:0.84: reading from i2c device at 0xb8 failed (error=-5) [ 358.936616][ T5883] em28xx 8-1:0.84: reading from i2c device at 0xba failed (error=-5) [ 358.984456][ T5883] em28xx 8-1:0.84: reading from i2c device at 0x84 failed (error=-5) [ 359.021159][ T5883] em28xx 8-1:0.84: reading from i2c device at 0x86 failed (error=-5) [ 359.047966][ T5883] em28xx 8-1:0.84: reading from i2c device at 0x94 failed (error=-5) [ 359.088362][ T3012] team0 (unregistering): Port device team_slave_1 removed [ 359.145178][ T5883] em28xx 8-1:0.84: reading from i2c device at 0x96 failed (error=-5) [ 359.224740][ T3012] team0 (unregistering): Port device team_slave_0 removed [ 359.594824][ T5883] em28xx 8-1:0.84: reading from i2c device at 0xc0 failed (error=-5) [ 359.612640][ T5883] em28xx 8-1:0.84: reading from i2c device at 0xc2 failed (error=-5) [ 359.626454][ T5883] em28xx 8-1:0.84: reading from i2c device at 0xc4 failed (error=-5) [ 359.635098][ T5883] em28xx 8-1:0.84: reading from i2c device at 0xc6 failed (error=-5) [ 359.660784][ T5884] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 359.661085][ T5883] em28xx 8-1:0.84: reading from i2c device at 0xc8 failed (error=-5) [ 359.680791][T10162] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 359.726650][ T5883] em28xx 8-1:0.84: Config register raw data: 0xfffffffb [ 359.741631][ T5883] em28xx 8-1:0.84: AC97 chip type couldn't be determined [ 359.749759][ T5883] em28xx 8-1:0.84: No AC97 audio processor [ 359.790755][ T5883] usb 8-1: Decoder not found [ 359.816680][ T5883] em28xx 8-1:0.84: failed to create media graph [ 359.823314][ T5883] em28xx 8-1:0.84: V4L2 device video103 deregistered [ 359.830837][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 359.832201][ T5883] em28xx 8-1:0.84: Remote control support is not available for this card. [ 359.843110][ T5884] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 359.871076][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.889440][ T5884] usb 2-1: Product: syz [ 359.896969][ T5884] usb 2-1: Manufacturer: syz [ 359.912971][ T5884] usb 2-1: SerialNumber: syz [ 359.935148][ T5884] usb 2-1: config 0 descriptor?? [ 359.965955][ T5884] as10x_usb: device has been detected [ 359.977588][ T5884] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 360.033393][ T5884] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 360.060417][T10171] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 360.105363][ T5884] as10x_usb: error during firmware upload part1 [ 360.142983][ T5884] Registered device Abilis Systems DVB-Titan [ 360.750839][ T5145] Bluetooth: hci0: command tx timeout [ 360.797724][ T5891] usb 8-1: USB disconnect, device number 10 [ 360.805033][ T5891] em28xx 8-1:0.84: Disconnecting em28xx [ 360.849825][ T5891] em28xx 8-1:0.84: Closing input extension [ 360.879373][ T5891] em28xx 8-1:0.84: Freeing device [ 361.190134][T10059] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 361.251573][T10059] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 361.336696][T10059] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 361.388991][T10059] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 361.648772][T10059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.741118][T10059] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.788866][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.796101][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.902018][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.909181][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.123852][T10059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.197598][ T5881] usb 2-1: USB disconnect, device number 51 [ 362.238371][T10059] veth0_vlan: entered promiscuous mode [ 362.252287][T10059] veth1_vlan: entered promiscuous mode [ 362.267526][T10059] veth0_macvtap: entered promiscuous mode [ 362.275882][T10059] veth1_macvtap: entered promiscuous mode [ 362.287312][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.297974][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.308007][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.318667][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.328802][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.339408][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.349558][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.360436][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.370956][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.381592][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.391508][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.402030][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.413621][T10059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.422708][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.433841][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.443785][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.454383][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.464874][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.475932][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.485913][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.496695][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.506790][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.517504][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.527476][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.537984][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.549046][T10059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.602386][T10059] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.620784][T10059] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.630760][T10059] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.641422][T10059] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.735024][ T5881] Unregistered device Abilis Systems DVB-Titan [ 362.741269][ T5881] as10x_usb: device has been disconnected [ 362.914750][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.975614][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.137387][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.221862][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.754293][T10241] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 364.980921][ T5881] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 365.136683][ T5881] usb 8-1: config 0 has an invalid interface number: 84 but max is 0 [ 365.145483][ T5881] usb 8-1: config 0 has no interface number 0 [ 365.165864][ T5881] usb 8-1: config 0 interface 84 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 365.213211][ T5881] usb 8-1: config 0 interface 84 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 365.283481][ T5881] usb 8-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=44.33 [ 365.330811][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.359352][ T5881] usb 8-1: Product: syz [ 365.370096][ T5881] usb 8-1: Manufacturer: syz [ 365.390865][ T5881] usb 8-1: SerialNumber: syz [ 365.421075][ T5881] usb 8-1: config 0 descriptor?? [ 365.443466][ T5881] em28xx 8-1:0.84: New device syz syz @ 480 Mbps (eb1a:e305, interface 84, class 84) [ 365.469795][ T5881] em28xx 8-1:0.84: Video interface 84 found: bulk [ 365.713063][ T5881] em28xx 8-1:0.84: unknown em28xx chip ID (0) [ 365.820875][ T5881] em28xx 8-1:0.84: reading from i2c device at 0xa0 failed (error=-5) [ 365.829029][ T5881] em28xx 8-1:0.84: board has no eeprom [ 365.970302][ T5881] em28xx 8-1:0.84: Identified as KWorld DVB-T 305U (card=47) [ 365.978034][ T5881] em28xx 8-1:0.84: analog set to bulk mode. [ 365.991822][ T25] em28xx 8-1:0.84: Registering V4L2 extension [ 366.012099][ T5881] usb 8-1: USB disconnect, device number 11 [ 366.046323][ T5881] em28xx 8-1:0.84: Disconnecting em28xx [ 366.307155][ T25] em28xx 8-1:0.84: Config register raw data: 0xffffffed [ 366.317398][ T25] em28xx 8-1:0.84: AC97 chip type couldn't be determined [ 366.324836][ T5885] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 366.351393][ T25] em28xx 8-1:0.84: No AC97 audio processor [ 366.366234][ T25] usb 8-1: Decoder not found [ 366.379310][ T25] em28xx 8-1:0.84: failed to create media graph [ 366.388181][ T25] em28xx 8-1:0.84: V4L2 device video103 deregistered [ 366.430040][ T25] em28xx 8-1:0.84: Remote control support is not available for this card. [ 366.467992][ T5881] em28xx 8-1:0.84: Closing input extension [ 366.492853][ T5885] usb 5-1: config 0 has no interfaces? [ 366.500462][ T5885] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 366.520634][ T5881] em28xx 8-1:0.84: Freeing device [ 366.563373][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.622654][ T5885] usb 5-1: Product: syz [ 366.649877][ T5885] usb 5-1: Manufacturer: syz [ 366.691616][ T5885] usb 5-1: SerialNumber: syz [ 366.715969][ T5885] usb 5-1: config 0 descriptor?? [ 368.554521][T10338] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 368.952280][ T975] usb 5-1: USB disconnect, device number 56 [ 371.464959][ T5881] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 371.645877][ T5881] usb 2-1: config 0 has no interfaces? [ 371.655755][ T5881] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 371.695637][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.715618][ T5881] usb 2-1: Product: syz [ 371.746896][ T5881] usb 2-1: Manufacturer: syz [ 371.766724][ T5881] usb 2-1: SerialNumber: syz [ 371.786354][ T5881] usb 2-1: config 0 descriptor?? [ 371.910943][ T975] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 372.142622][ T975] usb 9-1: config 0 has no interfaces? [ 372.187062][ T975] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 372.245085][ T975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.279898][ T975] usb 9-1: Product: syz [ 372.297717][ T975] usb 9-1: Manufacturer: syz [ 372.330242][ T975] usb 9-1: SerialNumber: syz [ 372.372707][ T975] usb 9-1: config 0 descriptor?? [ 372.883976][T10454] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 372.937644][T10454] kvm: pic: non byte read [ 372.955299][T10454] kvm: pic: non byte read [ 374.262238][ T975] usb 2-1: USB disconnect, device number 52 [ 374.517442][ T5885] usb 9-1: USB disconnect, device number 2 [ 374.997435][T10501] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 375.005907][T10499] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 377.093412][ T975] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 377.313550][ T975] usb 9-1: config 0 has no interfaces? [ 377.328620][ T975] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 377.362570][ T975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.393798][ T975] usb 9-1: Product: syz [ 377.403684][ T975] usb 9-1: Manufacturer: syz [ 377.420968][ T975] usb 9-1: SerialNumber: syz [ 377.439844][ T975] usb 9-1: config 0 descriptor?? [ 378.310334][T10550] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 379.001340][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.007718][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.789531][ T5890] usb 9-1: USB disconnect, device number 3 [ 380.311316][T10588] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 382.360891][ T5885] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 382.558523][ T5885] usb 5-1: config 0 has no interfaces? [ 382.573154][ T5885] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 382.630759][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.669640][ T5885] usb 5-1: Product: syz [ 382.677957][ T5885] usb 5-1: Manufacturer: syz [ 382.719887][ T5885] usb 5-1: SerialNumber: syz [ 382.841222][ T5885] usb 5-1: config 0 descriptor?? [ 382.965381][T10634] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 385.049648][ T5890] usb 5-1: USB disconnect, device number 57 [ 385.283411][T10676] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 385.339847][T10681] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1148'. [ 385.601535][T10683] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1148'. [ 386.339179][T10699] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1150'. [ 386.425961][T10703] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1150'. [ 388.305980][T10750] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 388.569794][T10751] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 388.578400][ T5883] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 388.607685][T10753] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 388.737302][ T5883] usb 9-1: config 0 has an invalid interface number: 84 but max is 0 [ 388.748102][ T5883] usb 9-1: config 0 has no interface number 0 [ 388.762013][ T5883] usb 9-1: config 0 interface 84 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 388.840430][ T5883] usb 9-1: config 0 interface 84 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 388.896335][ T5883] usb 9-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=44.33 [ 388.922635][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.940928][ T5883] usb 9-1: Product: syz [ 388.945150][ T5883] usb 9-1: Manufacturer: syz [ 388.949762][ T5883] usb 9-1: SerialNumber: syz [ 389.028612][ T5883] usb 9-1: config 0 descriptor?? [ 389.079807][ T5883] em28xx 9-1:0.84: New device syz syz @ 480 Mbps (eb1a:e305, interface 84, class 84) [ 389.123042][ T5883] em28xx 9-1:0.84: Video interface 84 found: bulk [ 389.373527][ T5883] em28xx 9-1:0.84: unknown em28xx chip ID (0) [ 389.539679][ T5883] em28xx 9-1:0.84: reading from i2c device at 0xa0 failed (error=-5) [ 389.548566][ T5883] em28xx 9-1:0.84: board has no eeprom [ 389.610780][ T5883] em28xx 9-1:0.84: Identified as KWorld DVB-T 305U (card=47) [ 389.618492][ T5883] em28xx 9-1:0.84: analog set to bulk mode. [ 389.626027][ T5882] em28xx 9-1:0.84: Registering V4L2 extension [ 389.663662][ T5883] usb 9-1: USB disconnect, device number 4 [ 389.712002][ T5883] em28xx 9-1:0.84: Disconnecting em28xx [ 389.918158][ T5882] em28xx 9-1:0.84: Config register raw data: 0xffffffed [ 389.954913][ T5882] em28xx 9-1:0.84: AC97 chip type couldn't be determined [ 389.984348][ T5882] em28xx 9-1:0.84: No AC97 audio processor [ 390.076340][ T5882] usb 9-1: Decoder not found [ 390.121546][ T5882] em28xx 9-1:0.84: failed to create media graph [ 390.160730][ T5882] em28xx 9-1:0.84: V4L2 device video103 deregistered [ 390.391748][ T5882] em28xx 9-1:0.84: Remote control support is not available for this card. [ 390.500554][ T5883] em28xx 9-1:0.84: Closing input extension [ 390.582094][ T5883] em28xx 9-1:0.84: Freeing device [ 390.930479][T10815] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 391.469368][T10830] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1168'. [ 391.503762][T10825] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 391.725976][T10830] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1168'. [ 392.898851][T10857] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 393.541282][ T25] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 393.819267][ T25] usb 6-1: config 0 has an invalid interface number: 84 but max is 0 [ 393.827523][ T25] usb 6-1: config 0 has no interface number 0 [ 393.833981][ T25] usb 6-1: config 0 interface 84 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 393.844151][ T25] usb 6-1: config 0 interface 84 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 393.866149][ T25] usb 6-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=44.33 [ 393.875539][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.883954][ T25] usb 6-1: Product: syz [ 393.888466][ T25] usb 6-1: Manufacturer: syz [ 393.893753][ T25] usb 6-1: SerialNumber: syz [ 393.901461][ T25] usb 6-1: config 0 descriptor?? [ 393.909883][ T25] em28xx 6-1:0.84: New device syz syz @ 480 Mbps (eb1a:e305, interface 84, class 84) [ 393.919833][ T25] em28xx 6-1:0.84: Video interface 84 found: bulk [ 394.241170][ T25] em28xx 6-1:0.84: unknown em28xx chip ID (0) [ 394.396171][ T25] em28xx 6-1:0.84: reading from i2c device at 0xa0 failed (error=-5) [ 394.405362][ T25] em28xx 6-1:0.84: board has no eeprom [ 394.480753][ T25] em28xx 6-1:0.84: Identified as KWorld DVB-T 305U (card=47) [ 394.488262][ T25] em28xx 6-1:0.84: analog set to bulk mode. [ 394.496429][ T5885] em28xx 6-1:0.84: Registering V4L2 extension [ 394.511774][ T25] usb 6-1: USB disconnect, device number 37 [ 394.601081][ T25] em28xx 6-1:0.84: Disconnecting em28xx [ 395.029045][T10898] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 395.063118][ T5885] em28xx 6-1:0.84: Config register raw data: 0xffffffed [ 395.079433][ T5885] em28xx 6-1:0.84: AC97 chip type couldn't be determined [ 395.140907][ T5885] em28xx 6-1:0.84: No AC97 audio processor [ 395.183260][ T5885] usb 6-1: Decoder not found [ 395.187896][ T5885] em28xx 6-1:0.84: failed to create media graph [ 395.204466][ T5885] em28xx 6-1:0.84: V4L2 device video103 deregistered [ 395.208312][T10901] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1183'. [ 395.223584][ T5885] em28xx 6-1:0.84: Remote control support is not available for this card. [ 395.235246][ T25] em28xx 6-1:0.84: Closing input extension [ 395.264548][ T25] em28xx 6-1:0.84: Freeing device [ 395.502067][T10903] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1183'. [ 395.803848][T10909] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 396.053857][T10913] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 398.257391][T10941] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 398.300843][ T5885] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 398.463993][ T5885] usb 8-1: config 0 has an invalid interface number: 84 but max is 0 [ 398.473394][ T5885] usb 8-1: config 0 has no interface number 0 [ 398.479859][ T5885] usb 8-1: config 0 interface 84 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.583111][ T5885] usb 8-1: config 0 interface 84 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 398.638516][ T5885] usb 8-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=44.33 [ 398.678525][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.736715][ T5885] usb 8-1: Product: syz [ 398.754146][ T5885] usb 8-1: Manufacturer: syz [ 398.822591][ T5885] usb 8-1: SerialNumber: syz [ 398.883142][ T5885] usb 8-1: config 0 descriptor?? [ 398.925039][ T5885] em28xx 8-1:0.84: New device syz syz @ 480 Mbps (eb1a:e305, interface 84, class 84) [ 398.973764][ T5885] em28xx 8-1:0.84: Video interface 84 found: bulk [ 399.241150][ T5885] em28xx 8-1:0.84: unknown em28xx chip ID (0) [ 399.354839][ T5885] em28xx 8-1:0.84: reading from i2c device at 0xa0 failed (error=-5) [ 399.444363][ T5885] em28xx 8-1:0.84: board has no eeprom [ 399.478011][T10967] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 399.551069][ T5885] em28xx 8-1:0.84: Identified as KWorld DVB-T 305U (card=47) [ 399.577881][ T5885] em28xx 8-1:0.84: analog set to bulk mode. [ 399.585644][ T25] em28xx 8-1:0.84: Registering V4L2 extension [ 399.614623][ T5885] usb 8-1: USB disconnect, device number 12 [ 399.682623][ T5885] em28xx 8-1:0.84: Disconnecting em28xx [ 400.281152][T10979] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 400.320823][ T25] em28xx 8-1:0.84: Config register raw data: 0xffffffed [ 400.327830][ T25] em28xx 8-1:0.84: AC97 chip type couldn't be determined [ 400.335277][ T25] em28xx 8-1:0.84: No AC97 audio processor [ 400.366935][ T25] usb 8-1: Decoder not found [ 400.371839][ T25] em28xx 8-1:0.84: failed to create media graph [ 400.378141][ T25] em28xx 8-1:0.84: V4L2 device video103 deregistered [ 400.401326][ T25] em28xx 8-1:0.84: Remote control support is not available for this card. [ 400.443307][ T5885] em28xx 8-1:0.84: Closing input extension [ 400.505889][ T5885] em28xx 8-1:0.84: Freeing device [ 401.381135][ T25] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 401.393019][T10997] tipc: Started in network mode [ 401.421191][T10997] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 401.488364][T10997] tipc: Enabling of bearer rejected, failed to enable media [ 401.533300][ T25] usb 5-1: device descriptor read/64, error -71 [ 401.891151][ T25] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 401.964629][T11017] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 402.061644][ T25] usb 5-1: device descriptor read/64, error -71 [ 402.181218][ T25] usb usb5-port1: attempt power cycle [ 402.215894][T11019] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 402.545319][ T25] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 402.680952][ T25] usb 5-1: device descriptor read/8, error -71 [ 402.920821][ T5881] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 402.928474][ T25] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 402.956435][T11028] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 402.969925][ T25] usb 5-1: device descriptor read/8, error -71 [ 403.050094][ T52] tipc: Left network mode [ 403.090767][ T5881] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.137212][ T25] usb usb5-port1: unable to enumerate USB device [ 403.151322][ T5881] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.251047][ T5881] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 403.281076][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 403.294055][ T5881] usb 9-1: SerialNumber: syz [ 403.672016][ T5881] usb 9-1: 0:2 : does not exist [ 403.676968][ T5881] usb 9-1: unit 5 not found! [ 403.734780][ T5881] usb 9-1: USB disconnect, device number 5 [ 403.911544][ T6464] udevd[6464]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.359214][T11067] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 405.652033][T11075] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 405.942427][ T5884] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 406.210586][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 406.407265][ T5884] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 406.421175][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.429217][ T5884] usb 5-1: Product: syz [ 406.433760][ T5884] usb 5-1: Manufacturer: syz [ 406.438390][ T5884] usb 5-1: SerialNumber: syz [ 406.446772][ T5884] usb 5-1: config 0 descriptor?? [ 406.456443][ T5884] as10x_usb: device has been detected [ 406.462448][ T5884] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 406.482083][ T5884] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 406.496308][ T5884] as10x_usb: error during firmware upload part1 [ 406.503293][ T5884] Registered device Abilis Systems DVB-Titan [ 406.611157][ T5882] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 406.661073][ T5883] usb 5-1: USB disconnect, device number 62 [ 406.668927][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 406.711875][ T5883] Unregistered device Abilis Systems DVB-Titan [ 406.712956][ T5883] as10x_usb: device has been disconnected [ 406.784870][T11092] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 406.868806][ T5882] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.880847][ T5882] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.898640][ T5882] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 406.914371][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 406.925468][ T5882] usb 6-1: SerialNumber: syz [ 407.250766][ T5883] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 407.250765][ T58] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 407.310142][ T5882] usb 6-1: 0:2 : does not exist [ 407.318551][ T5882] usb 6-1: unit 5 not found! [ 407.347377][ T5882] usb 6-1: USB disconnect, device number 38 [ 407.402679][ T58] usb 9-1: config 0 has an invalid interface number: 84 but max is 0 [ 407.465476][ T5883] usb 8-1: device descriptor read/64, error -71 [ 407.491134][ T58] usb 9-1: config 0 has no interface number 0 [ 407.558830][ T58] usb 9-1: config 0 interface 84 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.569890][ T6464] udevd[6464]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.638094][ T58] usb 9-1: config 0 interface 84 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 407.701630][ T58] usb 9-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=44.33 [ 407.741536][ T5883] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 407.765914][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.860601][ T58] usb 9-1: Product: syz [ 407.883711][ T58] usb 9-1: Manufacturer: syz [ 407.888630][ T58] usb 9-1: SerialNumber: syz [ 407.935158][ T58] usb 9-1: config 0 descriptor?? [ 407.953321][ T5883] usb 8-1: device descriptor read/64, error -71 [ 407.982241][ T58] em28xx 9-1:0.84: New device syz syz @ 480 Mbps (eb1a:e305, interface 84, class 84) [ 408.081473][ T5883] usb usb8-port1: attempt power cycle [ 408.097652][ T58] em28xx 9-1:0.84: Video interface 84 found: bulk [ 408.221249][ T58] em28xx 9-1:0.84: unknown em28xx chip ID (0) [ 408.390804][ T58] em28xx 9-1:0.84: reading from i2c device at 0xa0 failed (error=-5) [ 408.398968][ T58] em28xx 9-1:0.84: board has no eeprom [ 408.438043][T11112] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 408.447909][ T5883] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 408.492794][ T5883] usb 8-1: device descriptor read/8, error -71 [ 408.541063][ T58] em28xx 9-1:0.84: Identified as KWorld DVB-T 305U (card=47) [ 408.562446][ T58] em28xx 9-1:0.84: analog set to bulk mode. [ 408.623977][ T5884] em28xx 9-1:0.84: Registering V4L2 extension [ 408.651109][ T58] usb 9-1: USB disconnect, device number 6 [ 408.707125][ T5884] em28xx 9-1:0.84: reading from i2c device at 0xb8 failed (error=-19) [ 408.735143][ T58] em28xx 9-1:0.84: Disconnecting em28xx [ 408.772466][ T5883] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 408.861104][ T5883] usb 8-1: device descriptor read/8, error -71 [ 408.928027][ T5884] em28xx 9-1:0.84: Config register raw data: 0xffffffed [ 408.983716][ T5884] em28xx 9-1:0.84: AC97 chip type couldn't be determined [ 409.073607][ T5883] usb usb8-port1: unable to enumerate USB device [ 409.106709][ T5884] em28xx 9-1:0.84: No AC97 audio processor [ 409.138300][ T5884] usb 9-1: Decoder not found [ 409.143002][ T5884] em28xx 9-1:0.84: failed to create media graph [ 409.150258][ T5884] em28xx 9-1:0.84: V4L2 device video103 deregistered [ 409.167714][ T5884] em28xx 9-1:0.84: Remote control support is not available for this card. [ 409.179910][ T58] em28xx 9-1:0.84: Closing input extension [ 409.207231][ T58] em28xx 9-1:0.84: Freeing device [ 409.761953][T11130] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 410.944655][T11164] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 413.552754][ T5883] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 413.607763][T11207] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 413.721159][ T5883] usb 5-1: device descriptor read/64, error -71 [ 414.030903][ T5883] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 414.214560][ T5883] usb 5-1: device descriptor read/64, error -71 [ 414.355266][ T5883] usb usb5-port1: attempt power cycle [ 414.610879][ T5890] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 414.741094][ T5883] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 414.761867][ T5883] usb 5-1: device descriptor read/8, error -71 [ 414.788049][ T5890] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.811326][ T5890] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.881149][ T5890] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 414.894567][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 414.905447][ T5890] usb 9-1: SerialNumber: syz [ 415.030800][ T5883] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 415.061448][ T5883] usb 5-1: device descriptor read/8, error -71 [ 415.137854][ T5890] usb 9-1: 0:2 : does not exist [ 415.148961][ T5890] usb 9-1: unit 5 not found! [ 415.222377][ T5883] usb usb5-port1: unable to enumerate USB device [ 415.240895][ T5890] usb 9-1: USB disconnect, device number 7 [ 415.452394][ T6464] udevd[6464]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.957750][T11243] tipc: Started in network mode [ 415.975274][T11243] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 416.005296][T11243] tipc: Enabling of bearer rejected, failed to enable media [ 416.708866][T11258] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 418.610753][ T5883] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 418.792265][ T5883] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.802454][ T5883] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.812511][ T5883] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 418.821712][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 418.829882][ T5883] usb 6-1: SerialNumber: syz [ 419.059500][ T5883] usb 6-1: 0:2 : does not exist [ 419.181508][ T5883] usb 6-1: unit 5 not found! [ 419.275517][ T5883] usb 6-1: USB disconnect, device number 39 [ 419.551557][ T6464] udevd[6464]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.762592][ T58] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 419.882212][T11306] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 419.951067][ T58] usb 2-1: device descriptor read/64, error -71 [ 420.435614][ T58] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 420.650742][ T58] usb 2-1: device descriptor read/64, error -71 [ 420.670036][T11311] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 420.771064][ T58] usb usb2-port1: attempt power cycle [ 421.311440][ T58] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 421.453302][ T58] usb 2-1: device descriptor read/8, error -71 [ 421.740877][ T58] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 421.889838][ T58] usb 2-1: device descriptor read/8, error -71 [ 422.033328][ T58] usb usb2-port1: unable to enumerate USB device [ 423.757204][T11360] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 424.050072][T11370] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 424.640917][ T5883] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 424.880901][ T5883] usb 8-1: device descriptor read/64, error -71 [ 425.141087][ T5883] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 425.310774][ T5883] usb 8-1: device descriptor read/64, error -71 [ 425.431697][ T5883] usb usb8-port1: attempt power cycle [ 425.445220][ T58] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 425.510832][ T5890] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 425.610958][ T58] usb 9-1: Using ep0 maxpacket: 32 [ 425.640385][ T58] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 425.701240][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.706039][ T5890] usb 5-1: config 0 has an invalid interface number: 84 but max is 0 [ 425.725244][ T5890] usb 5-1: config 0 has no interface number 0 [ 425.744249][ T5890] usb 5-1: config 0 interface 84 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 425.767759][ T58] usb 9-1: Product: syz [ 425.769550][ T5890] usb 5-1: config 0 interface 84 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 425.798300][ T5890] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=44.33 [ 425.807624][ T5883] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 425.832031][ T58] usb 9-1: Manufacturer: syz [ 425.843699][ T58] usb 9-1: SerialNumber: syz [ 425.860589][ T5883] usb 8-1: device descriptor read/8, error -71 [ 425.862620][ T58] usb 9-1: config 0 descriptor?? [ 425.873726][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.889507][ T58] as10x_usb: device has been detected [ 425.904914][ T58] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 425.913030][ T5890] usb 5-1: Product: syz [ 425.917501][ T5890] usb 5-1: Manufacturer: syz [ 425.930971][ T5890] usb 5-1: SerialNumber: syz [ 425.963130][ T58] usb 9-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 426.022140][ T5890] usb 5-1: config 0 descriptor?? [ 426.029961][ T5890] em28xx 5-1:0.84: New device syz syz @ 480 Mbps (eb1a:e305, interface 84, class 84) [ 426.072201][ T58] as10x_usb: error during firmware upload part1 [ 426.078912][ T58] Registered device Abilis Systems DVB-Titan [ 426.132826][ T5883] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 426.140818][ T58] usb 9-1: USB disconnect, device number 8 [ 426.150752][ T5890] em28xx 5-1:0.84: Video interface 84 found: bulk [ 426.219603][ T5883] usb 8-1: device descriptor read/8, error -71 [ 426.275654][ T58] Unregistered device Abilis Systems DVB-Titan [ 426.276945][ T58] as10x_usb: device has been disconnected [ 426.365229][ T5890] em28xx 5-1:0.84: unknown em28xx chip ID (0) [ 426.406202][ T5883] usb usb8-port1: unable to enumerate USB device [ 426.530827][ T5890] em28xx 5-1:0.84: reading from i2c device at 0xa0 failed (error=-5) [ 426.589768][ T5890] em28xx 5-1:0.84: board has no eeprom [ 426.715856][ T5890] em28xx 5-1:0.84: Identified as KWorld DVB-T 305U (card=47) [ 426.728322][ T5890] em28xx 5-1:0.84: analog set to bulk mode. [ 426.740799][ T5883] em28xx 5-1:0.84: Registering V4L2 extension [ 426.867262][ T5883] em28xx 5-1:0.84: reading from i2c device at 0xb8 failed (error=-5) [ 426.920887][ T5883] em28xx 5-1:0.84: reading from i2c device at 0xba failed (error=-5) [ 426.952796][T11399] tipc: Started in network mode [ 426.957681][T11399] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 426.983318][ T5890] usb 5-1: USB disconnect, device number 67 [ 426.991725][ T5890] em28xx 5-1:0.84: Disconnecting em28xx [ 427.140878][T11399] tipc: Enabling of bearer rejected, failed to enable media [ 427.191448][ T5883] em28xx 5-1:0.84: Config register raw data: 0xffffffed [ 427.198451][ T5883] em28xx 5-1:0.84: AC97 chip type couldn't be determined [ 427.216052][ T5883] em28xx 5-1:0.84: No AC97 audio processor [ 427.244107][ T5883] usb 5-1: Decoder not found [ 427.275542][ T5883] em28xx 5-1:0.84: failed to create media graph [ 427.299008][ T5883] em28xx 5-1:0.84: V4L2 device video103 deregistered [ 427.352435][ T5883] em28xx 5-1:0.84: Remote control support is not available for this card. [ 427.382842][ T5890] em28xx 5-1:0.84: Closing input extension [ 427.388735][ T5890] ================================================================== [ 427.396783][ T5890] BUG: KASAN: slab-use-after-free in media_device_unregister+0x154/0x470 [ 427.405219][ T5890] Read of size 8 at addr ffff88802ee58210 by task kworker/0:7/5890 [ 427.413093][ T5890] [ 427.415417][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: kworker/0:7 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 427.426157][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 427.436198][ T5890] Workqueue: usb_hub_wq hub_event [ 427.441232][ T5890] Call Trace: [ 427.444493][ T5890] [ 427.447406][ T5890] dump_stack_lvl+0x241/0x360 [ 427.452074][ T5890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.457259][ T5890] ? __pfx__printk+0x10/0x10 [ 427.461832][ T5890] ? _printk+0xd5/0x120 [ 427.465987][ T5890] ? __virt_addr_valid+0x183/0x530 [ 427.471089][ T5890] ? __virt_addr_valid+0x183/0x530 [ 427.476204][ T5890] print_report+0x169/0x550 [ 427.480707][ T5890] ? __virt_addr_valid+0x183/0x530 [ 427.485809][ T5890] ? __virt_addr_valid+0x183/0x530 [ 427.490906][ T5890] ? __virt_addr_valid+0x45f/0x530 [ 427.496001][ T5890] ? __phys_addr+0xba/0x170 [ 427.500488][ T5890] ? media_device_unregister+0x154/0x470 [ 427.506107][ T5890] kasan_report+0x143/0x180 [ 427.510595][ T5890] ? media_device_unregister+0x154/0x470 [ 427.516229][ T5890] media_device_unregister+0x154/0x470 [ 427.521679][ T5890] em28xx_release_resources+0xa7/0x230 [ 427.527120][ T5890] em28xx_usb_disconnect+0x1cc/0x530 [ 427.532393][ T5890] usb_unbind_interface+0x25b/0x940 [ 427.537764][ T5890] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 427.543469][ T5890] ? __pfx_usb_unbind_interface+0x10/0x10 [ 427.549173][ T5890] device_release_driver_internal+0x503/0x7c0 [ 427.555229][ T5890] bus_remove_device+0x34f/0x420 [ 427.560158][ T5890] device_del+0x57a/0x9b0 [ 427.564497][ T5890] ? kobject_put+0x272/0x480 [ 427.569077][ T5890] ? __pfx_device_del+0x10/0x10 [ 427.573912][ T5890] ? kobject_put+0x44d/0x480 [ 427.578489][ T5890] usb_disable_device+0x3bf/0x850 [ 427.583510][ T5890] usb_disconnect+0x340/0x950 [ 427.588186][ T5890] hub_event+0x1ebc/0x5150 [ 427.592589][ T5890] ? debug_object_deactivate+0x2d5/0x390 [ 427.598242][ T5890] ? do_raw_spin_unlock+0x13c/0x8b0 [ 427.603427][ T5890] ? __pfx_hub_event+0x10/0x10 [ 427.608175][ T5890] ? __pfx_lock_acquire+0x10/0x10 [ 427.613183][ T5890] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 427.619162][ T5890] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 427.625491][ T5890] ? process_scheduled_works+0x976/0x1840 [ 427.631203][ T5890] process_scheduled_works+0xa66/0x1840 [ 427.636748][ T5890] ? __pfx_process_scheduled_works+0x10/0x10 [ 427.642731][ T5890] ? assign_work+0x364/0x3d0 [ 427.647307][ T5890] worker_thread+0x870/0xd30 [ 427.651909][ T5890] ? __kthread_parkme+0x169/0x1d0 [ 427.656918][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 427.662021][ T5890] kthread+0x2f0/0x390 [ 427.666083][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 427.671272][ T5890] ? __pfx_kthread+0x10/0x10 [ 427.675847][ T5890] ret_from_fork+0x4b/0x80 [ 427.680246][ T5890] ? __pfx_kthread+0x10/0x10 [ 427.684829][ T5890] ret_from_fork_asm+0x1a/0x30 [ 427.689606][ T5890] [ 427.692619][ T5890] [ 427.694927][ T5890] Allocated by task 5883: [ 427.699236][ T5890] kasan_save_track+0x3f/0x80 [ 427.703905][ T5890] __kasan_kmalloc+0x98/0xb0 [ 427.708479][ T5890] __kmalloc_cache_noprof+0x243/0x390 [ 427.713860][ T5890] em28xx_v4l2_init+0xfd/0x2f40 [ 427.718702][ T5890] em28xx_init_extension+0x120/0x1c0 [ 427.723972][ T5890] process_scheduled_works+0xa66/0x1840 [ 427.729500][ T5890] worker_thread+0x870/0xd30 [ 427.734083][ T5890] kthread+0x2f0/0x390 [ 427.738135][ T5890] ret_from_fork+0x4b/0x80 [ 427.742553][ T5890] ret_from_fork_asm+0x1a/0x30 [ 427.747300][ T5890] [ 427.749609][ T5890] Freed by task 5883: [ 427.753569][ T5890] kasan_save_track+0x3f/0x80 [ 427.758235][ T5890] kasan_save_free_info+0x40/0x50 [ 427.763258][ T5890] __kasan_slab_free+0x59/0x70 [ 427.768018][ T5890] kfree+0x196/0x430 [ 427.771900][ T5890] em28xx_v4l2_init+0x16d7/0x2f40 [ 427.776910][ T5890] em28xx_init_extension+0x120/0x1c0 [ 427.782197][ T5890] process_scheduled_works+0xa66/0x1840 [ 427.787729][ T5890] worker_thread+0x870/0xd30 [ 427.792332][ T5890] kthread+0x2f0/0x390 [ 427.796387][ T5890] ret_from_fork+0x4b/0x80 [ 427.800790][ T5890] ret_from_fork_asm+0x1a/0x30 [ 427.805556][ T5890] [ 427.807868][ T5890] The buggy address belongs to the object at ffff88802ee58000 [ 427.807868][ T5890] which belongs to the cache kmalloc-8k of size 8192 [ 427.821905][ T5890] The buggy address is located 528 bytes inside of [ 427.821905][ T5890] freed 8192-byte region [ffff88802ee58000, ffff88802ee5a000) [ 427.835771][ T5890] [ 427.838084][ T5890] The buggy address belongs to the physical page: [ 427.844483][ T5890] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ee58 [ 427.853233][ T5890] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 427.861723][ T5890] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 427.869256][ T5890] page_type: f5(slab) [ 427.873227][ T5890] raw: 00fff00000000040 ffff88801ac42280 ffffea0000cdbe00 dead000000000004 [ 427.881803][ T5890] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 427.890471][ T5890] head: 00fff00000000040 ffff88801ac42280 ffffea0000cdbe00 dead000000000004 [ 427.899129][ T5890] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 427.907795][ T5890] head: 00fff00000000003 ffffea0000bb9601 ffffffffffffffff 0000000000000000 [ 427.916461][ T5890] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 427.925117][ T5890] page dumped because: kasan: bad access detected [ 427.931520][ T5890] page_owner tracks the page as allocated [ 427.937319][ T5890] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8523, tgid 8522 (syz.2.673), ts 245094455113, free_ts 245043671273 [ 427.958597][ T5890] post_alloc_hook+0x1f3/0x230 [ 427.963347][ T5890] get_page_from_freelist+0x365c/0x37a0 [ 427.968879][ T5890] __alloc_pages_noprof+0x292/0x710 [ 427.974065][ T5890] alloc_pages_mpol_noprof+0x3e8/0x680 [ 427.979507][ T5890] alloc_slab_page+0x6a/0x140 [ 427.984164][ T5890] allocate_slab+0x5a/0x2f0 [ 427.988646][ T5890] ___slab_alloc+0xcd1/0x14b0 [ 427.993309][ T5890] __slab_alloc+0x58/0xa0 [ 427.997624][ T5890] __kmalloc_cache_noprof+0x27b/0x390 [ 428.002985][ T5890] audit_log_d_path+0xbb/0x310 [ 428.007729][ T5890] audit_log_d_path_exe+0x42/0x70 [ 428.012734][ T5890] audit_log_task+0x254/0x320 [ 428.017406][ T5890] audit_seccomp+0x7b/0x1f0 [ 428.021897][ T5890] __seccomp_filter+0xb38/0x1fe0 [ 428.026820][ T5890] syscall_trace_enter+0xa8/0x150 [ 428.031838][ T5890] do_int80_emulation+0xfe/0x200 [ 428.036783][ T5890] page last free pid 5196 tgid 5196 stack trace: [ 428.043105][ T5890] free_unref_page+0xdef/0x1130 [ 428.047946][ T5890] __put_partials+0xeb/0x130 [ 428.052538][ T5890] put_cpu_partial+0x17c/0x250 [ 428.057308][ T5890] __slab_free+0x2ea/0x3d0 [ 428.061706][ T5890] qlist_free_all+0x9a/0x140 [ 428.066290][ T5890] kasan_quarantine_reduce+0x14f/0x170 [ 428.071735][ T5890] __kasan_slab_alloc+0x23/0x80 [ 428.076570][ T5890] __kmalloc_node_track_caller_noprof+0x237/0x4c0 [ 428.082979][ T5890] kmalloc_reserve+0x111/0x2a0 [ 428.087726][ T5890] __alloc_skb+0x1f3/0x440 [ 428.092124][ T5890] alloc_skb_with_frags+0xc3/0x820 [ 428.097315][ T5890] sock_alloc_send_pskb+0x91a/0xa60 [ 428.102503][ T5890] unix_dgram_sendmsg+0x6d3/0x1f80 [ 428.107599][ T5890] __sock_sendmsg+0x221/0x270 [ 428.112262][ T5890] __sys_sendto+0x363/0x4c0 [ 428.116754][ T5890] __x64_sys_sendto+0xde/0x100 [ 428.121501][ T5890] [ 428.123802][ T5890] Memory state around the buggy address: [ 428.129410][ T5890] ffff88802ee58100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 428.137451][ T5890] ffff88802ee58180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 428.145493][ T5890] >ffff88802ee58200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 428.153535][ T5890] ^ [ 428.158101][ T5890] ffff88802ee58280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 428.166145][ T5890] ffff88802ee58300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 428.174188][ T5890] ================================================================== [ 428.476706][ T5890] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 428.483958][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: kworker/0:7 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 428.494771][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 428.504828][ T5890] Workqueue: usb_hub_wq hub_event [ 428.509850][ T5890] Call Trace: [ 428.513114][ T5890] [ 428.516034][ T5890] dump_stack_lvl+0x241/0x360 [ 428.520708][ T5890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.525933][ T5890] ? __pfx__printk+0x10/0x10 [ 428.530511][ T5890] ? preempt_schedule+0xe1/0xf0 [ 428.535358][ T5890] ? vscnprintf+0x5d/0x90 [ 428.539673][ T5890] panic+0x349/0x880 [ 428.543559][ T5890] ? check_panic_on_warn+0x21/0xb0 [ 428.548655][ T5890] ? __pfx_panic+0x10/0x10 [ 428.553061][ T5890] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 428.559025][ T5890] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 428.565338][ T5890] ? print_report+0x502/0x550 [ 428.570001][ T5890] check_panic_on_warn+0x86/0xb0 [ 428.574927][ T5890] ? media_device_unregister+0x154/0x470 [ 428.580547][ T5890] end_report+0x77/0x160 [ 428.584780][ T5890] kasan_report+0x154/0x180 [ 428.589269][ T5890] ? media_device_unregister+0x154/0x470 [ 428.594893][ T5890] media_device_unregister+0x154/0x470 [ 428.600365][ T5890] em28xx_release_resources+0xa7/0x230 [ 428.605856][ T5890] em28xx_usb_disconnect+0x1cc/0x530 [ 428.611175][ T5890] usb_unbind_interface+0x25b/0x940 [ 428.616399][ T5890] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 428.622121][ T5890] ? __pfx_usb_unbind_interface+0x10/0x10 [ 428.627838][ T5890] device_release_driver_internal+0x503/0x7c0 [ 428.633905][ T5890] bus_remove_device+0x34f/0x420 [ 428.638846][ T5890] device_del+0x57a/0x9b0 [ 428.643172][ T5890] ? kobject_put+0x272/0x480 [ 428.647762][ T5890] ? __pfx_device_del+0x10/0x10 [ 428.652602][ T5890] ? kobject_put+0x44d/0x480 [ 428.657196][ T5890] usb_disable_device+0x3bf/0x850 [ 428.662219][ T5890] usb_disconnect+0x340/0x950 [ 428.666890][ T5890] hub_event+0x1ebc/0x5150 [ 428.671303][ T5890] ? debug_object_deactivate+0x2d5/0x390 [ 428.676935][ T5890] ? do_raw_spin_unlock+0x13c/0x8b0 [ 428.682134][ T5890] ? __pfx_hub_event+0x10/0x10 [ 428.686893][ T5890] ? __pfx_lock_acquire+0x10/0x10 [ 428.691909][ T5890] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 428.697880][ T5890] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.704206][ T5890] ? process_scheduled_works+0x976/0x1840 [ 428.709921][ T5890] process_scheduled_works+0xa66/0x1840 [ 428.715472][ T5890] ? __pfx_process_scheduled_works+0x10/0x10 [ 428.721451][ T5890] ? assign_work+0x364/0x3d0 [ 428.726036][ T5890] worker_thread+0x870/0xd30 [ 428.730621][ T5890] ? __kthread_parkme+0x169/0x1d0 [ 428.735646][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 428.740749][ T5890] kthread+0x2f0/0x390 [ 428.744813][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 428.749913][ T5890] ? __pfx_kthread+0x10/0x10 [ 428.754496][ T5890] ret_from_fork+0x4b/0x80 [ 428.758911][ T5890] ? __pfx_kthread+0x10/0x10 [ 428.763499][ T5890] ret_from_fork_asm+0x1a/0x30 [ 428.768257][ T5890] [ 428.771545][ T5890] Kernel Offset: disabled [ 428.775873][ T5890] Rebooting in 86400 seconds..