last executing test programs: 10m55.764106607s ago: executing program 32 (id=6): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000180)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x1) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000140)=0x12) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000002c0)=ANY=[]) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) 10m47.758832327s ago: executing program 33 (id=18): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x101080) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r2 = syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70f, 0x800, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 10m17.572789896s ago: executing program 34 (id=47): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) getgroups(0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001480)="3b5250dd8df768c581177cc96346a125c5baecd7e46618851e723e8ef1628f8e5c9fff1954ad6617c17fd0658b4c494ab4b9c82de21662a0d7c3cafc01b397ad6c398c755561984e8ba92704585396a2101125bb2a4d000000611bc84796c80157", 0x61, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 8m58.692172125s ago: executing program 2 (id=163): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, 0x0, 0x0) 8m57.83355368s ago: executing program 2 (id=166): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x4}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m56.889458814s ago: executing program 2 (id=169): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) 8m55.931855414s ago: executing program 2 (id=173): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) 8m47.651973915s ago: executing program 35 (id=157): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) poll(&(0x7f0000000100), 0x0, 0x8) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000000)=0x12, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYRES16], 0x1a000}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfd, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc080) close_range(r0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0xa, 0x3, 0xff) 8m40.512767909s ago: executing program 36 (id=173): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) 6m56.105016045s ago: executing program 37 (id=382): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0xc, 0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'}) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) 6m48.48051197s ago: executing program 38 (id=407): socket(0x1e, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r2 = userfaultfd(0x80001) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00'/18, 0xfffffffffffffffe) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000a37000/0x3000)=nil, 0x3000}}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x44040000) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000082505a8a440000102030109021b00010107900309040010010701020209050102400006010d718e31dde11b214f887f89356e33c66e4c851b2b3c7ba87bf8fda0d2ffc212af4934860f61ba42320fa2df0afc5c47d7b20d79028994fdd308c3248c22dd7292521b30a431d0e454ada4220bf8d9be9967bc0b9d2e774a3c495b7a41169907485dd95ffe2378f052532c377a0088a94702102581b793cee74070bf8f7e3b79e50ae2a5ed4842aa249fdf6dc9fa904c32f83cae9745320e70f34e862603555e31a6e8e47f4fb72b435295463a669bd0c45011"], 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x428, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0xb8, 0xf0, 0x48, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0}, {0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1, 0x0, 0x0, 0x4e21, 0x6, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@remote, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x88d0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6m12.681212167s ago: executing program 39 (id=472): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0xad}) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x4, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101200, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/uevent_seqnum', 0x149b82, 0xb300bb1401d27a12) write$cgroup_int(r5, &(0x7f0000000000)=0x800, 0x12) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@empty, @private=0xa010100, 0x1, "ae3028ea8e00ae10c2f31c3a22013d217f213005eb48af9d03f93ca571f757b2", 0x800, 0x0, 0x8001, 0xe5}, 0x3c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x7, 0x0, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) 5m15.136041011s ago: executing program 40 (id=573): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 5m2.270921571s ago: executing program 0 (id=628): timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) 5m0.634004818s ago: executing program 0 (id=632): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r2, 0x2000}], 0x1, 0x0, 0x0, 0x0) 4m59.075224832s ago: executing program 0 (id=635): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0xd6f, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa00}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4m57.747976486s ago: executing program 0 (id=639): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m56.960050304s ago: executing program 7 (id=640): bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) 4m56.79274056s ago: executing program 0 (id=642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00005af000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f00005ad000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00005ae000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x83, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m55.625278831s ago: executing program 7 (id=644): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x2000}], 0x1, 0x0, 0x0, 0x0) 4m55.167051092s ago: executing program 0 (id=645): sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x8000) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x640440d4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x52c6, 0x0, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x4, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) 4m54.126121177s ago: executing program 7 (id=647): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a1000"/196], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000600)={0xe, {0x1, 0x6, 0x4f}}, 0xc) 4m51.56358231s ago: executing program 7 (id=650): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) socket$kcm(0x2, 0x3, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x5, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0xfd, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 4m49.689468538s ago: executing program 7 (id=652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x1000009, 0x9, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m48.237360261s ago: executing program 7 (id=654): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000005140500000000000000000008003d0000000000080003000000000008003d0000000000080003000000000008001d"], 0x50}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x1d}, 0x0) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r10 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r9) keyctl$set_timeout(0xf, r10, 0xfffff49f) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 4m39.759825021s ago: executing program 41 (id=645): sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x8000) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x640440d4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x52c6, 0x0, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x4, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) 4m32.84459066s ago: executing program 42 (id=654): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000005140500000000000000000008003d0000000000080003000000000008003d0000000000080003000000000008001d"], 0x50}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x1d}, 0x0) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r10 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r9) keyctl$set_timeout(0xf, r10, 0xfffff49f) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 3m49.349152124s ago: executing program 2 (id=661): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) socket$kcm(0x2, 0x3, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0xfd, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 3m48.262003893s ago: executing program 2 (id=732): syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, 0x0, &(0x7f0000000100)=0x22) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = dup(r4) syz_io_uring_setup(0xdaa, &(0x7f0000000380)={0x0, 0x0, 0x13291, 0x0, 0x2000}, &(0x7f0000000100), 0x0) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 3m36.95076245s ago: executing program 4 (id=742): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/131], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000600)={0xe, {0x1, 0x6, 0x4f}}, 0xc) 3m34.406288687s ago: executing program 4 (id=746): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 3m32.970731259s ago: executing program 4 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 3m32.615784236s ago: executing program 43 (id=732): syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, 0x0, &(0x7f0000000100)=0x22) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = dup(r4) syz_io_uring_setup(0xdaa, &(0x7f0000000380)={0x0, 0x0, 0x13291, 0x0, 0x2000}, &(0x7f0000000100), 0x0) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 3m31.210077198s ago: executing program 4 (id=752): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x1) 3m30.066361569s ago: executing program 4 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="0005000014"], 0x500}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 3m28.87274625s ago: executing program 4 (id=759): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffff7, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x40810) recvmsg(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000040)=ANY=[@ANYRES16=r3], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f0000000440)=""/4085, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket(0x22, 0x2, 0x3) r8 = socket$isdn(0x22, 0x2, 0x3) close(r8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x4, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r9, 0x40206435, &(0x7f0000000300)={0x0, r10}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r11 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@broadcast, 0x4e22, 0x0, 0x4, 0x8, 0x2}, {}, {0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffb, 0x32}, 0x2, @in=@local, 0xfffffffd, 0x4, 0x0, 0x0, 0x3, 0xfffffffd}}, 0xe8) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) 3m12.569152545s ago: executing program 44 (id=759): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffff7, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x40810) recvmsg(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000040)=ANY=[@ANYRES16=r3], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f0000000440)=""/4085, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket(0x22, 0x2, 0x3) r8 = socket$isdn(0x22, 0x2, 0x3) close(r8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x4, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r9, 0x40206435, &(0x7f0000000300)={0x0, r10}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r11 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@broadcast, 0x4e22, 0x0, 0x4, 0x8, 0x2}, {}, {0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffb, 0x32}, 0x2, @in=@local, 0xfffffffd, 0x4, 0x0, 0x0, 0x3, 0xfffffffd}}, 0xe8) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) 2m10.501476583s ago: executing program 6 (id=882): keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='/dev/kvm\x00', 0x0) 2m9.549383762s ago: executing program 6 (id=884): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 2m8.546803376s ago: executing program 6 (id=887): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f00000001c0)=[{0x36de, 0xb00, 0x4f, &(0x7f0000000200)="61ca266ec9d48bf4507af1cbd9d6535945ee3c10687800560930129b065807a7cc16f66611ad26f5ca31d6f5a361056b578abc03c412b4b4078cbf736bab41c327b3a30b9aa5db0e6744cffafb2995"}, {0x2, 0x9011, 0x0, 0x0}], 0x2}) 2m4.737904188s ago: executing program 6 (id=897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000580)="b3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m3.065176379s ago: executing program 6 (id=901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="0005000014"], 0x500}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 2m2.229808298s ago: executing program 6 (id=902): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffeff}]}) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r4, 0x406, r5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x10000014}) r7 = getpid() r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r6, &(0x7f0000000100)={r5, r6}) 1m46.148174784s ago: executing program 45 (id=902): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffeff}]}) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r4, 0x406, r5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x10000014}) r7 = getpid() r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r6, &(0x7f0000000100)={r5, r6}) 17.566740282s ago: executing program 5 (id=1154): open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) r0 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x168) 16.464533157s ago: executing program 5 (id=1155): r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) epoll_pwait2(r0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r2, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x3000001d}) 14.82086288s ago: executing program 5 (id=1159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001900)={0x0, [{0x1, 0x318, 0x9, &(0x7f0000000000)="b618bb3ccb26515ebc9b8f53da2578328a1d08b7e67c7e9c5b5933fe1e9d4859f6401bd5c5768fc709b208dfdd36eaaae820f8b72fb0d0d3b8a4aa86e31ebd5fd1097ef5779fb0953dc4fd0d3d156e294ca0269ab02d0626980ccffaabae3298db5fd7"}, {0x2, 0x6c00, 0x3, &(0x7f0000000200)="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"}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x7f, 0x0}, {0x0, 0x0, 0xd94, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xd03, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x3d0, 0x6, &(0x7f00000013c0)="8371de046e9c48f807673a030c051b24584cbeca2092076cd46901700c8690285c4366625c0853085120246285394761300dc7d9dcbac1993431449ed118ba700e20c73ef9052fdf4776e5fecf875ee87a57d4e69bd9a4c81fae4d7feee863299be0676e7e0dea8ebfcaa298bd2e9e122746457a01ed1c681369"}, {0x1, 0xa8, 0x3, &(0x7f00000014c0)="f10dfc6318f7c2d620a6eada8b79299daeb46276dd"}, {0x1, 0x0, 0x9, &(0x7f0000001540)}, {0x3, 0x0, 0x47d, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xdd, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0xe7c, 0x0}]}) 13.889799618s ago: executing program 5 (id=1163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB], 0x500}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 13.18831003s ago: executing program 5 (id=1166): syz_open_procfs(0x0, &(0x7f0000000300)='attr/exec\x00') socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) eventfd(0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 11.749530038s ago: executing program 5 (id=1172): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080048f0004c006700000306907864010100ac1414aa89071ee09b0cc11d1d1a85f8dca800000183039300000000000000000000000000000000000000004e2100004e220000000100000000000000030000000000000001"], 0x0) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000400)=ANY=[]) lseek(0xffffffffffffffff, 0x100040001, 0x3) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f00000004c0)={0x0, "94c3796df7dbf8fb9338d00e6c9474344169758a105b8dc81d1500", 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x4}) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x7) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x40008005}, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) open_by_handle_at(r7, &(0x7f0000002580)=ANY=[@ANYBLOB="0c000000fe000000030000e8ff00000007000000"], 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000200)=""/73, 0x49) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x1380, &(0x7f0000000100)=ANY=[]) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="4c494e45202743442043617074757265272030303030303030303030303030303030303030300a5350454139a64b9f73cba0e2a22bf149324b455220274344204361707475726527203030303030303030fced707a3dbe9ee5303030300a564f4c554d4520274d6963272030303030303030303030303030303030303030300a545245424c4520274d6963204361707475726520537769746368272030303030303030303030303030303030303030300a4d4f4e49544f520a5350"], 0xbb) close(r8) 9.556755095s ago: executing program 3 (id=1180): open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) r0 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x168) 8.872687233s ago: executing program 9 (id=1182): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0x0, 0xf000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0xeeef0000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0xeeee0000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x1, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0x0, 0x80a0000, 0x0, 0x82, 0x0, 0x0, 0x4, 0xe}, {0x6000}, {0x5000, 0xfffe}, 0x60000010, 0x0, 0x0, 0x0, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) 8.521404123s ago: executing program 3 (id=1184): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x1}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x200008d0) 8.150947228s ago: executing program 1 (id=1185): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x29, 0xdffffffe, 0x0, 0x0, 0x43, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 7.926682892s ago: executing program 9 (id=1186): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x35e, 0x862b01) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0xc, 0x36]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x18, &(0x7f0000000180)="08e8fbb8ebc94c839a1a9e2b9879b0c659e61baa8cfcb836"}) write$char_usb(r0, 0x0, 0x0) 7.194315806s ago: executing program 9 (id=1188): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) io_uring_setup(0x6651, &(0x7f0000000180)={0x0, 0x2cd8, 0x0, 0x3, 0x19c}) r1 = syz_io_uring_setup(0x315d, &(0x7f0000000340)={0x0, 0x80a683, 0x1, 0x4, 0x1b}, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x13}, @ioring_restriction_sqe_op={0x1, 0xbd32dcd6e16288f0}], 0x2) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0x3, 0x9, 0x1, 0x6, 0x100000001]}, &(0x7f0000000140)=0x78) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r2, 0x407, 0xc000) 6.973707549s ago: executing program 3 (id=1189): pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="f2", 0x1}], 0x1, 0x7, 0x400) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x5) 6.583162606s ago: executing program 1 (id=1191): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000007c0)="f1a9258800456ff03013780200000000", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) io_setup(0xff, &(0x7f0000000380)=0x0) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="080b56db9ef0cee821e735d8f2e21898", 0x10}], 0x1, 0x0, 0x0, 0x8010}, 0x20000000) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 5.813711862s ago: executing program 8 (id=1192): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, 0x0, 0x40002120) 5.410696875s ago: executing program 3 (id=1193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x80, {{0x1d, 0x4, 0x2, 0x8, 0x74, 0x65, 0x0, 0x5, 0x4, 0x0, @broadcast, @local, {[@lsrr={0x83, 0x1f, 0x5e, [@dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}, @local]}, @timestamp_prespec={0x44, 0xc, 0x68, 0x3, 0x0, [{@remote, 0x2}]}, @cipso={0x86, 0x13, 0x2, [{0x2, 0x6, "1204bf13"}, {0x7, 0x7, "7281d9dffc"}]}, @timestamp_addr={0x44, 0x1c, 0xf4, 0x1, 0x4, [{@multicast1, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}, {@local, 0x1ff}]}, @rr={0x7, 0x3, 0xd4}]}}}}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x810) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 5.381501026s ago: executing program 9 (id=1194): mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) r0 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x168) 4.91811397s ago: executing program 1 (id=1195): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xa, 0x301, 0x0, 0x0, 0x2) 4.770066932s ago: executing program 8 (id=1196): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x6, 0x81, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 4.381882882s ago: executing program 9 (id=1197): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000003c0)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.801939559s ago: executing program 8 (id=1198): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x35e, 0x862b01) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0xc, 0x36]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x18, &(0x7f0000000180)="08e8fbb8ebc94c839a1a9e2b9879b0c659e61baa8cfcb836"}) write$char_usb(r0, 0x0, 0x0) 3.240954861s ago: executing program 1 (id=1199): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x64086) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5004, 0x80000001, @mcast1, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 3.033284725s ago: executing program 3 (id=1200): syz_emit_ethernet(0xbe, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3.023874812s ago: executing program 8 (id=1201): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x29, 0xdffffffe, 0x0, 0x0, 0x43, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x8, {0x1, 0x2, 0x2200, 0x1ffff, 0x7, 0x8, {0x4, 0x27, 0x7, 0x280000000, 0xa, 0xffff, 0x3, 0x1, 0x4, 0x4000, 0x7f, r2, r3, 0xc8, 0x1a4d06c0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.675024719s ago: executing program 1 (id=1202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x90, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, r3, 0x0, 0x0, 0x200}]) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.432902397s ago: executing program 3 (id=1203): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r3, 0x2000) r4 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x1277, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000008340)={{0x12, 0x1, 0x250, 0x1e, 0x60, 0x42, 0x40, 0x15c2, 0x42, 0xefb8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xd, 0x9, 0xa0, 0x4, [{{0x9, 0x4, 0xb1, 0x4, 0x1, 0x3, 0xc, 0x46, 0x9, [], [{{0x9, 0x5, 0x99, 0x3, 0x400, 0xf8, 0x2, 0x4}}]}}]}}]}}, &(0x7f0000008a80)={0x0, 0x0, 0x0, 0x0}) 1.432473087s ago: executing program 8 (id=1204): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) 476.659517ms ago: executing program 9 (id=1205): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 342.875662ms ago: executing program 8 (id=1206): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40002120) 0s ago: executing program 1 (id=1207): mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) r0 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x168) kernel console output (not intermixed with test programs): ng preconfigured BSSID 50:50:50:50:50:50 [ 568.593311][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.745458][ T5861] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 570.054292][ T5861] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 570.064466][ T5861] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.073254][ T5861] usb 9-1: Product: syz [ 570.085585][ T5861] usb 9-1: Manufacturer: syz [ 570.090514][ T5861] usb 9-1: SerialNumber: syz [ 570.786866][ T5861] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 570.819195][ T5861] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 570.983281][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 571.191496][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 571.264598][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.275469][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 571.288309][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 571.298936][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.566321][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 571.576356][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 571.585160][ T9] usb 1-1: SerialNumber: syz [ 571.707845][ T9] usb 1-1: config 0 descriptor?? [ 571.779237][ T9] hso 1-1:0.0: Can't find BULK IN endpoint [ 572.041420][ T6150] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 572.071352][ T9] usb 1-1: USB disconnect, device number 2 [ 572.367254][ T6150] usb 8-1: config 0 has no interfaces? [ 572.421114][ T6150] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.434367][ T6150] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 572.443926][ T6150] usb 8-1: SerialNumber: syz [ 572.559886][ T5861] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 572.573239][ T5861] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 572.583644][ T5861] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 572.769208][ T6150] usb 8-1: config 0 descriptor?? [ 572.834453][ T5861] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 573.090964][ T6150] usb 8-1: USB disconnect, device number 9 [ 573.208791][ T5861] usb 9-1: USB disconnect, device number 9 [ 576.772762][ T5861] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 577.052574][ T5861] usb 1-1: Using ep0 maxpacket: 16 [ 577.062545][ T6150] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 577.164568][ T5861] usb 1-1: config 0 has no interfaces? [ 577.215275][ T5861] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 577.224920][ T5861] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 577.233476][ T5861] usb 1-1: Manufacturer: syz [ 577.328079][ T5861] usb 1-1: config 0 descriptor?? [ 577.419952][ T6150] usb 5-1: Using ep0 maxpacket: 16 [ 577.503228][ T6150] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.514040][ T6150] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.709376][ T6150] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.719164][ T6150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.727731][ T6150] usb 5-1: Product: syz [ 577.732315][ T6150] usb 5-1: Manufacturer: syz [ 577.737139][ T6150] usb 5-1: SerialNumber: syz [ 578.155835][ T6150] usb 5-1: 0:2 : does not exist [ 578.161030][ T6150] usb 5-1: unit 6 not found! [ 578.430599][ T6150] usb 5-1: USB disconnect, device number 4 [ 578.695518][ T42] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 578.910941][ T7810] udevd[7810]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.249704][ T42] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 579.259359][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.267913][ T42] usb 9-1: Product: syz [ 579.272575][ T42] usb 9-1: Manufacturer: syz [ 579.277388][ T42] usb 9-1: SerialNumber: syz [ 579.290556][ T8307] usb 1-1: USB disconnect, device number 3 [ 579.372264][ T6150] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 579.795483][ T6150] usb 8-1: config 0 has no interfaces? [ 579.814696][ T6150] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 579.824517][ T6150] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 579.838197][ T6150] usb 8-1: SerialNumber: syz [ 579.997186][ T6150] usb 8-1: config 0 descriptor?? [ 580.281268][ T42] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 580.294259][ T42] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 580.315570][ T6150] usb 8-1: USB disconnect, device number 10 [ 581.814177][ T42] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 581.826828][ T42] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 581.837593][ T42] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 581.946208][ T42] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 582.073029][ T42] usb 9-1: USB disconnect, device number 10 [ 582.727982][ T8417] binder_alloc: 8416: binder_alloc_buf, no vma [ 583.562545][ T8307] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 583.811597][ T8307] usb 9-1: config 0 has no interfaces? [ 583.848527][ T8307] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 583.858076][ T8307] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 583.866778][ T8307] usb 9-1: SerialNumber: syz [ 583.942293][ T8307] usb 9-1: config 0 descriptor?? [ 584.226765][ T8307] usb 9-1: USB disconnect, device number 11 [ 584.713466][ T8307] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 584.982666][ T8307] usb 8-1: Using ep0 maxpacket: 16 [ 585.070906][ T8307] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.081868][ T8307] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.203826][ T8307] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 585.214583][ T8307] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.223419][ T8307] usb 8-1: Product: syz [ 585.227825][ T8307] usb 8-1: Manufacturer: syz [ 585.240493][ T8307] usb 8-1: SerialNumber: syz [ 585.689806][ T8307] usb 8-1: 0:2 : does not exist [ 585.695665][ T8307] usb 8-1: unit 6 not found! [ 585.784022][ T8443] dvmrp0: entered allmulticast mode [ 585.892533][ T5861] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 585.916126][ T8307] usb 8-1: USB disconnect, device number 11 [ 586.170844][ T5861] usb 9-1: config 0 has no interfaces? [ 586.215929][ T5861] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 586.228601][ T5861] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 586.237863][ T5861] usb 9-1: SerialNumber: syz [ 586.276353][ T7810] udevd[7810]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.350370][ T5861] usb 9-1: config 0 descriptor?? [ 586.642301][ T5861] usb 9-1: USB disconnect, device number 12 [ 588.119909][ T8462] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 588.207199][ T8468] binder_alloc: 8467: binder_alloc_buf, no vma [ 589.058957][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 589.071048][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 589.081213][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 589.146140][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 589.183994][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 590.222511][ T5861] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 590.504486][ T5861] usb 1-1: config 0 has no interfaces? [ 590.525234][ T5861] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.536487][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 590.546143][ T5861] usb 1-1: SerialNumber: syz [ 590.568203][ T5861] usb 1-1: config 0 descriptor?? [ 590.831170][ T42] usb 1-1: USB disconnect, device number 4 [ 591.279109][ T5811] Bluetooth: hci4: command tx timeout [ 591.575364][ T8471] chnl_net:caif_netlink_parms(): no params data found [ 593.319427][ T4737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.357280][ T5811] Bluetooth: hci4: command tx timeout [ 593.433393][ T5861] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 593.669997][ T8307] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 593.710222][ T4737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.772606][ T5861] usb 5-1: config 0 has no interfaces? [ 593.804968][ T5861] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.814721][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 593.823334][ T5861] usb 5-1: SerialNumber: syz [ 594.033098][ T8307] usb 9-1: Using ep0 maxpacket: 32 [ 594.109707][ T8307] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.113937][ T4737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.121744][ T8307] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.194111][ T5861] usb 5-1: config 0 descriptor?? [ 594.388298][ T8307] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 594.398161][ T8307] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 594.407093][ T8307] usb 9-1: Product: syz [ 594.411477][ T8307] usb 9-1: Manufacturer: syz [ 594.514099][ T42] usb 5-1: USB disconnect, device number 5 [ 594.543307][ T8307] hub 9-1:4.0: USB hub found [ 594.798749][ T4737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.873065][ T8307] hub 9-1:4.0: 2 ports detected [ 594.924090][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.932281][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.940594][ T8471] bridge_slave_0: entered allmulticast mode [ 594.957524][ T8471] bridge_slave_0: entered promiscuous mode [ 595.124205][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.132691][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.141175][ T8471] bridge_slave_1: entered allmulticast mode [ 595.155140][ T8471] bridge_slave_1: entered promiscuous mode [ 595.437337][ T5811] Bluetooth: hci4: command tx timeout [ 596.287272][ T8307] hub 9-1:4.0: activate --> -90 [ 596.357098][ T8521] binder_alloc: 8520: binder_alloc_buf, no vma [ 596.522513][ T8307] hub 9-1:4.0: hub_ext_port_status failed (err = 0) [ 596.641474][ T8471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.653961][ T4737] bridge_slave_1: left allmulticast mode [ 596.659927][ T4737] bridge_slave_1: left promiscuous mode [ 596.667091][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.767085][ T5861] usb 9-1: USB disconnect, device number 13 [ 596.916123][ T4737] bridge_slave_0: left allmulticast mode [ 596.922590][ T4737] bridge_slave_0: left promiscuous mode [ 596.929392][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.532957][ T5811] Bluetooth: hci4: command tx timeout [ 597.784264][ T4737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.854212][ T4737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.941314][ T4737] bond0 (unregistering): Released all slaves [ 598.145631][ T8471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.846726][ T8535] bond_slave_0: entered promiscuous mode [ 598.852904][ T8535] bond_slave_1: entered promiscuous mode [ 598.858885][ T8535] netdevsim netdevsim8 netdevsim3: entered promiscuous mode [ 598.902672][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.625'. [ 598.911892][ T8537] bond_slave_0: left promiscuous mode [ 598.917778][ T8537] bond_slave_1: left promiscuous mode [ 598.923741][ T8537] netdevsim netdevsim8 netdevsim3: left promiscuous mode [ 598.979274][ T8471] team0: Port device team_slave_0 added [ 599.101669][ T8471] team0: Port device team_slave_1 added [ 599.469889][ T4737] hsr_slave_0: left promiscuous mode [ 599.534230][ T4737] hsr_slave_1: left promiscuous mode [ 599.543093][ T4737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.551739][ T4737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.694968][ T4737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.703935][ T4737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.867090][ T4737] veth1_macvtap: left promiscuous mode [ 599.873444][ T4737] veth0_macvtap: left promiscuous mode [ 599.881833][ T4737] veth1_vlan: left promiscuous mode [ 599.887741][ T4737] veth0_vlan: left promiscuous mode [ 601.732856][ T4737] team0 (unregistering): Port device team_slave_1 removed [ 601.854639][ T4737] team0 (unregistering): Port device team_slave_0 removed [ 601.962864][ T6150] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 602.312786][ T6150] usb 9-1: config 0 has no interfaces? [ 602.398610][ T6150] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.408290][ T6150] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 602.417470][ T6150] usb 9-1: SerialNumber: syz [ 602.480197][ T6150] usb 9-1: config 0 descriptor?? [ 602.672967][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.680344][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.707963][ T8471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.856636][ T8307] usb 9-1: USB disconnect, device number 14 [ 602.891424][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.900036][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.927794][ T8471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.457924][ T8574] netlink: 'syz.0.635': attribute type 8 has an invalid length. [ 603.474831][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 603.556077][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.570704][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 603.694562][ T8471] hsr_slave_0: entered promiscuous mode [ 603.705701][ T8471] hsr_slave_1: entered promiscuous mode [ 603.715104][ T8471] debugfs: 'hsr0' already exists in 'hsr' [ 603.721094][ T8471] Cannot create hsr debugfs directory [ 603.923871][ T8579] bond_slave_0: entered promiscuous mode [ 603.930113][ T8579] bond_slave_1: entered promiscuous mode [ 604.267938][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 604.277708][ T8579] bond_slave_0: left promiscuous mode [ 604.283712][ T8579] bond_slave_1: left promiscuous mode [ 606.750332][ T8623] binder: BINDER_SET_CONTEXT_MGR already set [ 606.757491][ T8623] binder: 8622:8623 ioctl 4018620d 200000004a80 returned -16 [ 607.172615][ T8471] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 607.293280][ T8471] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 607.390320][ T8471] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 607.525999][ T8471] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 608.594483][ T11] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 608.823244][ T11] usb 8-1: config 0 has no interfaces? [ 608.855096][ T11] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.864889][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 608.873409][ T11] usb 8-1: SerialNumber: syz [ 608.968972][ T11] usb 8-1: config 0 descriptor?? [ 609.278738][ T11] usb 8-1: USB disconnect, device number 12 [ 609.580105][ T8645] netlink: 'syz.8.648': attribute type 8 has an invalid length. [ 609.588339][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.8.648'. [ 609.590996][ T8471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.931262][ T8471] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.211592][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.219418][ T4234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.358841][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.366731][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.098465][ T8655] bond_slave_0: entered promiscuous mode [ 611.104633][ T8655] bond_slave_1: entered promiscuous mode [ 611.249034][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.650'. [ 611.258494][ T8657] bond_slave_0: left promiscuous mode [ 611.264317][ T8657] bond_slave_1: left promiscuous mode [ 612.943697][ T8668] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 613.877677][ T8471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.322825][ T42] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 616.646213][ T42] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 616.655588][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.664565][ T42] usb 9-1: Product: syz [ 616.670853][ T42] usb 9-1: Manufacturer: syz [ 616.676426][ T42] usb 9-1: SerialNumber: syz [ 617.412342][ T42] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 617.424890][ T42] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 618.023791][ T8471] veth0_vlan: entered promiscuous mode [ 618.221297][ T8471] veth1_vlan: entered promiscuous mode [ 618.622730][ T42] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 618.635292][ T42] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 618.646135][ T42] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 618.806669][ T42] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 619.076132][ T8471] veth0_macvtap: entered promiscuous mode [ 619.198970][ T8471] veth1_macvtap: entered promiscuous mode [ 619.594228][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.806663][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.980584][ T5092] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.089765][ T5092] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.189088][ T5092] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.286514][ T4105] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.356401][ T42] usb 9-1: USB disconnect, device number 15 [ 620.473557][ T8708] syzkaller1: entered promiscuous mode [ 620.479234][ T8708] syzkaller1: entered allmulticast mode [ 620.954274][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 621.101220][ T8719] netlink: 'syz.8.658': attribute type 8 has an invalid length. [ 621.110529][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.8.658'. [ 622.683614][ T11] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 623.029235][ T11] usb 5-1: config 0 has no interfaces? [ 623.109853][ T11] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 623.126552][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 623.137400][ T11] usb 5-1: SerialNumber: syz [ 623.275571][ T11] usb 5-1: config 0 descriptor?? [ 623.544531][ T6150] usb 5-1: USB disconnect, device number 6 [ 624.276255][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 624.284482][ T8745] syzkaller0: entered promiscuous mode [ 624.301132][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 624.343796][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 624.394376][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 624.426090][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 626.552526][ T5811] Bluetooth: hci1: command tx timeout [ 626.960934][ T8747] chnl_net:caif_netlink_parms(): no params data found [ 628.632744][ T5811] Bluetooth: hci1: command tx timeout [ 628.900917][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.133755][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.547473][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.910273][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.052835][ T8747] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.060633][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.068884][ T8747] bridge_slave_0: entered allmulticast mode [ 630.079031][ T8747] bridge_slave_0: entered promiscuous mode [ 630.281716][ T8747] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.292664][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.300610][ T8747] bridge_slave_1: entered allmulticast mode [ 630.310870][ T8747] bridge_slave_1: entered promiscuous mode [ 630.628858][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 630.638940][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 630.651756][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 630.712617][ T5102] Bluetooth: hci1: command tx timeout [ 630.734439][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 630.759899][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 631.180453][ T8747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.524361][ T8747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.564383][ T35] bridge_slave_1: left allmulticast mode [ 631.570469][ T35] bridge_slave_1: left promiscuous mode [ 631.577514][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.664103][ T35] bridge_slave_0: left allmulticast mode [ 631.670191][ T35] bridge_slave_0: left promiscuous mode [ 631.677365][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.678309][ T11] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 632.000561][ T11] usb 9-1: config 0 has no interfaces? [ 632.054348][ T11] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 632.064470][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 632.073055][ T11] usb 9-1: SerialNumber: syz [ 632.185422][ T11] usb 9-1: config 0 descriptor?? [ 632.490787][ T42] usb 9-1: USB disconnect, device number 16 [ 632.638883][ T35] dvmrp0 (unregistering): left allmulticast mode [ 632.793490][ T5804] Bluetooth: hci0: command tx timeout [ 632.794531][ T5811] Bluetooth: hci1: command tx timeout [ 632.863930][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.933103][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.980950][ T35] bond0 (unregistering): Released all slaves [ 633.623813][ T8747] team0: Port device team_slave_0 added [ 633.946739][ T8747] team0: Port device team_slave_1 added [ 633.960052][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.968447][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.562852][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.566935][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.570986][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.586595][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.615241][ T8747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.872768][ T5811] Bluetooth: hci0: command tx timeout [ 634.878117][ T35] hsr_slave_0: left promiscuous mode [ 634.936841][ T35] hsr_slave_1: left promiscuous mode [ 634.947430][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.955526][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.025266][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.033409][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.117802][ T35] veth1_macvtap: left promiscuous mode [ 635.124466][ T35] veth0_macvtap: left promiscuous mode [ 635.130493][ T35] veth1_vlan: left promiscuous mode [ 635.136344][ T35] veth0_vlan: left promiscuous mode [ 635.867766][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 636.067229][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.078333][ T42] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 636.088529][ T42] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 636.098171][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.159308][ T42] usb 6-1: config 0 descriptor?? [ 636.427396][ T42] usb 6-1: USB disconnect, device number 2 [ 636.514551][ T35] team0 (unregistering): Port device team_slave_1 removed [ 636.599763][ T35] team0 (unregistering): Port device team_slave_0 removed [ 636.954078][ T5811] Bluetooth: hci0: command tx timeout [ 636.982643][ T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 637.119376][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.127010][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.155908][ T8747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.249855][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.265343][ T42] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 637.275515][ T42] usb 6-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 637.285024][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.467548][ T42] usb 6-1: config 0 descriptor?? [ 638.215920][ T8747] hsr_slave_0: entered promiscuous mode [ 638.239571][ T8747] hsr_slave_1: entered promiscuous mode [ 638.251076][ T8747] debugfs: 'hsr0' already exists in 'hsr' [ 638.257407][ T8747] Cannot create hsr debugfs directory [ 638.273405][ T8795] chnl_net:caif_netlink_parms(): no params data found [ 639.032757][ T5811] Bluetooth: hci0: command tx timeout [ 639.272944][ T11] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 639.495435][ T11] usb 5-1: config 0 has no interfaces? [ 639.565521][ T11] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.575356][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 639.583932][ T11] usb 5-1: SerialNumber: syz [ 639.645350][ T11] usb 5-1: config 0 descriptor?? [ 639.783349][ T11] usb 6-1: USB disconnect, device number 3 [ 639.920746][ T42] usb 5-1: USB disconnect, device number 7 [ 640.574753][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.586232][ T8795] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.596625][ T8795] bridge_slave_0: entered allmulticast mode [ 640.612499][ T8795] bridge_slave_0: entered promiscuous mode [ 640.685105][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.694052][ T8795] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.702610][ T8795] bridge_slave_1: entered allmulticast mode [ 640.712861][ T8795] bridge_slave_1: entered promiscuous mode [ 641.387139][ T8795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.412763][ T8795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.435605][ T8747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 641.890243][ T8747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 642.708712][ T8747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 643.330698][ T8747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 643.485444][ T8795] team0: Port device team_slave_0 added [ 643.541116][ T8795] team0: Port device team_slave_1 added [ 643.933455][ T8795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.940757][ T8795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.968107][ T8795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.147228][ T8795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.156466][ T8795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.184884][ T8795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.965585][ T8795] hsr_slave_0: entered promiscuous mode [ 644.976518][ T8795] hsr_slave_1: entered promiscuous mode [ 644.985705][ T8795] debugfs: 'hsr0' already exists in 'hsr' [ 644.991655][ T8795] Cannot create hsr debugfs directory [ 645.024400][ T8747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.505046][ T8747] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.615571][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.623361][ T4401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.757198][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.765092][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.229059][ T8920] binder: BINDER_SET_CONTEXT_MGR already set [ 646.236362][ T8920] binder: 8918:8920 ioctl 4018620d 200000004a80 returned -16 [ 646.693487][ T11] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 646.699844][ T8795] bond0: (slave netdevsim3): Releasing backup interface [ 646.725738][ T8795] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.866555][ T8795] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.945677][ T11] usb 6-1: config 0 has no interfaces? [ 646.972727][ T11] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 646.991088][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 647.002414][ T11] usb 6-1: SerialNumber: syz [ 647.145381][ T11] usb 6-1: config 0 descriptor?? [ 647.194333][ T8795] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.411724][ T8795] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.671447][ T11] usb 6-1: USB disconnect, device number 4 [ 648.736990][ T8795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 648.897226][ T8795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 649.015942][ T8795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 649.194408][ T8795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 649.715595][ T8747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.344459][ T8747] veth0_vlan: entered promiscuous mode [ 650.509998][ T8943] netlink: 16 bytes leftover after parsing attributes in process `syz.8.699'. [ 650.532920][ T8943] bond0: entered promiscuous mode [ 650.538344][ T8943] bond_slave_0: entered promiscuous mode [ 650.545572][ T8943] bond_slave_1: entered promiscuous mode [ 650.552908][ T8943] netdevsim netdevsim8 netdevsim3: entered promiscuous mode [ 650.584016][ T8943] gretap0: entered promiscuous mode [ 650.595618][ T8943] hsr1: entered promiscuous mode [ 650.738409][ T8747] veth1_vlan: entered promiscuous mode [ 651.002253][ T8795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.227479][ T8795] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.284903][ T8747] veth0_macvtap: entered promiscuous mode [ 651.406690][ T8747] veth1_macvtap: entered promiscuous mode [ 651.480833][ T8814] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.490206][ T8814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.756533][ T8814] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.764352][ T8814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.875498][ T8747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.198783][ T8747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.692443][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.763319][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.846596][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.901739][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.117276][ T8795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.187221][ T8987] netlink: 16 bytes leftover after parsing attributes in process `syz.5.710'. [ 657.214833][ T8987] bond0: entered promiscuous mode [ 657.222929][ T8987] bond_slave_0: entered promiscuous mode [ 657.230619][ T8987] bond_slave_1: entered promiscuous mode [ 657.247519][ T8987] gretap0: entered promiscuous mode [ 657.259748][ T8987] debugfs: 'hsr1' already exists in 'hsr' [ 657.265907][ T8987] Cannot create hsr debugfs directory [ 657.271485][ T8987] hsr1: entered promiscuous mode [ 657.758173][ T794] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 658.390880][ T8795] veth0_vlan: entered promiscuous mode [ 658.785549][ T8795] veth1_vlan: entered promiscuous mode [ 659.389252][ T794] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 659.400113][ T794] usb 9-1: config 0 interface 0 has no altsetting 0 [ 660.080330][ T794] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 660.080521][ T794] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 660.080660][ T794] usb 9-1: Product: syz [ 660.080769][ T794] usb 9-1: Manufacturer: syz [ 660.080939][ T794] usb 9-1: SerialNumber: syz [ 660.323563][ T794] usb 9-1: config 0 descriptor?? [ 660.397784][ T8795] veth0_macvtap: entered promiscuous mode [ 660.626511][ T794] usb 9-1: selecting invalid altsetting 0 [ 660.807080][ T8795] veth1_macvtap: entered promiscuous mode [ 661.837054][ T8795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.496480][ T8795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.231660][ T4234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.452729][ T42] usb 9-1: USB disconnect, device number 17 [ 663.542432][ T4234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.721426][ T4234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.817620][ T5092] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.874015][ T9012] netlink: 'syz.4.713': attribute type 10 has an invalid length. [ 664.975139][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.982149][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 665.056641][ T9012] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 669.572615][ T42] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 669.863833][ T42] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 669.874592][ T42] usb 9-1: config 0 interface 0 has no altsetting 0 [ 670.211235][ T42] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 670.221145][ T42] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 670.231653][ T42] usb 9-1: Product: syz [ 670.236761][ T42] usb 9-1: Manufacturer: syz [ 670.241580][ T42] usb 9-1: SerialNumber: syz [ 670.903969][ T9066] netlink: 'syz.5.724': attribute type 8 has an invalid length. [ 670.912541][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.724'. [ 670.915939][ T42] usb 9-1: config 0 descriptor?? [ 671.373891][ T8814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.383118][ T8814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.758285][ T42] usb 9-1: can't set config #0, error -71 [ 671.873856][ T42] usb 9-1: USB disconnect, device number 18 [ 672.013292][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.021371][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.994041][ T9085] bond_slave_0: entered promiscuous mode [ 673.000187][ T9085] bond_slave_1: entered promiscuous mode [ 673.066203][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'. [ 673.075538][ T9085] bond_slave_0: left promiscuous mode [ 673.081211][ T9085] bond_slave_1: left promiscuous mode [ 675.584541][ T9120] netlink: 'syz.4.735': attribute type 8 has an invalid length. [ 675.592695][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 679.175218][ T8307] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 679.993722][ T8307] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 680.004021][ T8307] usb 9-1: config 0 interface 0 has no altsetting 0 [ 680.409136][ T8307] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 680.420130][ T8307] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 680.428880][ T8307] usb 9-1: Product: syz [ 680.433658][ T8307] usb 9-1: Manufacturer: syz [ 680.438480][ T8307] usb 9-1: SerialNumber: syz [ 680.786656][ T8307] usb 9-1: config 0 descriptor?? [ 681.096252][ T8307] usb 9-1: selecting invalid altsetting 0 [ 682.976139][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.984605][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.463693][ T8307] usb 9-1: USB disconnect, device number 19 [ 684.105360][ T9136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.739'. [ 684.131870][ T9136] bond0: entered promiscuous mode [ 684.137414][ T9136] bond_slave_0: entered promiscuous mode [ 684.144881][ T9136] bond_slave_1: entered promiscuous mode [ 684.173112][ T9136] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 684.194125][ T9136] geneve0: entered promiscuous mode [ 684.205784][ T9136] debugfs: 'hsr1' already exists in 'hsr' [ 684.212362][ T9136] Cannot create hsr debugfs directory [ 684.218036][ T9136] hsr1: entered promiscuous mode [ 684.340146][ T8814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.348893][ T8814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.725103][ T6140] udevd[6140]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 685.191869][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.8.741'. [ 685.742421][ T8307] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 685.752599][ T42] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 685.933377][ T8307] usb 5-1: config 0 has no interfaces? [ 686.036185][ T8307] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 686.046036][ T8307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 686.054551][ T8307] usb 5-1: SerialNumber: syz [ 686.124299][ T8307] usb 5-1: config 0 descriptor?? [ 686.173262][ T42] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 686.183242][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.191686][ T42] usb 2-1: Product: syz [ 686.196369][ T42] usb 2-1: Manufacturer: syz [ 686.204955][ T42] usb 2-1: SerialNumber: syz [ 686.352815][ T6150] usb 5-1: USB disconnect, device number 8 [ 686.896976][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 686.909716][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 687.973317][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 687.986125][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 687.997975][ T42] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 688.108850][ T9163] netlink: 'syz.4.746': attribute type 8 has an invalid length. [ 688.124221][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 688.175951][ T42] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 690.175362][ T8307] usb 2-1: USB disconnect, device number 18 [ 691.565438][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.754'. [ 692.109550][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 692.120503][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 692.130462][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 692.224597][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 692.250380][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 694.414285][ T5811] Bluetooth: hci2: command tx timeout [ 695.629694][ T11] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 696.075427][ T9188] chnl_net:caif_netlink_parms(): no params data found [ 696.361704][ T11] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 696.371680][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.380036][ T11] usb 2-1: Product: syz [ 696.385192][ T11] usb 2-1: Manufacturer: syz [ 696.390052][ T11] usb 2-1: SerialNumber: syz [ 696.492489][ T5811] Bluetooth: hci2: command tx timeout [ 697.125978][ T11] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 697.138431][ T11] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 698.370111][ T11] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 698.383344][ T11] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 698.407731][ T11] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 698.553094][ T5811] Bluetooth: hci2: command tx timeout [ 698.655626][ T11] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 699.662242][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.669845][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.678088][ T9188] bridge_slave_0: entered allmulticast mode [ 699.688372][ T9188] bridge_slave_0: entered promiscuous mode [ 699.967749][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.975694][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.984390][ T9188] bridge_slave_1: entered allmulticast mode [ 699.994861][ T9188] bridge_slave_1: entered promiscuous mode [ 700.062582][ T11] usb 2-1: USB disconnect, device number 19 [ 700.632427][ T5811] Bluetooth: hci2: command tx timeout [ 700.771046][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.767'. [ 701.015902][ T9188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.121851][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.209000][ T9188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.377710][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.817373][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.130851][ T9188] team0: Port device team_slave_0 added [ 702.194337][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.303897][ T9188] team0: Port device team_slave_1 added [ 703.650341][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.657785][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.684810][ T9188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.040220][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.047563][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.074247][ T9188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.353603][ T9272] fuse: Bad value for 'fd' [ 704.475094][ T35] bridge_slave_1: left allmulticast mode [ 704.481210][ T35] bridge_slave_1: left promiscuous mode [ 704.488102][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.674933][ T35] bridge_slave_0: left allmulticast mode [ 704.680996][ T35] bridge_slave_0: left promiscuous mode [ 704.687866][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.524167][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.636849][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.660697][ T35] bond0 (unregistering): Released all slaves [ 706.115634][ T9279] binder: 9275:9279 ioctl c0306201 200000000180 returned -14 [ 706.438439][ T9188] hsr_slave_0: entered promiscuous mode [ 706.449747][ T9188] hsr_slave_1: entered promiscuous mode [ 706.459377][ T9188] debugfs: 'hsr0' already exists in 'hsr' [ 706.465940][ T9188] Cannot create hsr debugfs directory [ 707.412467][ T6150] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 707.455637][ T35] hsr_slave_0: left promiscuous mode [ 707.520518][ T35] hsr_slave_1: left promiscuous mode [ 707.530860][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.538662][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.595290][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.613789][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.697156][ T35] veth1_macvtap: left promiscuous mode [ 707.716234][ T35] veth0_macvtap: left promiscuous mode [ 707.722749][ T35] veth1_vlan: left promiscuous mode [ 707.729328][ T35] veth0_vlan: left promiscuous mode [ 707.833376][ T6150] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 707.843097][ T6150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.851384][ T6150] usb 2-1: Product: syz [ 707.856438][ T6150] usb 2-1: Manufacturer: syz [ 707.861329][ T6150] usb 2-1: SerialNumber: syz [ 708.584974][ T9294] fuse: Unknown parameter 'grou00000000000000000000' [ 708.890287][ T6150] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 708.904346][ T6150] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 709.129174][ T42] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 709.499031][ T35] team0 (unregistering): Port device team_slave_1 removed [ 709.518484][ T42] usb 6-1: config 0 has no interfaces? [ 709.632468][ T42] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 709.642228][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.653441][ T42] usb 6-1: Product: syz [ 709.657865][ T42] usb 6-1: Manufacturer: syz [ 709.664030][ T42] usb 6-1: SerialNumber: syz [ 709.817057][ T42] usb 6-1: config 0 descriptor?? [ 709.845911][ T35] team0 (unregistering): Port device team_slave_0 removed [ 709.994231][ T6150] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 710.011327][ T6150] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 710.282971][ T6150] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 710.334537][ T6150] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 711.121193][ T9298] ip6gre1: entered allmulticast mode [ 712.765653][ T6150] usb 2-1: USB disconnect, device number 20 [ 712.953709][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 712.971726][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 712.981824][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 713.002637][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 713.020819][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 713.127028][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 714.701400][ T6150] usb 6-1: USB disconnect, device number 5 [ 715.112982][ T5102] Bluetooth: hci1: command tx timeout [ 715.859625][ T9188] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 715.934124][ T9188] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 716.042776][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 716.160672][ T9188] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 716.247691][ T9188] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 717.201714][ T5102] Bluetooth: hci1: command tx timeout [ 718.184231][ T6150] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 718.885544][ T6150] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 718.895564][ T6150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.904169][ T6150] usb 2-1: Product: syz [ 718.908547][ T6150] usb 2-1: Manufacturer: syz [ 718.913674][ T6150] usb 2-1: SerialNumber: syz [ 719.272869][ T5102] Bluetooth: hci1: command tx timeout [ 719.718828][ T6150] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 719.732518][ T6150] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 720.421539][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.429271][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.437843][ T9310] bridge_slave_0: entered allmulticast mode [ 720.448224][ T9310] bridge_slave_0: entered promiscuous mode [ 720.513415][ T9361] netlink: 20 bytes leftover after parsing attributes in process `syz.5.796'. [ 720.536642][ T9188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.663889][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.671584][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.680526][ T9310] bridge_slave_1: entered allmulticast mode [ 720.766815][ T9310] bridge_slave_1: entered promiscuous mode [ 720.874425][ T6150] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 720.887032][ T6150] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 720.898127][ T6150] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 720.939108][ T9188] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.978680][ T6150] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 721.362892][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.375303][ T5102] Bluetooth: hci1: command tx timeout [ 721.399082][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.406827][ T5092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.448798][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.709380][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.717223][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.816183][ T9310] team0: Port device team_slave_0 added [ 721.950893][ T9310] team0: Port device team_slave_1 added [ 722.455931][ T24] usb 2-1: USB disconnect, device number 21 [ 722.529106][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.536588][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.566470][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.690642][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.699323][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.726508][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.233220][ T9310] hsr_slave_0: entered promiscuous mode [ 724.244572][ T9310] hsr_slave_1: entered promiscuous mode [ 724.255663][ T9310] debugfs: 'hsr0' already exists in 'hsr' [ 724.261605][ T9310] Cannot create hsr debugfs directory [ 725.270935][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.8.805'. [ 725.789316][ T9188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.423545][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.430369][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.667333][ T6150] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 726.944969][ T6150] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 726.958288][ T6150] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.967704][ T6150] usb 6-1: Product: syz [ 726.972367][ T6150] usb 6-1: Manufacturer: syz [ 726.977199][ T6150] usb 6-1: SerialNumber: syz [ 727.507973][ T9310] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 727.628125][ T6150] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 727.641271][ T6150] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 727.667015][ T9310] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 727.765425][ T9310] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 727.868601][ T9310] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 728.747928][ T6150] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 728.761112][ T6150] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 728.771510][ T6150] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 728.884746][ T6150] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 729.520022][ T9188] veth0_vlan: entered promiscuous mode [ 729.531040][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 729.576643][ T9188] veth1_vlan: entered promiscuous mode [ 730.037881][ T9188] veth0_macvtap: entered promiscuous mode [ 730.193430][ T5861] usb 6-1: USB disconnect, device number 6 [ 730.561821][ T9188] veth1_macvtap: entered promiscuous mode [ 730.704417][ T9188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.827121][ T9188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.001131][ T3899] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.091250][ T3899] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.210806][ T3899] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.301419][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.337577][ T3899] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.482251][ T6150] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 731.605500][ T9310] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.677471][ T6150] usb 6-1: Using ep0 maxpacket: 16 [ 731.709308][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.717037][ T3656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.760883][ T6150] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 731.772249][ T6150] usb 6-1: config 0 has no interface number 0 [ 731.778575][ T6150] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 731.789906][ T6150] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 731.800456][ T6150] usb 6-1: config 0 interface 41 has no altsetting 0 [ 731.901748][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.909412][ T3656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.969800][ T6150] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 731.982938][ T6150] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.991196][ T6150] usb 6-1: Product: syz [ 731.993300][ T11] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 731.998221][ T6150] usb 6-1: Manufacturer: syz [ 732.008223][ T6150] usb 6-1: SerialNumber: syz [ 732.220617][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 732.270079][ T6150] usb 6-1: config 0 descriptor?? [ 732.289299][ T9439] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 732.321165][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.332774][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.343341][ T11] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 732.352820][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.413768][ T9439] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 732.481149][ T11] usb 2-1: config 0 descriptor?? [ 732.695869][ T9439] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 732.807579][ T9439] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 733.089314][ T11] usbhid 2-1:0.0: can't add hid device: -71 [ 733.108718][ T11] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 733.183320][ T11] usb 2-1: USB disconnect, device number 22 [ 733.319210][ T6150] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 734.078073][ T6150] dm9601 6-1:0.41 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 734.106732][ T6150] dm9601 6-1:0.41 eth1: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, ce:bf:bd:24:7f:8a [ 734.364108][ T6150] usb 6-1: USB disconnect, device number 7 [ 734.373768][ T6150] dm9601 6-1:0.41 eth1: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 735.250554][ T794] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 735.441302][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.823'. [ 735.451586][ T9476] netlink: 60 bytes leftover after parsing attributes in process `syz.5.823'. [ 735.508553][ T794] usb 9-1: Using ep0 maxpacket: 16 [ 735.604526][ T794] usb 9-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 735.614382][ T794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.622794][ T794] usb 9-1: Product: syz [ 735.627189][ T794] usb 9-1: Manufacturer: syz [ 735.632365][ T794] usb 9-1: SerialNumber: syz [ 735.730868][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.796498][ T794] usb 9-1: config 0 descriptor?? [ 735.861270][ T794] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 736.035062][ T794] gp8psk: usb in 128 operation failed. [ 736.093088][ T794] gp8psk: usb in 137 operation failed. [ 736.098795][ T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 736.205216][ T794] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 736.214982][ T794] usb 9-1: media controller created [ 736.347527][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 736.460749][ T9474] input: syz0 as /devices/virtual/input/input6 [ 737.218286][ T794] gp8psk_fe: Frontend revision 1 attached [ 737.224639][ T794] usb 9-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 737.233448][ T794] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 738.432781][ T794] gp8psk: usb in 137 operation failed. [ 738.438476][ T794] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 738.449787][ T794] gp8psk: found Genpix USB device pID = 201 (hex) [ 738.486080][ T794] usb 9-1: USB disconnect, device number 20 [ 739.004069][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.826'. [ 739.995988][ T794] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 740.075971][ T8307] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 740.082870][ T8307] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 740.158447][ T5102] Bluetooth: hci5: command 0x0406 tx timeout [ 740.232489][ T6150] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 740.508812][ T6150] usb 6-1: Using ep0 maxpacket: 32 [ 740.579768][ T6150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.591174][ T6150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.601643][ T6150] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 740.611129][ T6150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.774681][ T6150] usb 6-1: config 0 descriptor?? [ 741.251048][ T6150] usbhid 6-1:0.0: can't add hid device: -71 [ 741.258083][ T6150] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 741.307122][ T9310] veth0_vlan: entered promiscuous mode [ 741.318458][ T6150] usb 6-1: USB disconnect, device number 8 [ 741.499065][ T9310] veth1_vlan: entered promiscuous mode [ 741.919526][ T9310] veth0_macvtap: entered promiscuous mode [ 742.011810][ T9310] veth1_macvtap: entered promiscuous mode [ 742.236227][ T9527] binder: 9526:9527 ioctl c0306201 200000000180 returned -14 [ 742.303950][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.419718][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.475605][ T5102] Bluetooth: hci4: command 0x0406 tx timeout [ 742.492698][ T8307] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 742.499069][ T8307] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 742.659430][ T3932] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.738058][ T3932] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.793242][ T3656] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.888626][ T9226] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.935388][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.833'. [ 742.945391][ T9541] netlink: 60 bytes leftover after parsing attributes in process `syz.5.833'. [ 744.572345][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout [ 744.762575][ T8307] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 744.768896][ T8307] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 746.060424][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.837'. [ 747.474309][ T5102] Bluetooth: hci2: command 0x0c1a tx timeout [ 747.480820][ T8307] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 747.487417][ T8307] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 749.592587][ T5102] Bluetooth: hci1: command 0x0c1a tx timeout [ 749.599078][ T8307] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 749.605760][ T8307] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 750.197879][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.207471][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.082672][ T794] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 751.312445][ T794] usb 9-1: Using ep0 maxpacket: 16 [ 751.353017][ T9605] binder: 9601:9605 ioctl c0306201 200000000180 returned -14 [ 751.386355][ T794] usb 9-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 751.397204][ T794] usb 9-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 751.408786][ T794] usb 9-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 751.586995][ T794] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 751.596926][ T794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 751.605394][ T794] usb 9-1: SerialNumber: syz [ 751.720385][ T794] cdc_acm 9-1:253.0: Zero length descriptor references [ 751.728051][ T794] cdc_acm 9-1:253.0: probe with driver cdc_acm failed with error -22 [ 751.754225][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 751.763802][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 751.813946][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 751.948599][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 752.006277][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 752.107202][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.115470][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.235870][ T11] usb 9-1: USB disconnect, device number 21 [ 752.296854][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.305079][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.284309][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 753.293516][ T9619] netlink: 60 bytes leftover after parsing attributes in process `syz.1.842'. [ 754.072485][ T5102] Bluetooth: hci3: command tx timeout [ 755.653047][ T9611] chnl_net:caif_netlink_parms(): no params data found [ 756.166637][ T5102] Bluetooth: hci3: command tx timeout [ 756.876701][ T9063] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.969277][ T9639] binder: 9635:9639 ioctl c0306201 200000000180 returned -14 [ 757.078701][ T9063] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.354801][ T9063] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.475406][ T9654] syzkaller0: entered promiscuous mode [ 757.481321][ T9654] syzkaller0: entered allmulticast mode [ 757.520264][ T9652] tipc: Started in network mode [ 757.526424][ T9652] tipc: Node identity e2f5b810ce55, cluster identity 4711 [ 757.535724][ T9652] tipc: Enabled bearer , priority 0 [ 757.610586][ T9063] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.823694][ T9649] tipc: Resetting bearer [ 757.885416][ T9649] tipc: Disabling bearer [ 758.273183][ T5102] Bluetooth: hci3: command tx timeout [ 758.770259][ T9063] bridge_slave_1: left allmulticast mode [ 758.778200][ T9063] bridge_slave_1: left promiscuous mode [ 758.785192][ T9063] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.863619][ T9063] bridge_slave_0: left allmulticast mode [ 758.869766][ T9063] bridge_slave_0: left promiscuous mode [ 758.879365][ T9063] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.412557][ T794] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 759.439856][ T9063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.466502][ T9063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.488203][ T9063] bond0 (unregistering): Released all slaves [ 759.700172][ T9611] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.707979][ T9611] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.716248][ T9611] bridge_slave_0: entered allmulticast mode [ 759.728415][ T9611] bridge_slave_0: entered promiscuous mode [ 759.752469][ T9611] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.760068][ T9611] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.768391][ T9611] bridge_slave_1: entered allmulticast mode [ 759.778562][ T9611] bridge_slave_1: entered promiscuous mode [ 759.887509][ T794] usb 2-1: unable to get BOS descriptor or descriptor too short [ 759.960925][ T794] usb 2-1: config 13 has an invalid interface number: 177 but max is 0 [ 759.969649][ T794] usb 2-1: config 13 has no interface number 0 [ 759.976309][ T794] usb 2-1: config 13 interface 177 altsetting 4 has an endpoint descriptor with address 0x99, changing to 0x89 [ 759.989022][ T794] usb 2-1: config 13 interface 177 altsetting 4 endpoint 0x89 has an invalid bInterval 248, changing to 11 [ 760.001305][ T794] usb 2-1: config 13 interface 177 has no altsetting 0 [ 760.044093][ T794] usb 2-1: New USB device found, idVendor=15c2, idProduct=0042, bcdDevice=ef.b8 [ 760.055086][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.064677][ T794] usb 2-1: Product: syz [ 760.069161][ T794] usb 2-1: Manufacturer: syz [ 760.075325][ T794] usb 2-1: SerialNumber: syz [ 760.316469][ T5102] Bluetooth: hci3: command tx timeout [ 760.486563][ T9611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.880736][ T9611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.280619][ T9063] hsr_slave_0: left promiscuous mode [ 761.320229][ T9063] hsr_slave_1: left promiscuous mode [ 761.329396][ T9063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.338191][ T9063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.401486][ T9063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.409896][ T9063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.479735][ T9063] veth1_macvtap: left promiscuous mode [ 761.485832][ T9063] veth0_macvtap: left promiscuous mode [ 761.492772][ T9063] veth1_vlan: left promiscuous mode [ 761.498545][ T9063] veth0_vlan: left promiscuous mode [ 761.959094][ T794] imon 2-1:13.177: unable to register, err -19 [ 762.243916][ T794] usb 2-1: USB disconnect, device number 23 [ 763.000072][ T9063] team0 (unregistering): Port device team_slave_1 removed [ 763.028098][ T9063] team0 (unregistering): Port device team_slave_0 removed [ 763.422643][ T9611] team0: Port device team_slave_0 added [ 763.556555][ T9611] team0: Port device team_slave_1 added [ 764.087413][ T9611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.096345][ T9611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.123200][ T9611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.484753][ T9611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.492614][ T9611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.519250][ T9611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.155911][ T9611] hsr_slave_0: entered promiscuous mode [ 765.166819][ T9611] hsr_slave_1: entered promiscuous mode [ 765.176903][ T9611] debugfs: 'hsr0' already exists in 'hsr' [ 765.183758][ T9611] Cannot create hsr debugfs directory [ 766.532415][ T794] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 766.737007][ T794] usb 6-1: device descriptor read/64, error -71 [ 767.022719][ T794] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 767.205447][ T794] usb 6-1: device descriptor read/64, error -71 [ 767.342567][ T794] usb usb6-port1: attempt power cycle [ 767.514621][ T30] audit: type=1326 audit(1768802963.666:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.6.872" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d6c98f749 code=0x0 [ 767.644847][ T9611] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 767.725731][ T9611] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 767.753250][ T794] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 767.788643][ T794] usb 6-1: device descriptor read/8, error -71 [ 767.816366][ T9611] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 767.881298][ T9611] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 768.082537][ T794] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 768.134736][ T794] usb 6-1: device descriptor read/8, error -71 [ 768.267507][ T794] usb usb6-port1: unable to enumerate USB device [ 769.100747][ T9611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.262672][ T794] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 769.386725][ T9611] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.472808][ T794] usb 2-1: Using ep0 maxpacket: 16 [ 769.499508][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.507559][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.526444][ T794] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 769.535267][ T794] usb 2-1: config 0 has no interface number 0 [ 769.541699][ T794] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 769.554326][ T794] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 769.565029][ T794] usb 2-1: config 0 interface 41 has no altsetting 0 [ 769.668576][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.676279][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.832513][ T794] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 769.842309][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.850666][ T794] usb 2-1: Product: syz [ 769.855315][ T794] usb 2-1: Manufacturer: syz [ 769.861133][ T794] usb 2-1: SerialNumber: syz [ 770.034233][ T794] usb 2-1: config 0 descriptor?? [ 770.054810][ T9741] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 770.102753][ T9741] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 770.348242][ T9741] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 770.423802][ T9741] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 770.907764][ T794] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 771.022812][ T11] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 771.298588][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.310372][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.327001][ T11] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 771.337386][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.571407][ T11] usb 9-1: config 0 descriptor?? [ 771.617095][ T794] dm9601 2-1:0.41 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 771.788285][ T794] dm9601 2-1:0.41 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 16:6d:92:93:9d:ce [ 771.865860][ T11] usbhid 9-1:0.0: can't add hid device: -71 [ 771.873359][ T11] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 771.876417][ T794] usb 2-1: USB disconnect, device number 24 [ 771.891678][ T794] dm9601 2-1:0.41 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 772.019932][ T11] usb 9-1: USB disconnect, device number 22 [ 772.497629][ T11] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 772.777425][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.792328][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.803161][ T11] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 772.812612][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.958632][ T9611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.014737][ T11] usb 9-1: config 0 descriptor?? [ 773.302427][ T794] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 773.439069][ T11] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 773.510417][ T794] usb 2-1: no configurations [ 773.515684][ T794] usb 2-1: can't read configurations, error -22 [ 773.530693][ T11] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0004/input/input7 [ 773.717946][ T794] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 773.825227][ T11] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 773.905596][ T11] usb 9-1: USB disconnect, device number 23 [ 773.938300][ T6150] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 773.945182][ C0] hrtimer: interrupt took 672930 ns [ 773.961174][ T794] usb 2-1: no configurations [ 773.966586][ T794] usb 2-1: can't read configurations, error -22 [ 774.029339][ T794] usb usb2-port1: attempt power cycle [ 774.172320][ T6150] usb 7-1: device descriptor read/64, error -71 [ 774.423902][ T6150] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 774.473131][ T794] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 774.502977][ T794] usb 2-1: no configurations [ 774.507905][ T794] usb 2-1: can't read configurations, error -22 [ 774.585836][ T9787] fido_id[9787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 774.647752][ T6150] usb 7-1: device descriptor read/64, error -71 [ 774.702670][ T794] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 774.760260][ T794] usb 2-1: no configurations [ 774.765531][ T794] usb 2-1: can't read configurations, error -22 [ 774.796882][ T6150] usb usb7-port1: attempt power cycle [ 774.826586][ T794] usb usb2-port1: unable to enumerate USB device [ 774.859023][ T9794] netlink: 'syz.8.890': attribute type 8 has an invalid length. [ 774.867582][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.890'. [ 775.174628][ T6150] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 775.236790][ T6150] usb 7-1: device descriptor read/8, error -71 [ 775.502531][ T6150] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 775.564243][ T6150] usb 7-1: device descriptor read/8, error -71 [ 775.689056][ T6150] usb usb7-port1: unable to enumerate USB device [ 776.056138][ T9611] veth0_vlan: entered promiscuous mode [ 776.160004][ T9611] veth1_vlan: entered promiscuous mode [ 776.620380][ T9611] veth0_macvtap: entered promiscuous mode [ 776.721460][ T9611] veth1_macvtap: entered promiscuous mode [ 776.939831][ T9611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.090754][ T9611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.186807][ T4105] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.244575][ T4105] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.313857][ T3932] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.336057][ T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.522819][ T11] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 777.773340][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 777.805415][ T11] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 777.814645][ T11] usb 6-1: config 0 has no interface number 0 [ 777.826353][ T11] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 777.836684][ T11] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 777.847915][ T11] usb 6-1: config 0 interface 41 has no altsetting 0 [ 778.102627][ T11] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 778.112230][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.120556][ T11] usb 6-1: Product: syz [ 778.125241][ T11] usb 6-1: Manufacturer: syz [ 778.130050][ T11] usb 6-1: SerialNumber: syz [ 778.249255][ T11] usb 6-1: config 0 descriptor?? [ 778.260443][ T9814] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 778.280583][ T9814] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 778.402544][ T794] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 778.617440][ T9814] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 778.662673][ T794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.676594][ T794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.687463][ T794] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 778.697199][ T794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.743107][ T9814] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 778.886012][ T794] usb 9-1: config 0 descriptor?? [ 779.186817][ T11] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 779.230035][ T794] usbhid 9-1:0.0: can't add hid device: -71 [ 779.237067][ T794] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 779.354051][ T794] usb 9-1: USB disconnect, device number 24 [ 779.802637][ T794] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 779.871557][ T11] dm9601 6-1:0.41 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 779.982505][ T11] dm9601 6-1:0.41 eth1: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 4a:04:b3:59:ab:6a [ 780.022121][ T794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.034321][ T794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.044887][ T794] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 780.054404][ T794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.101773][ T11] usb 6-1: USB disconnect, device number 13 [ 780.110985][ T11] dm9601 6-1:0.41 eth1: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 780.292293][ T794] usb 9-1: config 0 descriptor?? [ 780.577656][ T6150] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 780.725814][ T794] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 780.841692][ T794] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0005/input/input8 [ 780.876050][ T6150] usb 2-1: no configurations [ 780.880893][ T6150] usb 2-1: can't read configurations, error -22 [ 781.108090][ T6150] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 781.141031][ T794] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 781.265267][ T794] usb 9-1: USB disconnect, device number 25 [ 781.345420][ T6150] usb 2-1: no configurations [ 781.350284][ T6150] usb 2-1: can't read configurations, error -22 [ 781.411349][ T6150] usb usb2-port1: attempt power cycle [ 781.933079][ T6150] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 781.987410][ T6150] usb 2-1: no configurations [ 781.992469][ T6150] usb 2-1: can't read configurations, error -22 [ 782.266889][ T6150] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 782.326478][ T6150] usb 2-1: no configurations [ 782.331445][ T6150] usb 2-1: can't read configurations, error -22 [ 782.382289][ T6150] usb usb2-port1: unable to enumerate USB device [ 782.430393][ T9860] fido_id[9860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 782.814174][ T11] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 783.004671][ T11] usb 6-1: device descriptor read/64, error -71 [ 783.259065][ T11] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 783.433359][ T11] usb 6-1: device descriptor read/64, error -71 [ 783.561612][ T11] usb usb6-port1: attempt power cycle [ 783.994742][ T11] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 784.067679][ T11] usb 6-1: device descriptor read/8, error -71 [ 784.383952][ T11] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 784.455360][ T11] usb 6-1: device descriptor read/8, error -71 [ 784.584422][ T11] usb usb6-port1: unable to enumerate USB device [ 786.261603][ T9063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.270485][ T9063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.505142][ T6150] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 786.598121][ T3932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.606936][ T3932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.742347][ T6150] usb 6-1: Using ep0 maxpacket: 16 [ 786.773596][ T11] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 786.782263][ T6150] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 786.790693][ T6150] usb 6-1: config 0 has no interface number 0 [ 786.800138][ T6150] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 786.812286][ T6150] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 786.823149][ T6150] usb 6-1: config 0 interface 41 has no altsetting 0 [ 787.024648][ T6150] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 787.034586][ T6150] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.043021][ T6150] usb 6-1: Product: syz [ 787.047357][ T6150] usb 6-1: Manufacturer: syz [ 787.052328][ T6150] usb 6-1: SerialNumber: syz [ 787.098872][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.110187][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.124134][ T11] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 787.134534][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.244957][ T6150] usb 6-1: config 0 descriptor?? [ 787.255096][ T9901] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 787.306694][ T11] usb 2-1: config 0 descriptor?? [ 787.321038][ T9901] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 787.625656][ T9901] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 787.656839][ T11] usbhid 2-1:0.0: can't add hid device: -71 [ 787.665142][ T11] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 787.713319][ T9901] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 787.758076][ T11] usb 2-1: USB disconnect, device number 33 [ 787.878344][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 787.887524][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 788.827966][ T11] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 789.029996][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 789.959171][ T9] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 789.969838][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 790.558199][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 790.568803][ T9] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 790.577904][ T9] usb 10-1: Product: syz [ 790.582765][ T9] usb 10-1: Manufacturer: syz [ 790.587892][ T9] usb 10-1: SerialNumber: syz [ 791.012538][ T6150] Error reading MAC address [ 791.278757][ T9] usb 10-1: config 0 descriptor?? [ 791.470703][ T9] usb 10-1: selecting invalid altsetting 0 [ 791.555673][ T11] usb 2-1: device descriptor read/all, error -71 [ 792.832462][ T6150] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 794.904686][ T11] usb 10-1: USB disconnect, device number 3 [ 795.383853][ T6150] usb 6-1: USB disconnect, device number 18 [ 796.559486][ T794] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 796.823962][ T794] usb 2-1: no configurations [ 796.828944][ T794] usb 2-1: can't read configurations, error -22 [ 797.072792][ T794] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 797.334248][ T794] usb 2-1: no configurations [ 797.339202][ T794] usb 2-1: can't read configurations, error -22 [ 797.448203][ T794] usb usb2-port1: attempt power cycle [ 797.652220][ T6150] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 797.674353][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 797.694376][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 797.726325][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 797.748378][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 797.764661][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 797.889401][ T6150] usb 6-1: device descriptor read/64, error -71 [ 797.892236][ T794] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 797.920232][ T794] usb 2-1: no configurations [ 797.920342][ T794] usb 2-1: can't read configurations, error -22 [ 798.197596][ T6150] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 798.232587][ T794] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 798.257776][ T794] usb 2-1: no configurations [ 798.257882][ T794] usb 2-1: can't read configurations, error -22 [ 798.259285][ T794] usb usb2-port1: unable to enumerate USB device [ 798.363467][ T6150] usb 6-1: device descriptor read/64, error -71 [ 798.476032][ T6150] usb usb6-port1: attempt power cycle [ 798.912420][ T6150] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 798.934477][ T6150] usb 6-1: device descriptor read/8, error -71 [ 799.172368][ T6150] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 799.194313][ T6150] usb 6-1: device descriptor read/8, error -71 [ 799.303904][ T6150] usb usb6-port1: unable to enumerate USB device [ 799.803732][ T9940] chnl_net:caif_netlink_parms(): no params data found [ 799.842932][ T5804] Bluetooth: hci2: command tx timeout [ 800.382588][ T11] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 800.662491][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.674234][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.687386][ T11] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 800.697869][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.926865][ T11] usb 2-1: config 0 descriptor?? [ 801.388156][ T11] usbhid 2-1:0.0: can't add hid device: -71 [ 801.395132][ T11] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 801.469375][ T11] usb 2-1: USB disconnect, device number 40 [ 801.923975][ T5804] Bluetooth: hci2: command tx timeout [ 801.998652][ T11] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 802.317421][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.331678][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.343294][ T11] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 802.352866][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.371394][ T9980] loop2: detected capacity change from 0 to 7 [ 802.418451][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.455131][ T9980] Dev loop2: unable to read RDB block 7 [ 802.461095][ T9980] loop2: AHDI p1 p2 p3 [ 802.465973][ T9980] loop2: partition table partially beyond EOD, truncated [ 802.476089][ T11] usb 2-1: config 0 descriptor?? [ 802.507738][ T9980] loop2: p1 start 1601398130 is beyond EOD, truncated [ 802.515404][ T9980] loop2: p2 start 1702059890 is beyond EOD, truncated [ 802.584575][ T9981] tipc: Started in network mode [ 802.589995][ T9981] tipc: Node identity 3200bf0ad24a, cluster identity 4711 [ 802.598933][ T9981] tipc: Enabled bearer , priority 0 [ 802.826853][ T9982] syzkaller0: entered promiscuous mode [ 802.837264][ T9982] syzkaller0: entered allmulticast mode [ 802.889403][ T9985] netlink: 'syz.5.932': attribute type 8 has an invalid length. [ 802.898342][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.932'. [ 802.911519][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.978146][ T11] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 803.020037][ T9981] tipc: Resetting bearer [ 803.101321][ T11] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input9 [ 803.334897][ T11] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 803.423577][ T11] usb 2-1: USB disconnect, device number 41 [ 803.483038][ T9977] tipc: Resetting bearer [ 803.525851][ T9977] tipc: Disabling bearer [ 803.748133][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.864703][ T9940] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.876320][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.888230][ T9940] bridge_slave_0: entered allmulticast mode [ 803.898490][ T9940] bridge_slave_0: entered promiscuous mode [ 803.996626][ T5804] Bluetooth: hci2: command tx timeout [ 804.047975][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.191159][ T9940] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.200163][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.210820][ T9940] bridge_slave_1: entered allmulticast mode [ 804.219848][ T9940] bridge_slave_1: entered promiscuous mode [ 804.636519][ T9990] fido_id[9990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 804.780173][ T6150] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 804.962902][ T6150] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.973406][ T6150] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 805.068484][ T6150] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 805.079069][ T6150] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.089600][ T6150] usb 9-1: Product: syz [ 805.095582][ T6150] usb 9-1: Manufacturer: syz [ 805.100445][ T6150] usb 9-1: SerialNumber: syz [ 805.177684][ T12] bridge_slave_1: left allmulticast mode [ 805.183991][ T12] bridge_slave_1: left promiscuous mode [ 805.196114][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.368778][ T6150] usb 9-1: config 0 descriptor?? [ 805.384536][ T12] bridge_slave_0: left allmulticast mode [ 805.390642][ T12] bridge_slave_0: left promiscuous mode [ 805.400829][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.092508][ T5804] Bluetooth: hci2: command tx timeout [ 806.454837][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.543922][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.667975][ T12] bond0 (unregistering): Released all slaves [ 806.816740][ T9940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.971436][ T9940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.036683][ T12] tipc: Left network mode [ 807.784061][ T9940] team0: Port device team_slave_0 added [ 807.972358][ T12] hsr_slave_0: left promiscuous mode [ 807.996327][ T12] hsr_slave_1: left promiscuous mode [ 808.006080][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.014197][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.057710][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.066474][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.103482][T10024] loop2: detected capacity change from 0 to 7 [ 808.118615][ T9] usb 9-1: USB disconnect, device number 26 [ 808.153517][T10024] Dev loop2: unable to read RDB block 7 [ 808.161548][T10024] loop2: AHDI p1 p2 p3 [ 808.168977][T10024] loop2: partition table partially beyond EOD, truncated [ 808.177471][T10024] loop2: p1 start 1601398130 is beyond EOD, truncated [ 808.185307][T10024] loop2: p2 start 1702059890 is beyond EOD, truncated [ 808.308771][ T12] veth1_macvtap: left promiscuous mode [ 808.321373][ T12] veth0_macvtap: left promiscuous mode [ 808.327825][ T12] veth1_vlan: left promiscuous mode [ 808.333728][ T12] veth0_vlan: left promiscuous mode [ 809.045911][T10029] netlink: 'syz.8.943': attribute type 8 has an invalid length. [ 809.055687][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.8.943'. [ 809.212962][ T794] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 809.510134][ T794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.522176][ T794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.532623][ T794] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 809.542114][ T794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.245597][ T794] usb 10-1: config 0 descriptor?? [ 810.403510][ T12] team0 (unregistering): Port device team_slave_1 removed [ 810.562359][ T794] usbhid 10-1:0.0: can't add hid device: -71 [ 810.569201][ T794] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 810.621694][ T12] team0 (unregistering): Port device team_slave_0 removed [ 810.909216][ T794] usb 10-1: USB disconnect, device number 4 [ 811.020427][ T9940] team0: Port device team_slave_1 added [ 811.180785][T10033] tipc: Enabling of bearer rejected, failed to enable media [ 811.393166][ T794] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 811.524913][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.532333][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.560515][ T9940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.729928][ T794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.741570][ T794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.753404][ T794] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 811.763490][ T794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.001664][ T794] usb 10-1: config 0 descriptor?? [ 812.010939][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.018425][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.045466][ T9940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.436123][ T794] usb 10-1: can't set config #0, error -71 [ 812.535178][ T794] usb 10-1: USB disconnect, device number 5 [ 812.782659][ T9940] hsr_slave_0: entered promiscuous mode [ 812.794182][ T9940] hsr_slave_1: entered promiscuous mode [ 812.806358][ T9940] debugfs: 'hsr0' already exists in 'hsr' [ 812.812408][ T9940] Cannot create hsr debugfs directory [ 813.693034][T10070] netlink: 24 bytes leftover after parsing attributes in process `syz.9.953'. [ 813.772264][ T8307] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 813.926633][T10074] binder: 10072:10074 ioctl c0306201 0 returned -14 [ 814.015457][ T8307] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.026622][ T8307] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 814.166594][ T8307] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 814.180454][ T8307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.189085][ T8307] usb 6-1: Product: syz [ 814.193600][ T8307] usb 6-1: Manufacturer: syz [ 814.200324][ T8307] usb 6-1: SerialNumber: syz [ 814.333789][ T8307] usb 6-1: config 0 descriptor?? [ 815.089659][ T9940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 815.125012][T10084] netlink: 'syz.8.957': attribute type 8 has an invalid length. [ 815.133293][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.8.957'. [ 815.203747][ T9940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 815.364319][ T9940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 815.489128][ T9940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 816.778358][ T9940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.913698][ T6150] usb 6-1: USB disconnect, device number 23 [ 816.940401][T10108] binder: 10094:10108 ioctl c0306201 200000000180 returned -14 [ 817.021406][ T9940] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.079419][T10110] binder_alloc: 10094: binder_alloc_buf, no vma [ 817.114563][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.122451][ T4280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.235351][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.243064][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.809031][T10137] netlink: 'syz.8.969': attribute type 8 has an invalid length. [ 819.817342][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.8.969'. [ 820.815050][ T9940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.647952][ T9940] veth0_vlan: entered promiscuous mode [ 821.873814][ T9940] veth1_vlan: entered promiscuous mode [ 822.339626][ T9940] veth0_macvtap: entered promiscuous mode [ 822.415828][ T9940] veth1_macvtap: entered promiscuous mode [ 822.460823][T10157] tipc: Started in network mode [ 822.467040][T10157] tipc: Node identity 4e6cb6180871, cluster identity 4711 [ 822.478239][T10157] tipc: Enabled bearer , priority 0 [ 822.572609][T10152] binder: 10150:10152 ioctl c0306201 200000000180 returned -14 [ 822.629910][T10157] syzkaller0: entered promiscuous mode [ 822.636051][T10157] syzkaller0: entered allmulticast mode [ 822.688641][T10152] binder_alloc: 10150: binder_alloc_buf, no vma [ 822.710890][T10160] tipc: Resetting bearer [ 822.754514][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.806845][T10156] tipc: Resetting bearer [ 822.822714][T10156] tipc: Disabling bearer [ 822.990956][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.262914][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.334991][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.428588][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.504559][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.879408][T10175] netlink: 'syz.1.982': attribute type 8 has an invalid length. [ 823.888269][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 823.917624][T10175] bond0: entered promiscuous mode [ 823.923521][T10175] bond_slave_0: entered promiscuous mode [ 823.933863][T10175] bond_slave_1: entered promiscuous mode [ 823.950320][T10175] geneve0: entered promiscuous mode [ 823.963345][T10175] debugfs: 'hsr1' already exists in 'hsr' [ 823.969375][T10175] Cannot create hsr debugfs directory [ 823.975272][T10175] hsr1: entered promiscuous mode [ 827.783054][T10218] binder: 10215:10218 ioctl c0306201 200000000180 returned -14 [ 827.809880][T10218] binder_alloc: 10215: binder_alloc_buf, no vma [ 828.249288][T10226] netlink: 'syz.5.994': attribute type 8 has an invalid length. [ 828.258286][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.994'. [ 829.716046][ T794] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 830.031309][ T794] usb 9-1: unable to get BOS descriptor or descriptor too short [ 830.134253][ T794] usb 9-1: config 13 has an invalid interface number: 177 but max is 0 [ 830.143625][ T794] usb 9-1: config 13 has no interface number 0 [ 830.150326][ T794] usb 9-1: config 13 interface 177 altsetting 4 has an endpoint descriptor with address 0x99, changing to 0x89 [ 830.163204][ T794] usb 9-1: config 13 interface 177 altsetting 4 endpoint 0x89 has an invalid bInterval 248, changing to 11 [ 830.175614][ T794] usb 9-1: config 13 interface 177 has no altsetting 0 [ 830.372995][ T794] usb 9-1: New USB device found, idVendor=15c2, idProduct=0042, bcdDevice=ef.b8 [ 830.382724][ T794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.390993][ T794] usb 9-1: Product: syz [ 830.398656][ T794] usb 9-1: Manufacturer: syz [ 830.403681][ T794] usb 9-1: SerialNumber: syz [ 830.929048][ T794] imon 9-1:13.177: unable to register, err -19 [ 831.133485][ T794] usb 9-1: USB disconnect, device number 27 [ 832.600702][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.609221][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.925949][ T3899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.934374][ T3899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.446697][T10267] vivid-007: ================= START STATUS ================= [ 833.456121][T10267] vivid-007: Generate PTS: true [ 833.462375][T10267] vivid-007: Generate SCR: true [ 833.467691][T10267] tpg source WxH: 320x240 (Y'CbCr) [ 833.473354][T10267] tpg field: 1 [ 833.477008][T10267] tpg crop: (0,0)/320x240 [ 833.481568][T10267] tpg compose: (0,0)/320x240 [ 833.486802][T10267] tpg colorspace: 8 [ 833.490971][T10267] tpg transfer function: 0/0 [ 833.496171][T10267] tpg Y'CbCr encoding: 0/0 [ 833.500862][T10267] tpg quantization: 0/0 [ 833.505434][T10267] tpg RGB range: 0/2 [ 833.509522][T10267] vivid-007: ================== END STATUS ================== [ 834.624295][T10277] netlink: 'syz.1.1006': attribute type 8 has an invalid length. [ 834.632573][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 836.716571][T10298] tipc: Enabled bearer , priority 0 [ 836.809793][T10304] syzkaller0: entered promiscuous mode [ 836.816452][T10304] syzkaller0: entered allmulticast mode [ 836.955905][T10298] tipc: Resetting bearer [ 837.049631][T10295] tipc: Resetting bearer [ 837.085751][T10295] tipc: Disabling bearer [ 838.902743][T10322] netlink: 'syz.5.1020': attribute type 8 has an invalid length. [ 838.910904][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1020'. [ 840.714890][T10346] tipc: Enabling of bearer rejected, failed to enable media [ 842.791073][T10373] netlink: 'syz.3.1035': attribute type 8 has an invalid length. [ 842.800704][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 842.828168][T10373] bond0: entered promiscuous mode [ 842.833685][T10373] bond_slave_0: entered promiscuous mode [ 842.840871][T10373] bond_slave_1: entered promiscuous mode [ 842.857450][T10373] geneve0: entered promiscuous mode [ 842.870940][T10373] dummy0: entered promiscuous mode [ 842.880961][T10373] debugfs: 'hsr1' already exists in 'hsr' [ 842.888645][T10373] Cannot create hsr debugfs directory [ 842.894368][T10373] hsr1: entered promiscuous mode [ 845.032953][ T794] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 845.397813][ T794] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 845.408344][ T794] usb 10-1: config 0 interface 0 has no altsetting 0 [ 845.476543][T10401] tipc: Enabled bearer , priority 0 [ 845.525542][ T794] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 845.536943][ T794] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 845.546071][ T794] usb 10-1: Product: syz [ 845.550559][ T794] usb 10-1: Manufacturer: syz [ 845.556204][ T794] usb 10-1: SerialNumber: syz [ 845.579611][T10401] syzkaller0: entered promiscuous mode [ 845.586311][T10401] syzkaller0: entered allmulticast mode [ 845.653087][ T794] usb 10-1: config 0 descriptor?? [ 845.679811][T10401] tipc: Resetting bearer [ 845.704355][T10400] tipc: Resetting bearer [ 845.795663][T10400] tipc: Disabling bearer [ 845.829016][ T794] usb 10-1: selecting invalid altsetting 0 [ 848.305561][ T794] usb 10-1: USB disconnect, device number 6 [ 849.094060][ T794] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 849.315271][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 849.324672][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 849.389821][ T794] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.402171][ T794] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 849.563643][ T794] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 849.573479][ T794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.582277][ T794] usb 10-1: Product: syz [ 849.586859][ T794] usb 10-1: Manufacturer: syz [ 849.592181][ T794] usb 10-1: SerialNumber: syz [ 849.765122][ T794] usb 10-1: config 0 descriptor?? [ 850.640379][T10446] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 851.208249][T10452] tipc: Enabled bearer , priority 0 [ 851.279913][T10455] syzkaller0: entered promiscuous mode [ 851.286229][T10455] syzkaller0: entered allmulticast mode [ 851.400121][T10452] tipc: Resetting bearer [ 851.505143][T10451] tipc: Resetting bearer [ 851.524084][T10451] tipc: Disabling bearer [ 852.194471][T10463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1059'. [ 852.353383][ T794] usb 10-1: USB disconnect, device number 7 [ 854.643054][ T5861] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 854.895234][ T5861] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 855.041767][ T5861] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 855.051358][ T5861] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.062688][ T5861] usb 9-1: Product: syz [ 855.068146][ T5861] usb 9-1: Manufacturer: syz [ 855.073126][ T5861] usb 9-1: SerialNumber: syz [ 855.289996][ T5861] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 855.727042][ T5861] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 855.739002][ T5861] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 855.747845][ T5861] usb 9-1: media controller created [ 856.072084][ T30] audit: type=1800 audit(1768803052.206:14): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1067" name="/" dev="fuse" ino=9 res=0 errno=0 [ 856.482567][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 857.163487][T10499] tipc: Started in network mode [ 857.168849][T10499] tipc: Node identity a285be375fab, cluster identity 4711 [ 857.177499][T10499] tipc: Enabled bearer , priority 0 [ 857.315745][T10504] syzkaller0: entered promiscuous mode [ 857.322392][T10504] syzkaller0: entered allmulticast mode [ 857.328932][T10502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1072'. [ 857.485950][T10499] tipc: Resetting bearer [ 857.657973][T10497] tipc: Resetting bearer [ 857.818506][T10497] tipc: Disabling bearer [ 858.504162][ T5861] usb 9-1: USB disconnect, device number 28 [ 859.136414][T10518] syz_tun: entered promiscuous mode [ 859.943580][T10528] fuse: root generation should be zero [ 861.103021][T10546] tipc: Enabled bearer , priority 0 [ 861.153882][T10548] syzkaller0: entered promiscuous mode [ 861.159812][T10548] syzkaller0: entered allmulticast mode [ 861.283294][T10546] tipc: Resetting bearer [ 861.394261][T10543] tipc: Resetting bearer [ 861.454554][T10543] tipc: Disabling bearer [ 861.555218][T10552] fuse: Unknown parameter '">R۱E"(dߒ^or9pOa⤹II_W?&`gT-![L6$I4f[8ǬW?ڪ\ }{9Coµ;' [ 861.586072][T10555] fuse: Unknown parameter 'grou00000000000000000000' [ 862.683789][T10566] syz_tun: entered promiscuous mode [ 863.965590][ T794] IPVS: starting estimator thread 0... [ 864.122480][T10576] IPVS: using max 192 ests per chain, 9600 per kthread [ 864.592176][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1096'. [ 864.601568][T10580] bond0: option lp_interval: invalid value (0) [ 864.608455][T10580] bond0: option lp_interval: allowed values 1 - 2147483647 [ 865.745674][T10590] loop2: detected capacity change from 0 to 7 [ 865.797112][T10590] Dev loop2: unable to read RDB block 7 [ 865.803609][T10590] loop2: unable to read partition table [ 865.867307][T10590] loop2: partition table beyond EOD, truncated [ 865.874578][T10590] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 867.332406][T10597] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 867.708339][T10604] tipc: Started in network mode [ 867.713726][T10604] tipc: Node identity d6aa75206743, cluster identity 4711 [ 867.722269][T10604] tipc: Enabled bearer , priority 0 [ 867.822975][T10605] syzkaller0: entered promiscuous mode [ 867.828711][T10605] syzkaller0: entered allmulticast mode [ 867.895677][T10608] fuse: Unknown parameter 'grou00000000000000000000' [ 867.973661][T10607] tipc: Resetting bearer [ 868.067327][T10602] tipc: Resetting bearer [ 868.245900][T10602] tipc: Disabling bearer [ 871.251356][ T5861] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 871.370916][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 871.547899][ T5861] usb 6-1: Using ep0 maxpacket: 32 [ 871.569871][ T5861] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.580989][ T5861] usb 6-1: config 0 has no interfaces? [ 871.587305][ T5861] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 871.596963][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.766132][ T5861] usb 6-1: config 0 descriptor?? [ 872.141453][ T794] usb 6-1: USB disconnect, device number 24 [ 873.640119][T10644] fuse: Unknown parameter 'grou00000000000000000000' [ 874.708862][T10653] tipc: Enabled bearer , priority 0 [ 874.795547][T10653] syzkaller0: entered promiscuous mode [ 874.801468][T10653] syzkaller0: entered allmulticast mode [ 875.014328][T10658] tipc: Resetting bearer [ 875.074040][T10650] tipc: Resetting bearer [ 875.121386][T10650] tipc: Disabling bearer [ 876.242545][ T794] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 876.549551][ T794] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 876.562180][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.570535][ T794] usb 6-1: Product: syz [ 876.575922][ T794] usb 6-1: Manufacturer: syz [ 876.580740][ T794] usb 6-1: SerialNumber: syz [ 876.610212][ T794] usb 6-1: config 0 descriptor?? [ 876.956486][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 878.193979][ T794] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 878.446477][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.458157][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.468830][ T794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 878.483267][ T794] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 878.492804][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.685904][ T794] usb 4-1: config 0 descriptor?? [ 878.980488][T10710] tipc: Enabling of bearer rejected, failed to enable media [ 879.350629][ T794] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 879.465188][ T24] usb 6-1: USB disconnect, device number 25 [ 879.613335][ T794] usb 4-1: USB disconnect, device number 5 [ 880.675199][T10722] fido_id[10722]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 880.826656][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 881.723278][T10743] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1142'. [ 882.419530][T10752] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1145'. [ 882.661324][T10758] tipc: Enabling of bearer rejected, failed to enable media [ 884.509080][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 884.769944][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 884.793708][T10776] kvm: emulating exchange as write [ 884.860614][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'. [ 884.955353][ T9] usb 10-1: config 1 has an invalid interface number: 242 but max is 0 [ 884.967191][ T9] usb 10-1: config 1 has no interface number 0 [ 884.974371][ T9] usb 10-1: config 1 interface 242 has no altsetting 0 [ 885.177231][ T9] usb 10-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 885.187868][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.196593][ T9] usb 10-1: Product: syz [ 885.201186][ T9] usb 10-1: Manufacturer: syz [ 885.207221][ T9] usb 10-1: SerialNumber: syz [ 886.123903][T10795] netlink: 'syz.9.1151': attribute type 10 has an invalid length. [ 886.133328][T10795] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.143383][T10795] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.184045][T10795] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.191617][T10795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.200154][T10795] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.207947][T10795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.241567][T10795] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 886.601775][ T9] aqc111 10-1:1.242: probe with driver aqc111 failed with error -71 [ 886.771280][ T9] usb 10-1: USB disconnect, device number 8 [ 888.207644][T10819] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1160'. [ 888.511180][T10821] tipc: Enabled bearer , priority 0 [ 888.627952][T10821] tipc: Resetting bearer [ 888.751124][T10815] tipc: Disabling bearer [ 889.445132][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1166'. [ 889.454848][T10829] bond0: option lp_interval: invalid value (0) [ 889.464342][T10829] bond0: option lp_interval: allowed values 1 - 2147483647 [ 889.552580][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1168'. [ 890.547105][T10852] netlink: 'syz.9.1174': attribute type 10 has an invalid length. [ 890.559883][T10852] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.568369][T10852] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.207608][ T30] audit: type=1800 audit(1768803087.356:15): pid=10853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1171" name="/" dev="fuse" ino=9 res=0 errno=0 [ 891.445420][T10857] program syz.5.1172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 891.778212][ T30] audit: type=1326 audit(1768803087.926:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.9.1177" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8ba58f749 code=0x0 [ 892.233300][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 892.454535][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 892.510964][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.521691][ T9] usb 6-1: config 0 has no interfaces? [ 892.527810][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 892.538988][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.716567][ T9] usb 6-1: config 0 descriptor?? [ 893.182723][T10857] ALSA: mixer_oss: invalid OSS volume 'SPEA9Ksˠ+I2KER' [ 893.196185][T10857] ALSA: mixer_oss: invalid OSS volume 'SP' [ 894.097659][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 894.573567][T10891] loop8: detected capacity change from 0 to 8 [ 894.643670][T10891] Dev loop8: unable to read RDB block 8 [ 894.649792][T10891] loop8: unable to read partition table [ 894.690233][T10891] loop8: partition table beyond EOD, truncated [ 894.697245][T10891] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 898.174864][ T794] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 898.466387][ T794] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 898.477031][ T794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.486190][ T794] usb 10-1: Product: syz [ 898.490679][ T794] usb 10-1: Manufacturer: syz [ 898.495746][ T794] usb 10-1: SerialNumber: syz [ 899.043770][ T794] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 899.056294][ T794] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 899.067156][ T794] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 899.219303][ T794] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 899.640454][T10942] loop2: detected capacity change from 0 to 7 [ 899.718577][T10942] Dev loop2: unable to read RDB block 7 [ 899.725121][T10942] loop2: unable to read partition table [ 899.805582][T10942] loop2: partition table beyond EOD, truncated [ 899.812406][T10942] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 901.297411][ T794] usb 10-1: USB disconnect, device number 9 [ 901.502735][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 901.968568][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 902.025643][ T24] usb 4-1: config 13 has an invalid interface number: 177 but max is 0 [ 902.034747][ T24] usb 4-1: config 13 has no interface number 0 [ 902.041195][ T24] usb 4-1: config 13 interface 177 altsetting 4 has an endpoint descriptor with address 0x99, changing to 0x89 [ 902.053630][ T24] usb 4-1: config 13 interface 177 altsetting 4 endpoint 0x89 has an invalid bInterval 248, changing to 11 [ 902.066441][ T24] usb 4-1: config 13 interface 177 has no altsetting 0 [ 902.277045][ T4105] ===================================================== [ 902.285360][ T4105] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xae2/0x98d0 [ 902.294474][ T4105] n_tty_receive_buf_standard+0xae2/0x98d0 [ 902.300736][ T4105] n_tty_receive_buf_common+0x1a7c/0x2630 [ 902.307992][ T4105] n_tty_receive_buf2+0x4c/0x60 [ 902.313688][ T4105] tty_ldisc_receive_buf+0xc6/0x2c0 [ 902.319450][ T4105] tty_port_default_receive_buf+0xd7/0x1a0 [ 902.325780][ T4105] flush_to_ldisc+0x43e/0xe30 [ 902.330788][ T4105] process_scheduled_works+0xb91/0x1d80 [ 902.337799][ T4105] worker_thread+0xedf/0x1590 [ 902.343121][ T4105] kthread+0xd5c/0xf00 [ 902.347486][ T4105] ret_from_fork+0x208/0x710 [ 902.352608][ T4105] ret_from_fork_asm+0x1a/0x30 [ 902.357628][ T4105] [ 902.360122][ T4105] Uninit was stored to memory at: [ 902.367603][ T4105] n_tty_receive_buf_standard+0xadb/0x98d0 [ 902.374692][ T4105] n_tty_receive_buf_common+0x1a7c/0x2630 [ 902.380672][ T4105] n_tty_receive_buf2+0x4c/0x60 [ 902.386035][ T4105] tty_ldisc_receive_buf+0xc6/0x2c0 [ 902.391616][ T4105] tty_port_default_receive_buf+0xd7/0x1a0 [ 902.398025][ T4105] flush_to_ldisc+0x43e/0xe30 [ 902.403138][ T4105] process_scheduled_works+0xb91/0x1d80 [ 902.409118][ T4105] worker_thread+0xedf/0x1590 [ 902.414329][ T4105] kthread+0xd5c/0xf00 [ 902.418595][ T4105] ret_from_fork+0x208/0x710 [ 902.424563][ T4105] ret_from_fork_asm+0x1a/0x30 [ 902.429677][ T4105] [ 902.432518][ T4105] Uninit was created at: [ 902.437286][ T4105] __kmalloc_noprof+0xaf2/0x1c20 [ 902.442839][ T4105] __tty_buffer_request_room+0x3d4/0x7a0 [ 902.448868][ T4105] __tty_insert_flip_string_flags+0x157/0x6f0 [ 902.456063][ T4105] uart_insert_char+0x368/0x930 [ 902.461271][ T4105] serial8250_read_char+0x1ba/0x670 [ 902.469141][ T4105] serial8250_handle_irq+0x930/0x1110 [ 902.476086][ T4105] serial8250_default_handle_irq+0x116/0x370 [ 902.483014][ T4105] serial8250_interrupt+0xcb/0x430 [ 902.488452][ T4105] __handle_irq_event_percpu+0x118/0xeb0 [ 902.495137][ T4105] handle_irq_event+0xe0/0x2a0 [ 902.500284][ T4105] handle_edge_irq+0x2a9/0xb50 [ 902.505889][ T4105] __common_interrupt+0x9d/0x180 [ 902.511606][ T4105] common_interrupt+0x94/0xb0 [ 902.517525][ T4105] asm_common_interrupt+0x2b/0x40 [ 902.523436][ T4105] [ 902.526149][ T4105] CPU: 1 UID: 0 PID: 4105 Comm: kworker/u8:30 Tainted: G L syzkaller #0 PREEMPT(none) [ 902.537824][ T4105] Tainted: [L]=SOFTLOCKUP [ 902.542931][ T4105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 902.553850][ T4105] Workqueue: events_unbound flush_to_ldisc [ 902.560107][ T4105] ===================================================== [ 902.567510][ T4105] Disabling lock debugging due to kernel taint [ 902.576992][ T4105] Kernel panic - not syncing: kmsan.panic set ... [ 902.583704][ T4105] CPU: 1 UID: 0 PID: 4105 Comm: kworker/u8:30 Tainted: G B L syzkaller #0 PREEMPT(none) [ 902.595260][ T4105] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 902.601774][ T4105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 902.612262][ T4105] Workqueue: events_unbound flush_to_ldisc [ 902.618576][ T4105] Call Trace: [ 902.622006][ T4105] [ 902.625152][ T4105] __dump_stack+0x26/0x30 [ 902.629936][ T4105] dump_stack_lvl+0x50/0x1c0 [ 902.634857][ T4105] ? dump_stack+0x12/0x25 [ 902.639415][ T4105] dump_stack+0x1e/0x25 [ 902.643907][ T4105] vpanic+0x435/0xd30 [ 902.648313][ T4105] panic+0x15d/0x160 [ 902.652741][ T4105] kmsan_report+0x31c/0x320 [ 902.657935][ T4105] ? __msan_warning+0x1b/0x30 [ 902.662949][ T4105] ? n_tty_receive_buf_standard+0xae2/0x98d0 [ 902.669156][ T4105] ? n_tty_receive_buf_common+0x1a7c/0x2630 [ 902.675403][ T4105] ? n_tty_receive_buf2+0x4c/0x60 [ 902.680690][ T4105] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 902.686325][ T4105] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 902.692579][ T4105] ? flush_to_ldisc+0x43e/0xe30 [ 902.697699][ T4105] ? process_scheduled_works+0xb91/0x1d80 [ 902.703864][ T4105] ? worker_thread+0xedf/0x1590 [ 902.709107][ T4105] ? kthread+0xd5c/0xf00 [ 902.713643][ T4105] ? ret_from_fork+0x208/0x710 [ 902.718682][ T4105] ? ret_from_fork_asm+0x1a/0x30 [ 902.723915][ T4105] ? ret_from_fork_asm+0x1a/0x30 [ 902.729091][ T4105] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 902.735413][ T4105] ? kmsan_get_metadata+0x150/0x160 [ 902.740868][ T4105] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 902.747451][ T4105] ? kmsan_get_metadata+0x150/0x160 [ 902.753020][ T4105] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 902.759277][ T4105] ? n_tty_receive_char+0x1223/0x14f0 [ 902.764977][ T4105] ? kmsan_get_metadata+0xfb/0x160 [ 902.770353][ T4105] __msan_warning+0x1b/0x30 [ 902.775087][ T4105] n_tty_receive_buf_standard+0xae2/0x98d0 [ 902.781167][ T4105] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 902.787253][ T4105] ? sched_clock_cpu+0x59/0xa80 [ 902.792384][ T4105] ? kmsan_get_metadata+0xfb/0x160 [ 902.797824][ T4105] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 902.804508][ T4105] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 902.810862][ T4105] n_tty_receive_buf_common+0x1a7c/0x2630 [ 902.816817][ T4105] ? finish_task_switch+0x142/0x8c0 [ 902.822447][ T4105] n_tty_receive_buf2+0x4c/0x60 [ 902.827513][ T4105] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 902.833334][ T4105] tty_ldisc_receive_buf+0xc6/0x2c0 [ 902.838989][ T4105] tty_port_default_receive_buf+0xd7/0x1a0 [ 902.845474][ T4105] flush_to_ldisc+0x43e/0xe30 [ 902.850675][ T4105] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 902.857444][ T4105] ? __pfx_flush_to_ldisc+0x10/0x10 [ 902.863173][ T4105] process_scheduled_works+0xb91/0x1d80 [ 902.869341][ T4105] worker_thread+0xedf/0x1590 [ 902.874396][ T4105] kthread+0xd5c/0xf00 [ 902.878678][ T4105] ? __pfx_worker_thread+0x10/0x10 [ 902.884206][ T4105] ? __pfx_kthread+0x10/0x10 [ 902.889281][ T4105] ret_from_fork+0x208/0x710 [ 902.894507][ T4105] ? __switch_to+0x53d/0x790 [ 902.899445][ T4105] ? __pfx_kthread+0x10/0x10 [ 902.904245][ T4105] ret_from_fork_asm+0x1a/0x30 [ 902.909887][ T4105] [ 902.914009][ T4105] Kernel Offset: disabled [ 902.918443][ T4105] Rebooting in 86400 seconds..