last executing test programs: 12m51.306403752s ago: executing program 2 (id=98): openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 12m50.383020261s ago: executing program 2 (id=100): socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x2, 0x4800020}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000001240)='net/wireless\x00') r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}]}, 0x3}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) io_uring_enter(r4, 0x26c3, 0xdffffffb, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) 12m48.907188732s ago: executing program 2 (id=101): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) 12m48.622739637s ago: executing program 2 (id=103): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0x98, 0xe0, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000500)={0x8, {0x8, 0xffffff7f, 0x1, 0x6, 0xcc1f, 0x7}}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r6, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x20064a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10040800) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000, 0x0, 0xffffffffffffffff}) fremovexattr(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='sec5rity./dev/#\x00\x00\x00\x00\x00\x00']) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="0203000d0c00000000000000000000000300060000000e0002000000e0000009140000000000000002000100000000000000000200000000030005003c00000002000000e00000010000000000000000010015004e20000001001400"], 0x60}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x3, 0x2, 0x2, 0x5, 0x0, 0x400}, 0x20) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@userptr={0x2, 0x1, 0x4, 0x0, 0x8, {}, {0x0, 0x8, 0x3, 0x7f, 0xff, 0xa3, "2599b83b"}, 0x5, 0x2, {0x0}, 0x9, 0x0, r7}) 12m46.138561897s ago: executing program 2 (id=105): r0 = socket$isdn_base(0x22, 0x3, 0x0) fcntl$lock(r0, 0x7, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000002c0)={0x0, 0x5df6, 0x10000}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) pwritev2(r0, 0x0, 0x0, 0xffffffff, 0xfffffffb, 0x8) 12m45.826731127s ago: executing program 2 (id=107): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200010000000009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) 12m30.419091237s ago: executing program 32 (id=107): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200010000000009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) 12m2.553296058s ago: executing program 0 (id=202): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r1, 0x0, 0x7c, 0x8) write(r3, &(0x7f0000003300)="ac", 0x1) write(r0, &(0x7f00000002c0)="1fe7435f", 0x4) 12m1.496324116s ago: executing program 0 (id=205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)="9e", 0x1}], 0x2, 0x9, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r8, &(0x7f0000001840), 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 11m59.168600321s ago: executing program 0 (id=207): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000500)={0x8, {0x8, 0xffffff7f, 0x1, 0x6, 0xcc1f, 0x7}}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r6, 0x0, 0x10040800) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000, 0x0, 0xffffffffffffffff}) fremovexattr(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='sec5rity./dev/#\x00\x00\x00\x00\x00\x00']) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="0203000d0c00000000000000000000000300060000000e0002000000e0000009140000000000000002000100000000000000000200000000030005003c00000002000000e00000010000000000000000010015004e20000001001400"], 0x60}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x3, 0x2, 0x2, 0x5, 0x0, 0x400}, 0x20) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@userptr={0x2, 0x1, 0x4, 0x0, 0x8, {}, {0x0, 0x8, 0x3, 0x7f, 0xff, 0xa3, "2599b83b"}, 0x5, 0x2, {0x0}, 0x9, 0x0, r7}) 11m58.004226828s ago: executing program 0 (id=210): r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000500)={0x8, {0x8, 0xffffff7f, 0x1, 0x6, 0xcc1f, 0x7}}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r6, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x20064a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10040800) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000, 0x0, 0xffffffffffffffff}) fremovexattr(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='sec5rity./dev/#\x00\x00\x00\x00\x00\x00']) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="0203000d0c00000000000000000000000300060000000e0002000000e0000009140000000000000002000100000000000000000200000000030005003c00000002000000e00000010000000000000000010015004e20000001001400"], 0x60}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x3, 0x2, 0x2, 0x5, 0x0, 0x400}, 0x20) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@userptr={0x2, 0x1, 0x4, 0x0, 0x8, {}, {0x0, 0x8, 0x3, 0x7f, 0xff, 0xa3, "2599b83b"}, 0x5, 0x2, {0x0}, 0x9, 0x0, r7}) 11m52.460300917s ago: executing program 0 (id=217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)="9e", 0x1}], 0x2, 0x9, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r8, &(0x7f0000001840), 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 11m50.635394756s ago: executing program 0 (id=221): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) accept4(0xffffffffffffffff, &(0x7f0000000240)=@alg, &(0x7f0000000080)=0x80, 0x80000) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={'wlan1\x00', {0x2, 0x4e22, @loopback}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0), 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, &(0x7f00000005c0)=""/218, &(0x7f0000000400)=0x616378a8) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) 11m35.446578344s ago: executing program 33 (id=221): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) accept4(0xffffffffffffffff, &(0x7f0000000240)=@alg, &(0x7f0000000080)=0x80, 0x80000) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={'wlan1\x00', {0x2, 0x4e22, @loopback}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0), 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, &(0x7f00000005c0)=""/218, &(0x7f0000000400)=0x616378a8) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) 11m28.62284488s ago: executing program 1 (id=258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x7c}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x23e}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) 11m25.146972563s ago: executing program 1 (id=265): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x3, 0x5, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000080)=[{r0, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @time={0xf, 0x7}, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9}) 11m24.147991684s ago: executing program 1 (id=267): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000005200)={0x2020}, 0x2020) 11m24.017417514s ago: executing program 1 (id=268): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000240)=@alg, &(0x7f0000000080)=0x80, 0x80000) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={'wlan1\x00', {0x2, 0x4e22, @loopback}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0), 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, &(0x7f00000005c0)=""/218, &(0x7f0000000400)=0x616378a8) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) 11m20.115044123s ago: executing program 1 (id=278): sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) 11m19.897813052s ago: executing program 1 (id=279): socketpair$nbd(0x1, 0x1, 0x0, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) fchdir(0xffffffffffffffff) unshare(0x28000600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@getchain={0x2c, 0x66, 0x3523ad93bb3d228b, 0x0, 0x0, {}, [{0x8}]}, 0x2c}}, 0x0) unshare(0x66020000) umount2(&(0x7f00000000c0)='./cgroup\x00', 0x1) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x4048005) 11m4.724699315s ago: executing program 34 (id=279): socketpair$nbd(0x1, 0x1, 0x0, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) fchdir(0xffffffffffffffff) unshare(0x28000600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@getchain={0x2c, 0x66, 0x3523ad93bb3d228b, 0x0, 0x0, {}, [{0x8}]}, 0x2c}}, 0x0) unshare(0x66020000) umount2(&(0x7f00000000c0)='./cgroup\x00', 0x1) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x4048005) 10m7.61408442s ago: executing program 4 (id=385): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000380)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@mmap={0x0, 0x1, 0x4, 0x100000, 0x9, {}, {0x4, 0x0, 0x8, 0x2, 0x8, 0x7, "2622bf50"}, 0x1, 0x1, {}, 0xffffffff, 0x0, r3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000500)={0x8, {0x8, 0xffffff7f, 0x1, 0x6, 0xcc1f, 0x7}}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r7, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x20064a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10040800) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r7}, 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000, 0x0, 0xffffffffffffffff}) fremovexattr(r8, &(0x7f0000000000)=ANY=[@ANYBLOB='sec5rity./dev/#\x00\x00\x00\x00\x00\x00']) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="0203000d0c00000000000000000000000300060000000e0002000000e0000009140000000000000002000100000000000000000200000000030005003c00000002000000e00000010000000000000000010015004e20000001001400"], 0x60}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x3, 0x2, 0x2, 0x5, 0x0, 0x400}, 0x20) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@userptr={0x2, 0x1, 0x4, 0x0, 0x8, {}, {0x0, 0x8, 0x3, 0x7f, 0xff, 0xa3, "2599b83b"}, 0x5, 0x2, {0x0}, 0x9, 0x0, r8}) 10m5.952102533s ago: executing program 4 (id=387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000100003040000", @ANYRES32=r2, @ANYBLOB="00000000033a01003c0012800b00010062726964676500002c0002800500170000000000050018000000000005002d"], 0x5c}}, 0x0) 10m5.631776212s ago: executing program 4 (id=388): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, 0x0) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000001480)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x441410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) stat(&(0x7f0000000000)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008840)="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", 0x2000, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x4, 0x0, 0x7, 0x2, 0x0, 0x400000, {0x0, 0x0, 0x5, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m5.521101139s ago: executing program 4 (id=390): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 10m5.393223188s ago: executing program 4 (id=391): creat(&(0x7f0000000080)='./file0\x00', 0x1ac) memfd_create(&(0x7f0000000400)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000800800054000000021840000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000005800038054000080810003400000000248000b80340001800a0001006c696d697400000024000280081a"], 0x108}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000640)={@fda={0x66646185, 0x3, 0x0, 0x14}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @fda={0x66646185, 0x5, 0x2, 0x2}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}}], 0x3, 0x2000000, &(0x7f0000000780)="137a01"}) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, 0x0, 0x0, 0x10000, &(0x7f0000001000)={0x77359400}) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0000000400000a169500"/20, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) 10m4.79035944s ago: executing program 4 (id=392): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000400)=@ethtool_cmd={0x4d, 0x2, 0xffbf, 0xffff, 0x7, 0x6, 0x40, 0x80, 0x5, 0xb4, 0x5, 0x81, 0x6, 0x2c, 0x40, 0x8, [0x8, 0xc]}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r4 = socket(0x2, 0x3, 0xff) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000480)) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000002080)=0x800008a, 0x4) setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000040)={0x4, 0x8, 0x8}) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x16}], 0x1, 0x40000020, 0x0) r8 = syz_usb_connect(0x0, 0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002eb65af20f60d6100bfd3010203010902240001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="4031670000007b6f66bc2d6a00000000000000000042c7cbaff8b655f313a40852bfea95f1a7f650185a38fd60c3f1b37debf864ed1df3394434a21bc063a23120744cd6d6bf9bb5da7d07d0f4b08d87a3cc6b78c70cc7a184b2f390d2c5d2e41dd90188b93674867cd83f2dea9aba6d1a899f"], 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0xfff9, 0x15a, 0xfffffff9, 0x55eb, 0x1, 0xfffd, 0xff84, 0x9, 0x1, 0x9, 0x8, 0x3ff}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x9}, 0x0, 0x0, 0x0}) shutdown(r1, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0xa08, 0x4) 10m4.628782444s ago: executing program 35 (id=392): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000400)=@ethtool_cmd={0x4d, 0x2, 0xffbf, 0xffff, 0x7, 0x6, 0x40, 0x80, 0x5, 0xb4, 0x5, 0x81, 0x6, 0x2c, 0x40, 0x8, [0x8, 0xc]}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r4 = socket(0x2, 0x3, 0xff) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000480)) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000002080)=0x800008a, 0x4) setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000040)={0x4, 0x8, 0x8}) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x16}], 0x1, 0x40000020, 0x0) r8 = syz_usb_connect(0x0, 0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002eb65af20f60d6100bfd3010203010902240001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="4031670000007b6f66bc2d6a00000000000000000042c7cbaff8b655f313a40852bfea95f1a7f650185a38fd60c3f1b37debf864ed1df3394434a21bc063a23120744cd6d6bf9bb5da7d07d0f4b08d87a3cc6b78c70cc7a184b2f390d2c5d2e41dd90188b93674867cd83f2dea9aba6d1a899f"], 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0xfff9, 0x15a, 0xfffffff9, 0x55eb, 0x1, 0xfffd, 0xff84, 0x9, 0x1, 0x9, 0x8, 0x3ff}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x9}, 0x0, 0x0, 0x0}) shutdown(r1, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0xa08, 0x4) 3m23.035104868s ago: executing program 8 (id=775): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) 3m22.717715651s ago: executing program 8 (id=777): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffd14, 0x0, 'syz0\x00', 0x0, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000000002010100000000ffffffffffffff7f"], 0x14}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) socket$inet_udp(0x2, 0x2, 0x0) 3m19.149811537s ago: executing program 8 (id=785): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x221, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltclass={0x24, 0x29, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0x7, 0xfff2}, {0x10, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x300, 0xffff, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}}, 0x24040084) 3m17.320274909s ago: executing program 8 (id=789): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r5, &(0x7f0000000200)=""/202, 0xca) tkill(r4, 0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') msgget$private(0x0, 0x8) 3m16.660879239s ago: executing program 8 (id=792): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x1, 0xfe00, 0x8000c62) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x24c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x21c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9c}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0x8}}, @TCA_ROUTE4_ACT={0x1f0, 0x6, [@m_ctinfo={0xc4, 0x15, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x8d, 0x6, "34d466fa82d5906ad8ff3fc757ae4e1546417860defed1717e2f58e17aed5b1264ef82d7734e155e0f1ac4e32635639acee5e62140e36f9a2f8bc34c2d504db956a5f1daec6d722d140a3d4f2acf6b16e397c39cd1143264d0d227ce8520f62068f1f731cb85c9742d15b3305aadcf5fc5f0dd1f8caaf204db5b3b2deb825c392dc2feb1151211ab31"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x128, 0x10, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x9, 0x7, 0x3, 0xa43d}}]}, {0xe4, 0x6, "4352101dadacbf78912e039f2171559d2c6aea9468dd4a672ab4d304002d19dfc1022fd925ef2bfe220c8ce5b837d99c366a26fc6675ff3fa7b71e5d77d681f1fc6907b345214555b379108c4799e644ce53a8c82edb683e7ca260e527c392ab34e1e38c0f0aa89b4495693dfe46833920e338ae77d9dddcf5914a33cc2eaad3fc7e3b00727a08c8ef3474ba97ce2be2fe11d6d8b45349b66dc1d097b86410e74d03152434dec0620fa592ebdb7afa8479e3fd97e665d24450c4f74cf50826113e690f9ae1470e032dc5f12a7e05adc3c4e5a4c3e1eb83c6552ed7c23833461e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0xf}}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x8848}, 0x4004) 3m15.454370953s ago: executing program 8 (id=797): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)="270502001c0014000600002fb96dbcf7bae105000700810005008906", 0x1c}, {&(0x7f0000000700)="e554bb04af32f00bd876", 0xa}], 0x2}, 0x20000800) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, 0x0}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000400)={{0x80}, 'port0\x00', 0xee, 0x1004, 0x6, 0x0, 0x100000, 0xffffffff, 0x8}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r5, 0x5414, &(0x7f0000000040)) ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f0000000240)={0x6, 0x1}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d6405000000000075040000f1ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14b00006dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000f74c16737d50d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e9217b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b4ac034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea4ff03000000000000a4662fb577824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b0e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r7, 0xffffffffffffffff, 0x51, 0x0, @void}, 0x10) connect$can_bcm(r6, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0], 0x20000078}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x7, @can={{}, 0x0, 0x2, 0x0, 0x0, "8bc75700"}}, 0x48}}, 0x0) r8 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 3m0.163739409s ago: executing program 36 (id=797): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)="270502001c0014000600002fb96dbcf7bae105000700810005008906", 0x1c}, {&(0x7f0000000700)="e554bb04af32f00bd876", 0xa}], 0x2}, 0x20000800) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, 0x0}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000400)={{0x80}, 'port0\x00', 0xee, 0x1004, 0x6, 0x0, 0x100000, 0xffffffff, 0x8}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r5, 0x5414, &(0x7f0000000040)) ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f0000000240)={0x6, 0x1}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r7, 0xffffffffffffffff, 0x51, 0x0, @void}, 0x10) connect$can_bcm(r6, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0], 0x20000078}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x7, @can={{}, 0x0, 0x2, 0x0, 0x0, "8bc75700"}}, 0x48}}, 0x0) r8 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 9.943938382s ago: executing program 6 (id=1261): socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 8.52961321s ago: executing program 3 (id=1271): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xad96, 0x24, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x2) read(r5, 0x0, 0x5d) 7.241807578s ago: executing program 3 (id=1272): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="f78d9ca38ffff9ffffffffffffff2ba8d30b6b0470aebddbe93540c7efc78d8a901d1734775a63456c07c09cbf927380e5654848ea6211b97338ff9dab2fb0987e101eecb38c2d6d93b469d8d4c06d53f3c56bf4fce7902effc260d56ae3c424d5eabbb458eded96a8d24450fe7809879f5fda655e67b27d27aa39bf0ddf000c8e5f13bf3235a20fab099abf64bdb30225f047dc0e77d591281071a4815838be9bc7b15f8287de5d34a2338180e514fbea4777987d4db83cb5042a824611aaf08e3edf0735c9293c", 0xc8}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, 0x0, 0x0, 0x800}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.106779862s ago: executing program 3 (id=1273): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x3d}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x36}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 6.961079469s ago: executing program 3 (id=1274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x38}}, 0x0) 6.761707929s ago: executing program 3 (id=1276): r0 = syz_usb_connect(0x3, 0x3c, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000240)={0x14, &(0x7f00000003c0)={0x40, 0x2a, 0x7e, {0x7e, 0x4, "94c636a1b3a69c61e5319ea8a4e35aa242a41385a915711b70bd90766a6ec6bf31619bec30b4d076903cf1130c629115e66186b895e4f38537ff4dcfe3ee6a1146a23ff797f11a325ad7fa6399441f069381b4710805265e90642f5914ec44effa0365bda1bfaf0a85f6772c5a9334727cbee7834deb13d97df8d93f"}}, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x2, 0x0, 0x0, 0x0}, {0x7fff, 0x6811, 0x0, 0x0}], 0x2}) 6.605902542s ago: executing program 6 (id=1277): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) 6.366504951s ago: executing program 6 (id=1280): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c29ebab028deda501009bdeffafde2500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r1, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r2, 0x1084}], 0x1, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6.084991286s ago: executing program 3 (id=1285): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) r1 = creat(0x0, 0x80) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r6, 0x0, 0x0) 5.36189896s ago: executing program 6 (id=1289): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000005140)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @private0, 0x2}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f0000000940)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005100)=ANY=[@ANYBLOB="100000002900"], 0x20}}], 0x2, 0x0) 5.290841811s ago: executing program 7 (id=1290): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000000280)) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 5.005131867s ago: executing program 6 (id=1292): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$inet(0x2, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x1f) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x40c0) 4.666526979s ago: executing program 6 (id=1295): r0 = syz_usb_connect(0x3, 0x3c, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000240)={0x14, &(0x7f00000003c0)={0x40, 0x2a, 0x7e, {0x7e, 0x4, "94c636a1b3a69c61e5319ea8a4e35aa242a41385a915711b70bd90766a6ec6bf31619bec30b4d076903cf1130c629115e66186b895e4f38537ff4dcfe3ee6a1146a23ff797f11a325ad7fa6399441f069381b4710805265e90642f5914ec44effa0365bda1bfaf0a85f6772c5a9334727cbee7834deb13d97df8d93f"}}, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x2, 0x0, 0x0, 0x0}, {0x7fff, 0x6811, 0x0, 0x0}], 0x2}) 4.653233969s ago: executing program 9 (id=1296): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x8001a, 0x6, 0x2, "9807c6aa09a3d93fea070bc7378bc7e6535dc9e78a311ecb1b986ef9b5979da6", 0x50323234}) 4.560669506s ago: executing program 5 (id=1297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x3c}}, 0x0) 4.506146097s ago: executing program 9 (id=1298): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r2], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000001480)={0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00823bbdebf4b229eb92f1fdaae44d00000000000000000000000000000000000000000000000000000006db0cc1efa94857ffa6c68de7d05c5fa219bd1dbf8ade1aa77bda865d2a9252896a5e44bedca28096716a520b949684aa2e362b46060568bb4356b3a49fc34ec456445005c1dbce56194f6ed9a5e590687927e2446f2866a6f74679f9cd64b1cea7014595f5355ae7cc04305fde23967588ae20e01d01faf01d71cb790a7ee249f0cadfea88a75087"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x1, 0x1c, &(0x7f0000001480)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r7, 0x0, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000140), &(0x7f0000001180)) preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 4.445779622s ago: executing program 5 (id=1299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r3) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4811}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4.093512091s ago: executing program 5 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0x9, 0x3, 0x4001, 0x0, 0x3, 0x7, 0x0, 0x7}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xf0, 0x2}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000140)={0x56, 0xffffffffffffffff, 0x0, {0x401, 0x401}, 0x2}, 0x1) fsmount(0xffffffffffffffff, 0x0, 0x9) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x6, 0x57f9e7cb95d61f1e, 0x8, 0x0, 0x401}, 0xc) 4.089702572s ago: executing program 7 (id=1301): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xbf}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'veth0_to_hsr\x00'}) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r5, &(0x7f0000000200)="a3", 0x33) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000140)=0xfff) 3.858020968s ago: executing program 5 (id=1302): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000005140)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @private0, 0x2}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f0000000940)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005100)=ANY=[@ANYBLOB="100000002900"], 0x20}}], 0x2, 0x0) 3.655246437s ago: executing program 5 (id=1303): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000001c40)={0x1, [{0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x86a2c76484102c2a, 0x220, 0x5, &(0x7f0000000800)="94e891d142f92e61511782151c41a626b6f9f120c3e218db1bec42d5406605ea6b8db714bad5d96d2b049d91de925991e3b9b3356870b9e173980c08edc2bd9015f810b1"}, {0x0, 0x0, 0x100, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x65e, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) 3.377213181s ago: executing program 5 (id=1304): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="c65a697dc193404fa0e2f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa", 0x27}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905"], 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) close(r4) bind$alg(r2, &(0x7f0000000640)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000400)={@broadcast, 0x1, 0x0, 0x60, 0x0, [{@empty}, {}, {@loopback}, {@remote}, {@broadcast}, {@broadcast}]}}) 3.280018865s ago: executing program 7 (id=1305): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000001}, 0x18) ftruncate(r0, 0xa75) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x10c, 0x150, 0x150, 0x0, 0xf8010000, 0x1d4, 0x238, 0x238, 0x1d4, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) 2.488085311s ago: executing program 7 (id=1306): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$inet(0x2, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x1f) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000"], 0x18}, 0x40c0) 2.048345321s ago: executing program 7 (id=1307): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="f78d9ca38ffff9ffffffffffffff2ba8d30b6b0470aebddbe93540c7efc78d8a901d1734775a63456c07c09cbf927380e5654848ea6211b97338ff9dab2fb0987e101eecb38c2d6d93b469d8d4c06d53f3c56bf4fce7902effc260d56ae3c424d5eabbb458eded96a8d24450fe7809879f5fda655e67b27d27aa39bf0ddf000c8e5f13bf3235a20fab099abf64bdb30225f047dc0e77d591281071a4815838be9bc7b15f8287de5d34a2338180e514fbea4777987d4db83cb5042a824611aaf08e3edf0735c9293c", 0xc8}, {&(0x7f00000002c0)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, 0x0, 0x0, 0x800}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.854691505s ago: executing program 7 (id=1308): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x9}, 0xff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x87da4854b9abaabb, &(0x7f00000000c0)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0xc005, 0x0, 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010140)=ANY=[@ANYBLOB="2000000076000700000000000000000003000000000000000800010004"], 0x20}}, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x5, 0x6, 0x2}) 1.445706449s ago: executing program 9 (id=1309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x3c}}, 0x0) 1.20406653s ago: executing program 9 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 136.873985ms ago: executing program 9 (id=1311): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x58, 0x0, 0xfffff004}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) 0s ago: executing program 9 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0x9, 0x3, 0x4001, 0x0, 0x3, 0x7, 0x0, 0x7}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000140)={0x56, 0xffffffffffffffff, 0x0, {0x401, 0x401}, 0x2}, 0x1) fsmount(0xffffffffffffffff, 0x0, 0x9) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x6, 0x57f9e7cb95d61f1e, 0x8, 0x0, 0x401}, 0xc) kernel console output (not intermixed with test programs): batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.317500][ T8925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.457467][ T8925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.457485][ T8925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.457509][ T8925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.565088][ T9144] random: crng reseeded on system resumption [ 574.665162][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.665179][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.665193][ T8935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.933761][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.933773][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.933787][ T8935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.581248][ T8925] hsr_slave_0: entered promiscuous mode [ 575.582674][ T8925] hsr_slave_1: entered promiscuous mode [ 575.583723][ T8925] debugfs: 'hsr0' already exists in 'hsr' [ 575.583745][ T8925] Cannot create hsr debugfs directory [ 575.935969][ T8935] hsr_slave_0: entered promiscuous mode [ 575.937281][ T8935] hsr_slave_1: entered promiscuous mode [ 575.954505][ T8935] debugfs: 'hsr0' already exists in 'hsr' [ 575.954533][ T8935] Cannot create hsr debugfs directory [ 576.542229][ T8672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.587996][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 576.755419][ T10] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 576.755446][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 576.755506][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.755531][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.755551][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 576.755591][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 576.755611][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.820645][ T10] usb 4-1: config 0 descriptor?? [ 577.276473][ T10] input: HID 28bd:0909 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0909.0006/input/input14 [ 577.329879][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.475825][ T10] uclogic 0003:28BD:0909.0006: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0 [ 577.603757][ T10] usb 4-1: USB disconnect, device number 23 [ 577.635105][ T8717] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.647102][ T1485] bridge_slave_1: left allmulticast mode [ 577.647128][ T1485] bridge_slave_1: left promiscuous mode [ 577.647408][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.709298][ T1485] bridge_slave_0: left allmulticast mode [ 577.709320][ T1485] bridge_slave_0: left promiscuous mode [ 577.709482][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.782243][ T1485] bridge_slave_1: left allmulticast mode [ 577.782272][ T1485] bridge_slave_1: left promiscuous mode [ 577.782495][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.860072][ T1485] bridge_slave_0: left allmulticast mode [ 577.860092][ T1485] bridge_slave_0: left promiscuous mode [ 577.860243][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.528474][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.588665][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.610230][ T1485] bond0 (unregistering): Released all slaves [ 581.088599][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.148533][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.171376][ T1485] bond0 (unregistering): Released all slaves [ 581.396143][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.396830][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.443254][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.443433][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.067978][ T1485] hsr_slave_0: left promiscuous mode [ 582.088029][ T1485] hsr_slave_1: left promiscuous mode [ 582.088675][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.178174][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.411441][ T1485] hsr_slave_0: left promiscuous mode [ 582.430477][ T1485] hsr_slave_1: left promiscuous mode [ 582.431121][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.499752][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.006745][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 583.032519][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 583.034189][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 583.035514][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 583.036802][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 585.130514][ T61] Bluetooth: hci2: command tx timeout [ 586.418727][ T1485] team0 (unregistering): Port device team_slave_1 removed [ 586.688029][ T5907] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 586.708559][ T1485] team0 (unregistering): Port device team_slave_0 removed [ 586.857926][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 586.859708][ T5907] usb 4-1: config 1 has an invalid interface number: 6 but max is 0 [ 586.859731][ T5907] usb 4-1: config 1 has no interface number 0 [ 586.862788][ T5907] usb 4-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 586.862814][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.862832][ T5907] usb 4-1: Product: syz [ 586.862843][ T5907] usb 4-1: Manufacturer: syz [ 586.862851][ T5907] usb 4-1: SerialNumber: syz [ 587.233665][ T61] Bluetooth: hci2: command tx timeout [ 587.548843][ T9200] netlink: 68 bytes leftover after parsing attributes in process `syz.3.651'. [ 587.713509][ T9202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.717496][ T9202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.952681][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 588.979131][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 588.980537][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 589.019166][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 589.022797][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 589.310722][ T5810] Bluetooth: hci2: command tx timeout [ 591.201218][ T5810] Bluetooth: hci5: command tx timeout [ 591.358019][ T5810] Bluetooth: hci2: command tx timeout [ 591.968810][ T1485] team0 (unregistering): Port device team_slave_1 removed [ 592.016390][ T5907] usb 4-1: palm_os_4_probe - error -32 getting connection info [ 592.016447][ T5907] visor 4-1:1.6: Handspring Visor / Palm OS converter detected [ 592.062068][ T5907] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 592.081729][ T5907] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 592.258984][ T1485] team0 (unregistering): Port device team_slave_0 removed [ 593.278008][ T5810] Bluetooth: hci5: command tx timeout [ 595.070644][ T10] usb 4-1: USB disconnect, device number 24 [ 595.082689][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 595.101549][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 595.102355][ T10] visor 4-1:1.6: device disconnected [ 595.372225][ T5810] Bluetooth: hci5: command tx timeout [ 596.401903][ T9204] chnl_net:caif_netlink_parms(): no params data found [ 598.066470][ T5810] Bluetooth: hci5: command tx timeout [ 598.104417][ T9183] chnl_net:caif_netlink_parms(): no params data found [ 598.664906][ T9204] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.665086][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.665331][ T9204] bridge_slave_0: entered allmulticast mode [ 598.688868][ T9204] bridge_slave_0: entered promiscuous mode [ 598.712815][ T9204] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.712948][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.713159][ T9204] bridge_slave_1: entered allmulticast mode [ 598.716124][ T9204] bridge_slave_1: entered promiscuous mode [ 599.150180][ T9204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.286188][ T9204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.341774][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.342501][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.342730][ T9183] bridge_slave_0: entered allmulticast mode [ 599.346308][ T9183] bridge_slave_0: entered promiscuous mode [ 599.349401][ T9241] mmap: syz.3.658 (9241) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 599.458782][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.458865][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.458984][ T9183] bridge_slave_1: entered allmulticast mode [ 599.463289][ T9183] bridge_slave_1: entered promiscuous mode [ 599.677848][ T9204] team0: Port device team_slave_0 added [ 599.772105][ T9204] team0: Port device team_slave_1 added [ 599.876584][ T9183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.003849][ T9183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.253927][ T8925] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 600.393975][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.393991][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.394011][ T9204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.488826][ T8925] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 600.728557][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.728568][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.728584][ T9204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.731643][ T9183] team0: Port device team_slave_0 added [ 600.738591][ T8925] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 600.907704][ T9183] team0: Port device team_slave_1 added [ 600.911967][ T8925] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 600.999180][ T9245] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 600.999198][ T9245] File: /dev/nullb0 PID: 9245 Comm: syz.3.659 [ 601.877742][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.877753][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.930026][ T9183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.121446][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.121463][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.121487][ T9183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.191576][ T9204] hsr_slave_0: entered promiscuous mode [ 602.192570][ T9204] hsr_slave_1: entered promiscuous mode [ 602.193115][ T9204] debugfs: 'hsr0' already exists in 'hsr' [ 602.193131][ T9204] Cannot create hsr debugfs directory [ 602.476256][ T8935] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 603.329070][ T8935] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 603.711167][ T8935] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 604.694868][ T9183] hsr_slave_0: entered promiscuous mode [ 604.695752][ T9183] hsr_slave_1: entered promiscuous mode [ 604.696339][ T9183] debugfs: 'hsr0' already exists in 'hsr' [ 604.696355][ T9183] Cannot create hsr debugfs directory [ 604.697649][ T8935] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 606.997575][ T9282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.667'. [ 606.997598][ T9282] netlink: 'syz.3.667': attribute type 7 has an invalid length. [ 606.997605][ T9282] netlink: 'syz.3.667': attribute type 8 has an invalid length. [ 606.997611][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 607.210650][ T9282] ip6gretap0: entered promiscuous mode [ 607.211886][ T9282] syz_tun: entered promiscuous mode [ 607.248283][ T9282] ip6gretap0: left promiscuous mode [ 607.270546][ T9282] syz_tun: left promiscuous mode [ 607.904955][ T8925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.595251][ T8935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.622145][ T8925] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.653894][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.655270][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.745764][ T8935] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.768873][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.769083][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.261538][ T7978] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.261710][ T7978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.325470][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.325553][ T6324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.591827][ T1485] bridge_slave_1: left allmulticast mode [ 610.591855][ T1485] bridge_slave_1: left promiscuous mode [ 610.592142][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.668910][ T1485] bridge_slave_0: left allmulticast mode [ 610.668931][ T1485] bridge_slave_0: left promiscuous mode [ 610.669094][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.760268][ T1485] bridge_slave_1: left allmulticast mode [ 610.760288][ T1485] bridge_slave_1: left promiscuous mode [ 610.760436][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.849502][ T1485] bridge_slave_0: left allmulticast mode [ 610.849531][ T1485] bridge_slave_0: left promiscuous mode [ 610.849795][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.778681][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.838557][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.881217][ T1485] bond0 (unregistering): Released all slaves [ 614.350536][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 614.353598][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 614.361821][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 614.363133][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 614.363912][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 614.549647][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.609928][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.650158][ T1485] bond0 (unregistering): Released all slaves [ 615.258131][ T1485] hsr_slave_0: left promiscuous mode [ 615.325151][ T1485] hsr_slave_1: left promiscuous mode [ 615.334601][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.368747][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.516036][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 615.566316][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 615.567680][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 615.590628][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 615.591544][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 615.637706][ T1485] hsr_slave_0: left promiscuous mode [ 615.698141][ T1485] hsr_slave_1: left promiscuous mode [ 615.700117][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.738603][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.414920][ T61] Bluetooth: hci1: command tx timeout [ 616.651161][ T1485] team0 (unregistering): Port device team_slave_1 removed [ 616.888434][ T1485] team0 (unregistering): Port device team_slave_0 removed [ 617.678173][ T61] Bluetooth: hci4: command tx timeout [ 618.477977][ T61] Bluetooth: hci1: command tx timeout [ 619.778177][ T61] Bluetooth: hci4: command tx timeout [ 620.299756][ T1485] team0 (unregistering): Port device team_slave_1 removed [ 620.558239][ T61] Bluetooth: hci1: command tx timeout [ 620.560535][ T1485] team0 (unregistering): Port device team_slave_0 removed [ 621.857840][ T61] Bluetooth: hci4: command tx timeout [ 622.637949][ T61] Bluetooth: hci1: command tx timeout [ 624.057832][ T61] Bluetooth: hci4: command tx timeout [ 624.403459][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.403557][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.452260][ T9305] chnl_net:caif_netlink_parms(): no params data found [ 625.788242][ T9346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.681'. [ 625.832205][ T9204] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 625.894288][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 625.931616][ T9204] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 626.044007][ T9204] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 626.337006][ T9204] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 626.610475][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.627982][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.628178][ T9305] bridge_slave_0: entered allmulticast mode [ 626.634400][ T9305] bridge_slave_0: entered promiscuous mode [ 626.748220][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.748318][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.748495][ T9305] bridge_slave_1: entered allmulticast mode [ 626.750042][ T9305] bridge_slave_1: entered promiscuous mode [ 627.350127][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.390373][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.391404][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.391647][ T9310] bridge_slave_0: entered allmulticast mode [ 627.396546][ T9310] bridge_slave_0: entered promiscuous mode [ 627.533579][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.593716][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.594175][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.594401][ T9310] bridge_slave_1: entered allmulticast mode [ 627.624940][ T9310] bridge_slave_1: entered promiscuous mode [ 627.816586][ T9183] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 628.012680][ T9183] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 628.046949][ T9305] team0: Port device team_slave_0 added [ 628.060983][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.064511][ T9183] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 628.111320][ T9305] team0: Port device team_slave_1 added [ 628.113867][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.136095][ T9183] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 628.709935][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.709954][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.709976][ T9305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.860575][ T9310] team0: Port device team_slave_0 added [ 628.872830][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.872847][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.872871][ T9305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.882058][ T9310] team0: Port device team_slave_1 added [ 631.566104][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.566121][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.566144][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.656101][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.656113][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.656128][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.966166][ T9305] hsr_slave_0: entered promiscuous mode [ 631.967044][ T9305] hsr_slave_1: entered promiscuous mode [ 631.967622][ T9305] debugfs: 'hsr0' already exists in 'hsr' [ 631.967638][ T9305] Cannot create hsr debugfs directory [ 632.356152][ T9310] hsr_slave_0: entered promiscuous mode [ 632.357003][ T9310] hsr_slave_1: entered promiscuous mode [ 632.357581][ T9310] debugfs: 'hsr0' already exists in 'hsr' [ 632.357596][ T9310] Cannot create hsr debugfs directory [ 633.701230][ T9204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.759007][ T9204] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.949449][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.949578][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.960112][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.991064][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.991282][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.186620][ T9183] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.213624][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.213768][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.423065][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.423166][ T7425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.948167][ T1485] bridge_slave_1: left allmulticast mode [ 634.948196][ T1485] bridge_slave_1: left promiscuous mode [ 634.948459][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.019597][ T1485] bridge_slave_0: left allmulticast mode [ 635.019626][ T1485] bridge_slave_0: left promiscuous mode [ 635.019883][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.112174][ T1485] bridge_slave_1: left allmulticast mode [ 635.112202][ T1485] bridge_slave_1: left promiscuous mode [ 635.112467][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.189372][ T1485] bridge_slave_0: left allmulticast mode [ 635.189400][ T1485] bridge_slave_0: left promiscuous mode [ 635.189641][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.306522][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.382187][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.402175][ T1485] bond0 (unregistering): Released all slaves [ 640.058555][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.118502][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.140551][ T1485] bond0 (unregistering): Released all slaves [ 640.536112][ T9204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.553982][ T9183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.867915][ T1485] hsr_slave_0: left promiscuous mode [ 640.927990][ T1485] hsr_slave_1: left promiscuous mode [ 640.929024][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.953134][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.067956][ T1485] hsr_slave_0: left promiscuous mode [ 641.087938][ T1485] hsr_slave_1: left promiscuous mode [ 641.088594][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.114393][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.130364][ T1485] team0 (unregistering): Port device team_slave_1 removed [ 642.279050][ T1485] team0 (unregistering): Port device team_slave_0 removed [ 643.530447][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 643.570070][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 643.574982][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 643.577456][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 643.585275][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 644.938565][ T1485] team0 (unregistering): Port device team_slave_1 removed [ 645.078713][ T1485] team0 (unregistering): Port device team_slave_0 removed [ 645.607959][ T61] Bluetooth: hci3: command tx timeout [ 647.678065][ T61] Bluetooth: hci3: command tx timeout [ 648.646109][ T9305] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 648.697322][ T9305] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 648.875227][ T9305] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 649.023899][ T9305] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 649.117444][ T9483] chnl_net:caif_netlink_parms(): no params data found [ 649.758299][ T61] Bluetooth: hci3: command tx timeout [ 649.854518][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 649.876494][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 649.885284][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 649.886572][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 649.887398][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 649.952588][ T9310] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 650.014602][ T9310] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 650.227295][ T9310] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 650.360216][ T9310] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 650.426352][ T9483] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.426596][ T9483] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.426832][ T9483] bridge_slave_0: entered allmulticast mode [ 650.430362][ T9483] bridge_slave_0: entered promiscuous mode [ 650.476898][ T9483] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.477023][ T9483] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.477257][ T9483] bridge_slave_1: entered allmulticast mode [ 650.481454][ T9483] bridge_slave_1: entered promiscuous mode [ 650.753097][ T9483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.778157][ T9483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.019508][ T9483] team0: Port device team_slave_0 added [ 651.083873][ T9483] team0: Port device team_slave_1 added [ 651.482256][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.482268][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.482281][ T9483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.505341][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.505357][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.505381][ T9483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.839255][ T5810] Bluetooth: hci3: command tx timeout [ 651.919579][ T5810] Bluetooth: hci2: command tx timeout [ 652.494090][ T9483] hsr_slave_0: entered promiscuous mode [ 652.494940][ T9483] hsr_slave_1: entered promiscuous mode [ 652.495519][ T9483] debugfs: 'hsr0' already exists in 'hsr' [ 652.495533][ T9483] Cannot create hsr debugfs directory [ 653.312307][ T9536] chnl_net:caif_netlink_parms(): no params data found [ 653.404396][ T9305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.998121][ T5810] Bluetooth: hci2: command tx timeout [ 654.267717][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.274456][ T9536] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.274728][ T9536] bridge_slave_0: entered allmulticast mode [ 654.276526][ T9536] bridge_slave_0: entered promiscuous mode [ 654.482643][ T9305] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.483023][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.483174][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.483389][ T9536] bridge_slave_1: entered allmulticast mode [ 654.484985][ T9536] bridge_slave_1: entered promiscuous mode [ 654.711409][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.915523][ T9536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.964900][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.965169][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.995928][ T9536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.462468][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.462607][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.480419][ T9536] team0: Port device team_slave_0 added [ 655.507014][ T9536] team0: Port device team_slave_1 added [ 655.614363][ T1485] bridge_slave_1: left allmulticast mode [ 655.614391][ T1485] bridge_slave_1: left promiscuous mode [ 655.616037][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.721282][ T1485] bridge_slave_0: left allmulticast mode [ 655.721309][ T1485] bridge_slave_0: left promiscuous mode [ 655.721546][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.811170][ T1485] bridge_slave_1: left allmulticast mode [ 655.811191][ T1485] bridge_slave_1: left promiscuous mode [ 655.811339][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.879009][ T1485] bridge_slave_0: left allmulticast mode [ 655.879036][ T1485] bridge_slave_0: left promiscuous mode [ 655.879197][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.077955][ T5810] Bluetooth: hci2: command tx timeout [ 657.668688][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.728588][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.750476][ T1485] bond0 (unregistering): Released all slaves [ 658.168062][ T5810] Bluetooth: hci2: command tx timeout [ 659.368735][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.428490][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.452913][ T1485] bond0 (unregistering): Released all slaves [ 659.579304][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.579316][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.579330][ T9536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.581803][ T9310] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.676136][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.676152][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.676175][ T9536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.751399][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.751595][ T6324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.997163][ T9536] hsr_slave_0: entered promiscuous mode [ 660.004044][ T9536] hsr_slave_1: entered promiscuous mode [ 660.004946][ T9536] debugfs: 'hsr0' already exists in 'hsr' [ 660.004968][ T9536] Cannot create hsr debugfs directory [ 660.070208][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.070344][ T7425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.074443][ T9483] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 660.298044][ T1485] hsr_slave_0: left promiscuous mode [ 660.338323][ T1485] hsr_slave_1: left promiscuous mode [ 660.339011][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.361522][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.517979][ T1485] hsr_slave_0: left promiscuous mode [ 660.538037][ T1485] hsr_slave_1: left promiscuous mode [ 660.538738][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.590275][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.071544][ T1485] team0 (unregistering): Port device team_slave_1 removed [ 662.288612][ T1485] team0 (unregistering): Port device team_slave_0 removed [ 665.508648][ T1485] team0 (unregistering): Port device team_slave_1 removed [ 665.718634][ T1485] team0 (unregistering): Port device team_slave_0 removed [ 668.270714][ T9483] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 668.301476][ T9483] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 668.399115][ T9483] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 669.194961][ T9305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.664126][ T9483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.681627][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.808497][ T9483] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.816521][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.816729][ T6189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.862501][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.862638][ T6189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.263797][ T9305] veth0_vlan: entered promiscuous mode [ 670.287607][ T9305] veth1_vlan: entered promiscuous mode [ 670.649064][ T9536] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 670.691372][ T9536] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 670.743597][ T9536] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 670.787219][ T9305] veth0_macvtap: entered promiscuous mode [ 670.820025][ T9536] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 670.888268][ T9305] veth1_macvtap: entered promiscuous mode [ 670.976778][ T9483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.012838][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.032427][ T9310] veth0_vlan: entered promiscuous mode [ 671.069122][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.137119][ T6050] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.142005][ T9310] veth1_vlan: entered promiscuous mode [ 671.150936][ T6050] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.164849][ T6050] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.183165][ T6050] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.461996][ T9310] veth0_macvtap: entered promiscuous mode [ 671.571823][ T9310] veth1_macvtap: entered promiscuous mode [ 671.742499][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.742522][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.773888][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.824209][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.846716][ T9536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.925801][ T6324] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.940227][ T6324] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.947224][ T6324] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.970109][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.970129][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.972164][ T6324] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.097412][ T9536] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.180976][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.215647][ T6050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.239009][ T9483] veth0_vlan: entered promiscuous mode [ 672.459830][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.460036][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.523477][ T9483] veth1_vlan: entered promiscuous mode [ 672.795182][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.795203][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.077632][ T7425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.077653][ T7425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.659519][ T9483] veth0_macvtap: entered promiscuous mode [ 673.773674][ T9483] veth1_macvtap: entered promiscuous mode [ 674.167611][ T9483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.253808][ T9483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.318037][ T1485] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.318125][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.320058][ T1485] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.391127][ T3480] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.142098][ T9799] netlink: 20 bytes leftover after parsing attributes in process `syz.7.695'. [ 675.169693][ T9536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.171684][ T1485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.171702][ T1485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.660461][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.660482][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.762739][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.595479][ T9536] veth0_vlan: entered promiscuous mode [ 677.742896][ T9839] binder: 9835:9839 ioctl 4018620d 0 returned -22 [ 677.815054][ T9536] veth1_vlan: entered promiscuous mode [ 678.439621][ T9536] veth0_macvtap: entered promiscuous mode [ 678.508842][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 678.508856][ T37] audit: type=1326 audit(1764953894.388:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88b35f749 code=0x7ffc0000 [ 678.508882][ T37] audit: type=1326 audit(1764953894.388:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88b35f749 code=0x7ffc0000 [ 678.508905][ T37] audit: type=1326 audit(1764953894.388:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff88b35f749 code=0x7ffc0000 [ 678.508928][ T37] audit: type=1326 audit(1764953894.388:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88b35f749 code=0x7ffc0000 [ 678.508950][ T37] audit: type=1326 audit(1764953894.388:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff88b35f749 code=0x7ffc0000 [ 678.508972][ T37] audit: type=1326 audit(1764953894.398:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88b35f749 code=0x7ffc0000 [ 678.508994][ T37] audit: type=1326 audit(1764953894.398:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff88b35f749 code=0x7ffc0000 [ 678.509015][ T37] audit: type=1326 audit(1764953894.398:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88b35f749 code=0x7ffc0000 [ 678.509037][ T37] audit: type=1326 audit(1764953894.408:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff88b35f749 code=0x7ffc0000 [ 678.509060][ T37] audit: type=1326 audit(1764953894.408:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88b35f749 code=0x7ffc0000 [ 678.524325][ T9536] veth1_macvtap: entered promiscuous mode [ 678.932118][ T9536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.198334][ T9536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.703717][ T45] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.703767][ T45] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.703801][ T45] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.703833][ T45] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.649526][ T2229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.649547][ T2229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.217353][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.221916][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.570967][ T6292] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 682.791538][ T6292] usb 4-1: Using ep0 maxpacket: 8 [ 682.793588][ T6292] usb 4-1: config 1 has an invalid interface number: 6 but max is 0 [ 682.793603][ T6292] usb 4-1: config 1 has no interface number 0 [ 682.867855][ T6292] usb 4-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 682.867883][ T6292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.867900][ T6292] usb 4-1: Product: syz [ 682.867912][ T6292] usb 4-1: Manufacturer: syz [ 682.867924][ T6292] usb 4-1: SerialNumber: syz [ 683.127891][ T804] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 683.285262][ T804] usb 9-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 683.285292][ T804] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.285316][ T804] usb 9-1: Product: syz [ 683.285328][ T804] usb 9-1: Manufacturer: syz [ 683.285341][ T804] usb 9-1: SerialNumber: syz [ 683.291190][ T804] usb 9-1: config 0 descriptor?? [ 683.481611][ T804] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 685.874839][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.874909][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.390568][ T50] usb 9-1: USB disconnect, device number 2 [ 688.544983][ T6292] usb 4-1: palm_os_4_probe - error -32 getting connection info [ 688.545064][ T6292] visor 4-1:1.6: Handspring Visor / Palm OS converter detected [ 688.590319][ T6292] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 688.595745][ T6292] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 688.647929][ T989] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 688.800509][ T989] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.800536][ T989] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 688.806522][ T989] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 688.806548][ T989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.919551][ T989] usb 8-1: config 0 descriptor?? [ 688.923410][ T989] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 688.923751][ T989] dvb-usb: bulk message failed: -22 (3/0) [ 688.974812][ T989] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 688.976049][ T989] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 688.976135][ T989] usb 8-1: media controller created [ 689.012092][ T989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 689.048860][ T989] dvb-usb: bulk message failed: -22 (6/0) [ 689.048991][ T989] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 689.208011][ T989] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input16 [ 689.249040][ T9920] dvb-usb: bulk message failed: -22 (2/0) [ 689.265931][ T989] dvb-usb: schedule remote query interval to 150 msecs. [ 689.265947][ T989] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 689.420489][ T989] usb 8-1: USB disconnect, device number 2 [ 689.421526][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 689.421571][ T5879] dvb-usb: error while querying for an remote control event. [ 690.037356][ T989] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 690.352847][ T9946] netlink: 24 bytes leftover after parsing attributes in process `syz.5.724'. [ 690.582267][ T9927] usb 4-1: USB disconnect, device number 25 [ 690.608817][ T9927] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 690.652950][ T9927] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 690.654255][ T9927] visor 4-1:1.6: device disconnected [ 692.277894][ T9927] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 692.433519][ T9927] usb 8-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 692.433548][ T9927] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.433566][ T9927] usb 8-1: Product: syz [ 692.433579][ T9927] usb 8-1: Manufacturer: syz [ 692.433592][ T9927] usb 8-1: SerialNumber: syz [ 692.479711][ T9927] usb 8-1: config 0 descriptor?? [ 693.292743][ T9927] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 693.522890][ T9972] netlink: 20 bytes leftover after parsing attributes in process `syz.6.733'. [ 695.092687][ T6292] usb 8-1: USB disconnect, device number 3 [ 695.657885][ T6292] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 695.820409][ T6292] usb 8-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 695.820437][ T6292] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.820455][ T6292] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 695.820503][ T6292] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 695.820543][ T6292] usb 8-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 695.820564][ T6292] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.940683][ T6292] usb 8-1: config 0 descriptor?? [ 695.953484][ T6292] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 696.410037][T10000] IPv6: Can't replace route, no match found [ 697.059343][ T9992] syz.6.737 (9992) used greatest stack depth: 16392 bytes left [ 698.387336][ T50] usb 8-1: USB disconnect, device number 4 [ 698.653140][T10026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.745'. [ 698.653174][T10026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.745'. [ 698.692110][T10026] ip6gretap0: entered promiscuous mode [ 698.734715][T10026] syz_tun: entered promiscuous mode [ 698.807055][T10033] netlink: 20 bytes leftover after parsing attributes in process `syz.6.747'. [ 699.727847][ T5879] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 699.894298][ T5879] usb 8-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 699.894326][ T5879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.894345][ T5879] usb 8-1: Product: syz [ 699.894358][ T5879] usb 8-1: Manufacturer: syz [ 699.894769][ T5879] usb 8-1: SerialNumber: syz [ 700.041054][ T5879] usb 8-1: config 0 descriptor?? [ 700.127579][ T5879] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 702.005842][ T9927] usb 8-1: USB disconnect, device number 5 [ 703.470981][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.7.760'. [ 703.471018][T10089] netlink: 'syz.7.760': attribute type 7 has an invalid length. [ 703.471031][T10089] netlink: 'syz.7.760': attribute type 8 has an invalid length. [ 703.471057][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.7.760'. [ 703.484640][T10089] syz_tun: entered promiscuous mode [ 703.555333][T10089] syz_tun: left promiscuous mode [ 704.507972][ T989] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 704.669401][ T989] usb 4-1: Using ep0 maxpacket: 16 [ 704.671844][ T989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 704.681812][ T989] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 704.681838][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.681854][ T989] usb 4-1: Product: syz [ 704.681867][ T989] usb 4-1: Manufacturer: syz [ 704.681880][ T989] usb 4-1: SerialNumber: syz [ 704.700947][ T989] usb 4-1: config 0 descriptor?? [ 704.785672][ T989] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 704.785709][ T989] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 704.814283][T10104] netlink: 20 bytes leftover after parsing attributes in process `syz.5.764'. [ 705.940617][ T989] em28xx 4-1:0.0: chip ID is em2765 [ 706.748330][ T989] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 706.748373][ T989] em28xx 4-1:0.0: board has no eeprom [ 707.067909][ T989] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 707.067935][ T989] em28xx 4-1:0.0: dvb set to bulk mode. [ 707.068331][ T6064] em28xx 4-1:0.0: Binding DVB extension [ 709.083272][ T50] usb 4-1: USB disconnect, device number 26 [ 709.086832][ T50] em28xx 4-1:0.0: Disconnecting em28xx [ 709.260226][ T6292] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 709.393352][ T6064] em28xx 4-1:0.0: Registering input extension [ 709.418931][ T50] em28xx 4-1:0.0: Closing input extension [ 709.457368][ T6292] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 709.457392][ T6292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.457406][ T6292] usb 6-1: Product: syz [ 709.457416][ T6292] usb 6-1: Manufacturer: syz [ 709.457426][ T6292] usb 6-1: SerialNumber: syz [ 709.600887][ T6292] usb 6-1: config 0 descriptor?? [ 709.612990][ T6292] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 709.679999][ T50] em28xx 4-1:0.0: Freeing device [ 710.027926][ T6292] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 710.199465][ T6292] usb 8-1: too many configurations: 78, using maximum allowed: 8 [ 710.243810][ T6292] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 710.243839][ T6292] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.243857][ T6292] usb 8-1: Product: syz [ 710.243870][ T6292] usb 8-1: Manufacturer: syz [ 710.243882][ T6292] usb 8-1: SerialNumber: syz [ 710.304394][ T6292] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 710.404470][ T6064] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 710.829931][ T9330] usb 8-1: USB disconnect, device number 6 [ 711.063537][ T50] usb 6-1: USB disconnect, device number 2 [ 711.411742][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 712.786829][ T6064] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 712.787026][ T6064] ath9k_htc: Failed to initialize the device [ 712.827507][ T9330] usb 8-1: ath9k_htc: USB layer deinitialized [ 712.940938][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.8.777'. [ 713.347926][ T9330] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 713.500457][ T9330] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 713.500475][ T9330] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 713.500503][ T9330] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 713.500526][ T9330] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 713.500537][ T9330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.507014][ T9330] usb 4-1: config 0 descriptor?? [ 713.588264][ T9330] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 714.118083][T10196] netlink: 'syz.5.782': attribute type 1 has an invalid length. [ 716.560138][ T9904] usb 4-1: USB disconnect, device number 27 [ 717.485574][T10231] syz.7.788 (10231) used greatest stack depth: 15560 bytes left [ 718.415847][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.5.795'. [ 720.433114][ T6119] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 720.699977][T10284] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 720.733275][ T6119] usb 7-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 720.733303][ T6119] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 720.733355][ T6119] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 720.733395][ T6119] usb 7-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 720.733416][ T6119] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.809884][ T6119] usb 7-1: config 0 descriptor?? [ 720.816120][ T6119] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 722.556161][ T5886] usb 7-1: USB disconnect, device number 2 [ 724.927652][T10311] netlink: 80 bytes leftover after parsing attributes in process `syz.5.807'. [ 724.927679][T10311] netlink: 80 bytes leftover after parsing attributes in process `syz.5.807'. [ 725.317883][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 725.476840][ T10] usb 7-1: too many configurations: 78, using maximum allowed: 8 [ 725.772198][ T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 725.772226][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.772242][ T10] usb 7-1: Product: syz [ 725.772253][ T10] usb 7-1: Manufacturer: syz [ 725.772265][ T10] usb 7-1: SerialNumber: syz [ 726.379301][ T10] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 726.587918][ T5886] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 728.818262][ T5886] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 728.818460][ T5886] ath9k_htc: Failed to initialize the device [ 728.864611][ T9330] usb 7-1: USB disconnect, device number 3 [ 728.977824][ T9330] usb 7-1: ath9k_htc: USB layer deinitialized [ 733.418550][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.7.815'. [ 734.412089][T10362] syz.6.819 (10362): drop_caches: 0 [ 735.570912][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 736.366870][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 736.379544][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 736.469052][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 736.469981][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 737.947906][ T5886] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 738.175317][ T5886] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 738.175346][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.175364][ T5886] usb 4-1: Product: syz [ 738.175376][ T5886] usb 4-1: Manufacturer: syz [ 738.175388][ T5886] usb 4-1: SerialNumber: syz [ 738.213822][ T5886] usb 4-1: config 0 descriptor?? [ 738.217346][ T5886] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 738.480599][ T61] Bluetooth: hci4: command tx timeout [ 738.519996][T10405] netlink: 80 bytes leftover after parsing attributes in process `syz.5.826'. [ 738.520013][T10405] netlink: 80 bytes leftover after parsing attributes in process `syz.5.826'. [ 738.906968][T10409] netlink: 80 bytes leftover after parsing attributes in process `syz.6.827'. [ 738.906986][T10409] netlink: 80 bytes leftover after parsing attributes in process `syz.6.827'. [ 738.972656][ T5886] usb 4-1: USB disconnect, device number 28 [ 739.454136][ T3480] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.522581][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 739.717885][ T5892] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 739.957305][ T5892] usb 6-1: too many configurations: 78, using maximum allowed: 8 [ 740.571870][ T61] Bluetooth: hci4: command tx timeout [ 740.779667][ T5892] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 740.779696][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.779714][ T5892] usb 6-1: Product: syz [ 740.779726][ T5892] usb 6-1: Manufacturer: syz [ 740.779739][ T5892] usb 6-1: SerialNumber: syz [ 740.868939][ T5892] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 740.944690][ T6119] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 741.294755][ T3480] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.018359][ T6119] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 742.019220][ T6119] ath9k_htc: Failed to initialize the device [ 742.395665][ T6119] usb 6-1: ath9k_htc: USB layer deinitialized [ 742.501168][T10389] usb 6-1: USB disconnect, device number 3 [ 742.665731][ T5810] Bluetooth: hci4: command tx timeout [ 743.375187][ T3480] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.423950][T10454] syz_tun: entered allmulticast mode [ 743.432035][T10455] pimreg: entered allmulticast mode [ 743.634572][T10460] netlink: 80 bytes leftover after parsing attributes in process `syz.7.837'. [ 743.634591][T10460] netlink: 80 bytes leftover after parsing attributes in process `syz.7.837'. [ 743.773488][ T3480] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.840112][T10450] syz_tun: left allmulticast mode [ 744.115443][T10469] netlink: 80 bytes leftover after parsing attributes in process `syz.5.838'. [ 744.115467][T10469] netlink: 80 bytes leftover after parsing attributes in process `syz.5.838'. [ 744.263717][T10375] chnl_net:caif_netlink_parms(): no params data found [ 744.735463][ T61] Bluetooth: hci4: command tx timeout [ 744.777287][T10482] Invalid logical block size (8192) [ 745.957885][ T5892] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 746.134318][ T5892] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 746.134347][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.134365][ T5892] usb 6-1: Product: syz [ 746.134379][ T5892] usb 6-1: Manufacturer: syz [ 746.134392][ T5892] usb 6-1: SerialNumber: syz [ 746.184451][ T5892] usb 6-1: config 0 descriptor?? [ 746.210067][ T5892] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 746.264859][T10497] netlink: 'syz.6.844': attribute type 4 has an invalid length. [ 746.786487][ T3480] bridge_slave_1: left allmulticast mode [ 746.786530][ T3480] bridge_slave_1: left promiscuous mode [ 746.802575][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.948953][ T3480] bridge_slave_0: left allmulticast mode [ 746.948980][ T3480] bridge_slave_0: left promiscuous mode [ 746.962814][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.107371][T10509] netlink: 80 bytes leftover after parsing attributes in process `syz.7.848'. [ 747.107396][T10509] netlink: 80 bytes leftover after parsing attributes in process `syz.7.848'. [ 747.293857][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.293955][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.402940][T10516] netlink: 80 bytes leftover after parsing attributes in process `syz.3.851'. [ 747.402956][T10516] netlink: 80 bytes leftover after parsing attributes in process `syz.3.851'. [ 750.728421][ T3480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.788484][ T3480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.832670][ T3480] bond0 (unregistering): Released all slaves [ 750.878776][T10375] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.878899][T10375] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.879144][T10375] bridge_slave_0: entered allmulticast mode [ 750.881924][T10375] bridge_slave_0: entered promiscuous mode [ 750.901210][T10389] usb 6-1: USB disconnect, device number 4 [ 750.938702][T10375] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.938870][T10375] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.957365][T10375] bridge_slave_1: entered allmulticast mode [ 751.017908][T10375] bridge_slave_1: entered promiscuous mode [ 752.337491][T10375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.399715][T10562] netlink: 80 bytes leftover after parsing attributes in process `syz.3.861'. [ 752.399741][T10562] netlink: 80 bytes leftover after parsing attributes in process `syz.3.861'. [ 752.441435][T10375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.399511][T10574] netlink: 80 bytes leftover after parsing attributes in process `syz.3.864'. [ 756.399539][T10574] netlink: 80 bytes leftover after parsing attributes in process `syz.3.864'. [ 756.693006][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.867'. [ 758.152606][T10598] netlink: 80 bytes leftover after parsing attributes in process `syz.6.873'. [ 758.152632][T10598] netlink: 80 bytes leftover after parsing attributes in process `syz.6.873'. [ 758.270042][T10375] team0: Port device team_slave_0 added [ 758.422283][ T3480] hsr_slave_0: left promiscuous mode [ 758.439187][ T3480] hsr_slave_1: left promiscuous mode [ 758.440205][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.440229][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.041049][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.064186][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.966960][ T3480] veth1_macvtap: left promiscuous mode [ 759.967054][ T3480] veth0_macvtap: left promiscuous mode [ 759.967222][ T3480] veth1_vlan: left promiscuous mode [ 759.967322][ T3480] veth0_vlan: left promiscuous mode [ 760.075679][T10616] binder: 10612:10616 ioctl 4018620d 0 returned -22 [ 762.827946][ T6292] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 762.997864][ T6292] usb 6-1: Using ep0 maxpacket: 8 [ 763.000017][ T6292] usb 6-1: config 1 has an invalid interface number: 6 but max is 0 [ 763.000041][ T6292] usb 6-1: config 1 has no interface number 0 [ 763.002366][ T6292] usb 6-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 763.002390][ T6292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.002408][ T6292] usb 6-1: Product: syz [ 763.002420][ T6292] usb 6-1: Manufacturer: syz [ 763.002432][ T6292] usb 6-1: SerialNumber: syz [ 763.565537][T10631] netlink: 68 bytes leftover after parsing attributes in process `syz.5.880'. [ 763.573759][T10631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.576789][T10631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.080874][ T3480] team0 (unregistering): Port device team_slave_1 removed [ 765.430621][ T3480] team0 (unregistering): Port device team_slave_0 removed [ 768.096206][ T6292] usb 6-1: palm_os_4_probe - error -32 getting connection info [ 768.096256][ T6292] visor 6-1:1.6: Handspring Visor / Palm OS converter detected [ 768.145376][ T6292] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 768.159333][ T6292] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 768.480324][T10375] team0: Port device team_slave_1 added [ 768.492384][T10615] pim6reg: entered allmulticast mode [ 768.781816][T10375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.781827][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.781842][T10375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.789828][T10375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.789844][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.789867][T10375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.023872][ T6292] usb 6-1: USB disconnect, device number 5 [ 769.057990][ T6292] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 769.136849][ T6292] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 769.137669][ T6292] visor 6-1:1.6: device disconnected [ 770.190652][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 770.289484][T10650] netlink: 80 bytes leftover after parsing attributes in process `syz.3.885'. [ 770.289508][T10650] netlink: 80 bytes leftover after parsing attributes in process `syz.3.885'. [ 770.460007][T10375] hsr_slave_0: entered promiscuous mode [ 770.460928][T10375] hsr_slave_1: entered promiscuous mode [ 770.461518][T10375] debugfs: 'hsr0' already exists in 'hsr' [ 770.461534][T10375] Cannot create hsr debugfs directory [ 771.795897][T10659] input: syz0 as /devices/virtual/input/input18 [ 772.810687][T10667] binder: 10662:10667 ioctl 4018620d 0 returned -22 [ 774.970057][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 775.432267][ T5886] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 775.597849][ T5886] usb 7-1: Using ep0 maxpacket: 8 [ 775.599470][ T5886] usb 7-1: config 1 has an invalid interface number: 6 but max is 0 [ 775.599484][ T5886] usb 7-1: config 1 has no interface number 0 [ 775.602163][ T5886] usb 7-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 775.602179][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.602188][ T5886] usb 7-1: Product: syz [ 775.602196][ T5886] usb 7-1: Manufacturer: syz [ 775.602203][ T5886] usb 7-1: SerialNumber: syz [ 775.816022][ T5906] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 775.972229][ T5906] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 775.972257][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 775.972628][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.972656][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.972675][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.972717][ T5906] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 775.972737][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.161715][ T5906] usb 4-1: config 0 descriptor?? [ 776.573315][T10693] netlink: 68 bytes leftover after parsing attributes in process `syz.6.892'. [ 776.593350][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.598806][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.679030][ T5906] usbhid 4-1:0.0: can't add hid device: -71 [ 776.679172][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 776.729060][ T5906] usb 4-1: USB disconnect, device number 29 [ 779.437289][T10375] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 779.511755][T10375] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 779.806573][T10375] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 780.225659][T10375] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 780.389638][T10715] input: syz0 as /devices/virtual/input/input19 [ 780.997821][ T5886] usb 7-1: palm_os_4_probe - error -32 getting connection info [ 780.997902][ T5886] visor 7-1:1.6: Handspring Visor / Palm OS converter detected [ 781.228402][ T5886] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 781.336274][ T5886] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 781.871228][T10375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.927860][T10375] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.967454][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.968578][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.021952][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.022087][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.621109][T10484] usb 7-1: USB disconnect, device number 4 [ 782.626566][T10484] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 782.650644][T10484] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 782.651101][T10484] visor 7-1:1.6: device disconnected [ 783.467398][T10375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.467980][T10389] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 783.659897][T10389] usb 7-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 783.659925][T10389] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 783.659974][T10389] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.659991][T10389] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.660001][T10389] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.660024][T10389] usb 7-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 783.660035][T10389] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.791644][T10389] usb 7-1: config 0 descriptor?? [ 784.971900][T10389] usbhid 7-1:0.0: can't add hid device: -71 [ 784.972022][T10389] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 785.069214][T10389] usb 7-1: USB disconnect, device number 5 [ 785.609971][T10791] input: syz0 as /devices/virtual/input/input20 [ 785.896427][T10793] blktrace: Concurrent blktraces are not allowed on loop6 [ 786.651054][T10794] binder: 10779:10794 ioctl 4018620d 0 returned -22 [ 787.012703][T10375] veth0_vlan: entered promiscuous mode [ 787.034859][T10375] veth1_vlan: entered promiscuous mode [ 787.091348][T10375] veth0_macvtap: entered promiscuous mode [ 787.152607][T10375] veth1_macvtap: entered promiscuous mode [ 787.366471][T10375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.489144][T10375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.751039][ T3480] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.783863][ T3480] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.785834][ T3480] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.872807][ T3480] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.282300][ T6068] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 788.429647][ T6068] usb 8-1: Using ep0 maxpacket: 8 [ 788.448663][ T6068] usb 8-1: config 1 has an invalid interface number: 6 but max is 0 [ 788.448687][ T6068] usb 8-1: config 1 has no interface number 0 [ 788.451209][ T6068] usb 8-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 788.451234][ T6068] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.451251][ T6068] usb 8-1: Product: syz [ 788.451264][ T6068] usb 8-1: Manufacturer: syz [ 788.451278][ T6068] usb 8-1: SerialNumber: syz [ 788.451952][ T6189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.451968][ T6189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.526596][T10829] netlink: 68 bytes leftover after parsing attributes in process `syz.7.912'. [ 789.538020][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.539316][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.673931][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.673954][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.065482][T10857] input: syz0 as /devices/virtual/input/input21 [ 793.099292][T10857] blktrace: Concurrent blktraces are not allowed on loop10 [ 793.688251][ T6068] usb 8-1: palm_os_4_probe - error -32 getting connection info [ 793.688335][ T6068] visor 8-1:1.6: Handspring Visor / Palm OS converter detected [ 793.722229][ T6068] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 793.746300][ T6068] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 795.209895][ T5879] usb 8-1: USB disconnect, device number 7 [ 795.214197][ T5879] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 795.244783][ T5879] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 795.245241][ T5879] visor 8-1:1.6: device disconnected [ 795.687931][ T5879] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 795.838492][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 795.840930][ T5879] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 795.840959][ T5879] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 795.840981][ T5879] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 795.841002][ T5879] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.841043][ T5879] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 795.841064][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.319295][ T5879] usb 7-1: GET_CAPABILITIES returned 0 [ 797.319344][ T5879] usbtmc 7-1:16.0: can't read capabilities [ 797.536940][ T5907] usb 7-1: USB disconnect, device number 6 [ 797.648973][T10892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.649003][T10892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.797171][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.9.926'. [ 797.811563][T10892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.811592][T10892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.089896][T10919] tipc: Started in network mode [ 800.089915][T10919] tipc: Node identity 462c95019c71, cluster identity 4711 [ 800.098003][T10919] tipc: Enabled bearer , priority 0 [ 800.144894][T10919] syz.6.934 uses obsolete (PF_INET,SOCK_PACKET) [ 800.163254][T10919] syzkaller0: entered promiscuous mode [ 800.163280][T10919] syzkaller0: entered allmulticast mode [ 801.211028][ T804] tipc: Node number set to 3663566081 [ 802.061547][T10934] input: syz0 as /devices/virtual/input/input22 [ 802.279085][T10936] blktrace: Concurrent blktraces are not allowed on loop14 [ 803.249008][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.938'. [ 803.380738][T10918] tipc: Resetting bearer [ 803.721179][T10918] tipc: Disabling bearer [ 806.662963][T10968] input: syz0 as /devices/virtual/input/input23 [ 807.399580][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.9.949'. [ 809.195629][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.195716][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.207440][ T6163] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 809.269650][ T61] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 809.388257][ T6163] usb 10-1: Using ep0 maxpacket: 16 [ 809.427402][ T6163] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 809.427430][ T6163] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.427448][ T6163] usb 10-1: Product: syz [ 809.427460][ T6163] usb 10-1: Manufacturer: syz [ 809.427473][ T6163] usb 10-1: SerialNumber: syz [ 809.503334][ T6163] usb 10-1: config 0 descriptor?? [ 809.946744][ T6163] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 810.023586][ T6163] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 810.024670][ T6163] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 810.024726][ T6163] usb 10-1: media controller created [ 810.146870][ T6163] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 810.159941][T10988] dtv5100: wlen = 0, aborting. [ 810.440411][ T6163] zl10353_read_register: readreg error (reg=127, ret==0) [ 810.440468][ T6163] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 810.440481][ T6163] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 810.445506][ T6163] usb 10-1: USB disconnect, device number 2 [ 810.754100][ T6163] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 811.917338][T11026] netlink: 20 bytes leftover after parsing attributes in process `syz.9.961'. [ 812.608303][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.7.963'. [ 812.608340][T11038] netlink: 'syz.7.963': attribute type 7 has an invalid length. [ 812.608353][T11038] netlink: 'syz.7.963': attribute type 8 has an invalid length. [ 812.608365][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.963'. [ 812.935742][T11038] syz_tun: entered promiscuous mode [ 813.003989][T11038] syz_tun: left promiscuous mode [ 815.097828][ T61] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 818.563337][T11116] team0: entered promiscuous mode [ 818.563358][T11116] team_slave_0: entered promiscuous mode [ 818.563590][T11116] team_slave_1: entered promiscuous mode [ 818.572466][T11116] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 818.574198][T11116] team0: left promiscuous mode [ 818.574213][T11116] team_slave_0: left promiscuous mode [ 818.574444][T11116] team_slave_1: left promiscuous mode [ 819.867842][ T6292] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 820.027904][ T6292] usb 6-1: Using ep0 maxpacket: 32 [ 820.042657][ T6292] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 820.042681][ T6292] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 820.042698][ T6292] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 820.065507][ T6292] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 820.065535][ T6292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.065554][ T6292] usb 6-1: Product: ﹼ☔ᱹ瞪並撯꜉涑ꉽ䡨ꛠ꽬㚶ㄟ䌪就奏⏿√ﮝ볖玳⍦栀켐늹닇일돸衪ⲍ殩韝ᤃ䋇䶍럿឴੟䯖裆⍧쭲휺녞 [ 820.065574][ T6292] usb 6-1: Manufacturer: Ѓ [ 820.065586][ T6292] usb 6-1: SerialNumber: 浹响椞큑橌鏺䜚뢸Ґᾒ习땜丛稧畏쫴夈Ŗ驄䉭ꕬ뮱堝뚈㖠욦ᢑゲ㶨橛믅읙㏆䝸운轏㫶爚 [ 820.176902][T11146] netlink: 28 bytes leftover after parsing attributes in process `syz.7.991'. [ 820.176936][T11146] netlink: 'syz.7.991': attribute type 7 has an invalid length. [ 820.176948][T11146] netlink: 'syz.7.991': attribute type 8 has an invalid length. [ 820.176960][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.7.991'. [ 820.415067][ T6292] usb 6-1: 0:2 : does not exist [ 820.562227][ T6292] usb 6-1: USB disconnect, device number 6 [ 820.737146][ T9691] udevd[9691]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.995765][ T6292] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 822.161051][ T6292] usb 6-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 822.161069][ T6292] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 822.161099][ T6292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.161111][ T6292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.161122][ T6292] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 822.161144][ T6292] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 822.161155][ T6292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.170178][ T6292] usb 6-1: config 0 descriptor?? [ 822.777867][ T6292] usbhid 6-1:0.0: can't add hid device: -71 [ 822.777955][ T6292] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 822.780450][ T6292] usb 6-1: USB disconnect, device number 7 [ 823.986621][T11214] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1012'. [ 823.986649][T11214] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1012'. [ 824.151685][ T61] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 825.633514][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1021'. [ 825.922354][T11241] syz.9.1019 (11241): drop_caches: 0 [ 826.168737][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 826.317916][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 826.321930][ T10] usb 7-1: config 1 has an invalid interface number: 6 but max is 0 [ 826.321956][ T10] usb 7-1: config 1 has no interface number 0 [ 826.325450][ T10] usb 7-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 826.325476][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.325494][ T10] usb 7-1: Product: syz [ 826.325505][ T10] usb 7-1: Manufacturer: syz [ 826.325512][ T10] usb 7-1: SerialNumber: syz [ 826.793776][T11252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.794772][T11252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.040197][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1032'. [ 829.448256][T11281] pim6reg: entered allmulticast mode [ 831.802278][ T10] usb 7-1: palm_os_4_probe - error -32 getting connection info [ 831.802360][ T10] visor 7-1:1.6: Handspring Visor / Palm OS converter detected [ 831.819862][ T10] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 831.859105][ T10] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 832.390525][ T10] usb 7-1: USB disconnect, device number 7 [ 832.396389][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 832.424569][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 832.425091][ T10] visor 7-1:1.6: device disconnected [ 832.699125][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1041'. [ 832.805714][T11297] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1040'. [ 832.805749][T11297] netlink: 'syz.6.1040': attribute type 7 has an invalid length. [ 832.805761][T11297] netlink: 'syz.6.1040': attribute type 8 has an invalid length. [ 832.805773][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1040'. [ 832.816527][T11297] syz_tun: entered promiscuous mode [ 832.867848][T11297] syz_tun: left promiscuous mode [ 833.182439][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1043'. [ 834.093373][T11326] syz.6.1049 (11326): drop_caches: 0 [ 834.097926][ T5906] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 834.323775][ T5906] usb 10-1: Using ep0 maxpacket: 8 [ 834.387100][ T5906] usb 10-1: config 1 has an invalid interface number: 6 but max is 0 [ 834.387127][ T5906] usb 10-1: config 1 has no interface number 0 [ 834.391529][ T5906] usb 10-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 834.391556][ T5906] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.391574][ T5906] usb 10-1: Product: syz [ 834.391594][ T5906] usb 10-1: Manufacturer: syz [ 834.391607][ T5906] usb 10-1: SerialNumber: syz [ 834.696151][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 835.293756][T11336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.294655][T11336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.547909][ T5906] usb 10-1: palm_os_4_probe - error -32 getting connection info [ 839.547983][ T5906] visor 10-1:1.6: Handspring Visor / Palm OS converter detected [ 839.578455][ T5906] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 839.593803][ T5906] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 840.142132][ T9904] usb 10-1: USB disconnect, device number 3 [ 840.183564][ T9904] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 840.219089][ T9904] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 840.219901][ T9904] visor 10-1:1.6: device disconnected [ 840.549671][T11363] pim6reg: entered allmulticast mode [ 840.898065][ T9904] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 840.942688][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1063'. [ 841.067819][ T9904] usb 10-1: Using ep0 maxpacket: 8 [ 841.071593][ T9904] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 841.071612][ T9904] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 841.071625][ T9904] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 841.071636][ T9904] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.071659][ T9904] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 841.071670][ T9904] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.307094][ T9904] usb 10-1: GET_CAPABILITIES returned 0 [ 841.307141][ T9904] usbtmc 10-1:16.0: can't read capabilities [ 841.501854][ T6292] usb 10-1: USB disconnect, device number 4 [ 842.133487][T11385] input: syz0 as /devices/virtual/input/input24 [ 845.113917][T11424] input: syz0 as /devices/virtual/input/input25 [ 845.438353][T11426] blktrace: Concurrent blktraces are not allowed on loop10 [ 845.775957][T11395] loop5: detected capacity change from 0 to 7 [ 845.848152][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 845.848287][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 845.861650][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 845.861685][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 845.871056][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 845.871090][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 845.871498][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 845.871526][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 845.879444][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 845.879478][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 845.890136][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 845.890171][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 845.890481][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 845.890507][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 845.890586][ T9936] ldm_validate_partition_table(): Disk read failed. [ 845.890759][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 845.890784][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 845.891013][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 845.891038][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 845.891254][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 845.891278][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 845.910324][ T9936] Dev loop5: unable to read RDB block 0 [ 845.911202][ T9936] loop5: unable to read partition table [ 845.911465][ T9936] loop5: partition table beyond EOD, truncated [ 846.356420][T11395] ldm_validate_partition_table(): Disk read failed. [ 846.375183][T11395] Dev loop5: unable to read RDB block 0 [ 846.390337][T11395] loop5: unable to read partition table [ 846.390588][T11395] loop5: partition table beyond EOD, truncated [ 846.391545][T11395] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 849.535957][T11472] input: syz0 as /devices/virtual/input/input26 [ 849.692140][T11472] blktrace: Concurrent blktraces are not allowed on loop6 [ 850.325084][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1095'. [ 850.461601][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 850.629600][ T10] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 850.629618][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.629628][ T10] usb 6-1: Product: syz [ 850.629635][ T10] usb 6-1: Manufacturer: syz [ 850.629642][ T10] usb 6-1: SerialNumber: syz [ 850.650236][ T10] usb 6-1: config 0 descriptor?? [ 850.854175][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1101'. [ 851.085814][ T10] usb 6-1: USB disconnect, device number 8 [ 852.379996][ T9330] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 852.533542][ T9330] usb 10-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 852.533570][ T9330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.533588][ T9330] usb 10-1: Product: syz [ 852.533600][ T9330] usb 10-1: Manufacturer: syz [ 852.533612][ T9330] usb 10-1: SerialNumber: syz [ 852.539971][ T9330] usb 10-1: config 0 descriptor?? [ 852.546727][ T9330] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 852.584448][ T9936] udevd[9936]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 853.383570][ T10] usb 10-1: USB disconnect, device number 5 [ 853.528278][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1109'. [ 853.900020][T11518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1113'. [ 854.616669][T11535] netlink: 'syz.3.1117': attribute type 4 has an invalid length. [ 855.727228][T11542] pim6reg: entered allmulticast mode [ 856.926151][T11552] process 'syz.9.1121' launched '/dev/fd/4' with NULL argv: empty string added [ 856.998251][ T6064] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 857.158253][ T6064] usb 4-1: Using ep0 maxpacket: 16 [ 857.166931][ T6064] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 857.191558][ T6064] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 857.191587][ T6064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.191605][ T6064] usb 4-1: Product: syz [ 857.191618][ T6064] usb 4-1: Manufacturer: syz [ 857.191631][ T6064] usb 4-1: SerialNumber: syz [ 857.242519][ T6064] usb 4-1: config 0 descriptor?? [ 857.257672][ T6064] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 857.257703][ T6064] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 857.814980][T11566] input: syz0 as /devices/virtual/input/input27 [ 858.042496][T11568] blktrace: Concurrent blktraces are not allowed on loop12 [ 858.767838][ T9330] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 858.841934][ T6064] em28xx 4-1:0.0: chip ID is em2765 [ 858.936391][ T9330] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 858.936420][ T9330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.936438][ T9330] usb 6-1: Product: syz [ 858.936450][ T9330] usb 6-1: Manufacturer: syz [ 858.936463][ T9330] usb 6-1: SerialNumber: syz [ 859.236633][ T9330] usb 6-1: config 0 descriptor?? [ 859.262393][ T9330] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 860.047818][ T6064] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 860.047848][ T6064] em28xx 4-1:0.0: board has no eeprom [ 860.599066][ T6064] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 860.599092][ T6064] em28xx 4-1:0.0: dvb set to bulk mode. [ 860.599381][ T5886] em28xx 4-1:0.0: Binding DVB extension [ 861.256095][ T5892] usb 6-1: USB disconnect, device number 9 [ 861.632294][T11598] bond0: entered promiscuous mode [ 861.632309][T11598] bond_slave_0: entered promiscuous mode [ 861.632504][T11598] bond_slave_1: entered promiscuous mode [ 861.641813][T11598] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 861.673807][T11598] bond0: left promiscuous mode [ 861.673884][T11598] bond_slave_0: left promiscuous mode [ 861.674262][T11598] bond_slave_1: left promiscuous mode [ 861.738239][ T5892] usb 4-1: USB disconnect, device number 30 [ 861.740181][ T5892] em28xx 4-1:0.0: Disconnecting em28xx [ 861.930894][ T5886] em28xx 4-1:0.0: Registering input extension [ 861.931080][ T5892] em28xx 4-1:0.0: Closing input extension [ 861.977414][ T5892] em28xx 4-1:0.0: Freeing device [ 862.007712][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 863.637102][T11615] input: syz0 as /devices/virtual/input/input29 [ 863.832136][T11615] blktrace: Concurrent blktraces are not allowed on loop14 [ 866.449613][ T5892] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 867.129236][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 867.227767][ T5892] usb 8-1: Using ep0 maxpacket: 16 [ 867.229486][ T5892] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 867.231837][ T5892] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 867.231862][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.231878][ T5892] usb 8-1: Product: syz [ 867.231890][ T5892] usb 8-1: Manufacturer: syz [ 867.231903][ T5892] usb 8-1: SerialNumber: syz [ 867.298549][ T10] usb 10-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 867.298577][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.298596][ T10] usb 10-1: Product: syz [ 867.298608][ T10] usb 10-1: Manufacturer: syz [ 867.298628][ T10] usb 10-1: SerialNumber: syz [ 867.303282][ T5892] usb 8-1: config 0 descriptor?? [ 867.354927][ T10] usb 10-1: config 0 descriptor?? [ 867.386302][ T5892] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 867.386333][ T5892] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 867.425695][ T10] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 867.587765][ T10] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 867.756888][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.756913][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 867.757004][ T10] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 867.757024][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.811927][ T10] usb 7-1: config 0 descriptor?? [ 867.941232][ T5892] em28xx 8-1:0.0: chip ID is em2765 [ 868.033740][ T9330] usb 7-1: USB disconnect, device number 8 [ 868.083593][ T10] usb 10-1: USB disconnect, device number 6 [ 868.277848][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'. [ 868.563197][ T5892] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 868.563225][ T5892] em28xx 8-1:0.0: board has no eeprom [ 868.987904][ T5892] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 868.987932][ T5892] em28xx 8-1:0.0: dvb set to bulk mode. [ 868.992140][ T5906] em28xx 8-1:0.0: Binding DVB extension [ 870.133429][T11657] blktrace: Concurrent blktraces are not allowed on loop10 [ 870.335365][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.335462][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.354130][T11655] input: syz0 as /devices/virtual/input/input30 [ 870.653327][ T10] usb 8-1: USB disconnect, device number 8 [ 870.655560][ T10] em28xx 8-1:0.0: Disconnecting em28xx [ 871.062504][ T5906] em28xx 8-1:0.0: Registering input extension [ 871.065463][ T10] em28xx 8-1:0.0: Closing input extension [ 871.959767][ T10] em28xx 8-1:0.0: Freeing device [ 872.058087][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1158'. [ 872.397908][ T10] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 872.564273][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.564291][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 872.564321][ T10] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 872.564333][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.699467][T11691] input: syz0 as /devices/virtual/input/input32 [ 872.796485][T11691] blktrace: Concurrent blktraces are not allowed on loop12 [ 873.677892][ T10] usb 8-1: config 0 descriptor?? [ 873.741344][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 873.741389][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 873.833871][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 873.849557][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 873.849595][ T10] usb 8-1: media controller created [ 873.850934][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 873.891209][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 873.891293][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 873.926690][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input33 [ 873.960868][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 873.960891][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 873.992549][ T10] usb 8-1: USB disconnect, device number 9 [ 874.077998][T10389] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 874.078186][ T9330] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 874.133388][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 874.238001][T10389] usb 7-1: Using ep0 maxpacket: 16 [ 874.245186][ T9330] usb 10-1: Using ep0 maxpacket: 16 [ 874.245734][T10389] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 874.260037][T10389] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 874.260065][T10389] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.260082][T10389] usb 7-1: Product: syz [ 874.260096][T10389] usb 7-1: Manufacturer: syz [ 874.260108][T10389] usb 7-1: SerialNumber: syz [ 874.269983][ T9330] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 874.270011][ T9330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.270027][ T9330] usb 10-1: Product: syz [ 874.270040][ T9330] usb 10-1: Manufacturer: syz [ 874.270053][ T9330] usb 10-1: SerialNumber: syz [ 874.301587][T10389] usb 7-1: config 0 descriptor?? [ 874.307221][T10389] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 874.307252][T10389] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 874.308453][ T9330] usb 10-1: config 0 descriptor?? [ 874.799881][ T9330] dvb_usb_dtv5100 10-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 874.812159][ T9330] usb 10-1: USB disconnect, device number 7 [ 875.194070][T10389] em28xx 7-1:0.0: chip ID is em2765 [ 876.929932][T10389] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 876.929955][T10389] em28xx 7-1:0.0: board has no eeprom [ 876.962774][T11719] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1172'. [ 876.962799][T11719] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1172'. [ 877.273355][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1173'. [ 877.277879][T10389] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 877.277905][T10389] em28xx 7-1:0.0: dvb set to bulk mode. [ 877.286692][T10389] em28xx 7-1:0.0: Binding DVB extension [ 878.238390][T11694] em28xx 7-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 878.241106][ T10] usb 7-1: USB disconnect, device number 9 [ 878.243363][ T10] em28xx 7-1:0.0: Disconnecting em28xx [ 878.636585][T10389] em28xx 7-1:0.0: Registering input extension [ 878.648667][ T10] em28xx 7-1:0.0: Closing input extension [ 878.810023][T11735] input: syz0 as /devices/virtual/input/input35 [ 879.830680][ T10] em28xx 7-1:0.0: Freeing device [ 881.099827][ T5886] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 881.237793][ T10] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 881.261799][ T5886] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 881.261828][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.261843][ T5886] usb 8-1: Product: syz [ 881.261850][ T5886] usb 8-1: Manufacturer: syz [ 881.261857][ T5886] usb 8-1: SerialNumber: syz [ 881.305241][ T5886] usb 8-1: config 0 descriptor?? [ 881.319872][ T989] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 881.407354][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.407369][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 881.407400][ T10] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 881.407412][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.459991][ T10] usb 7-1: config 0 descriptor?? [ 881.467789][ T989] usb 10-1: Using ep0 maxpacket: 16 [ 881.500977][ T989] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 881.500995][ T989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.501005][ T989] usb 10-1: Product: syz [ 881.501012][ T989] usb 10-1: Manufacturer: syz [ 881.501019][ T989] usb 10-1: SerialNumber: syz [ 881.549571][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 881.549619][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 881.606686][ T989] usb 10-1: config 0 descriptor?? [ 881.637230][ T5886] usb 8-1: USB disconnect, device number 10 [ 881.673777][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 881.691954][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 881.692181][ T10] usb 7-1: media controller created [ 881.767427][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 881.997090][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 881.998185][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 882.066047][T11752] dvb-usb: bulk message failed: -22 (2/0) [ 882.097118][ T989] dvb_usb_dtv5100 10-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 882.131575][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input36 [ 882.158136][ T989] usb 10-1: USB disconnect, device number 8 [ 882.195507][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 882.195525][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 882.215175][ T10] usb 7-1: USB disconnect, device number 10 [ 882.315047][ T9692] udevd[9692]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.399326][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1185'. [ 882.514820][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 882.596023][T11765] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1187'. [ 882.596049][T11765] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1187'. [ 883.087034][T11771] pim6reg: entered allmulticast mode [ 883.470666][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1192'. [ 883.560330][ T9330] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 883.717024][ T9330] usb 6-1: Using ep0 maxpacket: 16 [ 883.719672][ T9330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 883.722439][ T9330] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 883.722464][ T9330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.722482][ T9330] usb 6-1: Product: syz [ 883.722495][ T9330] usb 6-1: Manufacturer: syz [ 883.722507][ T9330] usb 6-1: SerialNumber: syz [ 883.760713][ T9330] usb 6-1: config 0 descriptor?? [ 883.792665][ T9330] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 883.792698][ T9330] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 883.947776][ T5892] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 884.124869][ T5892] usb 8-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 884.124887][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.124897][ T5892] usb 8-1: Product: syz [ 884.124905][ T5892] usb 8-1: Manufacturer: syz [ 884.124912][ T5892] usb 8-1: SerialNumber: syz [ 884.137810][ T5906] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 884.186516][ T5892] usb 8-1: config 0 descriptor?? [ 884.193106][ T5892] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 884.331550][ T5906] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.331567][ T5906] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 884.331597][ T5906] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 884.331609][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.374959][ T9330] em28xx 6-1:0.0: chip ID is em2765 [ 884.386060][ T5906] usb 7-1: config 0 descriptor?? [ 884.465202][ T5906] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 884.465235][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 884.515586][ T5906] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 884.540197][ T5906] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 884.559429][ T5906] usb 7-1: media controller created [ 884.598393][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 884.807208][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 884.807294][ T5906] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 884.819957][ T5906] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input37 [ 884.826060][ T5906] dvb-usb: schedule remote query interval to 150 msecs. [ 884.826084][ T5906] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 884.845469][ T5906] usb 7-1: USB disconnect, device number 11 [ 884.986105][ T9330] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 884.986133][ T9330] em28xx 6-1:0.0: board has no eeprom [ 885.175872][ T6064] usb 8-1: USB disconnect, device number 11 [ 885.317891][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1196'. [ 885.452825][ T5906] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 885.650410][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1201'. [ 885.867801][ T5906] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 886.007890][ T6064] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 886.017818][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 886.031112][ T5906] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 886.031193][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.031220][ T5906] usb 7-1: Product: syz [ 886.031232][ T5906] usb 7-1: Manufacturer: syz [ 886.031244][ T5906] usb 7-1: SerialNumber: syz [ 886.062737][T11806] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1203'. [ 886.062755][T11806] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1203'. [ 886.081940][T11778] em28xx 6-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 886.118434][ T5906] usb 7-1: config 0 descriptor?? [ 886.137917][ T9330] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 886.137934][ T9330] em28xx 6-1:0.0: dvb set to bulk mode. [ 886.138213][ T5907] em28xx 6-1:0.0: Binding DVB extension [ 886.204693][ T6064] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 886.204728][ T6064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.204749][ T6064] usb 4-1: Product: syz [ 886.204760][ T6064] usb 4-1: Manufacturer: syz [ 886.204773][ T6064] usb 4-1: SerialNumber: syz [ 886.257184][ T6064] usb 4-1: config 0 descriptor?? [ 886.322284][ T9330] usb 6-1: USB disconnect, device number 10 [ 886.387837][ T9330] em28xx 6-1:0.0: Disconnecting em28xx [ 886.535182][ T5906] dvb_usb_dtv5100 7-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 886.551180][ T6064] usb 4-1: USB disconnect, device number 31 [ 886.591518][ T5906] usb 7-1: USB disconnect, device number 12 [ 886.788536][ T5907] em28xx 6-1:0.0: Registering input extension [ 886.793687][ T9330] em28xx 6-1:0.0: Closing input extension [ 887.151836][ T9330] em28xx 6-1:0.0: Freeing device [ 887.350091][T11814] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1205'. [ 887.350126][T11814] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1205'. [ 887.405719][T11814] ip6gretap0: entered promiscuous mode [ 887.426894][T11814] syz_tun: entered promiscuous mode [ 887.442649][T11814] debugfs: 'hsr1' already exists in 'hsr' [ 887.442669][T11814] Cannot create hsr debugfs directory [ 887.769887][ T9330] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 887.917858][ T9330] usb 10-1: Using ep0 maxpacket: 8 [ 887.920328][ T9330] usb 10-1: config 1 has an invalid interface number: 6 but max is 0 [ 887.920353][ T9330] usb 10-1: config 1 has no interface number 0 [ 888.200686][ T9330] usb 10-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 888.200712][ T9330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.200730][ T9330] usb 10-1: Product: syz [ 888.200742][ T9330] usb 10-1: Manufacturer: syz [ 888.200754][ T9330] usb 10-1: SerialNumber: syz [ 889.344917][T11833] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1206'. [ 889.512705][ T5906] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 889.703292][ T5906] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 889.703311][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.703320][ T5906] usb 6-1: Product: syz [ 889.703327][ T5906] usb 6-1: Manufacturer: syz [ 889.703334][ T5906] usb 6-1: SerialNumber: syz [ 889.766714][ T5906] usb 6-1: config 0 descriptor?? [ 889.826291][ T5906] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 889.921333][T11836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.945058][T11836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.265206][T11844] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1214'. [ 890.265223][T11844] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1214'. [ 890.673690][ T5886] usb 6-1: USB disconnect, device number 11 [ 891.574611][T11858] fuse: Bad value for 'fd' [ 891.618679][ T5907] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 892.684292][ T5907] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 892.684311][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.684321][ T5907] usb 7-1: Product: syz [ 892.684328][ T5907] usb 7-1: Manufacturer: syz [ 892.684336][ T5907] usb 7-1: SerialNumber: syz [ 892.774550][ T5907] usb 7-1: config 0 descriptor?? [ 893.045521][ T10] usb 7-1: USB disconnect, device number 13 [ 893.089889][T11873] tipc: Started in network mode [ 893.089918][T11873] tipc: Node identity 221a710303e8, cluster identity 4711 [ 893.090099][T11873] tipc: Enabled bearer , priority 0 [ 893.159658][ T5886] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 893.311180][ T9330] usb 10-1: palm_os_4_probe - error -32 getting connection info [ 893.311266][ T9330] visor 10-1:1.6: Handspring Visor / Palm OS converter detected [ 893.343179][ T9330] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 893.369993][ T5886] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 893.370022][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 893.370044][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 893.370064][ T5886] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 893.370103][ T5886] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 893.370123][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.452537][ T9330] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 893.540862][ T5886] usb 8-1: config 0 descriptor?? [ 893.673420][T11865] tipc: Disabling bearer [ 894.144065][ T5886] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 894.395737][ T9330] usb 10-1: USB disconnect, device number 9 [ 894.440786][ T9330] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 894.471681][ T9330] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 894.472832][ T9330] visor 10-1:1.6: device disconnected [ 896.237836][ T10] usb 8-1: reset high-speed USB device number 12 using dummy_hcd [ 897.850554][T11923] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1237'. [ 898.052234][ T989] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 898.215861][ T989] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 898.215884][ T989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.215894][ T989] usb 7-1: Product: syz [ 898.215902][ T989] usb 7-1: Manufacturer: syz [ 898.215909][ T989] usb 7-1: SerialNumber: syz [ 898.258638][ T989] usb 7-1: config 0 descriptor?? [ 898.326304][T11926] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1238'. [ 898.326329][T11926] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1238'. [ 898.549601][ T989] usb 7-1: USB disconnect, device number 14 [ 899.119482][ T5886] usb 8-1: USB disconnect, device number 12 [ 899.224028][T11942] input: syz0 as /devices/virtual/input/input40 [ 899.399433][T11944] blktrace: Concurrent blktraces are not allowed on loop10 [ 900.546283][T11946] fuse: Bad value for 'fd' [ 902.350895][T11961] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1250'. [ 903.114655][T11968] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1253'. [ 903.114681][T11968] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1253'. [ 903.929265][T11986] fuse: Bad value for 'fd' [ 904.761477][T12014] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1268'. [ 904.761502][T12014] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1268'. [ 904.967764][ T5892] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 905.170322][ T5892] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 905.170352][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.170370][ T5892] usb 6-1: Product: syz [ 905.170379][ T5892] usb 6-1: Manufacturer: syz [ 905.170386][ T5892] usb 6-1: SerialNumber: syz [ 905.206280][ T5892] usb 6-1: config 0 descriptor?? [ 905.220863][ T5892] hub 6-1:0.0: bad descriptor, ignoring hub [ 905.220909][ T5892] hub 6-1:0.0: probe with driver hub failed with error -5 [ 905.593729][ T5892] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 905.601585][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 905.603144][ T5892] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 905.603201][ T5892] usb 6-1: media controller created [ 906.012499][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.549577][ T5892] DVB: Unable to find symbol dib7000p_attach() [ 906.549663][ T5892] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 906.687762][ T5892] rc_core: IR keymap rc-dib0700-rc5 not found [ 906.687933][ T5892] Registered IR keymap rc-empty [ 906.689176][ T5892] dvb-usb: could not initialize remote control. [ 906.689185][ T5892] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 906.778213][ T5892] usb 6-1: USB disconnect, device number 12 [ 906.898592][T12035] binder: 12034:12035 ioctl c0306201 200000000240 returned -11 [ 906.939469][ T5892] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 906.986390][T11792] udevd[11792]: setting owner of /dev/bus/usb/006/012 to uid=0, gid=0 failed: No such file or directory [ 907.413039][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1278'. [ 907.892621][ T5892] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 907.915871][T12061] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 908.055638][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.055664][ T5892] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 908.055716][ T5892] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 908.055737][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.067092][ T5892] usb 6-1: config 0 descriptor?? [ 908.102612][ T5892] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 908.102658][ T5892] dvb-usb: bulk message failed: -22 (3/0) [ 908.116523][ T5892] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 908.120897][ T5892] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 908.120949][ T5892] usb 6-1: media controller created [ 908.147377][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 908.157796][ T5930] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 908.241313][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 908.241401][ T5892] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 908.255900][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input42 [ 908.298894][ T5892] dvb-usb: schedule remote query interval to 150 msecs. [ 908.298929][ T5892] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 908.324939][ T5892] usb 6-1: USB disconnect, device number 13 [ 908.338403][ T5930] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 908.338431][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.338449][ T5930] usb 4-1: Product: syz [ 908.338461][ T5930] usb 4-1: Manufacturer: syz [ 908.338474][ T5930] usb 4-1: SerialNumber: syz [ 908.344154][ T5930] usb 4-1: config 0 descriptor?? [ 908.435218][ T5930] hub 4-1:0.0: bad descriptor, ignoring hub [ 908.435256][ T5930] hub 4-1:0.0: probe with driver hub failed with error -5 [ 908.530048][ T5892] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 908.712401][ T5930] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 908.773962][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 908.774791][ T5930] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 908.796647][ T5930] usb 4-1: media controller created [ 908.827501][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 908.915668][ T5930] DVB: Unable to find symbol dib7000p_attach() [ 908.915683][ T5930] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 909.017805][ T5930] rc_core: IR keymap rc-dib0700-rc5 not found [ 909.017824][ T5930] Registered IR keymap rc-empty [ 909.018098][ T5930] dvb-usb: could not initialize remote control. [ 909.018106][ T5930] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 911.267741][ T9330] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 911.449695][ T9330] usb 6-1: Using ep0 maxpacket: 8 [ 911.468596][ T9330] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 911.468620][ T9330] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 911.468636][ T9330] usb 6-1: config 6 has no interface number 0 [ 911.468743][ T9330] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 911.468765][ T9330] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 911.468785][ T9330] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 911.485680][ T9330] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 911.485763][ T9330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.485781][ T9330] usb 6-1: Product: syz [ 911.485794][ T9330] usb 6-1: Manufacturer: syz [ 911.485805][ T9330] usb 6-1: SerialNumber: syz [ 911.608825][ T9330] hso 6-1:6.2: Failed to find INT IN ep [ 914.082972][T12086] ------------[ cut here ]------------ [ 914.082986][T12086] usb 4-1: BOGUS control dir, pipe 80002080 doesn't match bRequestType c0 [ 914.083011][T12086] WARNING: drivers/usb/core/urb.c:414 at 0x0, CPU#0: syz.6.1295/12086 [ 914.083039][T12086] Modules linked in: [ 914.083060][T12086] CPU: 0 UID: 0 PID: 12086 Comm: syz.6.1295 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 914.083085][T12086] Tainted: [L]=SOFTLOCKUP [ 914.083092][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 914.083103][T12086] RIP: 0010:usb_submit_urb+0x112e/0x1890 [ 914.083132][T12086] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 99 f2 ff ff 89 e9 [ 914.083148][T12086] RSP: 0018:ffffc90013d6f820 EFLAGS: 00010246 [ 914.083164][T12086] RAX: 0000000000000000 RBX: ffff88805b7d3300 RCX: 0000000080002080 [ 914.083177][T12086] RDX: ffff88802735f9a0 RSI: ffffffff8b831ca0 RDI: ffffffff8ee5ddf0 [ 914.083192][T12086] RBP: 1ffff1100649027c R08: 00000000000000c0 R09: 0000000000000000 [ 914.083205][T12086] R10: ffffc90013d6f920 R11: fffff520027adf30 R12: ffff8880282ec100 [ 914.083219][T12086] R13: ffff8880324813e0 R14: 0000000080002080 R15: ffff88802735f9a0 [ 914.083234][T12086] FS: 00007f486504e6c0(0000) GS:ffff888126d5b000(0000) knlGS:0000000000000000 [ 914.083251][T12086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 914.083264][T12086] CR2: 00002000001a9030 CR3: 00000000412c6000 CR4: 00000000003526f0 [ 914.083281][T12086] Call Trace: [ 914.083288][T12086] [ 914.083305][T12086] ? __init_swait_queue_head+0xa9/0x150 [ 914.083335][T12086] usb_start_wait_urb+0x114/0x4c0 [ 914.083367][T12086] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 914.083423][T12086] usb_control_msg+0x232/0x3e0 [ 914.083456][T12086] dib0700_i2c_xfer+0xba7/0xf70 [ 914.083505][T12086] __i2c_transfer+0x871/0x20e0 [ 914.083533][T12086] ? i2c_transfer+0x120/0x3a0 [ 914.083563][T12086] ? __pfx___i2c_transfer+0x10/0x10 [ 914.083588][T12086] ? rt_mutex_lock_nested+0x172/0x1e0 [ 914.083608][T12086] ? i2c_transfer+0x120/0x3a0 [ 914.083632][T12086] i2c_transfer+0x25b/0x3a0 [ 914.083657][T12086] ? __pfx_i2c_transfer+0x10/0x10 [ 914.083683][T12086] ? _copy_from_user+0x94/0xb0 [ 914.083711][T12086] i2cdev_ioctl_rdwr+0x460/0x740 [ 914.083745][T12086] i2cdev_ioctl+0x64e/0x800 [ 914.083774][T12086] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 914.083801][T12086] ? __fget_files+0x3a6/0x420 [ 914.083846][T12086] ? __fget_files+0x2a/0x420 [ 914.083872][T12086] ? bpf_lsm_file_ioctl+0x9/0x20 [ 914.083896][T12086] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 914.083918][T12086] __se_sys_ioctl+0xff/0x170 [ 914.083940][T12086] do_syscall_64+0xfa/0xf80 [ 914.083958][T12086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.083977][T12086] ? clear_bhb_loop+0x60/0xb0 [ 914.083999][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.084015][T12086] RIP: 0033:0x7f4866def749 [ 914.084032][T12086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.084048][T12086] RSP: 002b:00007f486504e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 914.084071][T12086] RAX: ffffffffffffffda RBX: 00007f4867045fa0 RCX: 00007f4866def749 [ 914.084085][T12086] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000003 [ 914.084105][T12086] RBP: 00007f4866e73f91 R08: 0000000000000000 R09: 0000000000000000 [ 914.084117][T12086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.084129][T12086] R13: 00007f4867046038 R14: 00007f4867045fa0 R15: 00007ffd298b4e28 [ 914.084165][T12086] [ 914.084185][T12086] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 914.084202][T12086] CPU: 0 UID: 0 PID: 12086 Comm: syz.6.1295 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 914.084226][T12086] Tainted: [L]=SOFTLOCKUP [ 914.084232][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 914.084242][T12086] Call Trace: [ 914.084249][T12086] [ 914.084257][T12086] dump_stack_lvl+0x99/0x250 [ 914.084279][T12086] ? __asan_memcpy+0x40/0x70 [ 914.084298][T12086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.084320][T12086] ? __pfx__printk+0x10/0x10 [ 914.084350][T12086] vpanic+0x237/0x6d0 [ 914.084370][T12086] ? __pfx_vpanic+0x10/0x10 [ 914.084387][T12086] ? is_bpf_text_address+0x292/0x2b0 [ 914.084405][T12086] ? is_bpf_text_address+0x26/0x2b0 [ 914.084433][T12086] panic+0xb9/0xc0 [ 914.084453][T12086] ? __pfx_panic+0x10/0x10 [ 914.084493][T12086] __warn+0x317/0x4b0 [ 914.084521][T12086] __report_bug+0x288/0x500 [ 914.084554][T12086] ? __pfx___report_bug+0x10/0x10 [ 914.084588][T12086] ? stack_depot_save_flags+0x422/0x850 [ 914.084610][T12086] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 914.084639][T12086] report_bug_entry+0x16a/0x220 [ 914.084663][T12086] ? usb_submit_urb+0x112e/0x1890 [ 914.084684][T12086] ? usb_submit_urb+0x1133/0x1890 [ 914.084705][T12086] handle_bug+0xca/0x200 [ 914.084723][T12086] exc_invalid_op+0x1a/0x50 [ 914.084739][T12086] asm_exc_invalid_op+0x1a/0x20 [ 914.084764][T12086] RIP: 0010:usb_submit_urb+0x112e/0x1890 [ 914.084787][T12086] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 99 f2 ff ff 89 e9 [ 914.084802][T12086] RSP: 0018:ffffc90013d6f820 EFLAGS: 00010246 [ 914.084818][T12086] RAX: 0000000000000000 RBX: ffff88805b7d3300 RCX: 0000000080002080 [ 914.084831][T12086] RDX: ffff88802735f9a0 RSI: ffffffff8b831ca0 RDI: ffffffff8ee5ddf0 [ 914.084845][T12086] RBP: 1ffff1100649027c R08: 00000000000000c0 R09: 0000000000000000 [ 914.084858][T12086] R10: ffffc90013d6f920 R11: fffff520027adf30 R12: ffff8880282ec100 [ 914.084872][T12086] R13: ffff8880324813e0 R14: 0000000080002080 R15: ffff88802735f9a0 [ 914.084912][T12086] ? __init_swait_queue_head+0xa9/0x150 [ 914.084939][T12086] usb_start_wait_urb+0x114/0x4c0 [ 914.084970][T12086] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 914.085012][T12086] usb_control_msg+0x232/0x3e0 [ 914.085044][T12086] dib0700_i2c_xfer+0xba7/0xf70 [ 914.085093][T12086] __i2c_transfer+0x871/0x20e0 [ 914.085121][T12086] ? i2c_transfer+0x120/0x3a0 [ 914.085151][T12086] ? __pfx___i2c_transfer+0x10/0x10 [ 914.085176][T12086] ? rt_mutex_lock_nested+0x172/0x1e0 [ 914.085196][T12086] ? i2c_transfer+0x120/0x3a0 [ 914.085220][T12086] i2c_transfer+0x25b/0x3a0 [ 914.085245][T12086] ? __pfx_i2c_transfer+0x10/0x10 [ 914.085272][T12086] ? _copy_from_user+0x94/0xb0 [ 914.085299][T12086] i2cdev_ioctl_rdwr+0x460/0x740 [ 914.085333][T12086] i2cdev_ioctl+0x64e/0x800 [ 914.085353][T12086] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 914.085377][T12086] ? __fget_files+0x3a6/0x420 [ 914.085398][T12086] ? __fget_files+0x2a/0x420 [ 914.085423][T12086] ? bpf_lsm_file_ioctl+0x9/0x20 [ 914.085446][T12086] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 914.085466][T12086] __se_sys_ioctl+0xff/0x170 [ 914.085489][T12086] do_syscall_64+0xfa/0xf80 [ 914.085506][T12086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.085523][T12086] ? clear_bhb_loop+0x60/0xb0 [ 914.085545][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.085562][T12086] RIP: 0033:0x7f4866def749 [ 914.085578][T12086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.085593][T12086] RSP: 002b:00007f486504e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 914.085613][T12086] RAX: ffffffffffffffda RBX: 00007f4867045fa0 RCX: 00007f4866def749 [ 914.085626][T12086] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000003 [ 914.085639][T12086] RBP: 00007f4866e73f91 R08: 0000000000000000 R09: 0000000000000000 [ 914.085651][T12086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.085663][T12086] R13: 00007f4867046038 R14: 00007f4867045fa0 R15: 00007ffd298b4e28 [ 914.085697][T12086] [ 914.086112][T12086] Kernel Offset: disabled