last executing test programs: 10.955442533s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000040)='binder\x00', 0x808008, 0x0) socket$inet(0x2, 0x3, 0x2f) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) r7 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r7) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000801) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0xfffd, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r12) 9.611405085s ago: executing program 2 (id=8): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000d00)=ANY=[@ANYBLOB="4018c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 7.80102114s ago: executing program 1 (id=12): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd27, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0x10}, {0xec0, 0xfff1}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 7.141051825s ago: executing program 1 (id=15): socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000380), &(0x7f0000000400)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1df7, 0x2500, 0x100, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0x25, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000080)=@buf={0x53, &(0x7f0000000000)="28eb8fc478066a8ab09188927333dcbefa17ab2a4134b34ca3ade4cd40f59c78c0452ff0c17eaa54208a645f0108808306e3674cf08e32c7f0f95fa43884f1bf65348427e21d8d7b5e4df30d37e8fe191dee62"}) getsockopt$inet_tcp_int(r2, 0x6, 0x25, 0x0, &(0x7f0000000140)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="c800000009060103000000000000000002000003080009400000000e050001200700000005000100070000003400078005000700ff00000008000b400000080008000b40000003ff0a00110000000000000000000c001940000000000000000408000940000000063c0008801c0007801800028014000240fe8000000000000000000000000000140c00078008000b4000000000100007800c00018008000140e00000021c0007800c000280080001400a0101020c00028008000140000000000500010007000000"], 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000011c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYRES64=r5, @ANYRES32=r6, @ANYBLOB="040013000a0006000802110000010000060010008c020000060012000000000005001900010000000500c200e40000000500e400000000000c00810005000200d30000000600be0099190000"], 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6.980123569s ago: executing program 3 (id=16): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6.734341375s ago: executing program 0 (id=17): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x3}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cdf3dec83502"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r11, r5}, 0x10016) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f0000000000), &(0x7f0000000040)=""/133}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r0, r7}) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4e21, 0x9, 0x4e22, 0x0, 0xa, 0x0, 0x20, 0x2, 0x0, r12}, {0x80000000, 0x2, 0x8, 0x0, 0x5, 0x8, 0x81, 0x9}, {0xffffffff80000000, 0x7, 0x36ba, 0x1d}, 0x101, 0x6e6bb7, 0x0, 0xe37b610d434ea421, 0x5, 0x3}, {{@in=@broadcast, 0x4d6, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3500, 0x4, 0x0, 0x7, 0x74, 0xdb65, 0x3}}, 0xe8) sendmmsg$inet(r8, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f00000011c0)={r0}) 5.772556289s ago: executing program 2 (id=18): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) epoll_create1(0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'pim6reg1\x00'}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x2840, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000540), &(0x7f0000000580)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1}, 0x4) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) 5.562544094s ago: executing program 0 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 4.428422842s ago: executing program 1 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 4.401722032s ago: executing program 0 (id=21): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, 0x0, 0x8c01) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setrlimit(0x8396070e229498d7, &(0x7f0000000080)={0x4, 0x6cf1}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000300)={0x1, [[0x1, 0x0, 0x0, 0x9, 0x6, 0xe], [0x10001, 0x0, 0x0, 0xfffffffc, 0x40000000, 0x3, 0x0, 0x7], [0x1, 0x0, 0x0, 0x7bf5, 0x0, 0x5dd6, 0x200, 0x9]], '\x00', [{0x4, 0x4000000}, {0x0, 0x1641c}, {}, {0x1, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x2000010, 0x0, 0x1}, {0xffff5283, 0xffffffff, 0x1}, {0x2000000}, {}, {}, {}, {}, {0x8}], '\x00', 0x1000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000280)='1\x00', 0x1) 4.349553434s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000040)='binder\x00', 0x808008, 0x0) socket$inet(0x2, 0x3, 0x2f) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) r7 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r7) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000801) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0xfffd, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r11) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) pwritev(r7, &(0x7f0000001300)=[{&(0x7f0000000140)='<', 0x1}, {&(0x7f0000000780)="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", 0x400}], 0x2, 0x8, 0x3) 4.11091648s ago: executing program 1 (id=23): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) 4.016929362s ago: executing program 3 (id=24): syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000540000000000000070000006b1138000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r3, &(0x7f0000000400)='wusb3801 0x4', 0xc) 2.891951249s ago: executing program 2 (id=25): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x10, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.820596741s ago: executing program 3 (id=26): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 2.578265157s ago: executing program 3 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x20002) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000140)={0x9, @raw_data="aa1d33c716d5b6c598bb846045a4bcde20fce0759b5c056dddb296fe6a83dba0fddded3748767a86464e2d891fd2233e2e34bc803b4b8da2533af7268e8114063e523749d15906dd6b2b142a27f2a2422a49a8d947ddcabfc37cb266e3ba7058137740598d04828e74eb7b413ec0847036eca4215e1f2e40b6ec95e1a190fb73954b3ada9faf3ef4d77d6cffe617982304db80ebb456edb8117402076cea30bccfc83eddbac4c369c3528b552ad400"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r4, @ANYRESDEC, @ANYRESDEC=r8, @ANYRES8=r6, @ANYRES32=r7], 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000140)={0xa0000000}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4048010) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) 1.712065298s ago: executing program 0 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f826e376464f30f11745a2f660fc73166edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0xaaaaaaaaaaaad67, 0x11, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) write$qrtrtun(r2, &(0x7f00000000c0)="81ce545462609886587ce7a85cf1b0f3215623c65c849c295d", 0x19) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.61547169s ago: executing program 1 (id=29): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd5d, &(0x7f0000001d00)={@link_local, @dev, @void, {@ipv6={0x86dd, @esp={0x1, 0x6, "64adbf", 0xd27, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, {[], {0x4d2, 0x5, @cc={0x1, 0x0, 0x3929, 0x5, 0x1, 0x7ff, 0x8000, [@runt="a3eceeb4b74c0b75d5c9e97affc4a5301dc2d3e9927c03cf9f849092c8e006ef843058e9ea80d0ecb47b0a6ffb38162b6fde02d501", @runt="ef", @ipv4=@gre={{0x5, 0x4, 0x3, 0x8, 0xccf, 0x66, 0x0, 0xbf, 0x2f, 0x0, @empty, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x3, 0x0, 0x1, 0x1, 0xa4}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0x3, 0x2, 0x10, 0x3, 0x1, 0x1, 0x0, 0x5}, 0x2, {0x7, 0x6a, 0x2, 0x9, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "a415dea4feca84af4eafb0f017c7078ef4ea58874654052a33c5c808bb4a7b156551fba29922f389c74631677e5d3ffd0b09f157456b4d9a6409b27bbde3159260790bb44249b0a1754f450f345f64377e3bd84a944e8a6eea50936472df20052b9ed06e3603b08d273110d603f9cf6679cae73ac4d7209fa435dda076ba5e4d8d36690eb2bdbefacabe6f61673227c1a6729437db3eb4852a"}}}]}}}}}}}, 0x0) 1.433423845s ago: executing program 3 (id=30): syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x4) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x4d, [0x40001, 0xc95a, 0xfffffff3, 0xfffffffd, 0x80, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x9, 0x9, 0x0, 0x2af, 0x4, 0x7, 0x4, 0x3c5b, 0x7, 0xd, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x80000001, 0x8, 0x2, 0x0, 0x1074, 0x5, 0x10001, 0x532, 0x5, 0x200000d, 0x6, 0x8f, 0x8000006, 0x6, 0x3, 0x6, 0x4, 0x3, 0x20000000, 0x1, 0x4, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x7ff, 0x7, 0x9, 0xd, 0x4, 0x129432e6, 0x1, 0xf9, 0xd, 0x2bf, 0x5, 0xffb, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x3, 0x5, 0x6c4, 0x4, 0x8009, 0x8, 0x9, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7f, 0x9, 0xfffffffe, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0x102, 0x100, 0x10008d0, 0x9, 0x5, 0x7ffb, 0x0, 0x1ff, 0xb, 0x4, 0x5, 0x1005, 0x5, 0x4, 0x3, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x7fd, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800104, 0x2b6, 0x80, 0xc, 0xcc52, 0x950bfaf, 0x2001000, 0xfffffff6, 0x7, 0x80, 0xfffffff9, 0x6, 0x4, 0xbf, 0x10002, 0x403, 0x13, 0x3, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x1c, 0x120000, 0xffff, 0x6, 0xaaef, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x3, 0x6, 0x205, 0x0, 0x3, 0x75e2, 0x1ff, 0x0, 0x7, 0x7, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0xfffffffd, 0x5, 0x7fff, 0x2, 0x14c, 0x60a5, 0x1, 0x4, 0x7ff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x4c935709, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0x7f, 0x7, 0x1, 0x6c1b, 0xfffffffe, 0x4, 0x5, 0xffffffff, 0x6, 0x200, 0xffff3441, 0x80000001]}, 0x45c) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, &(0x7f0000000b00)}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)="d79962e9c40172675b635e2d26d253dc4915347e77a85acf6b566f727f9de2c978f99d025ae135dea86d41714e0de20b377de2bf83559f840696af0976a65dbf2af825a177136ad4a5622af8a79a06a9c035865ffcb8cae8d00c0c24d265413686893964", 0x64, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r2}) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/set_event\x00', 0x2, 0x45) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000400)={0x1, 0x6, ' \x00', 0x7, 0x6}) 1.397074426s ago: executing program 1 (id=31): r0 = socket(0x28, 0x80000, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000cf00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1003}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d1e000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x2d}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x11f081, 0xa, 0x4c}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x6) bind$inet(r4, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r4, 0x5) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042fbd7000ffdbdf250c0000004400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400182176657468305f6d61637674617000000008000300010000001417020074756e6c7c64383c1e1f300000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4040044}, 0x4000095) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc0100"/56], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) sendmsg$NL802154_CMD_SET_PAN_ID(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r5, 0x21, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x9c, 0x65, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xd, 0x6}, {0xd, 0xfff3}, {0xfff1, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xfd, 0x4e}}, @TCA_CHAIN={0x8, 0xb, 0x150}, @filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x8, 0x400}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x84}, @TCA_U32_HASH={0x8, 0x2, 0x80000001}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_INDEV={0x14, 0x8, 'caif0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x8}}, @TCA_RATE={0x6, 0x5, {0xf7, 0xfd}}, @TCA_CHAIN={0x8, 0xb, 0xf}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r9) r13 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r13, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r12, 0x5, 0x7000000, 0xfffffffe, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r6, 0x0, 0x20004894) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x14000}, 0x40000) 685.875623ms ago: executing program 0 (id=32): close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x51}, 0x28) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x80}, 0x28) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="23000000010006", 0x7) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x3, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xd, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x80003, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x5, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0xfff, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x5, 0x0, 0x2, 0x0, 0xc, 0x3, 0xb, 0xd, 0x8000, 0x5, 0x7, 0x5, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000002, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000009, 0x3, 0x83, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x0, 0x7, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x5, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2850, 0x100, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x6, 0x4, 0x4, 0x3, 0x4, 0xffffffff, 0x7fff, 0xffff8a32, 0xfffffff8, 0xf, 0x5, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0xfffffffd}, 0x18) getsockopt$inet_mreqsrc(r3, 0x0, 0xe, 0x0, &(0x7f0000000400)) 403.11689ms ago: executing program 3 (id=33): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 0 (id=34): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000d00)=ANY=[@ANYBLOB="4018c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts. [ 74.676757][ T5767] cgroup: Unknown subsys name 'net' [ 74.822678][ T5767] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.533134][ T5767] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.575490][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.584197][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.592605][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.604713][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.645433][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.652733][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.661168][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.668668][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.695652][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.732853][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.733912][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.749097][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.770188][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.805781][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.813784][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.835235][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.846796][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.854307][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.865011][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.874006][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.887723][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.896173][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.904083][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.912210][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.267922][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 79.322351][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 79.450331][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 79.461051][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.469401][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.476806][ T5782] bridge_slave_0: entered allmulticast mode [ 79.483692][ T5782] bridge_slave_0: entered promiscuous mode [ 79.524331][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.531768][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.539103][ T5782] bridge_slave_1: entered allmulticast mode [ 79.546837][ T5782] bridge_slave_1: entered promiscuous mode [ 79.558572][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.565870][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.573178][ T5778] bridge_slave_0: entered allmulticast mode [ 79.580273][ T5778] bridge_slave_0: entered promiscuous mode [ 79.615740][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.622939][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.630495][ T5778] bridge_slave_1: entered allmulticast mode [ 79.637346][ T5778] bridge_slave_1: entered promiscuous mode [ 79.697183][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.713476][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.770113][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.779746][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.787219][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.794366][ T5791] bridge_slave_0: entered allmulticast mode [ 79.801439][ T5791] bridge_slave_0: entered promiscuous mode [ 79.809389][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 79.823356][ T5782] team0: Port device team_slave_0 added [ 79.833459][ T5782] team0: Port device team_slave_1 added [ 79.841179][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.851132][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.860462][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.867842][ T5791] bridge_slave_1: entered allmulticast mode [ 79.874638][ T5791] bridge_slave_1: entered promiscuous mode [ 79.962743][ T5778] team0: Port device team_slave_0 added [ 79.972535][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.991464][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.998622][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.025249][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.039026][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.046125][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.072104][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.085925][ T5778] team0: Port device team_slave_1 added [ 80.093728][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.153322][ T5791] team0: Port device team_slave_0 added [ 80.182803][ T5791] team0: Port device team_slave_1 added [ 80.221397][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.228707][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.254883][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.291375][ T5782] hsr_slave_0: entered promiscuous mode [ 80.298542][ T5782] hsr_slave_1: entered promiscuous mode [ 80.314038][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.321189][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.347177][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.380380][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.387653][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.414157][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.430327][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.437425][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.463817][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.475215][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.482526][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.490028][ T5787] bridge_slave_0: entered allmulticast mode [ 80.496943][ T5787] bridge_slave_0: entered promiscuous mode [ 80.505971][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.513136][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.520680][ T5787] bridge_slave_1: entered allmulticast mode [ 80.527596][ T5787] bridge_slave_1: entered promiscuous mode [ 80.579912][ T5791] hsr_slave_0: entered promiscuous mode [ 80.586332][ T5791] hsr_slave_1: entered promiscuous mode [ 80.592468][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.600496][ T5791] Cannot create hsr debugfs directory [ 80.646064][ T5778] hsr_slave_0: entered promiscuous mode [ 80.652460][ T5778] hsr_slave_1: entered promiscuous mode [ 80.658853][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.667185][ T5778] Cannot create hsr debugfs directory [ 80.698654][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.744061][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.766472][ T5090] Bluetooth: hci0: command tx timeout [ 80.808671][ T5787] team0: Port device team_slave_0 added [ 80.840106][ T5787] team0: Port device team_slave_1 added [ 80.845852][ T5090] Bluetooth: hci1: command tx timeout [ 80.920487][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.927620][ T5090] Bluetooth: hci2: command tx timeout [ 80.927721][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.959703][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.977007][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.983988][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.005702][ T5090] Bluetooth: hci3: command tx timeout [ 81.015446][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.175811][ T5787] hsr_slave_0: entered promiscuous mode [ 81.182994][ T5787] hsr_slave_1: entered promiscuous mode [ 81.189281][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.197516][ T5787] Cannot create hsr debugfs directory [ 81.307847][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.322899][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.333931][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.358666][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.472813][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.511315][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.538425][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.558257][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.587781][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.597560][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.609078][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.622047][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.732543][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.743575][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.764565][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.789293][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.885207][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.938067][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.950880][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.993851][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.001237][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.014267][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.023286][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.058311][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.065591][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.082142][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.089393][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.111513][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.118731][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.148668][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.192000][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.199217][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.222623][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.251363][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.258590][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.339651][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.411846][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.453372][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.460631][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.484254][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.491505][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.594466][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.835106][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.849713][ T5090] Bluetooth: hci0: command tx timeout [ 82.892335][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.926181][ T5090] Bluetooth: hci1: command tx timeout [ 82.984888][ T5791] veth0_vlan: entered promiscuous mode [ 83.006401][ T5090] Bluetooth: hci2: command tx timeout [ 83.067785][ T5791] veth1_vlan: entered promiscuous mode [ 83.086232][ T5090] Bluetooth: hci3: command tx timeout [ 83.090072][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.108820][ T5782] veth0_vlan: entered promiscuous mode [ 83.121376][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.171385][ T5782] veth1_vlan: entered promiscuous mode [ 83.221114][ T5791] veth0_macvtap: entered promiscuous mode [ 83.251430][ T5791] veth1_macvtap: entered promiscuous mode [ 83.267146][ T5778] veth0_vlan: entered promiscuous mode [ 83.299179][ T5787] veth0_vlan: entered promiscuous mode [ 83.312268][ T5778] veth1_vlan: entered promiscuous mode [ 83.337909][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.353451][ T5787] veth1_vlan: entered promiscuous mode [ 83.364085][ T5782] veth0_macvtap: entered promiscuous mode [ 83.394002][ T5782] veth1_macvtap: entered promiscuous mode [ 83.404392][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.432044][ T5778] veth0_macvtap: entered promiscuous mode [ 83.449938][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.460292][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.470513][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.479728][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.494072][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.513548][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.529690][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.542204][ T5778] veth1_macvtap: entered promiscuous mode [ 83.554866][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.574913][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.587314][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.622498][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.632746][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.642256][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.651623][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.670394][ T5787] veth0_macvtap: entered promiscuous mode [ 83.707295][ T5787] veth1_macvtap: entered promiscuous mode [ 83.732263][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.749330][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.760411][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.770916][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.782464][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.821755][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.833136][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.844469][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.856558][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.868570][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.904304][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.913446][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.924526][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.933410][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.948019][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.958938][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.970214][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.981041][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.991305][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.001863][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.013037][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.025169][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.039000][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.051568][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.063715][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.075148][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.086178][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.097377][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.109376][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.110500][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.127683][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.133825][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.137160][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.152699][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.249646][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.260065][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.331434][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.340602][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.363859][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.373469][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.464342][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.478118][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.544376][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.556102][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.563988][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.583245][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.768438][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.787437][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.926214][ T5090] Bluetooth: hci0: command tx timeout [ 85.006073][ T5090] Bluetooth: hci1: command tx timeout [ 85.086297][ T5090] Bluetooth: hci2: command tx timeout [ 85.165816][ T5090] Bluetooth: hci3: command tx timeout [ 85.985830][ T5853] input: syz1 as /devices/virtual/input/input5 [ 86.001927][ T5858] [U]  [ 86.009954][ T5860] fuse: Bad value for 'fd' [ 86.201573][ T5864] Illegal XDP return value 50982912 on prog (id 2) dev syz_tun, expect packet loss! [ 86.366247][ T5820] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.375839][ T5872] netlink: 'syz.0.11': attribute type 49 has an invalid length. [ 86.465976][ T42] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.578785][ T5820] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 86.590489][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 86.600673][ T5820] usb 4-1: Product: syz [ 86.604903][ T5820] usb 4-1: SerialNumber: syz [ 86.628757][ T5820] usb 4-1: config 0 descriptor?? [ 86.629068][ T5872] veth0_to_bond: entered promiscuous mode [ 86.648844][ T5872] veth0_to_bond: entered allmulticast mode [ 86.685789][ T42] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.711827][ T42] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 86.758143][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.797775][ T42] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.835533][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.852839][ T42] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.870324][ T42] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.877220][ T5820] hso 4-1:0.0: Failed to find INT IN ep [ 86.885145][ T42] usb 3-1: Product: syz [ 86.898001][ T42] usb 3-1: Manufacturer: syz [ 86.995934][ T42] cdc_wdm 3-1:1.0: skipping garbage [ 87.004279][ T42] cdc_wdm 3-1:1.0: skipping garbage [ 87.006406][ T5090] Bluetooth: hci0: command tx timeout [ 87.046710][ T42] cdc_wdm 3-1:1.0: skipping garbage [ 87.066551][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 87.085600][ T42] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 87.086294][ T5090] Bluetooth: hci1: command tx timeout [ 87.129415][ T23] usb 1-1: config 252 has an invalid interface number: 32 but max is 0 [ 87.166636][ T5090] Bluetooth: hci2: command tx timeout [ 87.187786][ T23] usb 1-1: config 252 has no interface number 0 [ 87.201818][ T5858] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.225247][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 87.234478][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.246671][ T5090] Bluetooth: hci3: command tx timeout [ 87.370356][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 87.439457][ T23] pvrusb2: ********** [ 87.443529][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 87.480896][ T23] pvrusb2: Important functionality might not be entirely working. [ 87.497150][ T5818] usb 4-1: USB disconnect, device number 2 [ 87.523910][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 87.554307][ T23] pvrusb2: ********** [ 87.628249][ T2325] pvrusb2: Invalid write control endpoint [ 87.870735][ T2325] pvrusb2: Invalid write control endpoint [ 87.887424][ T2325] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 87.919225][ T2325] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 87.942230][ T2325] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 87.961911][ T2325] pvrusb2: Device being rendered inoperable [ 87.981748][ T2325] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 87.989401][ T2325] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 88.014119][ T2325] pvrusb2: Attached sub-driver cx25840 [ 88.040598][ T2325] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 88.070994][ T2325] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 88.181393][ T42] usb 1-1: USB disconnect, device number 2 [ 88.767775][ T5818] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.824241][ T5818] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.877817][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.166443][ T5090] Bluetooth: hci1: command 0x0401 tx timeout [ 89.167076][ T23] usb 3-1: USB disconnect, device number 2 [ 89.187834][ T42] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 89.240914][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 89.369303][ T42] usb 2-1: Product: syz [ 89.478230][ T42] usb 2-1: Manufacturer: syz [ 90.066560][ T42] msi2500 2-1:1.0: Registered as swradio24 [ 90.072469][ T42] msi2500 2-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 90.225045][ T5938] netlink: 'syz.2.18': attribute type 2 has an invalid length. [ 90.233234][ T5938] netlink: 'syz.2.18': attribute type 1 has an invalid length. [ 90.241129][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'. [ 90.250093][ T5938] netlink: 'syz.2.18': attribute type 2 has an invalid length. [ 90.257910][ T5938] netlink: 'syz.2.18': attribute type 1 has an invalid length. [ 90.265547][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'. [ 90.274352][ T5938] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 90.295842][ T42] usb 2-1: USB disconnect, device number 2 [ 90.316595][ T5938] mmap: syz.2.18 (5938) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.987968][ T5940] dummy_hcd dummy_hcd.0: remove, state 1 [ 90.994982][ T5940] usb usb1: USB disconnect, device number 1 [ 91.044144][ T5940] dummy_hcd dummy_hcd.0: stopped [ 91.049634][ T5940] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 91.838541][ T5963] rt1719: probe of 0-0049 failed with error -5 [ 91.846259][ T5963] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 91.874906][ T5963] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 91.914895][ T5963] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 92.607048][ T9] cfg80211: failed to load regulatory.db [ 93.105666][ T5886] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.348850][ T5886] usb 3-1: device descriptor read/64, error -71 [ 93.815412][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.995930][ T5886] usb 3-1: device descriptor read/64, error -71 [ 94.127193][ T5886] usb usb3-port1: attempt power cycle [ 94.325672][ T5986] netlink: 'syz.1.31': attribute type 49 has an invalid length. [ 94.586401][ T5886] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.699061][ T5886] usb 3-1: device descriptor read/8, error -71 [ 94.894028][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.025669][ T5886] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 95.125473][ T5886] usb 3-1: device descriptor read/8, error -71 [ 95.137994][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 95.179003][ T23] usb 2-1: config 252 has an invalid interface number: 32 but max is 0 [ 95.199670][ T23] usb 2-1: config 252 has no interface number 0 [ 95.262497][ T5990] Bluetooth: MGMT ver 1.22 [ 95.263446][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 95.276844][ T5886] usb usb3-port1: unable to enumerate USB device [ 95.289513][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.306476][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 95.323965][ T23] pvrusb2: ********** [ 95.328995][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 95.340075][ T23] pvrusb2: Important functionality might not be entirely working. [ 95.342437][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.353290][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 95.375624][ T23] pvrusb2: ********** [ 95.389298][ T5990] input: syz1 as /devices/virtual/input/input6 [ 95.400228][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.513439][ T2325] pvrusb2: Invalid write control endpoint [ 95.712686][ T2325] pvrusb2: Invalid write control endpoint [ 95.740949][ T23] usb 2-1: USB disconnect, device number 3 [ 95.747020][ T2325] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 95.778706][ T2325] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 95.800078][ T2325] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 95.807011][ T5997] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 95.811329][ T2325] pvrusb2: Device being rendered inoperable [ 95.822171][ T5997] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 95.822192][ T5997] CPU: 1 PID: 5997 Comm: syz.0.34 Not tainted syzkaller #0 [ 95.822211][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.822223][ T5997] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 95.859250][ T5997] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 58 50 cb fa eb 0c e8 51 50 cb fa eb 05 e8 4a 50 cb fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 24 c9 23 fb 4d 8b 36 4c 89 f7 e8 [ 95.878948][ T5997] RSP: 0018:ffffc90004eb7850 EFLAGS: 00010246 [ 95.885014][ T5997] RAX: 0000000000000000 RBX: ffff88802e850050 RCX: 0000000000080000 [ 95.892986][ T5997] RDX: ffffc9000cbca000 RSI: 0000000000003dfd RDI: 0000000000003dfe [ 95.900958][ T5997] RBP: ffff888144793000 R08: ffff88802ae03c00 R09: 0000000000000004 [ 95.908928][ T5997] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 95.916897][ T5997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 95.924885][ T5997] FS: 00007f732b60f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 95.933809][ T5997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.940404][ T5997] CR2: 00007f732a787240 CR3: 000000001b3be000 CR4: 00000000003506e0 [ 95.948411][ T5997] Call Trace: [ 95.951694][ T5997] [ 95.954638][ T5997] ? dummy_pullup+0x120/0x120 [ 95.959327][ T5997] gadget_bind_driver+0x390/0x770 [ 95.964361][ T5997] ? gadget_match_driver+0x130/0x130 [ 95.969646][ T5997] really_probe+0x247/0xae0 [ 95.974165][ T5997] ? pm_runtime_barrier+0x14b/0x1c0 [ 95.979380][ T5997] __driver_probe_device+0x1f5/0x390 [ 95.984674][ T5997] driver_probe_device+0x4f/0x420 [ 95.989696][ T5997] __driver_attach+0x444/0x6d0 [ 95.994473][ T5997] bus_for_each_dev+0x235/0x2b0 [ 95.999324][ T5997] ? driver_attach+0x50/0x50 [ 96.003918][ T5997] ? bus_remove_file+0x140/0x140 [ 96.008891][ T5997] ? do_raw_spin_unlock+0x121/0x230 [ 96.014286][ T5997] bus_add_driver+0x340/0x630 [ 96.018980][ T5997] driver_register+0x23a/0x310 [ 96.023751][ T5997] usb_gadget_register_driver_owner+0xf9/0x270 [ 96.029914][ T5997] raw_ioctl+0x1613/0x3d80 [ 96.034389][ T5997] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 96.040027][ T5997] ? tomoyo_path_number_perm+0x217/0x5e0 [ 96.045704][ T5997] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 96.051208][ T5997] ? make_qualifier+0x260/0x260 [ 96.056079][ T5997] ? __fget_files+0x28/0x460 [ 96.060696][ T5997] ? bpf_lsm_file_ioctl+0x9/0x10 [ 96.065683][ T5997] ? security_file_ioctl+0x80/0xa0 [ 96.070814][ T5997] ? make_qualifier+0x260/0x260 [ 96.076108][ T5997] __se_sys_ioctl+0xfd/0x170 [ 96.080704][ T5997] do_syscall_64+0x55/0xb0 [ 96.085120][ T5997] ? clear_bhb_loop+0x40/0x90 [ 96.089796][ T5997] ? clear_bhb_loop+0x40/0x90 [ 96.094473][ T5997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.100371][ T5997] RIP: 0033:0x7f732a79dd6b [ 96.104823][ T5997] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 96.124437][ T5997] RSP: 002b:00007f732b60cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.132878][ T5997] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f732a79dd6b [ 96.140851][ T5997] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 96.148819][ T5997] RBP: 00007f732b60dfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 96.156788][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.164757][ T5997] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.172742][ T5997] [ 96.175762][ T5997] Modules linked in: [ 96.199122][ T2325] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 96.211592][ T2325] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 96.223054][ T2325] pvrusb2: Attached sub-driver cx25840 [ 96.229364][ T2325] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 96.242500][ T5997] ---[ end trace 0000000000000000 ]--- [ 96.248154][ T2325] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 96.257742][ T5997] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 96.269635][ T5997] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 58 50 cb fa eb 0c e8 51 50 cb fa eb 05 e8 4a 50 cb fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 24 c9 23 fb 4d 8b 36 4c 89 f7 e8 [ 96.304061][ T5997] RSP: 0018:ffffc90004eb7850 EFLAGS: 00010246 [ 96.311362][ T5997] RAX: 0000000000000000 RBX: ffff88802e850050 RCX: 0000000000080000 [ 96.322633][ T5997] RDX: ffffc9000cbca000 RSI: 0000000000003dfd RDI: 0000000000003dfe [ 96.331554][ T5997] RBP: ffff888144793000 R08: ffff88802ae03c00 R09: 0000000000000004 [ 96.341529][ T5997] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 96.349814][ T5997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 96.360131][ T5997] FS: 00007f732b60f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 96.370812][ T5997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.378425][ T5997] CR2: 00007f42d5d87240 CR3: 000000001b3be000 CR4: 00000000003506e0 [ 96.386828][ T5997] Kernel panic - not syncing: Fatal exception [ 96.393045][ T5997] Kernel Offset: disabled [ 96.397403][ T5997] Rebooting in 86400 seconds..